This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/bc15ec-6b0d-4734-a088-d00526b91605/1/bhGF4U1uOTR_d637z55lpBNamlM.roa File: bhGF4U1uOTR_d637z55lpBNamlM.roa (raw, json) Hash identifier: IKmQahA4tp55y4ynk0Z+qjyDHvn9Skrfi+yfx+Eq1uw= Subject key identifier: 6E:11:85:E1:4D:6E:39:34:7F:77:AD:FB:CF:9E:65:A4:13:5A:9A:53 Certificate issuer: /CN=25a89539520004270d34253bdc16d87784156e1a Certificate serial: 019B7D5CCA31A12A16AF000F303BB147C3D3 Authority key identifier: 25:A8:95:39:52:00:04:27:0D:34:25:3B:DC:16:D8:77:84:15:6E:1A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JaiVOVIABCcNNCU73BbYd4QVbho.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/bc15ec-6b0d-4734-a088-d00526b91605/1/bhGF4U1uOTR_d637z55lpBNamlM.roa Signing time: Fri 02 Jan 2026 06:19:51 +0000 ROA not before: Fri 02 Jan 2026 06:19:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62336 IP address blocks: 212.48.116.64/26 maxlen: 26 212.53.216.0/22 maxlen: 22 212.53.224.0/20 maxlen: 20 212.53.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/bc15ec-6b0d-4734-a088-d00526b91605/1/JaiVOVIABCcNNCU73BbYd4QVbho.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/bc15ec-6b0d-4734-a088-d00526b91605/1/JaiVOVIABCcNNCU73BbYd4QVbho.mft rsync://rpki.ripe.net/repository/DEFAULT/JaiVOVIABCcNNCU73BbYd4QVbho.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:ca:31:a1:2a:16:af:00:0f:30:3b:b1:47:c3:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25a89539520004270d34253bdc16d87784156e1a Validity Not Before: Jan 2 06:19:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6e1185e14d6e39347f77adfbcf9e65a4135a9a53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:8c:64:e1:10:1f:4a:66:91:8a:ce:69:cf:96: 74:46:5d:6a:32:65:2b:60:28:c3:48:ef:d5:78:37: 41:39:16:a2:30:1e:a1:5f:13:5f:c3:41:d2:a5:77: b1:8c:0a:6d:62:3d:bd:48:cc:74:ca:1a:d2:9f:12: 68:47:7c:50:0c:19:86:a8:05:14:c1:c4:18:30:d9: 43:4a:d5:d2:61:cd:0c:56:1b:55:99:b7:4c:d5:b6: ce:88:89:83:db:fe:be:bc:09:2c:2c:9d:61:65:ce: 85:5c:d3:7d:d5:0c:db:27:9e:54:66:b4:7d:a0:bf: 3d:ef:ed:89:06:ac:99:d7:8b:8d:cd:e8:00:2d:b4: 20:f0:e6:88:e5:34:72:ff:6b:b5:73:61:29:da:6b: 4f:05:f5:80:d2:9a:37:f0:d9:47:81:fb:ab:89:4f: 0d:f4:d2:d7:64:82:67:fa:28:af:53:e3:f6:1b:0a: b6:c9:3a:d0:de:27:5c:f3:cb:c7:b4:89:42:ac:f0: cb:de:05:38:97:52:70:d8:bc:be:cd:b1:ff:56:58: 88:91:b3:4d:9d:d1:ab:6f:bf:93:0e:97:59:82:c8: 83:7d:4e:f2:72:c1:25:3b:0b:7c:47:1b:a7:d3:e3: 31:d4:9b:0e:9d:13:63:63:2c:74:07:a4:24:ea:38: 86:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:11:85:E1:4D:6E:39:34:7F:77:AD:FB:CF:9E:65:A4:13:5A:9A:53 X509v3 Authority Key Identifier: keyid:25:A8:95:39:52:00:04:27:0D:34:25:3B:DC:16:D8:77:84:15:6E:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JaiVOVIABCcNNCU73BbYd4QVbho.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/bc15ec-6b0d-4734-a088-d00526b91605/1/bhGF4U1uOTR_d637z55lpBNamlM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/bc15ec-6b0d-4734-a088-d00526b91605/1/JaiVOVIABCcNNCU73BbYd4QVbho.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.48.116.64/26 212.53.216.0/22 212.53.224.0/19 Signature Algorithm: sha256WithRSAEncryption 65:31:89:91:e1:81:25:9c:38:5c:aa:1b:73:4e:4a:da:d8:ae: a7:8d:fb:df:30:8a:1d:99:c0:de:38:18:ab:4b:70:0d:97:02: e3:06:88:a9:c4:cd:20:31:3b:4c:14:c3:87:bd:2f:b1:78:fd: ba:16:18:e0:c4:54:06:e2:b1:c1:3b:e0:bc:f3:f8:72:7f:80: ac:78:13:96:64:cf:f3:3f:96:df:58:f6:59:0b:22:6d:00:d8: 97:bd:49:75:e3:4d:45:e7:67:b7:1c:55:57:71:6f:b5:8d:c0: 6c:7d:82:06:0f:56:b7:42:29:ec:78:ea:f3:16:2c:2a:b4:8c: 07:b1:ae:1c:d0:5d:06:5b:5a:89:e4:06:04:ee:d4:fd:e1:b9: 7e:c3:a5:4e:13:ce:25:06:1e:43:55:2a:d4:ae:fc:33:39:83: 5d:26:a2:b3:71:47:a1:c9:17:d7:e4:ee:0a:ba:7f:95:91:ea: b2:7c:d6:04:7b:05:5d:f8:26:f4:d9:3c:1f:fd:bf:ad:ac:29: a4:4d:57:eb:04:6e:6f:a3:4f:d7:39:08:7c:53:1d:a1:03:8c: c7:2a:9a:e5:0d:a0:e4:09:1b:8c:bb:e5:dc:13:05:1e:35:1c: ab:42:ad:a7:32:96:18:58:d8:a8:d2:5f:ea:f6:41:6d:67:35: fe:62:6a:07 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgISAZt9XMoxoSoWrwAPMDuxR8PTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1YTg5NTM5NTIwMDA0MjcwZDM0MjUzYmRjMTZkODc3ODQx NTZlMWEwHhcNMjYwMTAyMDYxOTUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZTExODVlMTRkNmUzOTM0N2Y3N2FkZmJjZjllNjVhNDEzNWE5YTUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA04xk4RAfSmaRis5pz5Z0Rl1qMmUr YCjDSO/VeDdBORaiMB6hXxNfw0HSpXexjAptYj29SMx0yhrSnxJoR3xQDBmGqAUU wcQYMNlDStXSYc0MVhtVmbdM1bbOiImD2/6+vAksLJ1hZc6FXNN91QzbJ55UZrR9 oL897+2JBqyZ14uNzegALbQg8OaI5TRy/2u1c2Ep2mtPBfWA0po38NlHgfuriU8N 9NLXZIJn+iivU+P2Gwq2yTrQ3idc88vHtIlCrPDL3gU4l1Jw2Ly+zbH/VliIkbNN ndGrb7+TDpdZgsiDfU7ycsElOwt8Rxun0+Mx1JsOnRNjYyx0B6Qk6jiG5QIDAQAB o4ICFjCCAhIwHQYDVR0OBBYEFG4RheFNbjk0f3et+8+eZaQTWppTMB8GA1UdIwQY MBaAFCWolTlSAAQnDTQlO9wW2HeEFW4aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSmFpVk9WSUFCQ2NOTkNVNzNCYllkNFFWYmhvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS9iYzE1ZWMtNmIwZC00NzM0LWEwODgt ZDAwNTI2YjkxNjA1LzEvYmhHRjRVMXVPVFJfZDYzN3o1NWxwQk5hbWxNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS9iYzE1ZWMtNmIwZC00NzM0LWEwODgtZDAwNTI2YjkxNjA1 LzEvSmFpVk9WSUFCQ2NOTkNVNzNCYllkNFFWYmhvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAATATAwUG1DB0QAME AtQ12AMEBdQ14DANBgkqhkiG9w0BAQsFAAOCAQEAZTGJkeGBJZw4XKobc05K2tiu p4373zCKHZnA3jgYq0twDZcC4waIqcTNIDE7TBTDh70vsXj9uhYY4MRUBuKxwTvg vPP4cn+ArHgTlmTP8z+W31j2WQsibQDYl71JdeNNRedntxxVV3FvtY3AbH2CBg9W t0Ip7Hjq8xYsKrSMB7GuHNBdBltaieQGBO7U/eG5fsOlThPOJQYeQ1Uq1K78MzmD XSais3FHockX1+TuCrp/lZHqsnzWBHsFXfgm9Nk8H/2/rawppE1X6wRub6NP1zkI fFMdoQOMxyqa5Q2g5AkbjLvl3BMFHjUcq0KtpzKWGFjYqNJf6vZBbWc1/mJqBw== -----END CERTIFICATE-----Generated at Mon Jan 26 19:34:28 2026 by rpki-client