This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/767d6d-36c8-403b-81b0-b4aaa23fdaa9/1/BCOBN8DqixOn7YBQJAuR5IVl3Tk.roa File: BCOBN8DqixOn7YBQJAuR5IVl3Tk.roa (raw, json) Hash identifier: 9eQOj920J0RKfKOBG+x3ZwJkzFsoj5C4wlDIoVBASe0= Subject key identifier: 04:23:81:37:C0:EA:8B:13:A7:ED:80:50:24:0B:91:E4:85:65:DD:39 Certificate issuer: /CN=9a5e76f929d21b586f42e30f7d9b00399b3dcbf0 Certificate serial: 019B7D5D06C9ADD221CEF71A2E12F9AADC93 Authority key identifier: 9A:5E:76:F9:29:D2:1B:58:6F:42:E3:0F:7D:9B:00:39:9B:3D:CB:F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ml52-SnSG1hvQuMPfZsAOZs9y_A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/767d6d-36c8-403b-81b0-b4aaa23fdaa9/1/BCOBN8DqixOn7YBQJAuR5IVl3Tk.roa Signing time: Fri 02 Jan 2026 06:20:07 +0000 ROA not before: Fri 02 Jan 2026 06:20:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199856 IP address blocks: 195.88.70.0/24 maxlen: 24 2a13:c300::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/767d6d-36c8-403b-81b0-b4aaa23fdaa9/1/ml52-SnSG1hvQuMPfZsAOZs9y_A.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/767d6d-36c8-403b-81b0-b4aaa23fdaa9/1/ml52-SnSG1hvQuMPfZsAOZs9y_A.mft rsync://rpki.ripe.net/repository/DEFAULT/ml52-SnSG1hvQuMPfZsAOZs9y_A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 15:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:06:c9:ad:d2:21:ce:f7:1a:2e:12:f9:aa:dc:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a5e76f929d21b586f42e30f7d9b00399b3dcbf0 Validity Not Before: Jan 2 06:20:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=04238137c0ea8b13a7ed8050240b91e48565dd39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:07:61:1c:cd:59:8e:8d:48:ff:06:5a:30:46: ff:8e:f7:90:e1:53:bc:41:d6:18:14:cd:be:b7:95: bc:ab:7f:fc:cc:dd:6e:10:4a:e0:00:98:be:71:23: c9:45:f5:6d:a2:f7:ed:5b:0e:3c:6c:f4:9c:bb:d4: 38:29:b4:4b:ad:d4:a8:7b:70:08:61:de:67:97:5e: 7a:fa:b2:89:6a:3b:34:40:3c:fd:8c:77:b0:3b:2c: 98:b5:f5:1e:72:a0:7d:6f:61:45:b5:ab:35:6a:f0: 2b:ff:67:2a:8c:65:c1:be:3b:a3:89:bd:eb:74:93: dc:aa:69:07:6b:7d:de:a1:85:f7:09:45:22:a7:35: 5c:e2:29:81:ef:09:b3:96:4b:a5:37:01:a6:28:e4: fc:98:30:70:70:3f:4d:ee:88:45:87:59:33:a5:dc: b8:cd:e3:b7:3c:8c:7d:8e:d4:c3:d3:69:0d:48:2c: cb:1c:b8:a5:97:61:91:78:b4:3b:b9:ef:32:b9:73: 5e:b7:79:bf:09:22:44:2a:38:f4:c8:ef:7b:e7:a6: 50:5c:4d:34:28:b1:87:66:5d:68:3c:5f:4e:2c:45: 1e:5f:73:2c:d0:67:07:21:26:e4:7f:d0:ed:41:ae: 6c:c1:30:38:fe:52:7f:41:b2:85:18:4b:35:62:b8: c5:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:23:81:37:C0:EA:8B:13:A7:ED:80:50:24:0B:91:E4:85:65:DD:39 X509v3 Authority Key Identifier: keyid:9A:5E:76:F9:29:D2:1B:58:6F:42:E3:0F:7D:9B:00:39:9B:3D:CB:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ml52-SnSG1hvQuMPfZsAOZs9y_A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/767d6d-36c8-403b-81b0-b4aaa23fdaa9/1/BCOBN8DqixOn7YBQJAuR5IVl3Tk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/767d6d-36c8-403b-81b0-b4aaa23fdaa9/1/ml52-SnSG1hvQuMPfZsAOZs9y_A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.88.70.0/24 IPv6: 2a13:c300::/29 Signature Algorithm: sha256WithRSAEncryption 89:ca:b8:e7:da:b6:fb:79:d4:78:c4:46:74:55:26:5b:08:d1: 69:63:52:8f:1c:03:18:1c:b7:ed:55:7c:7a:15:df:f2:e2:a8: d9:42:d1:da:b3:a8:44:ff:13:7f:0b:5b:77:01:45:63:50:54: a4:24:1e:ca:09:08:78:d2:d5:55:78:e9:ba:a5:a3:bc:ba:4f: ba:5d:c6:3d:bf:d3:a6:c9:19:32:6d:24:9a:9d:12:55:24:b4: 64:bf:6c:85:cc:ed:27:3d:8d:e5:16:c0:da:fb:39:8f:e6:05: 89:d1:fb:87:f6:d9:bb:9a:87:2a:fe:c7:81:66:cd:45:47:c1: 93:86:93:16:3e:6a:5b:97:41:95:61:20:15:61:ad:39:52:53: d8:26:8f:a3:51:7b:ac:c7:9f:6f:9f:69:34:c0:42:d7:92:c5: 08:7a:b7:c0:e0:43:5d:7a:a3:14:3b:f2:c3:3e:49:c0:98:80: 32:99:38:32:a9:8c:6b:33:24:aa:9e:8c:2a:43:35:65:df:35: 13:24:c5:88:17:93:37:e7:9e:52:dc:37:4d:2d:aa:9c:c6:ce: 14:be:d6:8b:90:e8:0f:d8:0a:c9:b7:6a:b6:ad:bd:26:aa:d9: 40:69:a3:ea:c4:6a:2d:20:f1:2d:ce:54:59:61:94:6a:ca:51: d2:14:2a:86 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt9XQbJrdIhzvcaLhL5qtyTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhNWU3NmY5MjlkMjFiNTg2ZjQyZTMwZjdkOWIwMDM5OWIz ZGNiZjAwHhcNMjYwMTAyMDYyMDA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNDIzODEzN2MwZWE4YjEzYTdlZDgwNTAyNDBiOTFlNDg1NjVkZDM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4gdhHM1Zjo1I/wZaMEb/jveQ4VO8 QdYYFM2+t5W8q3/8zN1uEErgAJi+cSPJRfVtovftWw48bPScu9Q4KbRLrdSoe3AI Yd5nl156+rKJajs0QDz9jHewOyyYtfUecqB9b2FFtas1avAr/2cqjGXBvjujib3r dJPcqmkHa33eoYX3CUUipzVc4imB7wmzlkulNwGmKOT8mDBwcD9N7ohFh1kzpdy4 zeO3PIx9jtTD02kNSCzLHLill2GReLQ7ue8yuXNet3m/CSJEKjj0yO9756ZQXE00 KLGHZl1oPF9OLEUeX3Ms0GcHISbkf9DtQa5swTA4/lJ/QbKFGEs1YrjF6QIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFAQjgTfA6osTp+2AUCQLkeSFZd05MB8GA1UdIwQY MBaAFJpedvkp0htYb0LjD32bADmbPcvwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbWw1Mi1TblNHMWh2UXVNUGZac0FPWnM5eV9BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS83NjdkNmQtMzZjOC00MDNiLTgxYjAt YjRhYWEyM2ZkYWE5LzEvQkNPQk44RHFpeE9uN1lCUUpBdVI1SVZsM1RrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS83NjdkNmQtMzZjOC00MDNiLTgxYjAtYjRhYWEyM2ZkYWE5 LzEvbWw1Mi1TblNHMWh2UXVNUGZac0FPWnM5eV9BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAw1hGMA0E AgACMAcDBQMqE8MAMA0GCSqGSIb3DQEBCwUAA4IBAQCJyrjn2rb7edR4xEZ0VSZb CNFpY1KPHAMYHLftVXx6Fd/y4qjZQtHas6hE/xN/C1t3AUVjUFSkJB7KCQh40tVV eOm6paO8uk+6XcY9v9OmyRkybSSanRJVJLRkv2yFzO0nPY3lFsDa+zmP5gWJ0fuH 9tm7mocq/seBZs1FR8GThpMWPmpbl0GVYSAVYa05UlPYJo+jUXusx59vn2k0wELX ksUIerfA4ENdeqMUO/LDPknAmIAymTgyqYxrMySqnowqQzVl3zUTJMWIF5M3555S 3DdNLaqcxs4UvtaLkOgP2ArJt2q2rb0mqtlAaaPqxGotIPEtzlRZYZRqylHSFCqG -----END CERTIFICATE-----Generated at Sat Jan 24 00:27:10 2026 by rpki-client