This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/bgMiLEeTNbzwpc1k6dzLrZiynds.roa File: bgMiLEeTNbzwpc1k6dzLrZiynds.roa (raw, json) Hash identifier: X43AawoIAAS3lhLbwAcgQ0icROu3r9TC3+rpI3/4Bxs= Subject key identifier: 6E:03:22:2C:47:93:35:BC:F0:A5:CD:64:E9:DC:CB:AD:98:B2:9D:DB Certificate issuer: /CN=571cb51cba68eb7ef9867a75d17ab28018196aa1 Certificate serial: 019B46A5CD56DA62E222C2FC43E93B7712DE Authority key identifier: 57:1C:B5:1C:BA:68:EB:7E:F9:86:7A:75:D1:7A:B2:80:18:19:6A:A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vxy1HLpo6375hnp10XqygBgZaqE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/bgMiLEeTNbzwpc1k6dzLrZiynds.roa Signing time: Mon 22 Dec 2025 15:20:29 +0000 ROA not before: Mon 22 Dec 2025 15:20:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 397477 IP address blocks: 91.200.138.0/23 maxlen: 23 193.33.236.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/Vxy1HLpo6375hnp10XqygBgZaqE.crl rsync://rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/Vxy1HLpo6375hnp10XqygBgZaqE.mft rsync://rpki.ripe.net/repository/DEFAULT/Vxy1HLpo6375hnp10XqygBgZaqE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 18:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:46:a5:cd:56:da:62:e2:22:c2:fc:43:e9:3b:77:12:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=571cb51cba68eb7ef9867a75d17ab28018196aa1 Validity Not Before: Dec 22 15:20:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=6e03222c479335bcf0a5cd64e9dccbad98b29ddb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:36:58:1e:da:bd:e2:3e:b3:19:ab:0a:8e:55: d1:50:a8:13:eb:ab:2e:2f:3b:b9:1e:d6:bd:a9:3f: 3b:49:b8:02:e9:68:7d:97:e7:80:a0:47:3d:e2:19: ea:3e:98:13:c1:3e:0f:46:5f:10:1b:46:8c:73:9f: b0:49:ca:83:ac:a6:c9:a0:d2:5f:a1:d3:78:09:76: 14:0f:c0:a3:64:d1:82:43:fe:06:99:b9:53:9b:8a: a4:1e:f9:ed:17:56:5d:2d:15:29:f4:cd:a2:77:c8: 63:65:f4:b7:58:67:de:f4:41:ec:05:49:f3:7d:e1: b6:a2:d1:cd:7c:ea:c5:2e:aa:d2:7c:c2:6d:c7:54: bf:94:85:3e:23:73:9d:c8:07:73:31:7a:51:da:58: 04:c3:61:63:78:62:b5:28:80:0e:51:f1:33:3d:49: bd:13:7c:b1:05:67:67:eb:67:ae:00:44:c0:bf:66: 9b:12:c6:64:1a:ce:9a:fe:7c:7e:9d:a0:ed:1b:35: d5:8f:86:67:74:9c:9d:74:37:1e:84:80:67:31:31: 92:6d:92:60:20:20:c2:e2:e5:31:1d:22:12:ff:fb: 06:58:f1:56:86:c5:83:7d:38:70:71:21:54:b8:a7: 3a:10:fe:c0:6c:00:b8:f2:25:9a:97:9c:50:61:12: 62:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:03:22:2C:47:93:35:BC:F0:A5:CD:64:E9:DC:CB:AD:98:B2:9D:DB X509v3 Authority Key Identifier: keyid:57:1C:B5:1C:BA:68:EB:7E:F9:86:7A:75:D1:7A:B2:80:18:19:6A:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vxy1HLpo6375hnp10XqygBgZaqE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/bgMiLEeTNbzwpc1k6dzLrZiynds.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/Vxy1HLpo6375hnp10XqygBgZaqE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.200.138.0/23 193.33.236.0/23 Signature Algorithm: sha256WithRSAEncryption 86:5b:c2:1c:00:cd:8c:af:6e:32:9f:53:63:a1:50:61:9d:a3: f6:62:9c:e3:db:8f:3d:04:33:b5:9c:1e:15:62:23:3d:80:57: 0c:06:9e:9d:58:84:9c:7f:b2:4a:f0:bb:a8:09:ec:97:7d:81: b7:1b:65:d8:68:f1:0c:42:fc:1d:8b:88:52:55:d3:19:ab:33: a1:60:68:f7:ff:21:20:bc:3c:33:b5:d0:bf:de:24:00:ca:04: 40:dd:5d:6f:0a:a9:6e:da:3d:bb:97:85:25:92:60:3e:c9:53: 6d:25:15:89:69:5b:60:f3:6a:10:7d:2c:26:43:0f:72:3b:a5: 1b:e2:85:3f:4b:5c:87:4b:3c:42:81:47:9e:f4:94:10:18:96: 8f:f2:76:c1:d7:79:49:5f:71:87:59:91:17:34:8f:0c:3e:46: 13:f5:0c:2e:cd:1f:8e:94:cc:eb:4d:7f:74:a5:4f:0c:66:ab: 07:cb:9c:4b:0b:71:81:c9:71:ea:d0:23:5e:72:69:6a:29:29: f9:eb:c2:df:af:04:cc:55:88:a5:0e:4d:03:fb:c9:47:53:21: 85:08:15:60:83:84:8e:57:36:3f:ee:46:21:52:19:fc:f6:c4: a1:cb:b4:34:9b:29:9b:d1:de:61:98:72:29:a1:bf:52:ec:6c: f0:b2:98:45 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZtGpc1W2mLiIsL8Q+k7dxLeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3MWNiNTFjYmE2OGViN2VmOTg2N2E3NWQxN2FiMjgwMTgx OTZhYTEwHhcNMjUxMjIyMTUyMDI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZTAzMjIyYzQ3OTMzNWJjZjBhNWNkNjRlOWRjY2JhZDk4YjI5ZGRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvjZYHtq94j6zGasKjlXRUKgT66su Lzu5Hta9qT87SbgC6Wh9l+eAoEc94hnqPpgTwT4PRl8QG0aMc5+wScqDrKbJoNJf odN4CXYUD8CjZNGCQ/4GmblTm4qkHvntF1ZdLRUp9M2id8hjZfS3WGfe9EHsBUnz feG2otHNfOrFLqrSfMJtx1S/lIU+I3OdyAdzMXpR2lgEw2FjeGK1KIAOUfEzPUm9 E3yxBWdn62euAETAv2abEsZkGs6a/nx+naDtGzXVj4ZndJyddDcehIBnMTGSbZJg ICDC4uUxHSIS//sGWPFWhsWDfThwcSFUuKc6EP7AbAC48iWal5xQYRJi8wIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFG4DIixHkzW88KXNZOncy62Ysp3bMB8GA1UdIwQY MBaAFFcctRy6aOt++YZ6ddF6soAYGWqhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVnh5MUhMcG82Mzc1aG5wMTBYcXlnQmdaYXFFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9iOGQyYTgtNTNhOS00MmMwLWI3Yzkt ZGQ4NjI3NzRhMDkyLzEvYmdNaUxFZVROYnp3cGMxazZkekxyWml5bmRzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi9iOGQyYTgtNTNhOS00MmMwLWI3YzktZGQ4NjI3NzRhMDky LzEvVnh5MUhMcG82Mzc1aG5wMTBYcXlnQmdaYXFFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBW8iKAwQB wSHsMA0GCSqGSIb3DQEBCwUAA4IBAQCGW8IcAM2Mr24yn1NjoVBhnaP2Ypzj2489 BDO1nB4VYiM9gFcMBp6dWIScf7JK8LuoCeyXfYG3G2XYaPEMQvwdi4hSVdMZqzOh YGj3/yEgvDwztdC/3iQAygRA3V1vCqlu2j27l4UlkmA+yVNtJRWJaVtg82oQfSwm Qw9yO6Ub4oU/S1yHSzxCgUee9JQQGJaP8nbB13lJX3GHWZEXNI8MPkYT9QwuzR+O lMzrTX90pU8MZqsHy5xLC3GByXHq0CNecmlqKSn568LfrwTMVYilDk0D+8lHUyGF CBVgg4SOVzY/7kYhUhn89sShy7Q0mymb0d5hmHIpob9S7GzwsphF -----END CERTIFICATE-----Generated at Tue Dec 30 04:04:44 2025 by rpki-client