This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/c800c9-51b5-4589-9260-063fcdd3a057/1/BBgeRSvbUJdniHYX4zOgCcL8ACY.roa File: BBgeRSvbUJdniHYX4zOgCcL8ACY.roa (raw, json) Hash identifier: PLe5zqvpsl1axyHkG+6mNC+e0kIU1k+pLvAFxSmrAmU= Subject key identifier: 04:18:1E:45:2B:DB:50:97:67:88:76:17:E3:33:A0:09:C2:FC:00:26 Certificate issuer: /CN=7c3c39d1899e699bf5177418ee381489edff4380 Certificate serial: 019B77593860F55AA7B0BD181C0A404FF516 Authority key identifier: 7C:3C:39:D1:89:9E:69:9B:F5:17:74:18:EE:38:14:89:ED:FF:43:80 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fDw50YmeaZv1F3QY7jgUie3_Q4A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/c800c9-51b5-4589-9260-063fcdd3a057/1/BBgeRSvbUJdniHYX4zOgCcL8ACY.roa Signing time: Thu 01 Jan 2026 02:18:14 +0000 ROA not before: Thu 01 Jan 2026 02:18:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43915 IP address blocks: 31.210.27.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/c800c9-51b5-4589-9260-063fcdd3a057/1/fDw50YmeaZv1F3QY7jgUie3_Q4A.crl rsync://rpki.ripe.net/repository/DEFAULT/36/c800c9-51b5-4589-9260-063fcdd3a057/1/fDw50YmeaZv1F3QY7jgUie3_Q4A.mft rsync://rpki.ripe.net/repository/DEFAULT/fDw50YmeaZv1F3QY7jgUie3_Q4A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:38:60:f5:5a:a7:b0:bd:18:1c:0a:40:4f:f5:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c3c39d1899e699bf5177418ee381489edff4380 Validity Not Before: Jan 1 02:18:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=04181e452bdb509767887617e333a009c2fc0026 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:f6:ac:0f:54:2d:84:3d:9a:42:5b:92:4a:1b: 4e:f7:e9:26:24:eb:af:f1:85:bf:6d:5e:d8:4f:11: ef:5d:ec:7b:6a:e8:d5:50:df:9d:f5:a2:da:61:6b: fc:b5:67:8b:0b:f1:42:49:92:39:06:8b:4f:63:f4: 8c:12:07:d0:35:86:44:48:c0:31:a7:b4:78:bd:ba: 51:77:5c:89:d9:85:66:9f:41:97:eb:73:2b:09:18: 60:6c:78:59:5d:18:b9:ff:f7:47:67:ee:d8:b7:8f: 8f:f2:ee:60:c6:45:08:ef:f4:7f:b6:5e:f0:8f:5e: 5e:35:98:45:77:4d:e3:a9:c8:73:f2:94:a1:08:9d: 81:0f:de:f0:3d:05:ca:23:15:10:6e:c3:66:fc:75: a1:b5:93:11:66:15:46:b6:0b:36:04:0b:7e:65:f4: aa:26:a8:3a:ed:72:65:43:b7:d1:60:d3:78:0e:9e: b8:74:d9:f6:ea:c3:65:47:d4:e8:96:ca:f9:3c:24: 34:fc:86:b1:83:c3:a4:6c:c1:a1:8d:05:39:3d:7b: d0:5e:41:92:9b:0b:43:76:9a:f1:de:92:48:12:ea: 06:bb:fe:5d:4c:ab:48:90:63:a5:21:6a:70:9c:ed: 27:c8:b7:47:9c:af:50:7c:d9:57:68:7a:f7:0f:96: b6:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:18:1E:45:2B:DB:50:97:67:88:76:17:E3:33:A0:09:C2:FC:00:26 X509v3 Authority Key Identifier: keyid:7C:3C:39:D1:89:9E:69:9B:F5:17:74:18:EE:38:14:89:ED:FF:43:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fDw50YmeaZv1F3QY7jgUie3_Q4A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/c800c9-51b5-4589-9260-063fcdd3a057/1/BBgeRSvbUJdniHYX4zOgCcL8ACY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/c800c9-51b5-4589-9260-063fcdd3a057/1/fDw50YmeaZv1F3QY7jgUie3_Q4A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.210.27.0/24 Signature Algorithm: sha256WithRSAEncryption 59:42:f0:bf:0f:47:bd:4a:f8:e0:7a:57:9e:03:8c:2f:5a:34: 69:2f:7d:a4:29:38:9c:11:91:38:3b:dd:a4:0b:e9:3d:70:fc: 5d:2d:e1:ce:d0:be:21:86:b5:2c:0a:58:56:e9:64:81:a6:ae: 49:d8:40:61:11:46:5d:8e:91:3e:4a:cd:e3:3a:26:32:10:3c: 32:64:c3:9a:ea:13:cf:c9:9c:c2:eb:1e:68:2f:85:e1:62:8a: 8c:d4:a2:e8:3f:11:b9:ac:55:74:fc:3d:eb:46:ba:e3:e5:cb: 49:ef:a1:d1:19:65:81:ff:5e:a7:1d:17:79:9d:8e:67:7a:98: 8e:62:7e:8a:e6:ef:ea:03:75:c4:49:d5:fa:8f:4d:3e:be:6f: 78:23:96:f9:f3:63:d0:c6:8d:8b:16:e5:2e:c9:38:68:bb:14: 06:81:2a:18:6c:1c:2b:c1:8c:ed:88:9e:ee:87:0a:b1:2a:d4: 38:a2:08:16:dd:38:d8:6e:8f:8a:cc:44:cb:db:72:50:1c:4e: 26:af:bd:03:f4:39:ca:86:82:7b:97:ba:4b:fb:01:48:53:23: 71:95:47:00:8c:3c:e3:45:87:ab:f1:85:fe:17:2b:33:9f:01: 34:07:8e:9b:5a:c7:31:bf:d3:ff:74:8a:af:3a:e1:6b:d3:3a: fa:72:18:1f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WThg9VqnsL0YHApAT/UWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjM2MzOWQxODk5ZTY5OWJmNTE3NzQxOGVlMzgxNDg5ZWRm ZjQzODAwHhcNMjYwMTAxMDIxODE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNDE4MWU0NTJiZGI1MDk3Njc4ODc2MTdlMzMzYTAwOWMyZmMwMDI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsvasD1QthD2aQluSShtO9+kmJOuv 8YW/bV7YTxHvXex7aujVUN+d9aLaYWv8tWeLC/FCSZI5BotPY/SMEgfQNYZESMAx p7R4vbpRd1yJ2YVmn0GX63MrCRhgbHhZXRi5//dHZ+7Yt4+P8u5gxkUI7/R/tl7w j15eNZhFd03jqchz8pShCJ2BD97wPQXKIxUQbsNm/HWhtZMRZhVGtgs2BAt+ZfSq Jqg67XJlQ7fRYNN4Dp64dNn26sNlR9Tolsr5PCQ0/Iaxg8OkbMGhjQU5PXvQXkGS mwtDdprx3pJIEuoGu/5dTKtIkGOlIWpwnO0nyLdHnK9QfNlXaHr3D5a2JwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAQYHkUr21CXZ4h2F+MzoAnC/AAmMB8GA1UdIwQY MBaAFHw8OdGJnmmb9Rd0GO44FInt/0OAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZkR3NTBZbWVhWnYxRjNRWTdqZ1VpZTNfUTRBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9jODAwYzktNTFiNS00NTg5LTkyNjAt MDYzZmNkZDNhMDU3LzEvQkJnZVJTdmJVSmRuaUhZWDR6T2dDY0w4QUNZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9jODAwYzktNTFiNS00NTg5LTkyNjAtMDYzZmNkZDNhMDU3 LzEvZkR3NTBZbWVhWnYxRjNRWTdqZ1VpZTNfUTRBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAH9IbMA0G CSqGSIb3DQEBCwUAA4IBAQBZQvC/D0e9SvjgeleeA4wvWjRpL32kKTicEZE4O92k C+k9cPxdLeHO0L4hhrUsClhW6WSBpq5J2EBhEUZdjpE+Ss3jOiYyEDwyZMOa6hPP yZzC6x5oL4XhYoqM1KLoPxG5rFV0/D3rRrrj5ctJ76HRGWWB/16nHRd5nY5nepiO Yn6K5u/qA3XESdX6j00+vm94I5b582PQxo2LFuUuyThouxQGgSoYbBwrwYztiJ7u hwqxKtQ4oggW3TjYbo+KzETL23JQHE4mr70D9DnKhoJ7l7pL+wFIUyNxlUcAjDzj RYer8YX+FysznwE0B46bWscxv9P/dIqvOuFr0zr6chgf -----END CERTIFICATE-----Generated at Sun Jan 25 14:21:19 2026 by rpki-client