This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/BOQc3LANWkcVsJXR1wzPZKIU9Wg.roa File: BOQc3LANWkcVsJXR1wzPZKIU9Wg.roa (raw, json) Hash identifier: +lxmX9duhcQBkOiMXeG8IZMihTw96x9B21WaKHNEnuI= Subject key identifier: 04:E4:1C:DC:B0:0D:5A:47:15:B0:95:D1:D7:0C:CF:64:A2:14:F5:68 Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2 Certificate serial: 019B7D5D42412B00CB3D6914D8BF0F8D8A1F Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/BOQc3LANWkcVsJXR1wzPZKIU9Wg.roa Signing time: Fri 02 Jan 2026 06:20:22 +0000 ROA not before: Fri 02 Jan 2026 06:20:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49981 IP address blocks: 45.130.201.0/24 maxlen: 24 185.244.138.0/24 maxlen: 24 212.119.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.mft rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:42:41:2b:00:cb:3d:69:14:d8:bf:0f:8d:8a:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2 Validity Not Before: Jan 2 06:20:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=04e41cdcb00d5a4715b095d1d70ccf64a214f568 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:04:24:57:b6:62:04:dd:8c:a5:70:ca:7b:6d: 31:f9:e8:04:36:db:6f:28:b2:0e:a5:24:8b:d2:7b: 3e:65:eb:09:26:83:96:29:0b:0e:ea:71:81:04:8b: df:44:16:64:8e:c5:3d:cd:1f:4b:52:75:47:5e:a3: 92:b5:78:81:a5:59:43:ee:12:26:c4:e4:9c:0c:a4: 25:1e:69:c4:a6:85:3a:44:ac:35:08:e1:96:bd:8c: 20:ad:c3:0a:ed:8f:63:16:00:02:3c:b4:76:14:bb: 33:d1:7b:1a:6d:fb:cb:e7:2c:17:3f:46:53:04:85: cc:aa:a3:0f:41:60:94:ec:0e:f0:db:d0:f3:17:0c: cc:0a:ab:c6:45:75:20:4d:36:56:5e:ba:61:33:02: 24:c1:c5:69:1a:f0:15:59:64:36:4c:dd:fb:8a:a5: b5:0b:f6:00:95:56:d1:2b:59:48:db:05:ba:b0:f6: 7b:1c:98:5f:75:86:2e:50:8b:d3:9c:05:57:5b:fd: 90:d3:4f:47:6f:a4:8d:2b:1d:98:3b:62:9e:62:8e: f2:c4:0d:e6:a7:b2:e7:27:a5:77:35:08:4a:1c:65: 85:66:d3:c6:3c:de:9f:e1:a2:7e:d2:a3:b2:d8:c5: 5b:88:14:4f:fb:68:37:d5:70:4b:af:72:d3:07:5b: 63:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:E4:1C:DC:B0:0D:5A:47:15:B0:95:D1:D7:0C:CF:64:A2:14:F5:68 X509v3 Authority Key Identifier: keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/BOQc3LANWkcVsJXR1wzPZKIU9Wg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.130.201.0/24 185.244.138.0/24 212.119.35.0/24 Signature Algorithm: sha256WithRSAEncryption 13:a1:a8:bb:c1:0c:7c:d5:5a:a6:95:a5:7a:7f:ce:ba:b6:a3: ca:6a:b8:f8:4d:89:1e:a1:91:9d:dd:90:09:74:38:80:76:26: f5:9a:a0:71:de:37:66:c1:8c:3b:1e:f4:d2:59:97:09:7d:d8: 51:fa:f6:b3:de:db:12:35:89:60:73:52:f2:e1:94:89:79:a4: 26:76:9c:fd:09:9b:55:0a:43:15:ae:30:3a:67:7d:3a:3b:01: 7d:6f:dc:49:66:b0:94:03:fa:04:d0:de:95:68:ab:47:ab:a9: 9f:b9:88:da:76:70:2e:85:8f:87:2e:e0:88:a3:c5:b3:f4:b9: a5:24:71:60:4d:d9:d0:88:9b:a8:92:1d:89:f8:1e:96:68:a5: 1f:c4:a8:ac:d6:77:0b:d7:c7:bd:53:30:e1:0f:0d:c3:73:99: c6:6b:1b:8b:4e:66:63:51:06:16:bc:6c:a3:7f:b7:98:ca:53: dc:8b:55:14:b0:aa:41:79:d7:ce:89:cc:58:a0:60:db:57:29: d9:25:61:ed:7f:91:0d:b5:41:35:a2:87:fa:90:6a:ae:65:bd: d5:44:bc:f0:01:7a:bd:40:09:e4:50:c2:74:e1:1f:bf:da:1e: 3e:c5:40:4f:77:59:ed:d3:64:28:80:40:80:3d:96:28:38:13: ef:cd:0e:25 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt9XUJBKwDLPWkU2L8PjYofMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2YzJhNGI3ZDVkNzNjNWI1NzA0NjIyM2JmMzBlYjY1MzAw NWIwZTIwHhcNMjYwMTAyMDYyMDIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNGU0MWNkY2IwMGQ1YTQ3MTViMDk1ZDFkNzBjY2Y2NGEyMTRmNTY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqgQkV7ZiBN2MpXDKe20x+egENttv KLIOpSSL0ns+ZesJJoOWKQsO6nGBBIvfRBZkjsU9zR9LUnVHXqOStXiBpVlD7hIm xOScDKQlHmnEpoU6RKw1COGWvYwgrcMK7Y9jFgACPLR2FLsz0XsabfvL5ywXP0ZT BIXMqqMPQWCU7A7w29DzFwzMCqvGRXUgTTZWXrphMwIkwcVpGvAVWWQ2TN37iqW1 C/YAlVbRK1lI2wW6sPZ7HJhfdYYuUIvTnAVXW/2Q009Hb6SNKx2YO2KeYo7yxA3m p7LnJ6V3NQhKHGWFZtPGPN6f4aJ+0qOy2MVbiBRP+2g31XBLr3LTB1tj9QIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFATkHNywDVpHFbCV0dcMz2SiFPVoMB8GA1UdIwQY MBaAFDbCpLfV1zxbVwRiI78w62UwBbDiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGIt MmNjZWRiOTY2YTU4LzEvQk9RYzNMQU5Xa2NWc0pYUjF3elBaS0lVOVdnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGItMmNjZWRiOTY2YTU4 LzEvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQALYLJAwQA ufSKAwQA1HcjMA0GCSqGSIb3DQEBCwUAA4IBAQAToai7wQx81VqmlaV6f866tqPK arj4TYkeoZGd3ZAJdDiAdib1mqBx3jdmwYw7HvTSWZcJfdhR+vaz3tsSNYlgc1Ly 4ZSJeaQmdpz9CZtVCkMVrjA6Z306OwF9b9xJZrCUA/oE0N6VaKtHq6mfuYjadnAu hY+HLuCIo8Wz9LmlJHFgTdnQiJuokh2J+B6WaKUfxKis1ncL18e9UzDhDw3Dc5nG axuLTmZjUQYWvGyjf7eYylPci1UUsKpBedfOicxYoGDbVynZJWHtf5ENtUE1oof6 kGquZb3VRLzwAXq9QAnkUMJ04R+/2h4+xUBPd1nt02QogECAPZYoOBPvzQ4l -----END CERTIFICATE-----Generated at Mon Jan 19 17:31:38 2026 by rpki-client