This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/170483-f5bc-41e6-8c86-39ca843b9c11/1/BecW4Z3OJKE8mPGOXG-xMCZNoR4.roa File: BecW4Z3OJKE8mPGOXG-xMCZNoR4.roa (raw, json) Hash identifier: i81QYZ9angiETwhsEQKAuuK5FXt4MFlFdqt+7+uo7Wo= Subject key identifier: 05:E7:16:E1:9D:CE:24:A1:3C:98:F1:8E:5C:6F:B1:30:26:4D:A1:1E Certificate issuer: /CN=aaacdb54e1767f5b8ececc5e3382d6611e5c8c82 Certificate serial: 019B92641DF675ABDA1406A5A2A85D522DA4 Authority key identifier: AA:AC:DB:54:E1:76:7F:5B:8E:CE:CC:5E:33:82:D6:61:1E:5C:8C:82 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qqzbVOF2f1uOzsxeM4LWYR5cjII.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/170483-f5bc-41e6-8c86-39ca843b9c11/1/BecW4Z3OJKE8mPGOXG-xMCZNoR4.roa Signing time: Tue 06 Jan 2026 08:19:53 +0000 ROA not before: Tue 06 Jan 2026 08:19:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211367 IP address blocks: 64.239.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/170483-f5bc-41e6-8c86-39ca843b9c11/1/qqzbVOF2f1uOzsxeM4LWYR5cjII.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/170483-f5bc-41e6-8c86-39ca843b9c11/1/qqzbVOF2f1uOzsxeM4LWYR5cjII.mft rsync://rpki.ripe.net/repository/DEFAULT/qqzbVOF2f1uOzsxeM4LWYR5cjII.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:92:64:1d:f6:75:ab:da:14:06:a5:a2:a8:5d:52:2d:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aaacdb54e1767f5b8ececc5e3382d6611e5c8c82 Validity Not Before: Jan 6 08:19:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=05e716e19dce24a13c98f18e5c6fb130264da11e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:f6:96:a6:dc:d7:cb:ee:98:17:db:bf:f1:ae: 0d:61:17:2c:fa:9b:67:a3:da:3e:20:03:57:ef:a6: d0:a8:0a:d1:6b:a6:5e:6b:4b:d0:42:29:18:4d:9f: c7:cf:f4:35:08:b2:44:d7:a5:68:61:bd:08:c1:b1: 42:e9:19:b8:25:d8:2d:ce:4c:a7:4d:67:e2:13:15: 8d:26:08:e8:23:8d:03:ff:80:03:85:dd:4b:cd:7f: ec:29:21:b8:b7:00:65:87:d1:f0:e2:74:37:37:eb: 1e:78:e1:bc:d8:60:f9:f4:10:56:3d:46:84:d4:ac: 1d:0c:33:44:aa:28:fc:7b:ac:31:3b:bb:56:ed:e5: a4:33:92:2a:e4:18:d8:15:b7:91:55:bc:d7:95:3a: d6:93:38:b3:34:7c:7e:55:d1:ef:a3:03:4e:45:9f: 6e:91:24:39:0e:da:4d:48:82:d2:db:91:41:55:ce: 88:d9:bd:a3:ed:99:5b:8b:88:d0:0a:f3:98:dc:9a: 87:84:7d:93:a5:6d:ef:85:ea:fd:c9:d2:7f:72:35: 9d:0d:b5:53:18:8c:21:27:0c:58:e5:ab:99:be:ef: 14:05:7c:27:0a:7d:d1:05:49:72:3b:c3:78:a0:05: 7a:8e:27:b8:92:b1:19:ba:0d:aa:9e:5a:fe:32:c4: 90:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:E7:16:E1:9D:CE:24:A1:3C:98:F1:8E:5C:6F:B1:30:26:4D:A1:1E X509v3 Authority Key Identifier: keyid:AA:AC:DB:54:E1:76:7F:5B:8E:CE:CC:5E:33:82:D6:61:1E:5C:8C:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qqzbVOF2f1uOzsxeM4LWYR5cjII.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/170483-f5bc-41e6-8c86-39ca843b9c11/1/BecW4Z3OJKE8mPGOXG-xMCZNoR4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/170483-f5bc-41e6-8c86-39ca843b9c11/1/qqzbVOF2f1uOzsxeM4LWYR5cjII.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 64.239.23.0/24 Signature Algorithm: sha256WithRSAEncryption 24:10:b1:1f:01:0a:ae:a4:b1:b9:89:3e:e5:c1:36:fe:be:9e: ee:4c:e7:fe:0b:25:79:c9:41:01:2b:9c:d2:d2:5e:71:fc:81: f4:b8:49:da:e8:a3:c9:7e:b3:70:c9:2a:66:76:8a:b6:67:36: 0e:d1:bc:0e:7d:a7:68:47:da:ec:a7:c0:dd:8a:cb:32:b0:15: a5:a6:ba:f3:01:cd:0b:d5:e9:47:56:03:62:08:9f:58:0b:d6: 42:6f:6e:36:94:89:90:e2:57:1b:ed:f5:eb:02:2b:b5:b2:a1: 0f:3b:65:c7:2f:aa:89:67:43:1d:84:e6:52:31:19:70:e9:01: e8:e8:72:47:95:51:01:f1:38:0e:f9:c2:e5:8e:0e:c4:32:12: 7c:d3:6c:ee:d3:fe:1a:3a:81:cc:3c:47:11:d5:8b:38:46:fd: aa:cd:23:7d:c9:6b:4a:5f:34:e6:88:51:29:27:da:e7:cb:67: a6:b8:f7:2b:8d:fe:06:1a:5d:98:ba:99:02:0b:95:98:cc:11: 03:f5:71:9c:da:ff:bc:8b:a7:35:db:72:f4:ff:ec:d3:4f:e1: 82:30:25:d5:19:b4:8b:2a:85:84:f3:33:72:5e:95:70:6e:a7: da:b5:a1:84:b6:17:21:4d:2a:31:10:3d:b3:39:cf:9c:7e:bd: d6:8d:49:55 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZuSZB32davaFAaloqhdUi2kMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFhYWNkYjU0ZTE3NjdmNWI4ZWNlY2M1ZTMzODJkNjYxMWU1 YzhjODIwHhcNMjYwMTA2MDgxOTUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNWU3MTZlMTlkY2UyNGExM2M5OGYxOGU1YzZmYjEzMDI2NGRhMTFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtfaWptzXy+6YF9u/8a4NYRcs+ptn o9o+IANX76bQqArRa6Zea0vQQikYTZ/Hz/Q1CLJE16VoYb0IwbFC6Rm4Jdgtzkyn TWfiExWNJgjoI40D/4ADhd1LzX/sKSG4twBlh9Hw4nQ3N+seeOG82GD59BBWPUaE 1KwdDDNEqij8e6wxO7tW7eWkM5Iq5BjYFbeRVbzXlTrWkzizNHx+VdHvowNORZ9u kSQ5DtpNSILS25FBVc6I2b2j7Zlbi4jQCvOY3JqHhH2TpW3vher9ydJ/cjWdDbVT GIwhJwxY5auZvu8UBXwnCn3RBUlyO8N4oAV6jie4krEZug2qnlr+MsSQpQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAXnFuGdziShPJjxjlxvsTAmTaEeMB8GA1UdIwQY MBaAFKqs21Thdn9bjs7MXjOC1mEeXIyCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcXF6YlZPRjJmMXVPenN4ZU00TFdZUjVjaklJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC8xNzA0ODMtZjViYy00MWU2LThjODYt MzljYTg0M2I5YzExLzEvQmVjVzRaM09KS0U4bVBHT1hHLXhNQ1pOb1I0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC8xNzA0ODMtZjViYy00MWU2LThjODYtMzljYTg0M2I5YzEx LzEvcXF6YlZPRjJmMXVPenN4ZU00TFdZUjVjaklJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQO8XMA0G CSqGSIb3DQEBCwUAA4IBAQAkELEfAQqupLG5iT7lwTb+vp7uTOf+CyV5yUEBK5zS 0l5x/IH0uEna6KPJfrNwySpmdoq2ZzYO0bwOfadoR9rsp8DdissysBWlprrzAc0L 1elHVgNiCJ9YC9ZCb242lImQ4lcb7fXrAiu1sqEPO2XHL6qJZ0MdhOZSMRlw6QHo 6HJHlVEB8TgO+cLljg7EMhJ802zu0/4aOoHMPEcR1Ys4Rv2qzSN9yWtKXzTmiFEp J9rny2emuPcrjf4GGl2YupkCC5WYzBED9XGc2v+8i6c123L0/+zTT+GCMCXVGbSL KoWE8zNyXpVwbqfataGEthchTSoxED2zOc+cfr3WjUlV -----END CERTIFICATE-----Generated at Mon Feb 9 19:39:28 2026 by rpki-client