This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/ddc26e-31da-43dd-b4d1-063a0881a6d2/1/BGx_SKWg0A0x4u2zJMu40hnQx4Q.roa File: BGx_SKWg0A0x4u2zJMu40hnQx4Q.roa (raw, json) Hash identifier: 3vgm19azZKbua/L5jF2wErVGYC2PH4djUu3AdY79HJs= Subject key identifier: 04:6C:7F:48:A5:A0:D0:0D:31:E2:ED:B3:24:CB:B8:D2:19:D0:C7:84 Certificate issuer: /CN=472694d8a399a3a66f442ec72295c754acbbad41 Certificate serial: 019B7AC887A77B84ED42E98C189C273015D9 Authority key identifier: 47:26:94:D8:A3:99:A3:A6:6F:44:2E:C7:22:95:C7:54:AC:BB:AD:41 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RyaU2KOZo6ZvRC7HIpXHVKy7rUE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/ddc26e-31da-43dd-b4d1-063a0881a6d2/1/BGx_SKWg0A0x4u2zJMu40hnQx4Q.roa Signing time: Thu 01 Jan 2026 18:18:40 +0000 ROA not before: Thu 01 Jan 2026 18:18:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200807 IP address blocks: 78.31.212.0/23 maxlen: 23 78.31.212.0/24 maxlen: 24 78.31.213.0/24 maxlen: 24 185.173.164.0/22 maxlen: 22 185.173.164.0/23 maxlen: 23 185.173.166.0/24 maxlen: 24 2a0b:4f00::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/ddc26e-31da-43dd-b4d1-063a0881a6d2/1/RyaU2KOZo6ZvRC7HIpXHVKy7rUE.crl rsync://rpki.ripe.net/repository/DEFAULT/65/ddc26e-31da-43dd-b4d1-063a0881a6d2/1/RyaU2KOZo6ZvRC7HIpXHVKy7rUE.mft rsync://rpki.ripe.net/repository/DEFAULT/RyaU2KOZo6ZvRC7HIpXHVKy7rUE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:87:a7:7b:84:ed:42:e9:8c:18:9c:27:30:15:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=472694d8a399a3a66f442ec72295c754acbbad41 Validity Not Before: Jan 1 18:18:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=046c7f48a5a0d00d31e2edb324cbb8d219d0c784 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:0a:b4:5d:8d:82:c9:eb:44:3e:0d:ec:41:b7: 8d:07:bd:24:01:43:0d:13:96:86:12:d8:3e:f7:88: d2:1f:e6:b6:26:9b:ef:ef:71:58:d7:aa:0a:94:c3: ce:18:3d:cb:64:16:05:e5:a5:07:f0:ea:45:5d:43: a7:45:da:b1:4f:5c:b6:38:95:4b:31:83:8c:28:8c: 3f:7c:cb:a1:42:a4:ba:a1:b5:24:b9:38:3e:f8:24: e6:45:00:b3:11:56:3c:a2:ef:5d:98:00:c6:c3:dd: 33:c5:43:6e:00:d9:6d:3e:4a:fa:e8:37:75:03:f9: 40:1b:f1:94:2b:e4:64:cd:d5:54:6c:99:47:c3:69: 2e:6d:f9:4b:c9:e9:d8:58:ac:cc:4c:bc:a7:76:ab: 77:02:4e:02:04:a0:6c:82:da:dc:d9:89:d6:b2:88: 18:cd:ca:e0:53:84:30:bb:46:ce:9d:11:ed:4b:bc: 00:ce:1c:bb:60:05:c0:e8:c4:0c:c2:3e:10:61:1a: 0d:86:cb:62:93:c5:5b:0f:23:29:14:d1:87:ae:f6: 34:c3:1c:52:9a:e6:f9:cf:ea:de:f6:1a:fa:a8:b2: d2:d0:13:9a:a5:29:2f:7e:b8:fc:fc:cd:12:1e:53: b2:b7:7b:f8:af:b8:9b:b6:4c:22:81:15:70:d6:3e: ec:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:6C:7F:48:A5:A0:D0:0D:31:E2:ED:B3:24:CB:B8:D2:19:D0:C7:84 X509v3 Authority Key Identifier: keyid:47:26:94:D8:A3:99:A3:A6:6F:44:2E:C7:22:95:C7:54:AC:BB:AD:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RyaU2KOZo6ZvRC7HIpXHVKy7rUE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/ddc26e-31da-43dd-b4d1-063a0881a6d2/1/BGx_SKWg0A0x4u2zJMu40hnQx4Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/ddc26e-31da-43dd-b4d1-063a0881a6d2/1/RyaU2KOZo6ZvRC7HIpXHVKy7rUE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.31.212.0/23 185.173.164.0/22 IPv6: 2a0b:4f00::/32 Signature Algorithm: sha256WithRSAEncryption 84:30:f2:6f:3d:58:61:b2:e8:7e:4e:3f:89:96:45:3b:7a:84: c0:f5:ac:ce:73:69:dd:f8:fd:69:38:d5:af:d7:7c:0e:4f:ee: 6a:35:b5:10:26:13:70:f3:fc:da:83:06:ab:0a:a8:c1:d9:5f: 65:b4:b5:b4:e7:2c:5a:0c:61:6a:e3:75:aa:5f:5c:5f:4a:af: 82:14:a1:b7:31:39:9b:3c:ae:04:3c:51:cb:e7:30:d1:07:95: 05:9e:13:88:9c:eb:c0:82:5b:b9:07:3a:cc:aa:33:df:2b:42: ed:8b:67:e2:01:f3:b4:52:e1:b4:a3:c8:ec:cf:e2:27:00:17: dc:ba:15:eb:4c:ce:1b:18:d6:4b:b1:a1:90:c7:08:a6:df:cc: 4e:98:da:f7:ef:49:4c:c2:9f:e1:c1:e7:15:ac:07:1a:b9:6b: 5f:cf:36:63:12:ac:ed:d1:b8:b9:f3:85:71:0c:57:56:c0:ec: 2a:5d:93:af:5f:dc:26:2d:d6:3d:07:e7:4b:df:e3:bd:30:80: cd:14:47:42:a5:65:8c:2a:16:da:fe:68:82:e6:aa:f7:d5:f0: e7:19:36:b0:9f:7a:e0:6d:ff:4f:0b:29:0f:dc:5f:45:7c:46: c0:bf:8c:3f:16:f5:85:f9:4a:1c:6e:ea:98:1e:ee:92:4e:ad: 25:0d:66:df -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt6yIene4TtQumMGJwnMBXZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ3MjY5NGQ4YTM5OWEzYTY2ZjQ0MmVjNzIyOTVjNzU0YWNi YmFkNDEwHhcNMjYwMTAxMTgxODQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNDZjN2Y0OGE1YTBkMDBkMzFlMmVkYjMyNGNiYjhkMjE5ZDBjNzg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxAq0XY2CyetEPg3sQbeNB70kAUMN E5aGEtg+94jSH+a2Jpvv73FY16oKlMPOGD3LZBYF5aUH8OpFXUOnRdqxT1y2OJVL MYOMKIw/fMuhQqS6obUkuTg++CTmRQCzEVY8ou9dmADGw90zxUNuANltPkr66Dd1 A/lAG/GUK+RkzdVUbJlHw2kubflLyenYWKzMTLyndqt3Ak4CBKBsgtrc2YnWsogY zcrgU4Qwu0bOnRHtS7wAzhy7YAXA6MQMwj4QYRoNhstik8VbDyMpFNGHrvY0wxxS mub5z+re9hr6qLLS0BOapSkvfrj8/M0SHlOyt3v4r7ibtkwigRVw1j7sVwIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFARsf0iloNANMeLtsyTLuNIZ0MeEMB8GA1UdIwQY MBaAFEcmlNijmaOmb0QuxyKVx1Ssu61BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUnlhVTJLT1pvNlp2UkM3SElwWEhWS3k3clVFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS9kZGMyNmUtMzFkYS00M2RkLWI0ZDEt MDYzYTA4ODFhNmQyLzEvQkd4X1NLV2cwQTB4NHUyekpNdTQwaG5ReDRRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS9kZGMyNmUtMzFkYS00M2RkLWI0ZDEtMDYzYTA4ODFhNmQy LzEvUnlhVTJLT1pvNlp2UkM3SElwWEhWS3k3clVFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQBTh/UAwQC ua2kMA0EAgACMAcDBQAqC08AMA0GCSqGSIb3DQEBCwUAA4IBAQCEMPJvPVhhsuh+ Tj+JlkU7eoTA9azOc2nd+P1pONWv13wOT+5qNbUQJhNw8/zagwarCqjB2V9ltLW0 5yxaDGFq43WqX1xfSq+CFKG3MTmbPK4EPFHL5zDRB5UFnhOInOvAglu5BzrMqjPf K0Lti2fiAfO0UuG0o8jsz+InABfcuhXrTM4bGNZLsaGQxwim38xOmNr370lMwp/h wecVrAcauWtfzzZjEqzt0bi584VxDFdWwOwqXZOvX9wmLdY9B+dL3+O9MIDNFEdC pWWMKhba/miC5qr31fDnGTawn3rgbf9PCykP3F9FfEbAv4w/FvWF+UocbuqYHu6S Tq0lDWbf -----END CERTIFICATE-----Generated at Mon Jan 26 07:08:10 2026 by rpki-client