This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/BJ2efNf0ILO4m5d8LtGhgdROBOg.roa File: BJ2efNf0ILO4m5d8LtGhgdROBOg.roa (raw, json) Hash identifier: sL4VphecA42sjZr2ADQP8gNzpKwxxEa9OEFnFxPLNmM= Subject key identifier: 04:9D:9E:7C:D7:F4:20:B3:B8:9B:97:7C:2E:D1:A1:81:D4:4E:04:E8 Certificate issuer: /CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4 Certificate serial: 019B77C7426EF9F5CF6337505909F109C211 Authority key identifier: D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/BJ2efNf0ILO4m5d8LtGhgdROBOg.roa Signing time: Thu 01 Jan 2026 04:18:25 +0000 ROA not before: Thu 01 Jan 2026 04:18:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 7843 IP address blocks: 66.9.96.0/20 maxlen: 24 66.117.8.0/22 maxlen: 24 77.223.192.0/21 maxlen: 24 77.223.200.0/23 maxlen: 24 79.139.64.0/23 maxlen: 24 83.142.200.0/21 maxlen: 24 88.135.100.0/22 maxlen: 24 88.135.104.0/21 maxlen: 24 93.119.184.0/21 maxlen: 24 94.26.110.0/23 maxlen: 24 94.101.103.0/24 maxlen: 24 95.178.8.0/21 maxlen: 24 116.50.16.0/21 maxlen: 24 121.127.56.0/21 maxlen: 24 176.222.48.0/22 maxlen: 24 195.133.202.0/23 maxlen: 24 198.145.112.0/22 maxlen: 24 205.134.244.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.mft rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 13:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:42:6e:f9:f5:cf:63:37:50:59:09:f1:09:c2:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4 Validity Not Before: Jan 1 04:18:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=049d9e7cd7f420b3b89b977c2ed1a181d44e04e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:42:0f:f1:e3:7f:ac:59:60:c7:1f:52:86:f4: dd:37:11:2e:13:b1:7c:29:7f:ba:fe:ce:b6:37:90: 02:c9:e4:ac:26:07:da:95:1a:bb:4c:2c:f7:84:c1: 95:88:e2:85:f7:89:fc:bc:5e:0f:7a:3a:97:9c:37: fa:77:a3:e8:08:a6:ef:28:3b:9a:fa:5f:0f:b1:aa: c9:4f:df:19:e6:4f:91:14:14:53:02:7a:8b:85:db: 6f:42:0a:80:d3:b7:9a:c2:15:e8:d5:4b:b3:db:5c: 66:98:ea:41:4f:db:12:0d:d1:55:b5:a3:51:ef:d5: 2e:6e:42:5a:e1:01:a9:f6:dc:9e:13:59:c6:75:c4: b1:f1:29:4f:4e:b6:b2:8f:ed:83:79:5a:a5:15:73: 8a:1b:46:74:ad:e2:be:92:12:91:df:c2:c3:e9:23: f7:42:87:1d:51:19:58:07:ed:fb:4a:a7:df:27:3a: 56:a2:ad:17:b1:0c:9b:47:aa:29:de:2b:70:72:9c: 1a:45:75:d4:2b:91:40:c4:ed:01:fb:cd:c6:c2:a8: e6:d8:fb:ee:e6:b1:53:9e:d1:80:24:1c:41:cb:73: f7:ea:cc:f0:48:1f:80:0a:d8:0f:41:8c:88:ab:1a: 77:b4:b3:7f:a7:12:23:1e:54:bf:9c:4e:42:1e:fc: 4a:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:9D:9E:7C:D7:F4:20:B3:B8:9B:97:7C:2E:D1:A1:81:D4:4E:04:E8 X509v3 Authority Key Identifier: keyid:D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/BJ2efNf0ILO4m5d8LtGhgdROBOg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 66.9.96.0/20 66.117.8.0/22 77.223.192.0-77.223.201.255 79.139.64.0/23 83.142.200.0/21 88.135.100.0-88.135.111.255 93.119.184.0/21 94.26.110.0/23 94.101.103.0/24 95.178.8.0/21 116.50.16.0/21 121.127.56.0/21 176.222.48.0/22 195.133.202.0/23 198.145.112.0/22 205.134.244.0/22 Signature Algorithm: sha256WithRSAEncryption 9a:aa:23:7c:ea:72:e3:98:cd:2f:7a:87:ea:36:e8:0e:a8:56: fe:de:cf:d7:67:64:9c:ad:74:37:db:8f:1b:c1:c5:c2:b1:8d: 95:45:15:5c:d2:6d:c7:60:39:6b:f7:38:9a:73:9a:e2:c6:d7: c5:54:01:7d:e4:87:f7:43:1b:47:6a:83:9a:08:e2:57:c3:e3: 13:23:7d:0a:8f:01:ca:33:f1:c9:32:2b:c0:b2:fe:56:cf:5d: 28:08:46:57:7a:98:5e:34:0d:bf:c2:40:41:d9:22:71:da:11: 67:26:5d:e8:ab:ea:24:e9:36:40:ee:7c:4a:42:e2:5d:b2:28: 2e:0d:e8:ce:6f:52:e4:08:2e:66:e3:9a:9c:33:56:35:b5:bf: 28:e6:e4:a0:b6:c5:8d:e9:2f:4c:36:f3:f5:3c:8d:6e:91:83: 41:14:ad:d0:2e:f7:28:2b:49:a3:3f:65:2a:f3:ef:ef:4c:ad: 9e:f5:d9:1d:6e:bf:bf:1a:50:43:35:00:fe:f9:8a:85:81:17: f2:d0:ad:a6:c5:b1:dc:5c:a5:d6:58:c1:97:e9:8e:59:9b:d8: fe:05:cb:7c:6c:e6:55:b5:68:cf:1b:b8:de:a3:0a:ee:35:5c: 8a:0a:89:e2:94:9a:af:51:59:b8:a6:b4:ca:24:4d:be:bc:a0: 1c:76:ea:db -----BEGIN CERTIFICATE----- MIIFaDCCBFCgAwIBAgISAZt3x0Ju+fXPYzdQWQnxCcIRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0OGEyN2Y0NGIxMDQwNGM1MmY2ZmZjNGUwOGRjODJiZjhi NWRlZTQwHhcNMjYwMTAxMDQxODI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNDlkOWU3Y2Q3ZjQyMGIzYjg5Yjk3N2MyZWQxYTE4MWQ0NGUwNGU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxkIP8eN/rFlgxx9ShvTdNxEuE7F8 KX+6/s62N5ACyeSsJgfalRq7TCz3hMGViOKF94n8vF4PejqXnDf6d6PoCKbvKDua +l8PsarJT98Z5k+RFBRTAnqLhdtvQgqA07eawhXo1Uuz21xmmOpBT9sSDdFVtaNR 79UubkJa4QGp9tyeE1nGdcSx8SlPTrayj+2DeVqlFXOKG0Z0reK+khKR38LD6SP3 QocdURlYB+37SqffJzpWoq0XsQybR6op3itwcpwaRXXUK5FAxO0B+83Gwqjm2Pvu 5rFTntGAJBxBy3P36szwSB+ACtgPQYyIqxp3tLN/pxIjHlS/nE5CHvxKuQIDAQAB o4ICdDCCAnAwHQYDVR0OBBYEFASdnnzX9CCzuJuXfC7RoYHUTgToMB8GA1UdIwQY MBaAFNSKJ/RLEEBMUvb/xOCNyCv4td7kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUlvbjlFc1FRRXhTOXZfRTRJM0lLX2kxM3VRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS80YmI1YTctMzQ2Yy00MTk1LTlkMGYt NTlmNTk4NGI2NGVhLzEvQkoyZWZOZjBJTE80bTVkOEx0R2hnZFJPQk9nLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS80YmI1YTctMzQ2Yy00MTk1LTlkMGYtNTlmNTk4NGI2NGVh LzEvMUlvbjlFc1FRRXhTOXZfRTRJM0lLX2kxM3VRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGJBggrBgEFBQcBBwEB/wR6MHgwdgQCAAEwcAMEBEIJYAME AkJ1CDAMAwQGTd/AAwQBTd/IAwQBT4tAAwQDU47IMAwDBAJYh2QDBARYh2ADBANd d7gDBAFeGm4DBABeZWcDBANfsggDBAN0MhADBAN5fzgDBAKw3jADBAHDhcoDBALG kXADBALNhvQwDQYJKoZIhvcNAQELBQADggEBAJqqI3zqcuOYzS96h+o26A6oVv7e z9dnZJytdDfbjxvBxcKxjZVFFVzSbcdgOWv3OJpzmuLG18VUAX3kh/dDG0dqg5oI 4lfD4xMjfQqPAcoz8ckyK8Cy/lbPXSgIRld6mF40Db/CQEHZInHaEWcmXeir6iTp NkDufEpC4l2yKC4N6M5vUuQILmbjmpwzVjW1vyjm5KC2xY3pL0w28/U8jW6Rg0EU rdAu9ygrSaM/ZSrz7+9MrZ712R1uv78aUEM1AP75ioWBF/LQrabFsdxcpdZYwZfp jlmb2P4Fy3xs5lW1aM8buN6jCu41XIoKieKUmq9RWbimtMokTb68oBx26ts= -----END CERTIFICATE-----Generated at Thu Jan 1 20:22:27 2026 by rpki-client