This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/bGo8B3HjB0Y023OcW5fRlG_uT9Y.roa File: bGo8B3HjB0Y023OcW5fRlG_uT9Y.roa (raw, json) Hash identifier: UdQy2Wj16CELU3y3TrlLvDGdMrhUYlKsrjWVzwh8qlM= Subject key identifier: 6C:6A:3C:07:71:E3:07:46:34:DB:73:9C:5B:97:D1:94:6F:EE:4F:D6 Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09 Certificate serial: 019B7EA775633105BAE2BE4EC9C8C65274B2 Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/bGo8B3HjB0Y023OcW5fRlG_uT9Y.roa Signing time: Fri 02 Jan 2026 12:21:02 +0000 ROA not before: Fri 02 Jan 2026 12:21:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42548 IP address blocks: 62.183.76.0/22 maxlen: 22 83.239.112.0/20 maxlen: 20 83.239.123.0/24 maxlen: 24 85.172.182.0/24 maxlen: 24 85.172.184.0/21 maxlen: 21 85.173.160.0/22 maxlen: 22 85.173.165.0/24 maxlen: 24 85.173.166.0/24 maxlen: 24 85.173.169.0/24 maxlen: 24 85.173.170.0/23 maxlen: 23 85.173.172.0/23 maxlen: 23 85.173.174.0/24 maxlen: 24 85.173.177.0/24 maxlen: 24 85.173.180.0/22 maxlen: 22 85.173.188.0/23 maxlen: 23 178.34.224.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.mft rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 00:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:75:63:31:05:ba:e2:be:4e:c9:c8:c6:52:74:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09 Validity Not Before: Jan 2 12:21:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6c6a3c0771e3074634db739c5b97d1946fee4fd6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:5f:43:38:3d:f0:f4:3c:fd:ea:6f:7a:80:02: ba:a3:f3:3b:c0:b7:b0:cd:07:17:9b:6e:65:d2:11: 18:54:86:43:0d:f1:1e:3f:10:6d:2e:d0:60:58:41: c6:81:e2:ce:ec:11:76:30:ae:3f:11:49:49:01:16: 33:fd:61:79:49:ea:ba:76:c7:44:f6:17:4d:36:53: 25:b6:f9:50:b6:29:d3:5c:7a:7e:de:4a:9b:06:73: be:ec:bb:08:ce:a7:f0:ab:95:77:d7:c5:66:de:55: 54:f8:0b:bb:03:8c:9c:de:e8:0d:4b:1b:a2:8e:c8: 89:ee:ca:3b:d1:52:5e:06:07:7f:1d:7d:5c:65:f4: 0d:42:f7:6d:83:f8:5a:7e:01:50:c8:18:28:a8:43: cf:01:37:e6:9c:b9:62:15:83:89:29:00:ae:7c:89: a4:52:db:3a:d2:fc:73:85:01:3e:83:82:f1:17:e0: 2e:44:24:0f:5b:4f:06:05:2f:b1:48:10:53:d8:5f: 5e:94:81:7f:31:30:c2:f1:56:3a:b9:46:06:ba:4e: a8:ec:f8:22:58:a4:6d:2a:44:24:d4:44:05:2e:f3: 4c:d1:f2:59:05:2e:35:f5:4a:64:93:65:3b:69:c0: b5:49:d2:26:97:9b:b7:57:d4:06:12:be:83:7b:34: 4d:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:6A:3C:07:71:E3:07:46:34:DB:73:9C:5B:97:D1:94:6F:EE:4F:D6 X509v3 Authority Key Identifier: keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/bGo8B3HjB0Y023OcW5fRlG_uT9Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.183.76.0/22 83.239.112.0/20 85.172.182.0/24 85.172.184.0/21 85.173.160.0/22 85.173.165.0-85.173.166.255 85.173.169.0-85.173.174.255 85.173.177.0/24 85.173.180.0/22 85.173.188.0/23 178.34.224.0/19 Signature Algorithm: sha256WithRSAEncryption 62:88:a0:56:dd:1b:3f:10:78:0a:dd:70:11:c8:6e:9e:55:9d: 4b:91:5f:49:1d:12:9f:cb:fc:ab:a7:95:50:e4:e7:8e:dd:2c: e2:c2:6d:af:46:25:81:c4:80:80:5e:a1:ef:4c:17:2b:4e:dd: da:92:3f:40:11:36:cb:f8:25:3e:98:b5:9f:cf:e7:96:c1:88: d2:99:17:a1:1f:fd:f6:5d:54:ed:d3:fe:9b:ee:ec:99:c2:4d: 0e:1e:f3:8f:7c:15:fb:55:c4:c5:0f:8d:96:c9:70:d8:07:e0: a4:24:c1:87:fc:69:1d:03:23:76:e6:9a:d8:04:a9:c8:b1:da: 11:0d:23:d8:c9:c5:24:52:b1:03:16:45:1a:15:12:42:61:b5: 5b:61:60:2b:a4:3b:3d:71:a7:53:db:61:dd:b7:34:93:6d:33: 51:a3:1a:70:58:bd:70:e0:fa:af:05:88:59:a2:a0:73:4f:ab: 02:94:96:05:82:12:37:2b:ba:6a:3f:d6:e0:f6:db:ba:94:70: a2:44:10:0b:77:14:01:9e:61:a2:9b:57:6b:9d:9f:28:ff:c3: 54:38:72:62:4f:48:70:77:e8:5f:c5:a1:38:cc:b9:ae:26:a9: a9:75:71:fd:8d:18:73:6a:a0:15:97:81:87:10:ce:0c:70:ea: 0b:0b:e8:e2 -----BEGIN CERTIFICATE----- MIIFSTCCBDGgAwIBAgISAZt+p3VjMQW64r5OycjGUnSyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlZTUzMWI5YWMyOTkwZDY5YThhNWMzMDIzZTcyZTZkODQx ZTZjMDkwHhcNMjYwMTAyMTIyMTAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YzZhM2MwNzcxZTMwNzQ2MzRkYjczOWM1Yjk3ZDE5NDZmZWU0ZmQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr19DOD3w9Dz96m96gAK6o/M7wLew zQcXm25l0hEYVIZDDfEePxBtLtBgWEHGgeLO7BF2MK4/EUlJARYz/WF5Seq6dsdE 9hdNNlMltvlQtinTXHp+3kqbBnO+7LsIzqfwq5V318Vm3lVU+Au7A4yc3ugNSxui jsiJ7so70VJeBgd/HX1cZfQNQvdtg/hafgFQyBgoqEPPATfmnLliFYOJKQCufImk Uts60vxzhQE+g4LxF+AuRCQPW08GBS+xSBBT2F9elIF/MTDC8VY6uUYGuk6o7Pgi WKRtKkQk1EQFLvNM0fJZBS419Upkk2U7acC1SdIml5u3V9QGEr6DezRNfQIDAQAB o4ICVTCCAlEwHQYDVR0OBBYEFGxqPAdx4wdGNNtznFuX0ZRv7k/WMB8GA1UdIwQY MBaAFF7lMbmsKZDWmopcMCPnLm2EHmwJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHVVeHVhd3BrTmFhaWx3d0ktY3ViWVFlYkFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC85YTFkNDQtODYwOS00ZTVlLWJhOTQt NWE4NmMyNzU3YzFlLzEvYkdvOEIzSGpCMFkwMjNPY1c1ZlJsR191VDlZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC85YTFkNDQtODYwOS00ZTVlLWJhOTQtNWE4NmMyNzU3YzFl LzEvWHVVeHVhd3BrTmFhaWx3d0ktY3ViWVFlYkFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGsGCCsGAQUFBwEHAQH/BFwwWjBYBAIAATBSAwQCPrdMAwQE U+9wAwQAVay2AwQDVay4AwQCVa2gMAwDBABVraUDBABVraYwDAMEAFWtqQMEAFWt rgMEAFWtsQMEAlWttAMEAVWtvAMEBbIi4DANBgkqhkiG9w0BAQsFAAOCAQEAYoig Vt0bPxB4Ct1wEchunlWdS5FfSR0Sn8v8q6eVUOTnjt0s4sJtr0YlgcSAgF6h70wX K07d2pI/QBE2y/glPpi1n8/nlsGI0pkXoR/99l1U7dP+m+7smcJNDh7zj3wV+1XE xQ+Nlslw2AfgpCTBh/xpHQMjduaa2ASpyLHaEQ0j2MnFJFKxAxZFGhUSQmG1W2Fg K6Q7PXGnU9th3bc0k20zUaMacFi9cOD6rwWIWaKgc0+rApSWBYISNyu6aj/W4Pbb upRwokQQC3cUAZ5hoptXa52fKP/DVDhyYk9IcHfoX8WhOMy5riapqXVx/Y0Yc2qg FZeBhxDODHDqCwvo4g== -----END CERTIFICATE-----Generated at Mon Jan 26 10:15:01 2026 by rpki-client