This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/BHCo3jZdwgA_toSYwOyuINKQ0kQ.roa File: BHCo3jZdwgA_toSYwOyuINKQ0kQ.roa (raw, json) Hash identifier: 6MU+dAidslipD2kmJzx8jA8kYsQtbjXlOlK+ofFi4h8= Subject key identifier: 04:70:A8:DE:36:5D:C2:00:3F:B6:84:98:C0:EC:AE:20:D2:90:D2:44 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019BFB733AF013BAEA28B1F3427C11C1F860 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/BHCo3jZdwgA_toSYwOyuINKQ0kQ.roa Signing time: Mon 26 Jan 2026 17:56:31 +0000 ROA not before: Mon 26 Jan 2026 17:56:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198584 IP address blocks: 31.58.231.0/24 maxlen: 24 217.60.25.0/24 maxlen: 24 217.60.27.0/24 maxlen: 24 217.60.192.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 05:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fb:73:3a:f0:13:ba:ea:28:b1:f3:42:7c:11:c1:f8:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 26 17:56:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0470a8de365dc2003fb68498c0ecae20d290d244 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:03:94:fc:f8:db:43:15:d8:5e:c0:46:26:18: 71:4e:80:83:cd:f8:8e:95:d0:f7:d1:93:a1:4a:8e: 48:96:36:dc:cd:d3:a1:e2:a4:c4:39:20:5e:8c:70: ad:d3:77:77:02:2e:22:57:d8:a1:b1:c6:73:42:63: 4b:8c:e3:27:8a:3e:8a:40:6c:d3:4f:bb:0f:06:96: e4:62:f9:c1:54:82:0b:05:b9:80:92:67:35:cd:50: 7a:08:e8:53:b2:89:b7:15:3a:4d:46:67:d8:34:49: d4:ac:67:3e:bd:cd:09:0d:e4:85:f3:d7:76:5d:9a: a0:45:b1:c4:2b:9a:59:62:d1:a0:c9:1e:28:73:60: 61:20:cf:12:22:7b:61:87:e1:3a:63:3d:cb:30:56: 1d:b2:f6:62:a1:a9:9f:3c:ad:da:eb:b7:7a:50:0d: a4:74:ba:90:13:20:6f:e1:a4:41:27:57:39:7b:e1: 5b:d4:1c:47:22:08:88:3d:2c:58:fd:5f:92:e9:9f: 75:83:b2:8e:60:61:89:26:f8:ae:4b:03:7a:26:2d: de:57:8e:9d:c9:12:80:a6:56:62:8f:3a:65:a1:67: b9:34:b1:dd:15:27:3c:f5:cb:07:ce:95:4f:c6:2f: 7d:98:d7:e3:d9:8b:cd:19:d9:77:17:4f:57:3b:9e: 7c:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:70:A8:DE:36:5D:C2:00:3F:B6:84:98:C0:EC:AE:20:D2:90:D2:44 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/BHCo3jZdwgA_toSYwOyuINKQ0kQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.58.231.0/24 217.60.25.0/24 217.60.27.0/24 217.60.192.0/24 Signature Algorithm: sha256WithRSAEncryption 92:57:9a:3e:ff:58:29:d5:9e:6e:d8:0a:f8:a6:dd:d6:70:2c: bf:b8:da:0a:93:95:3e:25:d3:9d:6d:d9:62:62:0d:0c:56:3c: 8b:6a:22:ea:d7:96:6b:94:52:93:a8:0b:9d:13:88:81:05:d3: 66:80:8b:a8:8e:cc:ed:e4:e7:8f:1d:4d:8e:ef:dc:ca:1b:b3: 41:a2:30:58:46:20:df:57:0b:24:d1:3c:52:ba:c6:9a:b2:03: a4:6b:5e:c1:8e:48:7b:67:48:93:14:87:87:88:7d:b1:1f:e3: 6d:cc:1c:83:11:4c:52:1f:1e:3e:c8:37:aa:f4:bf:fe:0b:5c: 11:6d:ae:a1:cd:b4:0f:12:12:f3:b5:65:42:70:6b:3b:9d:e7: 96:41:72:40:8c:96:d0:a6:f4:ee:92:61:43:a2:f6:94:ee:4b: d7:1c:e2:84:31:2b:50:26:06:f6:a5:a5:78:41:77:75:16:6a: 3a:ad:55:a2:42:56:e8:4f:c4:c5:55:ea:31:a5:c9:2e:39:c9: f8:14:d0:f1:b3:b5:32:4f:f9:b3:70:e8:ac:aa:13:44:df:48: 44:44:45:8a:e0:2c:cd:fe:ab:88:6e:73:50:f8:c0:a8:78:72: 47:4b:7a:7f:e3:39:ad:96:30:55:f5:3a:c2:0d:a0:e3:3c:36: 45:59:50:78 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZv7czrwE7rqKLHzQnwRwfhgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTI2MTc1NjMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNDcwYThkZTM2NWRjMjAwM2ZiNjg0OThjMGVjYWUyMGQyOTBkMjQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9AOU/PjbQxXYXsBGJhhxToCDzfiO ldD30ZOhSo5IljbczdOh4qTEOSBejHCt03d3Ai4iV9ihscZzQmNLjOMnij6KQGzT T7sPBpbkYvnBVIILBbmAkmc1zVB6COhTsom3FTpNRmfYNEnUrGc+vc0JDeSF89d2 XZqgRbHEK5pZYtGgyR4oc2BhIM8SInthh+E6Yz3LMFYdsvZioamfPK3a67d6UA2k dLqQEyBv4aRBJ1c5e+Fb1BxHIgiIPSxY/V+S6Z91g7KOYGGJJviuSwN6Ji3eV46d yRKAplZijzploWe5NLHdFSc89csHzpVPxi99mNfj2YvNGdl3F09XO558KwIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFARwqN42XcIAP7aEmMDsriDSkNJEMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvQkhDbzNqWmR3Z0FfdG9TWXdPeXVJTktRMGtRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAHzrnAwQA 2TwZAwQA2TwbAwQA2TzAMA0GCSqGSIb3DQEBCwUAA4IBAQCSV5o+/1gp1Z5u2Ar4 pt3WcCy/uNoKk5U+JdOdbdliYg0MVjyLaiLq15ZrlFKTqAudE4iBBdNmgIuojszt 5OePHU2O79zKG7NBojBYRiDfVwsk0TxSusaasgOka17Bjkh7Z0iTFIeHiH2xH+Nt zByDEUxSHx4+yDeq9L/+C1wRba6hzbQPEhLztWVCcGs7neeWQXJAjJbQpvTukmFD ovaU7kvXHOKEMStQJgb2paV4QXd1Fmo6rVWiQlboT8TFVeoxpckuOcn4FNDxs7Uy T/mzcOisqhNE30hEREWK4CzN/quIbnNQ+MCoeHJHS3p/4zmtljBV9TrCDaDjPDZF WVB4 -----END CERTIFICATE-----Generated at Tue Jan 27 12:40:09 2026 by rpki-client