This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/42db52-dca7-4fa3-9a73-1d7b229d4e3b/1/bSiGlTpBW397VAR7wC-li7NX-jg.roa File: bSiGlTpBW397VAR7wC-li7NX-jg.roa (raw, json) Hash identifier: HglUCXt875tWZDRLoHCxeQZQpdgf7UP/ahcJL9mYpQY= Subject key identifier: 6D:28:86:95:3A:41:5B:7F:7B:54:04:7B:C0:2F:A5:8B:B3:57:FA:38 Certificate issuer: /CN=45aa88dc675ce5dc35574bff6290e2ae88ce082b Certificate serial: 019B7C7FCCE8268D6041C7225402BF6B78F6 Authority key identifier: 45:AA:88:DC:67:5C:E5:DC:35:57:4B:FF:62:90:E2:AE:88:CE:08:2B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RaqI3Gdc5dw1V0v_YpDirojOCCs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/42db52-dca7-4fa3-9a73-1d7b229d4e3b/1/bSiGlTpBW397VAR7wC-li7NX-jg.roa Signing time: Fri 02 Jan 2026 02:18:28 +0000 ROA not before: Fri 02 Jan 2026 02:18:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39489 IP address blocks: 87.239.176.0/21 maxlen: 24 2001:67c:2b28::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/42db52-dca7-4fa3-9a73-1d7b229d4e3b/1/RaqI3Gdc5dw1V0v_YpDirojOCCs.crl rsync://rpki.ripe.net/repository/DEFAULT/45/42db52-dca7-4fa3-9a73-1d7b229d4e3b/1/RaqI3Gdc5dw1V0v_YpDirojOCCs.mft rsync://rpki.ripe.net/repository/DEFAULT/RaqI3Gdc5dw1V0v_YpDirojOCCs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:cc:e8:26:8d:60:41:c7:22:54:02:bf:6b:78:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45aa88dc675ce5dc35574bff6290e2ae88ce082b Validity Not Before: Jan 2 02:18:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6d2886953a415b7f7b54047bc02fa58bb357fa38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:8b:a8:df:ef:f9:76:21:1d:84:4d:b1:14:97: 57:56:0f:c0:9c:e5:0d:3d:29:28:70:52:d2:b6:bf: e8:5f:e6:62:b3:76:fa:6e:c7:d5:81:49:7c:6e:b9: 49:5d:63:28:d9:92:71:da:df:51:b2:fc:7e:3a:b9: 19:dc:86:de:26:9a:4f:17:83:14:bc:7b:44:45:43: 28:77:6f:0d:e0:27:4a:f6:fd:aa:c2:17:8a:37:7f: 0a:d0:f8:68:2a:87:1b:a7:05:35:be:91:f8:2a:04: c0:60:34:b1:20:4f:21:3d:01:f4:0a:e4:e0:ab:7a: 02:a6:2a:02:f4:5b:88:a8:75:f6:85:77:25:d0:d5: 8f:3f:33:e8:c3:90:f0:ff:f4:10:f6:58:92:7c:46: ca:8a:12:d7:39:a8:64:1f:3c:ee:0e:f0:d7:05:91: 23:ee:b0:4a:7e:85:43:54:7f:25:f3:2c:4d:60:48: 70:62:93:68:e6:72:71:64:81:0c:9b:07:ba:33:aa: 9f:a2:0a:d9:84:3b:b8:5b:13:1b:d2:1d:36:4e:f5: aa:69:19:2e:e7:e3:46:dc:d7:27:1c:79:20:4a:aa: c1:44:61:b4:ab:fc:dc:03:f5:d2:af:89:0f:67:7b: 3b:f6:f6:d4:99:c4:89:ba:6e:ab:55:e7:04:4e:35: 65:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:28:86:95:3A:41:5B:7F:7B:54:04:7B:C0:2F:A5:8B:B3:57:FA:38 X509v3 Authority Key Identifier: keyid:45:AA:88:DC:67:5C:E5:DC:35:57:4B:FF:62:90:E2:AE:88:CE:08:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RaqI3Gdc5dw1V0v_YpDirojOCCs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/42db52-dca7-4fa3-9a73-1d7b229d4e3b/1/bSiGlTpBW397VAR7wC-li7NX-jg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/42db52-dca7-4fa3-9a73-1d7b229d4e3b/1/RaqI3Gdc5dw1V0v_YpDirojOCCs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.239.176.0/21 IPv6: 2001:67c:2b28::/48 Signature Algorithm: sha256WithRSAEncryption 09:fb:33:9e:c2:fd:89:69:5b:82:4f:28:67:6a:39:b2:d7:bc: 7c:94:d1:0e:88:03:cb:ad:c4:7b:f9:39:ab:56:79:8e:92:18: 2e:df:a1:7c:0d:5e:9c:29:04:33:5a:a4:5e:10:a3:9c:b8:2f: ac:ec:e5:5d:9a:71:f8:31:c1:38:eb:ce:e2:02:fd:df:de:ef: 47:e5:74:fe:ab:8d:f1:78:e4:4d:1a:b6:a4:5d:f8:87:ff:86: 9d:8a:80:30:69:2a:76:cb:bd:f5:dc:d7:32:80:ca:8d:37:25: dc:55:18:ee:1a:a9:70:22:66:db:4d:a2:fb:b0:52:5c:b4:37: f5:d1:13:6f:c3:2e:4c:0b:76:9c:46:59:72:84:d1:2b:75:3b: d9:54:70:5e:79:53:8b:e8:5e:a9:57:eb:66:39:ee:24:e1:08: df:27:40:de:a4:69:ee:4f:7a:8c:6d:52:00:16:27:43:95:83: d5:ae:f7:e2:29:f3:2d:86:cb:d5:0a:f7:29:78:c8:3c:03:6c: c9:a3:e3:33:e5:f9:20:77:77:76:0c:6b:3c:69:27:d3:e6:af: 43:b0:64:b4:2f:ea:95:26:e5:7b:b8:0d:c9:0f:67:d8:f3:b6: 87:d9:52:4e:2a:30:bf:51:34:79:57:41:dd:d0:d4:cc:d4:06: 7f:5f:b2:e9 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt8f8zoJo1gQcciVAK/a3j2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ1YWE4OGRjNjc1Y2U1ZGMzNTU3NGJmZjYyOTBlMmFlODhj ZTA4MmIwHhcNMjYwMTAyMDIxODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZDI4ODY5NTNhNDE1YjdmN2I1NDA0N2JjMDJmYTU4YmIzNTdmYTM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnYuo3+/5diEdhE2xFJdXVg/AnOUN PSkocFLStr/oX+Zis3b6bsfVgUl8brlJXWMo2ZJx2t9Rsvx+OrkZ3IbeJppPF4MU vHtERUMod28N4CdK9v2qwheKN38K0PhoKocbpwU1vpH4KgTAYDSxIE8hPQH0CuTg q3oCpioC9FuIqHX2hXcl0NWPPzPow5Dw//QQ9liSfEbKihLXOahkHzzuDvDXBZEj 7rBKfoVDVH8l8yxNYEhwYpNo5nJxZIEMmwe6M6qfogrZhDu4WxMb0h02TvWqaRku 5+NG3NcnHHkgSqrBRGG0q/zcA/XSr4kPZ3s79vbUmcSJum6rVecETjVlVwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFG0ohpU6QVt/e1QEe8AvpYuzV/o4MB8GA1UdIwQY MBaAFEWqiNxnXOXcNVdL/2KQ4q6IzggrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUmFxSTNHZGM1ZHcxVjB2X1lwRGlyb2pPQ0NzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS80MmRiNTItZGNhNy00ZmEzLTlhNzMt MWQ3YjIyOWQ0ZTNiLzEvYlNpR2xUcEJXMzk3VkFSN3dDLWxpN05YLWpnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS80MmRiNTItZGNhNy00ZmEzLTlhNzMtMWQ3YjIyOWQ0ZTNi LzEvUmFxSTNHZGM1ZHcxVjB2X1lwRGlyb2pPQ0NzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDV++wMA8E AgACMAkDBwAgAQZ8KygwDQYJKoZIhvcNAQELBQADggEBAAn7M57C/YlpW4JPKGdq ObLXvHyU0Q6IA8utxHv5OatWeY6SGC7foXwNXpwpBDNapF4Qo5y4L6zs5V2acfgx wTjrzuIC/d/e70fldP6rjfF45E0atqRd+If/hp2KgDBpKnbLvfXc1zKAyo03JdxV GO4aqXAiZttNovuwUly0N/XRE2/DLkwLdpxGWXKE0St1O9lUcF55U4voXqlX62Y5 7iThCN8nQN6kae5PeoxtUgAWJ0OVg9Wu9+Ip8y2Gy9UK9yl4yDwDbMmj4zPl+SB3 d3YMazxpJ9Pmr0OwZLQv6pUm5Xu4DckPZ9jztofZUk4qML9RNHlXQd3Q1MzUBn9f suk= -----END CERTIFICATE-----Generated at Mon Jan 26 01:02:12 2026 by rpki-client