This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/16735d-6658-4b6f-a261-97ba37345aa8/1/BXcJyeoWgagdd3V31mwsVCcQbpE.roa File: BXcJyeoWgagdd3V31mwsVCcQbpE.roa (raw, json) Hash identifier: yQn1/FtH4uOfCzrJXuLEmscMEDI0/UDWaQ5VY5MFs4U= Subject key identifier: 05:77:09:C9:EA:16:81:A8:1D:77:75:77:D6:6C:2C:54:27:10:6E:91 Certificate issuer: /CN=7479df50a315029e80aa1947afe12db1e948628b Certificate serial: 019B7D5C6C1CCCEE5E80491AEDA2D6B1CEF5 Authority key identifier: 74:79:DF:50:A3:15:02:9E:80:AA:19:47:AF:E1:2D:B1:E9:48:62:8B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dHnfUKMVAp6AqhlHr-EtselIYos.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/16735d-6658-4b6f-a261-97ba37345aa8/1/BXcJyeoWgagdd3V31mwsVCcQbpE.roa Signing time: Fri 02 Jan 2026 06:19:27 +0000 ROA not before: Fri 02 Jan 2026 06:19:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 30833 IP address blocks: 79.98.136.0/21 maxlen: 21 79.98.136.0/22 maxlen: 22 79.98.140.0/22 maxlen: 22 80.249.200.0/22 maxlen: 22 80.249.200.0/23 maxlen: 23 80.249.202.0/23 maxlen: 23 217.78.176.0/20 maxlen: 20 217.78.176.0/21 maxlen: 21 217.78.184.0/21 maxlen: 21 2a00:d98::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/16735d-6658-4b6f-a261-97ba37345aa8/1/dHnfUKMVAp6AqhlHr-EtselIYos.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/16735d-6658-4b6f-a261-97ba37345aa8/1/dHnfUKMVAp6AqhlHr-EtselIYos.mft rsync://rpki.ripe.net/repository/DEFAULT/dHnfUKMVAp6AqhlHr-EtselIYos.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:6c:1c:cc:ee:5e:80:49:1a:ed:a2:d6:b1:ce:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7479df50a315029e80aa1947afe12db1e948628b Validity Not Before: Jan 2 06:19:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=057709c9ea1681a81d777577d66c2c5427106e91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:78:2c:ab:1b:da:3c:56:1e:29:71:f5:f4:61: e1:25:e2:1c:72:35:c3:87:64:a3:9b:86:46:3e:b5: 4e:5d:23:1c:35:62:5a:dc:6f:2b:6b:07:dc:91:95: cb:fd:59:4a:5d:e6:41:b8:55:4a:89:7b:64:8f:87: 8b:2f:bc:eb:30:93:56:55:1e:ea:f1:9f:8c:ad:e9: 42:82:49:56:9a:f7:06:56:10:07:78:6a:7d:94:1a: 1b:26:d0:db:42:90:3d:f7:38:94:ce:82:43:df:4c: 3c:1f:78:29:fb:9d:14:56:36:9a:a8:26:bc:8e:e6: f3:7e:c2:c8:a2:aa:b2:98:54:15:6d:d9:d7:12:62: c8:8a:10:29:6c:c2:53:c3:b7:84:74:95:25:1f:c9: 6a:51:7e:33:c0:20:dd:fc:75:1a:34:bf:23:c0:c4: 55:28:6d:b2:d4:25:b1:a1:83:9c:07:38:86:81:fb: 60:18:15:4e:fa:1f:c8:f6:1f:79:14:f3:57:2a:16: 01:53:dc:2c:0b:8e:4f:fb:21:32:2c:0c:b5:8a:e6: 81:be:2f:d3:2a:3d:e0:84:15:2c:2e:7d:a7:b3:07: 40:1e:b2:7b:97:c5:08:2a:55:5d:2e:aa:e8:9d:6c: 21:69:12:c2:34:44:8f:bf:10:8b:24:9e:0b:69:f1: 90:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:77:09:C9:EA:16:81:A8:1D:77:75:77:D6:6C:2C:54:27:10:6E:91 X509v3 Authority Key Identifier: keyid:74:79:DF:50:A3:15:02:9E:80:AA:19:47:AF:E1:2D:B1:E9:48:62:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dHnfUKMVAp6AqhlHr-EtselIYos.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/16735d-6658-4b6f-a261-97ba37345aa8/1/BXcJyeoWgagdd3V31mwsVCcQbpE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/16735d-6658-4b6f-a261-97ba37345aa8/1/dHnfUKMVAp6AqhlHr-EtselIYos.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.98.136.0/21 80.249.200.0/22 217.78.176.0/20 IPv6: 2a00:d98::/32 Signature Algorithm: sha256WithRSAEncryption 0b:51:e2:9c:94:11:21:c7:75:00:fb:4e:e0:dc:40:ce:77:d8: cd:2b:2c:39:00:d1:cd:bc:d9:01:f1:90:67:3d:8f:19:2a:5c: 28:0e:1f:fe:57:ae:d3:f0:a9:a9:2c:8f:f5:da:5a:80:c2:2b: d6:ba:54:4a:60:88:84:a1:f9:f1:64:fb:59:78:97:17:f1:b5: 00:3f:64:1c:fa:02:a1:c7:be:36:87:ec:e2:dd:60:80:42:99: 28:af:8a:38:ea:45:99:a7:6d:29:e5:b9:28:55:d8:f2:77:a6: ee:d8:40:f2:79:1c:88:27:77:ec:b4:a9:1c:b0:51:8e:e4:98: 50:11:94:0a:76:d9:5b:4d:32:c2:b6:5c:f5:19:a4:62:15:d8: 7e:45:6a:03:9c:e5:f2:09:78:c9:a8:49:ce:49:28:c5:ab:78: a4:5c:12:45:47:97:df:87:ab:2f:ad:21:75:65:76:c3:6a:b7: 21:9a:30:51:1f:a3:c7:f8:e2:48:0c:0c:6e:69:b3:32:61:2d: bd:7b:ce:bd:7c:b7:ab:6f:9a:bd:72:68:e0:b8:9c:1d:c8:ea: 3a:3b:2f:80:e5:cd:0c:13:21:d2:ca:96:57:c0:0d:cd:bf:61: 21:5e:fd:d4:27:0a:24:87:5b:43:46:15:83:b2:bb:f5:43:69: 78:00:e2:54 -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt9XGwczO5egEka7aLWsc71MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0NzlkZjUwYTMxNTAyOWU4MGFhMTk0N2FmZTEyZGIxZTk0 ODYyOGIwHhcNMjYwMTAyMDYxOTI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNTc3MDljOWVhMTY4MWE4MWQ3Nzc1NzdkNjZjMmM1NDI3MTA2ZTkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvXgsqxvaPFYeKXH19GHhJeIccjXD h2Sjm4ZGPrVOXSMcNWJa3G8rawfckZXL/VlKXeZBuFVKiXtkj4eLL7zrMJNWVR7q 8Z+MrelCgklWmvcGVhAHeGp9lBobJtDbQpA99ziUzoJD30w8H3gp+50UVjaaqCa8 jubzfsLIoqqymFQVbdnXEmLIihApbMJTw7eEdJUlH8lqUX4zwCDd/HUaNL8jwMRV KG2y1CWxoYOcBziGgftgGBVO+h/I9h95FPNXKhYBU9wsC45P+yEyLAy1iuaBvi/T Kj3ghBUsLn2nswdAHrJ7l8UIKlVdLqronWwhaRLCNESPvxCLJJ4LafGQHwIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFAV3CcnqFoGoHXd1d9ZsLFQnEG6RMB8GA1UdIwQY MBaAFHR531CjFQKegKoZR6/hLbHpSGKLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEhuZlVLTVZBcDZBcWhsSHItRXRzZWxJWW9zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy8xNjczNWQtNjY1OC00YjZmLWEyNjEt OTdiYTM3MzQ1YWE4LzEvQlhjSnllb1dnYWdkZDNWMzFtd3NWQ2NRYnBFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy8xNjczNWQtNjY1OC00YjZmLWEyNjEtOTdiYTM3MzQ1YWE4 LzEvZEhuZlVLTVZBcDZBcWhsSHItRXRzZWxJWW9zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQDT2KIAwQC UPnIAwQE2U6wMA0EAgACMAcDBQAqAA2YMA0GCSqGSIb3DQEBCwUAA4IBAQALUeKc lBEhx3UA+07g3EDOd9jNKyw5ANHNvNkB8ZBnPY8ZKlwoDh/+V67T8KmpLI/12lqA wivWulRKYIiEofnxZPtZeJcX8bUAP2Qc+gKhx742h+zi3WCAQpkor4o46kWZp20p 5bkoVdjyd6bu2EDyeRyIJ3fstKkcsFGO5JhQEZQKdtlbTTLCtlz1GaRiFdh+RWoD nOXyCXjJqEnOSSjFq3ikXBJFR5ffh6svrSF1ZXbDarchmjBRH6PH+OJIDAxuabMy YS29e869fLerb5q9cmjguJwdyOo6Oy+A5c0MEyHSypZXwA3Nv2EhXv3UJwokh1tD RhWDsrv1Q2l4AOJU -----END CERTIFICATE-----Generated at Mon Feb 9 21:00:55 2026 by rpki-client