This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/BjUott5GOOpEEF8dSd8gtT8jPco.roa File: BjUott5GOOpEEF8dSd8gtT8jPco.roa (raw, json) Hash identifier: 5Gydd1GP55DORqUzQJDFp3HvKttfIj8iYzyundxJdHE= Subject key identifier: 06:35:28:B6:DE:46:38:EA:44:10:5F:1D:49:DF:20:B5:3F:23:3D:CA Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019B7DCB9F79F2B4677F141C63E74CC1E379 Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/BjUott5GOOpEEF8dSd8gtT8jPco.roa Signing time: Fri 02 Jan 2026 08:20:55 +0000 ROA not before: Fri 02 Jan 2026 08:20:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215691 IP address blocks: 151.242.190.0/24 maxlen: 24 151.242.194.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 21:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:9f:79:f2:b4:67:7f:14:1c:63:e7:4c:c1:e3:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Jan 2 08:20:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=063528b6de4638ea44105f1d49df20b53f233dca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:4a:66:b3:d1:8c:b1:25:b3:ec:2c:aa:78:ea: 16:00:d0:a2:fe:9f:fa:90:7c:88:70:27:b5:ef:43: 3a:03:a1:72:f9:24:2c:87:e3:97:b3:ae:34:51:61: 7b:50:86:0b:db:b6:1c:28:8f:54:a1:0f:a8:dd:e5: af:fd:ee:cd:9d:66:8b:01:0b:4b:30:90:04:b0:9a: d4:16:41:ca:81:7e:5f:87:15:98:01:73:6f:73:61: 12:21:81:61:a3:3d:63:6c:af:3e:e6:6b:5a:bb:6f: 99:64:a8:f5:04:d8:40:d3:a8:4f:ee:c2:38:b3:cd: 56:ad:c7:df:7c:bf:4d:5f:c3:cc:4b:85:6c:82:47: ff:59:19:29:af:53:d7:09:97:99:4c:5d:d1:47:30: 63:dd:7e:7e:59:fd:ab:01:cb:28:28:e4:b0:df:92: 6f:12:b4:7f:6b:a2:c6:e6:39:53:ec:99:f3:ce:58: e4:62:17:41:d1:27:57:d1:56:64:a6:41:30:43:a6: d1:91:38:58:6d:89:b9:0a:5b:a6:08:4c:40:e3:30: 1d:04:5a:a7:1c:95:81:a4:34:ca:f5:21:72:b4:ee: 77:0d:1d:04:37:98:3c:ba:07:ec:88:96:76:8b:85: 5f:a6:62:4a:a8:fd:8a:06:a3:5a:6c:98:72:10:17: 91:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:35:28:B6:DE:46:38:EA:44:10:5F:1D:49:DF:20:B5:3F:23:3D:CA X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/BjUott5GOOpEEF8dSd8gtT8jPco.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.242.190.0/24 151.242.194.0/24 Signature Algorithm: sha256WithRSAEncryption 04:3c:1a:91:78:96:92:e4:56:3d:62:67:91:82:58:ea:b3:a8: b9:f1:d6:3f:b8:ad:cc:c5:5f:57:e4:e9:80:05:32:1e:b8:03: 3b:7d:4d:cb:05:1e:3f:0c:b2:82:a8:8b:ad:38:ae:8c:a8:50: bb:90:26:27:10:eb:df:d4:7b:be:31:ad:6c:04:64:db:b2:64: 66:56:21:a7:cb:88:fe:7b:94:58:9a:f6:e4:e2:1e:4e:a6:28: 02:b5:66:6f:dd:b7:c2:ff:a6:f7:2e:e5:64:f7:89:73:d0:6d: 4b:dd:f0:80:85:5d:c0:16:6e:95:c2:47:53:74:a7:8a:8b:c8: cb:a2:ef:ea:3a:6a:4f:fe:d6:7d:74:19:99:27:ee:47:3f:36: cb:08:74:09:b3:9f:0e:a7:ac:ed:8a:2b:6e:8e:fd:c1:9f:8b: ba:c8:76:12:4c:5f:85:07:09:50:6e:19:ec:54:0e:30:dd:e0: a5:43:26:25:a8:47:46:51:58:9c:68:8c:a3:89:ea:90:2f:d3: 94:a0:08:e8:9b:32:f0:8f:d2:57:83:8b:4d:47:21:80:2f:81: f8:67:d3:35:b3:95:93:1f:83:1d:57:18:7c:fb:e6:07:c6:4e: e9:1a:b2:c8:16:07:dd:60:e1:55:4f:0e:15:7e:17:2b:97:ae: 6c:d3:b2:fa -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt9y5958rRnfxQcY+dMweN5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjYwMTAyMDgyMDU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNjM1MjhiNmRlNDYzOGVhNDQxMDVmMWQ0OWRmMjBiNTNmMjMzZGNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhkpms9GMsSWz7CyqeOoWANCi/p/6 kHyIcCe170M6A6Fy+SQsh+OXs640UWF7UIYL27YcKI9UoQ+o3eWv/e7NnWaLAQtL MJAEsJrUFkHKgX5fhxWYAXNvc2ESIYFhoz1jbK8+5mtau2+ZZKj1BNhA06hP7sI4 s81WrcfffL9NX8PMS4Vsgkf/WRkpr1PXCZeZTF3RRzBj3X5+Wf2rAcsoKOSw35Jv ErR/a6LG5jlT7JnzzljkYhdB0SdX0VZkpkEwQ6bRkThYbYm5ClumCExA4zAdBFqn HJWBpDTK9SFytO53DR0EN5g8ugfsiJZ2i4VfpmJKqP2KBqNabJhyEBeRgQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFAY1KLbeRjjqRBBfHUnfILU/Iz3KMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvQmpVb3R0NUdPT3BFRUY4ZFNkOGd0VDhqUGNvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAl/K+AwQA l/LCMA0GCSqGSIb3DQEBCwUAA4IBAQAEPBqReJaS5FY9YmeRgljqs6i58dY/uK3M xV9X5OmABTIeuAM7fU3LBR4/DLKCqIutOK6MqFC7kCYnEOvf1Hu+Ma1sBGTbsmRm ViGny4j+e5RYmvbk4h5OpigCtWZv3bfC/6b3LuVk94lz0G1L3fCAhV3AFm6VwkdT dKeKi8jLou/qOmpP/tZ9dBmZJ+5HPzbLCHQJs58Op6ztiitujv3Bn4u6yHYSTF+F BwlQbhnsVA4w3eClQyYlqEdGUVicaIyjieqQL9OUoAjomzLwj9JXg4tNRyGAL4H4 Z9M1s5WTH4MdVxh8++YHxk7pGrLIFgfdYOFVTw4Vfhcrl65s07L6 -----END CERTIFICATE-----Generated at Sun Jan 18 06:27:18 2026 by rpki-client