This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/BQI7xLWHF9ZNAK5nM3AaG90bJf4.roa File: BQI7xLWHF9ZNAK5nM3AaG90bJf4.roa (raw, json) Hash identifier: tCWzvd6+gpJWA01AphfhvnpNLp2NN7klr1zWRXxTKKA= Subject key identifier: 05:02:3B:C4:B5:87:17:D6:4D:00:AE:67:33:70:1A:1B:DD:1B:25:FE Certificate issuer: /CN=aa1dc50a4b526df18e8b0a6565d7b9d58a75d315 Certificate serial: 019B7D5D171EB632C7E8FF8A0B695DCB4709 Authority key identifier: AA:1D:C5:0A:4B:52:6D:F1:8E:8B:0A:65:65:D7:B9:D5:8A:75:D3:15 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh3FCktSbfGOiwplZde51Yp10xU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/BQI7xLWHF9ZNAK5nM3AaG90bJf4.roa Signing time: Fri 02 Jan 2026 06:20:11 +0000 ROA not before: Fri 02 Jan 2026 06:20:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25484 IP address blocks: 84.200.19.0/24 maxlen: 24 2a01:7e0:4fc::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.mft rsync://rpki.ripe.net/repository/DEFAULT/qh3FCktSbfGOiwplZde51Yp10xU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 12:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:17:1e:b6:32:c7:e8:ff:8a:0b:69:5d:cb:47:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa1dc50a4b526df18e8b0a6565d7b9d58a75d315 Validity Not Before: Jan 2 06:20:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=05023bc4b58717d64d00ae6733701a1bdd1b25fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:83:00:11:04:af:c1:c3:7b:62:42:8d:67:93: c7:75:cb:3a:07:00:c7:91:1d:b5:d1:4d:9f:96:02: c8:98:07:4a:2f:fd:04:f2:22:f5:78:d3:18:9f:6f: c8:1d:c2:e3:33:13:1f:22:fd:82:ca:68:37:dd:2f: 84:b7:33:fb:e5:21:ae:4b:f2:92:8c:bd:1c:57:fc: 96:48:b2:ef:cf:fb:12:15:4a:ac:39:b8:4d:88:12: 03:b6:9e:f5:48:0c:51:81:3b:36:15:24:22:cb:e3: 45:47:bd:38:ad:6c:89:ec:4f:1e:e4:18:df:fb:a1: f3:d0:b4:cf:fd:01:09:7e:ae:15:3a:04:a9:20:38: 0d:89:37:5b:be:d5:a9:e5:b5:13:c0:87:c2:e5:01: e5:47:2c:7d:a8:e5:7c:e9:b9:14:1e:71:79:62:c5: 52:a3:6c:15:6c:95:e0:1f:f8:7d:2d:8d:f1:15:09: 7a:a1:ea:ef:4f:bf:5c:1f:4f:5c:6f:4e:a8:0f:b4: 71:13:41:02:f6:43:e0:a6:ab:78:58:4e:73:84:76: cd:67:f8:61:63:f1:32:ac:5f:a2:53:a4:89:80:f8: 10:6b:49:69:8e:9e:90:8a:ee:60:ca:c9:33:02:b7: b8:7b:e7:19:d4:e6:7a:5f:04:25:d3:7e:53:63:e9: c1:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:02:3B:C4:B5:87:17:D6:4D:00:AE:67:33:70:1A:1B:DD:1B:25:FE X509v3 Authority Key Identifier: keyid:AA:1D:C5:0A:4B:52:6D:F1:8E:8B:0A:65:65:D7:B9:D5:8A:75:D3:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh3FCktSbfGOiwplZde51Yp10xU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/BQI7xLWHF9ZNAK5nM3AaG90bJf4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.200.19.0/24 IPv6: 2a01:7e0:4fc::/48 Signature Algorithm: sha256WithRSAEncryption 6a:86:9a:45:6b:a9:47:b4:d6:2d:bc:0c:ef:d3:1c:78:5d:7a: c9:2c:2b:16:63:6c:e1:47:4a:03:56:5a:71:0b:c9:84:f0:f4: 81:23:cd:f9:d1:73:76:f0:ee:16:19:6e:d3:c7:ce:0e:d0:be: 38:27:50:37:28:31:c8:a7:d0:bb:24:b0:37:f1:28:1a:e0:3c: 94:07:46:9b:b7:98:83:8f:2a:59:a9:fe:7b:f5:16:a1:ae:7e: 60:5a:1c:be:7f:50:10:44:23:38:c7:90:ed:43:e4:c9:53:36: 34:eb:82:d1:a7:db:42:09:07:9e:f2:4e:0a:7f:18:89:55:c7: 31:46:1d:15:46:7b:c6:c9:37:df:b5:d0:e3:a3:0d:98:be:ab: 78:a3:60:23:ec:b6:bf:c8:f7:94:17:89:8f:a3:d2:f5:3c:c5: d6:97:03:59:34:ac:b1:59:a1:f9:c4:74:bc:7e:16:aa:a3:20: 19:45:4a:41:f3:81:c2:22:80:dd:d8:27:b9:f0:c1:18:ee:89: fa:00:cc:ad:6d:86:f2:bf:1d:1f:31:3b:7b:96:d4:3d:64:ab: 0e:a3:33:98:b8:51:e5:15:f5:f3:84:54:e9:a8:90:45:61:42: ca:37:f4:40:9e:a9:f8:4e:cb:5b:bd:48:ec:63:3c:79:9b:75: e8:bc:1b:ab -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt9XRcetjLH6P+KC2ldy0cJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFhMWRjNTBhNGI1MjZkZjE4ZThiMGE2NTY1ZDdiOWQ1OGE3 NWQzMTUwHhcNMjYwMTAyMDYyMDExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNTAyM2JjNGI1ODcxN2Q2NGQwMGFlNjczMzcwMWExYmRkMWIyNWZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq4MAEQSvwcN7YkKNZ5PHdcs6BwDH kR210U2flgLImAdKL/0E8iL1eNMYn2/IHcLjMxMfIv2Cymg33S+EtzP75SGuS/KS jL0cV/yWSLLvz/sSFUqsObhNiBIDtp71SAxRgTs2FSQiy+NFR704rWyJ7E8e5Bjf +6Hz0LTP/QEJfq4VOgSpIDgNiTdbvtWp5bUTwIfC5QHlRyx9qOV86bkUHnF5YsVS o2wVbJXgH/h9LY3xFQl6oervT79cH09cb06oD7RxE0EC9kPgpqt4WE5zhHbNZ/hh Y/EyrF+iU6SJgPgQa0lpjp6Qiu5gyskzAre4e+cZ1OZ6XwQl035TY+nBRwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFAUCO8S1hxfWTQCuZzNwGhvdGyX+MB8GA1UdIwQY MBaAFKodxQpLUm3xjosKZWXXudWKddMVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcWgzRkNrdFNiZkdPaXdwbFpkZTUxWXAxMHhVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy9mMjM5MjktNzM3NS00MWM4LTk5NzMt MzNkNzI4NDMzYzExLzEvQlFJN3hMV0hGOVpOQUs1bk0zQWFHOTBiSmY0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy9mMjM5MjktNzM3NS00MWM4LTk5NzMtMzNkNzI4NDMzYzEx LzEvcWgzRkNrdFNiZkdPaXdwbFpkZTUxWXAxMHhVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAVMgTMA8E AgACMAkDBwAqAQfgBPwwDQYJKoZIhvcNAQELBQADggEBAGqGmkVrqUe01i28DO/T HHhdesksKxZjbOFHSgNWWnELyYTw9IEjzfnRc3bw7hYZbtPHzg7QvjgnUDcoMcin 0LsksDfxKBrgPJQHRpu3mIOPKlmp/nv1FqGufmBaHL5/UBBEIzjHkO1D5MlTNjTr gtGn20IJB57yTgp/GIlVxzFGHRVGe8bJN9+10OOjDZi+q3ijYCPstr/I95QXiY+j 0vU8xdaXA1k0rLFZofnEdLx+FqqjIBlFSkHzgcIigN3YJ7nwwRjuifoAzK1thvK/ HR8xO3uW1D1kqw6jM5i4UeUV9fOEVOmokEVhQso39ECeqfhOy1u9SOxjPHmbdei8 G6s= -----END CERTIFICATE-----Generated at Mon Jan 26 22:36:24 2026 by rpki-client