This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/a9e57e-2479-4576-b275-87433157a25b/1/bgZQ4UEqqc2nBoH6BoGbh94tqMI.roa File: bgZQ4UEqqc2nBoH6BoGbh94tqMI.roa (raw, json) Hash identifier: TI3RmrhW13Nq6yDFyJTeXpPjioYudBC6EapBtlWy/gA= Subject key identifier: 6E:06:50:E1:41:2A:A9:CD:A7:06:81:FA:06:81:9B:87:DE:2D:A8:C2 Certificate issuer: /CN=4df92658601094ed64985c64c6952be3416301ce Certificate serial: 019B7BA371F2E400E2A96D77A068F6533E7F Authority key identifier: 4D:F9:26:58:60:10:94:ED:64:98:5C:64:C6:95:2B:E3:41:63:01:CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TfkmWGAQlO1kmFxkxpUr40FjAc4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/a9e57e-2479-4576-b275-87433157a25b/1/bgZQ4UEqqc2nBoH6BoGbh94tqMI.roa Signing time: Thu 01 Jan 2026 22:17:47 +0000 ROA not before: Thu 01 Jan 2026 22:17:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56376 IP address blocks: 185.139.183.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/a9e57e-2479-4576-b275-87433157a25b/1/TfkmWGAQlO1kmFxkxpUr40FjAc4.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/a9e57e-2479-4576-b275-87433157a25b/1/TfkmWGAQlO1kmFxkxpUr40FjAc4.mft rsync://rpki.ripe.net/repository/DEFAULT/TfkmWGAQlO1kmFxkxpUr40FjAc4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 13:01:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:71:f2:e4:00:e2:a9:6d:77:a0:68:f6:53:3e:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4df92658601094ed64985c64c6952be3416301ce Validity Not Before: Jan 1 22:17:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6e0650e1412aa9cda70681fa06819b87de2da8c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:59:30:cb:91:a8:19:e6:d4:5f:26:78:b5:c0: c0:0e:82:8e:12:97:e2:e4:d7:39:7b:c7:f2:c6:6c: 18:f4:d7:8f:b3:f5:49:0d:70:92:7c:63:f4:b9:7e: c1:dd:26:3d:e1:2f:df:44:9b:f4:e7:c9:be:8f:33: 9c:0c:64:90:18:fe:70:77:df:ad:d3:06:02:e6:21: 26:ca:9b:51:a0:7b:c8:89:65:cb:68:fd:8a:da:ca: 46:4b:d4:df:65:21:96:d1:fe:02:a7:41:10:5f:1b: 37:0e:9c:00:8d:c2:54:0c:5b:ea:be:79:fb:f9:99: 0d:26:23:f2:75:cc:eb:c3:9d:35:49:50:a4:a9:7f: 00:31:b5:65:a5:24:26:e3:90:d3:f8:6d:2a:f3:45: 0a:4b:fa:e8:c8:eb:b9:80:09:86:37:d8:2c:e0:81: 77:d4:23:f0:03:a1:52:69:83:7e:fa:2f:59:c2:c4: b2:78:8f:84:d9:19:26:44:ba:e0:3e:42:17:0c:a6: 9e:ab:88:bf:b7:1d:f9:0e:35:76:ae:1b:a3:81:6b: 88:3e:ef:e6:8a:4a:a0:7c:84:29:e9:7d:29:96:1d: b6:18:81:4d:54:9f:c8:da:db:ca:ff:04:dc:8e:07: 53:a3:91:33:53:f1:b9:15:80:d2:87:ad:0e:a7:6f: d4:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:06:50:E1:41:2A:A9:CD:A7:06:81:FA:06:81:9B:87:DE:2D:A8:C2 X509v3 Authority Key Identifier: keyid:4D:F9:26:58:60:10:94:ED:64:98:5C:64:C6:95:2B:E3:41:63:01:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TfkmWGAQlO1kmFxkxpUr40FjAc4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/a9e57e-2479-4576-b275-87433157a25b/1/bgZQ4UEqqc2nBoH6BoGbh94tqMI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/a9e57e-2479-4576-b275-87433157a25b/1/TfkmWGAQlO1kmFxkxpUr40FjAc4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.139.183.0/24 Signature Algorithm: sha256WithRSAEncryption 8d:bd:7a:e0:bc:f7:eb:75:71:0e:22:a2:1a:68:14:80:cb:24: 62:c5:26:38:33:ec:8f:5b:2c:de:0d:ab:f6:30:ba:37:d8:31: 46:27:37:f9:bc:02:6d:b9:2d:b3:66:19:d5:66:45:c3:a6:b1: 29:20:02:15:12:9d:fe:bc:c5:8a:49:e2:b6:e2:70:de:9d:4d: 68:24:60:95:ce:77:88:e1:79:93:9a:ca:b2:d5:b1:1d:f2:3f: d1:4a:cb:9c:c2:c3:39:48:a6:0e:2e:fa:ae:d1:b4:a4:04:b1: 23:15:3f:01:2c:02:70:fe:02:b4:7f:0d:82:a5:f7:41:84:e9: 3b:9e:fd:82:3e:1d:db:02:5d:76:ce:cc:66:40:71:45:6a:e0: 2a:21:26:62:64:27:0c:cc:d1:04:af:da:67:d5:41:f0:c1:b6: 62:9b:48:3d:d7:a3:37:aa:eb:36:66:57:87:52:3c:a3:28:8c: 56:7e:99:c6:db:64:30:58:d4:5c:d9:71:10:97:c2:b3:f6:37: ad:b5:15:9f:d0:9a:cd:17:7b:e1:86:1f:38:f7:67:5f:64:1e: fc:51:5b:63:2e:a3:77:30:42:d1:60:38:16:1a:5d:9a:da:66: 9d:c7:fb:01:04:38:b4:88:f6:08:3e:b5:2b:b8:c2:c7:c7:5c: 13:d5:2f:e0 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7o3Hy5ADiqW13oGj2Uz5/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkZjkyNjU4NjAxMDk0ZWQ2NDk4NWM2NGM2OTUyYmUzNDE2 MzAxY2UwHhcNMjYwMTAxMjIxNzQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZTA2NTBlMTQxMmFhOWNkYTcwNjgxZmEwNjgxOWI4N2RlMmRhOGMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA11kwy5GoGebUXyZ4tcDADoKOEpfi 5Nc5e8fyxmwY9NePs/VJDXCSfGP0uX7B3SY94S/fRJv058m+jzOcDGSQGP5wd9+t 0wYC5iEmyptRoHvIiWXLaP2K2spGS9TfZSGW0f4Cp0EQXxs3DpwAjcJUDFvqvnn7 +ZkNJiPydczrw501SVCkqX8AMbVlpSQm45DT+G0q80UKS/royOu5gAmGN9gs4IF3 1CPwA6FSaYN++i9ZwsSyeI+E2RkmRLrgPkIXDKaeq4i/tx35DjV2rhujgWuIPu/m ikqgfIQp6X0plh22GIFNVJ/I2tvK/wTcjgdTo5EzU/G5FYDSh60Op2/U6QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFG4GUOFBKqnNpwaB+gaBm4feLajCMB8GA1UdIwQY MBaAFE35JlhgEJTtZJhcZMaVK+NBYwHOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGZrbVdHQVFsTzFrbUZ4a3hwVXI0MEZqQWM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9hOWU1N2UtMjQ3OS00NTc2LWIyNzUt ODc0MzMxNTdhMjViLzEvYmdaUTRVRXFxYzJuQm9INkJvR2JoOTR0cU1JLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC9hOWU1N2UtMjQ3OS00NTc2LWIyNzUtODc0MzMxNTdhMjVi LzEvVGZrbVdHQVFsTzFrbUZ4a3hwVXI0MEZqQWM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuYu3MA0G CSqGSIb3DQEBCwUAA4IBAQCNvXrgvPfrdXEOIqIaaBSAyyRixSY4M+yPWyzeDav2 MLo32DFGJzf5vAJtuS2zZhnVZkXDprEpIAIVEp3+vMWKSeK24nDenU1oJGCVzneI 4XmTmsqy1bEd8j/RSsucwsM5SKYOLvqu0bSkBLEjFT8BLAJw/gK0fw2CpfdBhOk7 nv2CPh3bAl12zsxmQHFFauAqISZiZCcMzNEEr9pn1UHwwbZim0g916M3qus2ZleH UjyjKIxWfpnG22QwWNRc2XEQl8Kz9jettRWf0JrNF3vhhh8492dfZB78UVtjLqN3 MELRYDgWGl2a2madx/sBBDi0iPYIPrUruMLHx1wT1S/g -----END CERTIFICATE-----Generated at Mon Jan 19 23:23:24 2026 by rpki-client