This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/6c0530-1074-4b35-be0c-cd7d61913288/1/BgqEiCCAE1vEtOTzbV9_LIj_s3s.roa File: BgqEiCCAE1vEtOTzbV9_LIj_s3s.roa (raw, json) Hash identifier: a4g/rJW7QVDmBaSO4YTu2x4EbNhaP4qFCMs3UP9frTM= Subject key identifier: 06:0A:84:88:20:80:13:5B:C4:B4:E4:F3:6D:5F:7F:2C:88:FF:B3:7B Certificate issuer: /CN=72c26abc9e06c1afef9b5fd2da40412e7aee6b47 Certificate serial: 019B7FF28515B904F1D1D775D4F95ED0E669 Authority key identifier: 72:C2:6A:BC:9E:06:C1:AF:EF:9B:5F:D2:DA:40:41:2E:7A:EE:6B:47 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/csJqvJ4Gwa_vm1_S2kBBLnrua0c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/6c0530-1074-4b35-be0c-cd7d61913288/1/BgqEiCCAE1vEtOTzbV9_LIj_s3s.roa Signing time: Fri 02 Jan 2026 18:22:38 +0000 ROA not before: Fri 02 Jan 2026 18:22:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 5405 IP address blocks: 91.247.160.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/6c0530-1074-4b35-be0c-cd7d61913288/1/csJqvJ4Gwa_vm1_S2kBBLnrua0c.crl rsync://rpki.ripe.net/repository/DEFAULT/87/6c0530-1074-4b35-be0c-cd7d61913288/1/csJqvJ4Gwa_vm1_S2kBBLnrua0c.mft rsync://rpki.ripe.net/repository/DEFAULT/csJqvJ4Gwa_vm1_S2kBBLnrua0c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 07:52:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:85:15:b9:04:f1:d1:d7:75:d4:f9:5e:d0:e6:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72c26abc9e06c1afef9b5fd2da40412e7aee6b47 Validity Not Before: Jan 2 18:22:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=060a84882080135bc4b4e4f36d5f7f2c88ffb37b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:dc:77:e0:8f:3b:69:a9:e4:74:65:17:52:db: 23:aa:e9:95:e1:23:c8:63:37:9c:aa:c6:10:0b:d5: 77:8e:32:6b:53:64:88:25:c5:4a:9c:c9:20:87:21: 97:7b:8b:dc:10:2d:f3:df:0f:ce:7c:4f:9f:62:8e: 57:25:63:56:b2:e8:cb:0f:1f:9f:56:a3:a9:e4:ce: 74:71:81:28:01:33:fe:a6:20:41:22:b1:57:d0:a1: fc:2d:c1:54:6d:f4:ae:e2:86:f8:5f:a5:6e:19:c4: 2a:52:8d:88:a6:73:50:95:0a:8b:c3:37:cf:83:c8: 86:d0:f8:a3:a3:ec:05:5d:8e:2b:a5:1a:1a:a4:5e: 01:1c:b5:96:a6:ec:ee:0a:49:93:e5:9b:04:b6:d1: fb:5d:40:41:14:fd:39:e2:3b:9d:33:4a:3e:24:ea: 83:08:8e:bb:9f:ed:2e:58:33:56:d5:1e:ab:3f:c7: 76:01:75:29:94:7c:a8:e5:b6:bd:aa:b1:95:9f:3a: bf:c6:a5:cd:0c:7e:33:56:09:d9:77:50:a3:50:b5: 59:49:b2:b7:1c:d7:4e:1b:34:6e:44:dd:9a:dd:42: 19:97:bb:e0:40:b4:de:b6:31:52:c4:fe:8d:13:e4: d8:5c:ac:17:e2:25:9c:6a:3d:c7:10:85:e3:e6:32: 99:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:0A:84:88:20:80:13:5B:C4:B4:E4:F3:6D:5F:7F:2C:88:FF:B3:7B X509v3 Authority Key Identifier: keyid:72:C2:6A:BC:9E:06:C1:AF:EF:9B:5F:D2:DA:40:41:2E:7A:EE:6B:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/csJqvJ4Gwa_vm1_S2kBBLnrua0c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/6c0530-1074-4b35-be0c-cd7d61913288/1/BgqEiCCAE1vEtOTzbV9_LIj_s3s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/6c0530-1074-4b35-be0c-cd7d61913288/1/csJqvJ4Gwa_vm1_S2kBBLnrua0c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.247.160.0/24 Signature Algorithm: sha256WithRSAEncryption 4a:37:d5:74:7c:df:07:84:c7:56:7c:86:22:de:6e:db:0c:04: f6:04:83:91:55:51:2e:b3:c9:d1:e6:ef:e8:2d:60:07:f3:78: c5:c6:cb:ac:ae:01:9f:f3:f2:b9:71:a6:60:27:92:99:74:2f: c0:f7:1d:00:48:24:c5:59:d2:09:76:d8:4a:a1:6c:8d:ff:b9: 12:1b:8a:54:70:0e:33:ae:a2:49:ac:86:d8:94:49:37:80:a1: e4:db:47:fe:f8:f0:98:72:bf:d2:7f:45:1b:e1:eb:ee:55:96: c1:c5:59:6f:37:4f:8a:4f:42:32:25:19:10:6e:4d:85:6e:09: 4e:3e:6d:b7:61:3c:ab:4e:1f:2c:d9:e1:5b:5a:ec:f8:98:2d: d7:33:48:72:41:78:65:e4:40:ee:be:7b:74:f4:c9:a4:cd:af: b7:59:bf:6e:ef:5e:25:15:03:79:d0:e6:49:c4:21:50:76:df: 1c:db:98:d2:aa:0b:05:ad:75:d8:61:72:fa:f7:ae:9c:e2:d7: 2a:59:10:b9:c6:b1:1d:a7:93:bd:69:00:4e:35:c9:cd:5b:40: c9:9d:2a:62:01:64:48:6d:88:97:af:b9:b7:5e:2e:3f:0c:79: d8:10:bc:de:84:ee:60:01:ce:33:4b:a6:4f:56:94:cc:11:ac: 6a:db:5a:59 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/8oUVuQTx0dd11Ple0OZpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyYzI2YWJjOWUwNmMxYWZlZjliNWZkMmRhNDA0MTJlN2Fl ZTZiNDcwHhcNMjYwMTAyMTgyMjM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNjBhODQ4ODIwODAxMzViYzRiNGU0ZjM2ZDVmN2YyYzg4ZmZiMzdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs9x34I87aankdGUXUtsjqumV4SPI YzecqsYQC9V3jjJrU2SIJcVKnMkghyGXe4vcEC3z3w/OfE+fYo5XJWNWsujLDx+f VqOp5M50cYEoATP+piBBIrFX0KH8LcFUbfSu4ob4X6VuGcQqUo2IpnNQlQqLwzfP g8iG0Pijo+wFXY4rpRoapF4BHLWWpuzuCkmT5ZsEttH7XUBBFP054judM0o+JOqD CI67n+0uWDNW1R6rP8d2AXUplHyo5ba9qrGVnzq/xqXNDH4zVgnZd1CjULVZSbK3 HNdOGzRuRN2a3UIZl7vgQLTetjFSxP6NE+TYXKwX4iWcaj3HEIXj5jKZgQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAYKhIgggBNbxLTk821ffyyI/7N7MB8GA1UdIwQY MBaAFHLCaryeBsGv75tf0tpAQS567mtHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY3NKcXZKNEd3YV92bTFfUzJrQkJMbnJ1YTBjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny82YzA1MzAtMTA3NC00YjM1LWJlMGMt Y2Q3ZDYxOTEzMjg4LzEvQmdxRWlDQ0FFMXZFdE9UemJWOV9MSWpfczNzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny82YzA1MzAtMTA3NC00YjM1LWJlMGMtY2Q3ZDYxOTEzMjg4 LzEvY3NKcXZKNEd3YV92bTFfUzJrQkJMbnJ1YTBjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW/egMA0G CSqGSIb3DQEBCwUAA4IBAQBKN9V0fN8HhMdWfIYi3m7bDAT2BIORVVEus8nR5u/o LWAH83jFxsusrgGf8/K5caZgJ5KZdC/A9x0ASCTFWdIJdthKoWyN/7kSG4pUcA4z rqJJrIbYlEk3gKHk20f++PCYcr/Sf0Ub4evuVZbBxVlvN0+KT0IyJRkQbk2FbglO Pm23YTyrTh8s2eFbWuz4mC3XM0hyQXhl5EDuvnt09Mmkza+3Wb9u714lFQN50OZJ xCFQdt8c25jSqgsFrXXYYXL6966c4tcqWRC5xrEdp5O9aQBONcnNW0DJnSpiAWRI bYiXr7m3Xi4/DHnYELzehO5gAc4zS6ZPVpTMEaxq21pZ -----END CERTIFICATE-----Generated at Sun Jan 11 15:07:33 2026 by rpki-client