This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/BGbJ5Zw2v-qjM5fQ9Fjd0OeIDdU.roa File: BGbJ5Zw2v-qjM5fQ9Fjd0OeIDdU.roa (raw, json) Hash identifier: TgwARVwpdJHXuOkPXup/6sVq7z+yoDosWd7VAXnuK4k= Subject key identifier: 04:66:C9:E5:9C:36:BF:EA:A3:33:97:D0:F4:58:DD:D0:E7:88:0D:D5 Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019B7DCBACD5176DAB6DA9EA11521DF74FE7 Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/BGbJ5Zw2v-qjM5fQ9Fjd0OeIDdU.roa Signing time: Fri 02 Jan 2026 08:20:58 +0000 ROA not before: Fri 02 Jan 2026 08:20:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 397006 IP address blocks: 151.246.16.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 21:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:ac:d5:17:6d:ab:6d:a9:ea:11:52:1d:f7:4f:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Jan 2 08:20:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0466c9e59c36bfeaa33397d0f458ddd0e7880dd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:5a:c1:4e:ce:f9:73:82:97:9e:23:52:cc:1b: f7:dc:2e:45:63:1b:21:58:60:54:11:bf:55:6f:b9: 1e:a7:cb:2f:7d:59:ed:ee:a9:53:94:a8:4e:d8:de: f2:f9:36:c2:0b:25:49:f4:36:f1:f6:7e:3e:fe:85: eb:2e:58:db:87:71:96:60:33:a9:73:68:a5:fa:74: 1d:d0:00:90:11:76:69:59:43:cc:45:ab:f0:be:d0: 1e:e8:8e:14:df:09:f2:b4:55:2a:9d:29:84:d6:17: 70:aa:e4:25:5b:02:2f:94:2c:e2:db:60:bd:5c:e7: af:86:4a:fc:9f:43:74:9d:eb:34:24:75:7b:b1:f5: 9e:8d:fc:a6:5a:4c:48:e6:c1:fd:fa:de:ee:64:b2: 7a:11:e7:ca:92:00:a1:f6:39:0d:41:67:08:37:1d: 14:03:fa:69:31:57:e0:ed:d8:7b:89:57:00:80:22: 80:fa:07:8e:4d:b4:70:60:a6:b6:28:3a:f8:f6:93: c5:56:f0:ed:b5:81:6e:1b:ef:1f:4a:13:86:fc:af: 4a:d8:29:6c:cf:cb:97:83:cb:e3:5b:cf:10:16:dc: 1a:13:43:c0:49:ea:d4:89:25:45:cb:0a:28:06:b3: 1c:40:57:7e:76:8e:87:7b:3e:3b:6e:65:aa:71:b9: 55:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:66:C9:E5:9C:36:BF:EA:A3:33:97:D0:F4:58:DD:D0:E7:88:0D:D5 X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/BGbJ5Zw2v-qjM5fQ9Fjd0OeIDdU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.246.16.0/21 Signature Algorithm: sha256WithRSAEncryption 79:bd:8e:53:0c:78:e0:92:92:e0:26:59:8d:d5:54:bb:03:3f: 31:b9:f7:60:e1:f4:ab:81:59:15:8a:96:61:ef:8e:c2:f0:e0: 6d:e6:26:bb:89:2c:d2:8b:2b:c7:87:21:28:7d:b7:58:25:88: 08:3e:fc:16:2b:78:72:7c:b0:78:ae:80:00:81:6b:36:12:15: 0a:4d:8e:9b:87:8b:f7:78:79:76:98:e7:1a:e6:c0:17:54:d2: c5:0d:cd:18:ac:a0:a0:3f:fa:12:b0:ec:df:7d:04:e5:0a:ee: 4d:19:f9:39:1c:1a:97:b9:02:ee:e0:bf:e6:a4:79:e2:9f:b0: e7:02:7a:d5:d2:fd:83:4b:b3:7c:a0:02:61:af:62:75:f2:5d: 0d:80:7e:00:f4:ef:39:80:65:2f:b8:2e:21:6d:24:62:be:a7: b4:59:8d:66:7e:8c:66:76:fd:63:d5:5b:04:53:eb:1c:1d:cc: 35:ae:e5:22:fc:f1:c2:46:5d:8d:36:b2:a1:42:48:c8:20:de: 47:1f:74:8c:88:e4:ba:e3:4e:4d:93:d1:de:56:d1:ee:13:a9: a7:44:80:b2:62:4c:3e:35:0f:71:54:ee:6c:77:de:e1:3d:76: db:bc:fa:fa:bc:8b:0c:23:3d:37:28:ae:62:3c:a6:70:05:1d: 5e:6d:67:27 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9y6zVF22rbanqEVId90/nMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjYwMTAyMDgyMDU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNDY2YzllNTljMzZiZmVhYTMzMzk3ZDBmNDU4ZGRkMGU3ODgwZGQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv1rBTs75c4KXniNSzBv33C5FYxsh WGBUEb9Vb7kep8svfVnt7qlTlKhO2N7y+TbCCyVJ9Dbx9n4+/oXrLljbh3GWYDOp c2il+nQd0ACQEXZpWUPMRavwvtAe6I4U3wnytFUqnSmE1hdwquQlWwIvlCzi22C9 XOevhkr8n0N0nes0JHV7sfWejfymWkxI5sH9+t7uZLJ6EefKkgCh9jkNQWcINx0U A/ppMVfg7dh7iVcAgCKA+geOTbRwYKa2KDr49pPFVvDttYFuG+8fShOG/K9K2Cls z8uXg8vjW88QFtwaE0PASerUiSVFywooBrMcQFd+do6Hez47bmWqcblVQwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFARmyeWcNr/qozOX0PRY3dDniA3VMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvQkdiSjVadzJ2LXFqTTVmUTlGamQwT2VJRGRVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDl/YQMA0G CSqGSIb3DQEBCwUAA4IBAQB5vY5TDHjgkpLgJlmN1VS7Az8xufdg4fSrgVkVipZh 747C8OBt5ia7iSzSiyvHhyEofbdYJYgIPvwWK3hyfLB4roAAgWs2EhUKTY6bh4v3 eHl2mOca5sAXVNLFDc0YrKCgP/oSsOzffQTlCu5NGfk5HBqXuQLu4L/mpHnin7Dn AnrV0v2DS7N8oAJhr2J18l0NgH4A9O85gGUvuC4hbSRivqe0WY1mfoxmdv1j1VsE U+scHcw1ruUi/PHCRl2NNrKhQkjIIN5HH3SMiOS6405Nk9HeVtHuE6mnRICyYkw+ NQ9xVO5sd97hPXbbvPr6vIsMIz03KK5iPKZwBR1ebWcn -----END CERTIFICATE-----Generated at Sun Jan 18 06:30:31 2026 by rpki-client