This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/Bp5So5Gz6lw8-xORlA5w8UXsgNw.roa File: Bp5So5Gz6lw8-xORlA5w8UXsgNw.roa (raw, json) Hash identifier: mVa/RYaPWiZpF+o3nH+U3db29hM+i8VZiSWWUG0ccnc= Subject key identifier: 06:9E:52:A3:91:B3:EA:5C:3C:FB:13:91:94:0E:70:F1:45:EC:80:DC Certificate issuer: /CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e Certificate serial: 019B77C689C41C152016505BFBED1EDA5A72 Authority key identifier: DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/Bp5So5Gz6lw8-xORlA5w8UXsgNw.roa Signing time: Thu 01 Jan 2026 04:17:38 +0000 ROA not before: Thu 01 Jan 2026 04:17:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50564 IP address blocks: 86.104.25.0/24 maxlen: 24 176.227.156.0/24 maxlen: 24 178.156.77.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.mft rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:89:c4:1c:15:20:16:50:5b:fb:ed:1e:da:5a:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e Validity Not Before: Jan 1 04:17:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=069e52a391b3ea5c3cfb1391940e70f145ec80dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:38:59:53:95:5e:02:cd:56:be:23:c0:b7:d5: c5:62:9a:fb:93:f4:12:b6:6b:aa:1f:49:12:b1:c6: 63:83:32:ce:74:a7:e1:29:bd:d9:cc:d3:3e:69:ff: 40:14:de:4e:99:4c:d0:f0:51:38:4a:f4:c3:8c:ba: a6:dd:49:66:53:85:c1:9b:17:e0:8c:ef:13:8e:58: 93:0b:40:b5:13:2f:aa:06:75:ef:6c:ab:49:a0:65: 02:fb:1d:26:5b:bc:33:6b:b4:40:97:36:cc:8f:29: e4:05:00:d2:ac:31:dc:75:17:00:be:52:9b:92:3e: 45:48:7b:dc:21:97:a8:96:81:39:18:e6:49:0c:fa: 95:b6:fb:14:da:1e:a4:d7:a4:3f:f2:de:bd:33:63: ef:fa:03:d9:cb:17:e7:e5:1b:79:79:1e:53:ba:2c: ee:07:f2:e4:c7:91:35:9d:7a:b0:06:3d:a5:d9:31: 58:be:35:f1:ed:ed:fe:6f:95:92:29:b0:74:9c:70: 61:11:70:0b:32:af:b4:c3:2b:d2:40:4e:7c:95:82: bc:0d:27:f3:a9:1f:dc:b8:84:17:e7:3e:be:f3:8a: bd:07:e1:e5:4e:07:f4:e4:d1:1d:bb:82:ac:90:37: bb:52:b7:5a:25:35:27:50:0b:f5:1f:9d:2c:a9:bd: 44:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:9E:52:A3:91:B3:EA:5C:3C:FB:13:91:94:0E:70:F1:45:EC:80:DC X509v3 Authority Key Identifier: keyid:DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/Bp5So5Gz6lw8-xORlA5w8UXsgNw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 86.104.25.0/24 176.227.156.0/24 178.156.77.0/24 Signature Algorithm: sha256WithRSAEncryption 8e:a9:18:38:57:0f:a1:6a:5f:30:78:f1:50:30:c8:e2:c8:ea: db:49:79:ba:bc:d2:07:18:c5:16:e5:7b:53:56:c3:bc:29:18: 11:17:a1:d1:cc:ce:e3:95:80:dc:c5:20:15:b2:a5:7e:70:4d: a3:f8:86:e2:16:6a:eb:2d:fb:4d:b4:5e:d4:0f:8c:d3:8c:56: f6:50:da:34:ca:9f:37:69:61:c4:e4:c6:e8:8c:d9:59:6d:3d: c7:d2:2a:33:94:5f:c3:ae:f4:99:a2:75:9f:4d:92:1c:55:b2: 8c:18:2d:22:96:e1:7d:85:2e:bc:b2:41:e1:60:ca:67:16:7b: 29:d8:76:5e:83:1d:61:09:cf:7e:c1:4c:17:e3:6e:42:b2:41: 99:7c:d7:fa:57:28:88:db:c1:1c:da:c5:35:2f:fd:fc:aa:c8: 71:f3:52:b4:0d:56:6d:c4:c0:af:25:79:5c:23:6e:d7:b2:ea: 7b:d7:8d:a8:2e:0a:42:70:40:3f:ae:30:ae:2f:d1:86:ed:5a: 15:c2:23:13:48:5c:74:63:d0:04:a7:2e:07:3f:04:4c:c4:0b: 4f:e7:66:24:4e:87:ec:95:7c:d2:a4:67:71:d1:7f:e7:a7:f5: 96:0f:3e:e6:40:6f:44:c3:5a:a9:b0:93:ef:cf:97:3b:30:8f: 9c:3e:87:52 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt3xonEHBUgFlBb++0e2lpyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhYWYxN2IwMDE1ZGJiN2NkOTkyZjI2Y2RmZjAxYzRlMjYy MGI3M2UwHhcNMjYwMTAxMDQxNzM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNjllNTJhMzkxYjNlYTVjM2NmYjEzOTE5NDBlNzBmMTQ1ZWM4MGRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuThZU5VeAs1WviPAt9XFYpr7k/QS tmuqH0kSscZjgzLOdKfhKb3ZzNM+af9AFN5OmUzQ8FE4SvTDjLqm3UlmU4XBmxfg jO8TjliTC0C1Ey+qBnXvbKtJoGUC+x0mW7wza7RAlzbMjynkBQDSrDHcdRcAvlKb kj5FSHvcIZeoloE5GOZJDPqVtvsU2h6k16Q/8t69M2Pv+gPZyxfn5Rt5eR5Tuizu B/Lkx5E1nXqwBj2l2TFYvjXx7e3+b5WSKbB0nHBhEXALMq+0wyvSQE58lYK8DSfz qR/cuIQX5z6+84q9B+HlTgf05NEdu4KskDe7UrdaJTUnUAv1H50sqb1EJwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFAaeUqORs+pcPPsTkZQOcPFF7IDcMB8GA1UdIwQY MBaAFNqvF7ABXbt82ZLybN/wHE4mILc+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMnE4WHNBRmR1M3paa3ZKczNfQWNUaVlndHo0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9jODk3M2MtM2NmYS00NjA0LTgxMTAt Y2YwNmQxOTgzYmExLzEvQnA1U281R3o2bHc4LXhPUmxBNXc4VVhzZ053LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS9jODk3M2MtM2NmYS00NjA0LTgxMTAtY2YwNmQxOTgzYmEx LzEvMnE4WHNBRmR1M3paa3ZKczNfQWNUaVlndHo0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAVmgZAwQA sOOcAwQAspxNMA0GCSqGSIb3DQEBCwUAA4IBAQCOqRg4Vw+hal8wePFQMMjiyOrb SXm6vNIHGMUW5XtTVsO8KRgRF6HRzM7jlYDcxSAVsqV+cE2j+IbiFmrrLftNtF7U D4zTjFb2UNo0yp83aWHE5MbojNlZbT3H0iozlF/DrvSZonWfTZIcVbKMGC0iluF9 hS68skHhYMpnFnsp2HZegx1hCc9+wUwX425CskGZfNf6VyiI28Ec2sU1L/38qshx 81K0DVZtxMCvJXlcI27Xsup7142oLgpCcEA/rjCuL9GG7VoVwiMTSFx0Y9AEpy4H PwRMxAtP52YkTofslXzSpGdx0X/np/WWDz7mQG9Ew1qpsJPvz5c7MI+cPodS -----END CERTIFICATE-----Generated at Sun Jan 25 10:10:33 2026 by rpki-client