This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/bcqhu3F62DOjeBG0L3kGCZvnN8Y.roa File: bcqhu3F62DOjeBG0L3kGCZvnN8Y.roa (raw, json) Hash identifier: XKE3j4AoTtDl7KokMiulwc6mgTVH1JoD5daYC1JjUiE= Subject key identifier: 6D:CA:A1:BB:71:7A:D8:33:A3:78:11:B4:2F:79:06:09:9B:E7:37:C6 Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019B7DCB69D9687F7F4C3CFE99CF5694B74D Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/bcqhu3F62DOjeBG0L3kGCZvnN8Y.roa Signing time: Fri 02 Jan 2026 08:20:41 +0000 ROA not before: Fri 02 Jan 2026 08:20:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205380 IP address blocks: 151.242.206.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 21:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:69:d9:68:7f:7f:4c:3c:fe:99:cf:56:94:b7:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Jan 2 08:20:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6dcaa1bb717ad833a37811b42f7906099be737c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:13:80:68:f2:3c:af:f5:b4:e1:58:51:0d:23: 32:9b:7c:0a:a6:73:e1:98:a9:73:ee:91:d6:39:71: d3:bf:87:a6:07:c2:20:af:a0:b5:6e:88:97:96:24: cf:00:0c:60:23:62:ed:fc:78:b1:12:05:2f:63:ef: 01:8e:46:ed:05:ad:14:66:77:23:af:db:1f:00:04: 0a:f5:87:22:fa:e7:13:91:f3:95:a3:a2:bb:44:95: cb:8d:04:2c:86:60:6a:7b:d2:f7:37:a4:06:de:d1: 34:1a:c7:ea:0c:48:e4:3c:6c:19:a1:eb:b9:98:e5: a5:b5:41:1f:c1:a0:1f:b4:ee:ad:8e:7e:16:15:2e: 0a:73:43:9a:3d:ce:59:26:cb:f3:55:18:f8:77:80: 10:45:83:62:0b:73:75:d7:b6:30:12:bc:1b:9d:a9: dd:1e:ab:cb:e9:0b:b1:32:d5:96:79:5b:7c:b7:34: dc:0a:29:bb:1e:f6:19:b4:9c:05:41:f9:46:75:4a: 5f:d6:01:db:0d:6f:17:65:b5:9e:82:18:8e:79:5d: c8:28:6f:14:f6:65:b9:9c:a3:9f:c5:1f:71:6b:62: c0:f4:c7:ef:2d:a9:bc:64:e8:49:91:7f:b5:e0:8e: 6c:5e:a3:c7:cf:91:4f:aa:01:0f:f8:db:ea:c7:89: 5b:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:CA:A1:BB:71:7A:D8:33:A3:78:11:B4:2F:79:06:09:9B:E7:37:C6 X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/bcqhu3F62DOjeBG0L3kGCZvnN8Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.242.206.0/24 Signature Algorithm: sha256WithRSAEncryption 87:6c:db:e1:c2:9c:67:0c:c5:fa:92:50:31:5a:94:b7:4d:65: 66:26:a2:c1:1e:7c:0d:9d:46:b4:cd:d4:48:fe:8e:f7:48:ef: 92:fc:28:f4:b4:45:2e:92:6f:5c:84:80:e4:a2:ab:99:e5:9f: 2a:76:8c:76:3f:00:ff:a0:88:68:c5:ad:d6:08:37:9b:18:02: a0:30:fd:6e:54:eb:68:13:45:9f:34:fa:0c:ef:ac:51:96:8b: 01:cf:61:ee:90:a9:dd:18:8d:0f:ec:d1:59:e4:55:8f:94:2b: a4:b1:aa:9c:8b:38:e8:3a:08:39:7d:7a:59:69:37:c6:8d:5c: 4e:d1:c6:7f:7a:de:ec:f9:b7:88:7f:d1:05:37:c2:08:76:7f: 1b:67:38:1b:5e:f7:4b:8f:13:18:10:df:5f:ba:dc:fa:16:1a: be:73:18:99:f8:d5:12:f1:5a:34:03:62:9f:45:33:4a:2e:1f: 98:cd:d0:1c:3e:64:a8:f7:f8:da:a4:ec:bd:5b:ba:46:3f:79: e1:03:10:22:2a:b5:c4:dc:f4:2d:89:87:f5:b7:35:8c:8f:3f: dc:42:e0:e0:01:50:9d:a4:13:f7:5d:d3:67:ef:04:4d:9a:1a: 4b:c6:f7:a7:4a:cf:ca:65:e8:7a:9e:a7:a9:33:5d:91:0d:34: ca:d6:d7:7d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9y2nZaH9/TDz+mc9WlLdNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjYwMTAyMDgyMDQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZGNhYTFiYjcxN2FkODMzYTM3ODExYjQyZjc5MDYwOTliZTczN2M2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkROAaPI8r/W04VhRDSMym3wKpnPh mKlz7pHWOXHTv4emB8Igr6C1boiXliTPAAxgI2Lt/HixEgUvY+8BjkbtBa0UZncj r9sfAAQK9Yci+ucTkfOVo6K7RJXLjQQshmBqe9L3N6QG3tE0GsfqDEjkPGwZoeu5 mOWltUEfwaAftO6tjn4WFS4Kc0OaPc5ZJsvzVRj4d4AQRYNiC3N117YwErwbnand HqvL6QuxMtWWeVt8tzTcCim7HvYZtJwFQflGdUpf1gHbDW8XZbWeghiOeV3IKG8U 9mW5nKOfxR9xa2LA9MfvLam8ZOhJkX+14I5sXqPHz5FPqgEP+Nvqx4lbtQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFG3Kobtxetgzo3gRtC95Bgmb5zfGMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvYmNxaHUzRjYyRE9qZUJHMEwza0dDWnZuTjhZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl/LOMA0G CSqGSIb3DQEBCwUAA4IBAQCHbNvhwpxnDMX6klAxWpS3TWVmJqLBHnwNnUa0zdRI /o73SO+S/Cj0tEUukm9chIDkoquZ5Z8qdox2PwD/oIhoxa3WCDebGAKgMP1uVOto E0WfNPoM76xRlosBz2HukKndGI0P7NFZ5FWPlCuksaqcizjoOgg5fXpZaTfGjVxO 0cZ/et7s+beIf9EFN8IIdn8bZzgbXvdLjxMYEN9futz6Fhq+cxiZ+NUS8Vo0A2Kf RTNKLh+YzdAcPmSo9/japOy9W7pGP3nhAxAiKrXE3PQtiYf1tzWMjz/cQuDgAVCd pBP3XdNn7wRNmhpLxvenSs/KZeh6nqepM12RDTTK1td9 -----END CERTIFICATE-----Generated at Sun Jan 18 06:30:10 2026 by rpki-client