This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/3cc135-f166-42eb-8203-f49120bed51c/1/BJqDDKUUwP-6T-FY6LGOmkQgBFc.roa File: BJqDDKUUwP-6T-FY6LGOmkQgBFc.roa (raw, json) Hash identifier: Bg8fNp2XsW4hkEUUtvGIjHCnW3BOOuyGWwHhwTGlcFU= Subject key identifier: 04:9A:83:0C:A5:14:C0:FF:BA:4F:E1:58:E8:B1:8E:9A:44:20:04:57 Certificate issuer: /CN=345ae646ea34ad2688aca2fdd1a6f3340356495e Certificate serial: 019B78A365DB3AFF5208F375876458A40496 Authority key identifier: 34:5A:E6:46:EA:34:AD:26:88:AC:A2:FD:D1:A6:F3:34:03:56:49:5E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NFrmRuo0rSaIrKL90abzNANWSV4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/3cc135-f166-42eb-8203-f49120bed51c/1/BJqDDKUUwP-6T-FY6LGOmkQgBFc.roa Signing time: Thu 01 Jan 2026 08:18:52 +0000 ROA not before: Thu 01 Jan 2026 08:18:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50300 IP address blocks: 185.120.172.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/3cc135-f166-42eb-8203-f49120bed51c/1/NFrmRuo0rSaIrKL90abzNANWSV4.crl rsync://rpki.ripe.net/repository/DEFAULT/43/3cc135-f166-42eb-8203-f49120bed51c/1/NFrmRuo0rSaIrKL90abzNANWSV4.mft rsync://rpki.ripe.net/repository/DEFAULT/NFrmRuo0rSaIrKL90abzNANWSV4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:65:db:3a:ff:52:08:f3:75:87:64:58:a4:04:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=345ae646ea34ad2688aca2fdd1a6f3340356495e Validity Not Before: Jan 1 08:18:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=049a830ca514c0ffba4fe158e8b18e9a44200457 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:f1:74:77:28:d3:5e:49:6f:e3:6b:36:c9:27: 5e:6d:81:96:d0:f3:4e:06:be:b9:c8:97:89:0a:93: d8:b9:ff:e5:65:33:a8:c6:ff:cb:7a:0d:44:db:27: 82:f5:50:99:00:38:3f:69:60:e9:06:20:ca:49:a8: ab:ca:d0:ab:2e:05:17:f3:1e:84:56:96:ce:a6:f8: ff:e8:c7:ff:b3:4d:e8:68:d5:98:a1:53:73:a5:ae: 1d:15:76:29:d7:69:c1:bd:49:0e:8d:67:05:c8:2e: 01:6f:d4:89:75:fb:ab:5c:6e:61:05:a0:de:7c:0d: 65:a6:91:cc:c7:3f:4c:09:24:05:90:65:85:23:3e: aa:51:18:bf:51:b3:f7:cd:02:7a:34:cf:cd:3e:e5: 83:e4:d7:f6:e8:25:c6:8f:6a:04:43:5a:6f:d2:dc: 31:2a:f9:ca:2c:f7:42:9d:4c:26:00:b2:15:70:e4: ad:49:3c:d3:e6:6a:a6:d6:8c:50:e7:42:1c:c8:ae: 97:f8:88:a9:e1:dd:65:24:9e:1f:87:e5:6f:37:54: 4a:07:a1:6a:e5:eb:b0:c6:a4:4e:77:cb:51:2a:65: a2:1d:87:e7:7f:34:9c:bc:19:54:8f:1f:97:a4:38: fe:6e:8b:b9:78:11:de:af:bb:36:38:7a:2f:cd:26: 61:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:9A:83:0C:A5:14:C0:FF:BA:4F:E1:58:E8:B1:8E:9A:44:20:04:57 X509v3 Authority Key Identifier: keyid:34:5A:E6:46:EA:34:AD:26:88:AC:A2:FD:D1:A6:F3:34:03:56:49:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NFrmRuo0rSaIrKL90abzNANWSV4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/3cc135-f166-42eb-8203-f49120bed51c/1/BJqDDKUUwP-6T-FY6LGOmkQgBFc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/43/3cc135-f166-42eb-8203-f49120bed51c/1/NFrmRuo0rSaIrKL90abzNANWSV4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.120.172.0/22 Signature Algorithm: sha256WithRSAEncryption 61:58:62:67:c5:12:e7:10:23:21:20:2f:17:6b:b3:75:4a:05: c9:43:d7:78:7d:19:75:e1:72:a9:3e:87:1a:b0:60:43:e2:7a: 1c:34:cc:79:aa:39:4f:fa:e5:0d:be:31:7e:76:31:a9:4e:9b: e2:bc:c9:46:1c:f9:81:67:bc:8c:34:e3:cb:3b:ea:92:06:6a: bf:93:3f:8e:5a:f4:5f:06:3f:49:bb:f7:d9:db:ca:dc:31:db: aa:00:fd:6a:2b:a1:43:00:80:3b:f0:a4:ea:b5:45:3b:87:b8: 95:49:00:2d:66:02:22:23:04:80:05:9c:04:f0:77:64:79:07: 21:01:28:9a:ef:1e:00:a7:e3:bb:68:60:e8:cc:67:a1:ad:11: 6c:eb:60:a7:a5:65:3f:ea:69:f8:ea:19:a7:82:dd:12:ad:80: ec:03:81:58:9d:e6:e0:8b:bd:19:83:26:00:00:3e:b3:e4:5d: a1:25:1d:c8:ae:0b:36:87:28:8c:da:5d:ec:cc:22:c6:ef:74: 23:6a:7b:e4:96:54:2a:5b:49:94:3d:a5:e4:17:e6:12:83:3e: f3:12:ef:64:fd:93:ee:47:5b:34:58:9f:93:b4:9f:68:fb:7d: f3:d1:76:c1:f1:3c:28:bf:8d:89:eb:11:bc:8d:c9:f3:4b:32: 84:ca:93:d8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4o2XbOv9SCPN1h2RYpASWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0NWFlNjQ2ZWEzNGFkMjY4OGFjYTJmZGQxYTZmMzM0MDM1 NjQ5NWUwHhcNMjYwMTAxMDgxODUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNDlhODMwY2E1MTRjMGZmYmE0ZmUxNThlOGIxOGU5YTQ0MjAwNDU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy/F0dyjTXklv42s2ySdebYGW0PNO Br65yJeJCpPYuf/lZTOoxv/Leg1E2yeC9VCZADg/aWDpBiDKSairytCrLgUX8x6E VpbOpvj/6Mf/s03oaNWYoVNzpa4dFXYp12nBvUkOjWcFyC4Bb9SJdfurXG5hBaDe fA1lppHMxz9MCSQFkGWFIz6qURi/UbP3zQJ6NM/NPuWD5Nf26CXGj2oEQ1pv0twx KvnKLPdCnUwmALIVcOStSTzT5mqm1oxQ50IcyK6X+Iip4d1lJJ4fh+VvN1RKB6Fq 5euwxqROd8tRKmWiHYfnfzScvBlUjx+XpDj+bou5eBHer7s2OHovzSZh9wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFASagwylFMD/uk/hWOixjppEIARXMB8GA1UdIwQY MBaAFDRa5kbqNK0miKyi/dGm8zQDVkleMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTkZybVJ1bzByU2FJcktMOTBhYnpOQU5XU1Y0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My8zY2MxMzUtZjE2Ni00MmViLTgyMDMt ZjQ5MTIwYmVkNTFjLzEvQkpxRERLVVV3UC02VC1GWTZMR09ta1FnQkZjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80My8zY2MxMzUtZjE2Ni00MmViLTgyMDMtZjQ5MTIwYmVkNTFj LzEvTkZybVJ1bzByU2FJcktMOTBhYnpOQU5XU1Y0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuXisMA0G CSqGSIb3DQEBCwUAA4IBAQBhWGJnxRLnECMhIC8Xa7N1SgXJQ9d4fRl14XKpPoca sGBD4nocNMx5qjlP+uUNvjF+djGpTpvivMlGHPmBZ7yMNOPLO+qSBmq/kz+OWvRf Bj9Ju/fZ28rcMduqAP1qK6FDAIA78KTqtUU7h7iVSQAtZgIiIwSABZwE8HdkeQch ASia7x4Ap+O7aGDozGehrRFs62CnpWU/6mn46hmngt0SrYDsA4FYnebgi70ZgyYA AD6z5F2hJR3Irgs2hyiM2l3szCLG73QjanvkllQqW0mUPaXkF+YSgz7zEu9k/ZPu R1s0WJ+TtJ9o+33z0XbB8Twov42J6xG8jcnzSzKEypPY -----END CERTIFICATE-----Generated at Sun Jan 25 23:53:01 2026 by rpki-client