This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/BGjuOLqs40_lcAcnars_oE1mHt8.roa File: BGjuOLqs40_lcAcnars_oE1mHt8.roa (raw, json) Hash identifier: 6otNnYcTBp42usCXrmCvvw4rh+YWGLN5XJsTPfd9m70= Subject key identifier: 04:68:EE:38:BA:AC:E3:4F:E5:70:07:27:6A:BB:3F:A0:4D:66:1E:DF Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497 Certificate serial: 019B7CEE5F564FC03E82202BFAFBF0041FF9 Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/BGjuOLqs40_lcAcnars_oE1mHt8.roa Signing time: Fri 02 Jan 2026 04:19:15 +0000 ROA not before: Fri 02 Jan 2026 04:19:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62449 IP address blocks: 79.172.249.0/24 maxlen: 24 217.144.56.0/24 maxlen: 24 2a02:730:6000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.mft rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:5f:56:4f:c0:3e:82:20:2b:fa:fb:f0:04:1f:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497 Validity Not Before: Jan 2 04:19:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0468ee38baace34fe57007276abb3fa04d661edf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:57:2c:fa:c2:f8:cd:99:b4:32:68:09:cb:e4: 3c:89:4e:98:40:ae:66:a8:f2:1e:56:85:48:41:48: a8:00:bd:f7:36:5c:9e:f6:f8:16:f9:8a:5a:45:3e: 8d:f3:65:93:a2:21:48:32:5e:fa:fc:2c:0d:8d:5d: ec:ec:a6:31:98:cc:dc:e4:e7:dd:fe:dc:e8:dd:2c: fb:6a:1a:e0:d1:cb:4b:25:a9:b4:21:8f:04:b8:a2: 17:76:39:e9:43:7b:02:d2:ee:15:9e:9c:d6:b6:c4: d8:96:88:27:0c:f0:79:f6:85:06:cd:f3:63:27:3c: 46:07:9d:6a:84:dc:71:f7:1b:b7:46:ea:d5:39:50: 16:ad:e0:db:4e:54:15:95:a1:4e:c2:32:1e:4a:66: 90:c0:37:79:90:00:27:9c:54:bb:b4:47:44:0d:cf: 15:79:a2:00:a0:65:48:06:24:99:4b:30:17:e1:3c: 9f:e7:8f:f7:fa:65:98:d8:ad:e3:fb:20:0e:f7:94: f5:aa:1e:91:43:55:a9:75:27:02:16:f2:c1:cb:66: a7:dc:40:f3:b1:4f:95:4d:38:c1:45:9d:7b:3e:13: 55:a9:8d:91:fb:74:33:b0:44:19:30:56:b0:6e:5c: 55:d3:81:f4:a7:e3:50:74:e9:4a:dd:fa:f5:6b:5a: df:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:68:EE:38:BA:AC:E3:4F:E5:70:07:27:6A:BB:3F:A0:4D:66:1E:DF X509v3 Authority Key Identifier: keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/BGjuOLqs40_lcAcnars_oE1mHt8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.172.249.0/24 217.144.56.0/24 IPv6: 2a02:730:6000::/48 Signature Algorithm: sha256WithRSAEncryption 9d:be:5c:45:b4:9d:14:d2:5d:10:34:a7:82:92:94:df:ca:e1: ff:a4:4d:a8:d0:2c:dc:aa:20:3e:10:b6:d5:fc:72:53:77:43: 9a:b2:01:97:9e:1c:b2:06:ec:10:4f:5f:f4:89:48:da:8f:d2: ce:19:9b:99:0d:ab:24:2c:0a:20:93:aa:11:cc:5a:a6:cc:fd: 31:a5:48:79:f7:99:7f:b5:5f:49:fe:45:31:b5:f2:d7:3c:46: e7:87:dc:55:61:38:3e:be:2b:e3:48:b8:b9:ba:e7:40:92:5d: d6:1d:ff:ae:66:bd:f8:1c:fa:77:68:8e:6f:5f:ac:b4:cf:6d: ca:4c:6e:ee:fa:10:55:25:68:71:be:32:6f:52:04:1c:0f:16: 75:2e:fd:c4:0b:e2:82:15:d9:18:0e:a4:65:2e:76:e2:90:c1: a3:20:23:11:79:36:a4:26:5d:29:a6:4c:0f:c8:2a:1e:33:44: c8:a4:97:5a:83:39:e5:29:c2:35:0a:a7:1d:02:c1:e8:57:d0: e8:b8:7a:84:1c:ce:aa:6a:c6:42:49:f6:a3:94:7b:80:27:cf: f3:76:94:05:5a:5b:09:50:ab:44:55:34:88:d5:ca:4a:fd:35: 62:b4:f4:08:76:86:31:bd:61:4c:a0:04:dc:0a:bb:92:70:95: 80:43:6f:c5 -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgISAZt87l9WT8A+giAr+vvwBB/5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiNWUzN2Y2ZTNiOWJkMWNmMzY4NGI5YzAzYzAzYWQxY2E2 NDI0OTcwHhcNMjYwMTAyMDQxOTE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNDY4ZWUzOGJhYWNlMzRmZTU3MDA3Mjc2YWJiM2ZhMDRkNjYxZWRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv1cs+sL4zZm0MmgJy+Q8iU6YQK5m qPIeVoVIQUioAL33Nlye9vgW+YpaRT6N82WToiFIMl76/CwNjV3s7KYxmMzc5Ofd /tzo3Sz7ahrg0ctLJam0IY8EuKIXdjnpQ3sC0u4VnpzWtsTYlognDPB59oUGzfNj JzxGB51qhNxx9xu3RurVOVAWreDbTlQVlaFOwjIeSmaQwDd5kAAnnFS7tEdEDc8V eaIAoGVIBiSZSzAX4Tyf54/3+mWY2K3j+yAO95T1qh6RQ1WpdScCFvLBy2an3EDz sU+VTTjBRZ17PhNVqY2R+3QzsEQZMFawblxV04H0p+NQdOlK3fr1a1rfrwIDAQAB o4ICIDCCAhwwHQYDVR0OBBYEFARo7ji6rONP5XAHJ2q7P6BNZh7fMB8GA1UdIwQY MBaAFHteN/bjub0c82hLnAPAOtHKZCSXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUt OTU5M2E0ODhhZmNjLzEvQkdqdU9McXM0MF9sY0FjbmFyc19vRTFtSHQ4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUtOTU5M2E0ODhhZmNj LzEvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQAT6z5AwQA 2ZA4MA8EAgACMAkDBwAqAgcwYAAwDQYJKoZIhvcNAQELBQADggEBAJ2+XEW0nRTS XRA0p4KSlN/K4f+kTajQLNyqID4QttX8clN3Q5qyAZeeHLIG7BBPX/SJSNqP0s4Z m5kNqyQsCiCTqhHMWqbM/TGlSHn3mX+1X0n+RTG18tc8RueH3FVhOD6+K+NIuLm6 50CSXdYd/65mvfgc+ndojm9frLTPbcpMbu76EFUlaHG+Mm9SBBwPFnUu/cQL4oIV 2RgOpGUuduKQwaMgIxF5NqQmXSmmTA/IKh4zRMikl1qDOeUpwjUKpx0CwehX0Oi4 eoQczqpqxkJJ9qOUe4Anz/N2lAVaWwlQq0RVNIjVykr9NWK09Ah2hjG9YUygBNwK u5JwlYBDb8U= -----END CERTIFICATE-----Generated at Sun Jan 25 10:14:26 2026 by rpki-client