This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/d37f8d-410d-4518-80e6-ecd671282c1f/1/BNXRn2FDij45ZWewb-G1iDZxbsY.roa File: BNXRn2FDij45ZWewb-G1iDZxbsY.roa (raw, json) Hash identifier: Xb2Q90m1NuPY6mGfpPbyKSE6O8ggWXxFXViYGbYai9k= Subject key identifier: 04:D5:D1:9F:61:43:8A:3E:39:65:67:B0:6F:E1:B5:88:36:71:6E:C6 Certificate issuer: /CN=00046b434526bf2836e2749ce0e36e08443d6b91 Certificate serial: 019B79ED2AF6D6B6791524274F50E7774187 Authority key identifier: 00:04:6B:43:45:26:BF:28:36:E2:74:9C:E0:E3:6E:08:44:3D:6B:91 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AARrQ0Umvyg24nSc4ONuCEQ9a5E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/d37f8d-410d-4518-80e6-ecd671282c1f/1/BNXRn2FDij45ZWewb-G1iDZxbsY.roa Signing time: Thu 01 Jan 2026 14:19:04 +0000 ROA not before: Thu 01 Jan 2026 14:19:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50411 IP address blocks: 45.138.152.0/22 maxlen: 22 94.103.252.0/22 maxlen: 22 109.196.144.0/20 maxlen: 20 185.49.200.0/22 maxlen: 22 185.92.248.0/22 maxlen: 22 194.124.220.0/22 maxlen: 22 195.2.212.0/23 maxlen: 23 195.2.242.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/d37f8d-410d-4518-80e6-ecd671282c1f/1/AARrQ0Umvyg24nSc4ONuCEQ9a5E.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/d37f8d-410d-4518-80e6-ecd671282c1f/1/AARrQ0Umvyg24nSc4ONuCEQ9a5E.mft rsync://rpki.ripe.net/repository/DEFAULT/AARrQ0Umvyg24nSc4ONuCEQ9a5E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 09:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:2a:f6:d6:b6:79:15:24:27:4f:50:e7:77:41:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00046b434526bf2836e2749ce0e36e08443d6b91 Validity Not Before: Jan 1 14:19:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=04d5d19f61438a3e396567b06fe1b58836716ec6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:a2:5a:df:d3:7d:83:66:82:eb:9f:ef:7f:6e: cd:a1:ef:9c:f5:9b:10:c8:2f:2c:b4:e1:c0:f0:d8: f7:62:fd:96:de:c0:e0:0a:c6:97:78:c4:d8:71:82: b0:7a:f3:3c:5a:5a:e5:17:02:a4:45:ab:aa:44:10: 6c:22:c0:e9:02:d1:3d:ea:02:a4:32:a5:f0:dd:89: 89:e2:50:e4:82:14:8c:c0:ee:92:4f:ac:25:19:25: 15:82:a6:4a:c0:9c:50:45:5c:e6:73:32:a7:d8:2c: 29:d5:59:42:e6:9a:98:4b:0a:59:a5:9d:9e:53:64: 69:42:87:3d:64:3e:e2:70:fc:86:bf:17:37:a8:2c: 16:13:77:01:0c:d3:e2:86:de:d8:3f:7c:f8:9e:bb: 73:bd:e0:6e:7c:c5:0f:4b:91:33:d8:e2:0f:64:fc: cd:70:34:b8:65:fb:5c:f0:7d:c1:3e:20:5c:cb:21: cf:a4:bf:b7:06:35:cc:19:a6:f5:13:27:9b:5e:04: 4a:92:af:fd:89:88:24:f8:fc:44:a9:58:da:c3:86: 5f:86:98:f4:27:fc:80:fa:17:a1:fb:5c:74:4c:d9: de:28:ac:d3:40:f0:b1:8d:65:6a:b0:26:e4:33:81: 8c:04:a5:60:ca:d6:c6:04:0a:25:7d:dc:ad:b5:65: 46:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:D5:D1:9F:61:43:8A:3E:39:65:67:B0:6F:E1:B5:88:36:71:6E:C6 X509v3 Authority Key Identifier: keyid:00:04:6B:43:45:26:BF:28:36:E2:74:9C:E0:E3:6E:08:44:3D:6B:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AARrQ0Umvyg24nSc4ONuCEQ9a5E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/d37f8d-410d-4518-80e6-ecd671282c1f/1/BNXRn2FDij45ZWewb-G1iDZxbsY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/d37f8d-410d-4518-80e6-ecd671282c1f/1/AARrQ0Umvyg24nSc4ONuCEQ9a5E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.138.152.0/22 94.103.252.0/22 109.196.144.0/20 185.49.200.0/22 185.92.248.0/22 194.124.220.0/22 195.2.212.0/23 195.2.242.0/23 Signature Algorithm: sha256WithRSAEncryption 55:1d:2c:1a:ac:33:66:fb:97:b8:90:99:df:19:ac:e6:7a:45: a4:60:9c:98:a8:a9:cc:45:14:e1:b8:a3:68:ab:59:eb:95:5b: b8:84:47:1d:7e:e5:67:6c:da:48:07:05:c4:83:8a:a2:51:94: fb:a4:8a:10:2c:7b:35:95:05:66:7b:01:b1:24:d5:bd:09:0b: bd:7f:0e:5e:de:2f:dc:cf:83:43:b7:03:b0:a5:b8:c8:c7:52: 9d:83:fd:c6:41:b9:4c:dd:fb:0c:73:a5:bd:ad:39:f8:8d:e9: df:7c:de:53:5f:9f:82:4e:a1:62:3e:11:19:17:35:63:1a:8f: 78:9a:e9:75:67:5c:55:bc:65:0c:a2:d0:2f:e0:29:61:e2:14: f2:8a:d9:5f:a8:66:9e:0a:5d:5a:1b:a4:74:5e:fe:96:1e:19: ca:96:6e:f9:e4:d1:da:4f:d6:b5:6e:84:69:94:ee:9d:7a:bb: d3:29:10:d9:17:9b:f0:b9:88:52:2d:a6:f2:0b:ac:e5:e1:04: fd:39:37:31:bd:7c:1a:75:a9:56:f6:6e:c0:75:03:6e:7e:37: 6a:ad:f1:08:b5:8e:b8:31:bf:6a:a5:e0:09:95:40:af:25:0d: 01:da:38:7f:e1:1e:b8:9d:92:51:1e:8c:30:de:bb:f5:e9:34: 01:f5:91:56 -----BEGIN CERTIFICATE----- MIIFJzCCBA+gAwIBAgISAZt57Sr21rZ5FSQnT1Dnd0GHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwMDQ2YjQzNDUyNmJmMjgzNmUyNzQ5Y2UwZTM2ZTA4NDQz ZDZiOTEwHhcNMjYwMTAxMTQxOTA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNGQ1ZDE5ZjYxNDM4YTNlMzk2NTY3YjA2ZmUxYjU4ODM2NzE2ZWM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv6Ja39N9g2aC65/vf27Noe+c9ZsQ yC8stOHA8Nj3Yv2W3sDgCsaXeMTYcYKwevM8WlrlFwKkRauqRBBsIsDpAtE96gKk MqXw3YmJ4lDkghSMwO6ST6wlGSUVgqZKwJxQRVzmczKn2Cwp1VlC5pqYSwpZpZ2e U2RpQoc9ZD7icPyGvxc3qCwWE3cBDNPiht7YP3z4nrtzveBufMUPS5Ez2OIPZPzN cDS4Zftc8H3BPiBcyyHPpL+3BjXMGab1EyebXgRKkq/9iYgk+PxEqVjaw4Zfhpj0 J/yA+heh+1x0TNneKKzTQPCxjWVqsCbkM4GMBKVgytbGBAolfdyttWVG3wIDAQAB o4ICMzCCAi8wHQYDVR0OBBYEFATV0Z9hQ4o+OWVnsG/htYg2cW7GMB8GA1UdIwQY MBaAFAAEa0NFJr8oNuJ0nODjbghEPWuRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQUFSclEwVW12eWcyNG5TYzRPTnVDRVE5YTVFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9kMzdmOGQtNDEwZC00NTE4LTgwZTYt ZWNkNjcxMjgyYzFmLzEvQk5YUm4yRkRpajQ1Wldld2ItRzFpRFp4YnNZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS9kMzdmOGQtNDEwZC00NTE4LTgwZTYtZWNkNjcxMjgyYzFm LzEvQUFSclEwVW12eWcyNG5TYzRPTnVDRVE5YTVFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwAwQCLYqYAwQC Xmf8AwQEbcSQAwQCuTHIAwQCuVz4AwQCwnzcAwQBwwLUAwQBwwLyMA0GCSqGSIb3 DQEBCwUAA4IBAQBVHSwarDNm+5e4kJnfGazmekWkYJyYqKnMRRThuKNoq1nrlVu4 hEcdfuVnbNpIBwXEg4qiUZT7pIoQLHs1lQVmewGxJNW9CQu9fw5e3i/cz4NDtwOw pbjIx1Kdg/3GQblM3fsMc6W9rTn4jenffN5TX5+CTqFiPhEZFzVjGo94mul1Z1xV vGUMotAv4Clh4hTyitlfqGaeCl1aG6R0Xv6WHhnKlm755NHaT9a1boRplO6dervT KRDZF5vwuYhSLabyC6zl4QT9OTcxvXwadalW9m7AdQNufjdqrfEItY64Mb9qpeAJ lUCvJQ0B2jh/4R64nZJRHoww3rv16TQB9ZFW -----END CERTIFICATE-----Generated at Tue Jan 27 16:03:42 2026 by rpki-client