This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/BQnDxzxVxonygOU-xXmL2oL1dSU.roa File: BQnDxzxVxonygOU-xXmL2oL1dSU.roa (raw, json) Hash identifier: 0whTjT6icyvnu7xRBOKsiky4PzE/QVbudPQZPHN0cvA= Subject key identifier: 05:09:C3:C7:3C:55:C6:89:F2:80:E5:3E:C5:79:8B:DA:82:F5:75:25 Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59 Certificate serial: 019B775954E1779A24B9B008C16C024C9E14 Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/BQnDxzxVxonygOU-xXmL2oL1dSU.roa Signing time: Thu 01 Jan 2026 02:18:21 +0000 ROA not before: Thu 01 Jan 2026 02:18:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50637 IP address blocks: 188.212.130.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.mft rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:54:e1:77:9a:24:b9:b0:08:c1:6c:02:4c:9e:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59 Validity Not Before: Jan 1 02:18:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0509c3c73c55c689f280e53ec5798bda82f57525 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:fe:62:6c:bc:43:c1:73:b7:9f:da:f0:7e:28: f7:13:ba:fc:56:6c:d9:61:f4:11:25:bd:ef:df:29: 05:fc:d1:1c:b1:80:86:63:23:a4:cf:28:9b:f9:b7: a9:22:2c:57:f0:30:4f:8d:c9:bf:b6:49:19:42:6f: 02:a6:70:87:be:c2:19:63:74:b8:8e:44:f6:ca:37: d2:ae:2a:3d:e1:80:57:e6:2a:b4:bc:e0:b8:c0:08: cc:8e:9c:7d:0e:a1:72:74:07:16:d7:a7:ef:32:4f: 5e:6c:53:d2:7f:ba:f2:d6:1c:ab:d4:a6:6b:47:4b: 10:7a:68:bc:20:5d:62:84:2e:fb:27:f3:d2:db:4a: 71:a3:cc:bc:f7:99:eb:7c:6c:5a:0b:72:cf:7b:d9: 22:4c:87:93:36:86:16:4d:1c:51:e2:e7:26:a2:dd: 3a:91:ae:9a:73:f7:71:54:60:d3:5c:ca:58:26:71: 08:68:71:62:75:ce:ba:22:71:19:7e:44:14:e1:8c: 69:2b:bb:cb:4f:dc:2a:ca:e6:ac:37:13:fd:47:44: 70:7c:66:1d:c9:d2:14:69:93:fb:67:e6:9c:33:3a: a1:70:d3:e7:f2:ca:5c:0b:9b:f2:d8:51:d7:5b:f6: b7:f0:3d:3b:1a:b9:5c:e6:b3:b5:9c:f1:88:f2:a4: 27:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:09:C3:C7:3C:55:C6:89:F2:80:E5:3E:C5:79:8B:DA:82:F5:75:25 X509v3 Authority Key Identifier: keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/BQnDxzxVxonygOU-xXmL2oL1dSU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.212.130.0/24 Signature Algorithm: sha256WithRSAEncryption 60:fa:e3:7b:c2:8b:d0:bd:08:69:f8:64:f7:9a:fc:91:07:45: b6:8d:a3:92:bd:7c:24:cd:bd:6c:f0:21:e3:3f:cc:64:1b:8d: d8:8a:cd:a2:72:4a:1f:32:f3:63:5a:fb:96:13:c6:99:d4:8b: 22:4c:3a:47:8f:18:e3:0c:23:4f:e5:33:0c:e6:de:db:05:05: b1:39:83:b1:41:17:1e:2a:a0:63:8d:ef:2d:8c:cc:f7:1d:33: 1b:d5:f5:4e:d4:e5:49:36:67:3b:84:e4:b6:92:e1:ea:8d:b0: 56:9d:9a:70:82:f9:ee:24:ab:7e:df:00:1a:8b:cf:9d:87:23: c9:cc:3d:ac:9e:3e:fc:a2:b3:42:d0:de:6f:8d:bf:6a:a6:9b: 7f:1d:ec:e1:e7:10:fa:9a:be:bd:a5:3e:ad:5e:72:0a:8e:53: 04:e6:65:cd:24:36:8d:72:7e:2e:4c:c9:a1:39:4a:b6:38:68: 3b:43:72:9a:3c:35:17:8f:ca:4f:6b:56:91:64:ad:8a:9c:7c: 6e:28:bf:f6:18:12:b6:8c:0f:3a:18:54:26:f0:91:85:dc:56: 3d:fc:aa:ec:5f:fb:77:4b:01:fa:1f:1d:31:02:d6:ea:c9:15: 79:57:47:d5:05:69:0f:e4:99:bb:0c:e4:85:3f:2b:33:36:a6: f3:0a:29:5c -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt3WVThd5okubAIwWwCTJ4UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4ZTYyNjM0ZTFiZDUxMzNhOWRlNDUxMmFlOThjYWQxYjIy MTliNTkwHhcNMjYwMTAxMDIxODIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNTA5YzNjNzNjNTVjNjg5ZjI4MGU1M2VjNTc5OGJkYTgyZjU3NTI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5f5ibLxDwXO3n9rwfij3E7r8VmzZ YfQRJb3v3ykF/NEcsYCGYyOkzyib+bepIixX8DBPjcm/tkkZQm8CpnCHvsIZY3S4 jkT2yjfSrio94YBX5iq0vOC4wAjMjpx9DqFydAcW16fvMk9ebFPSf7ry1hyr1KZr R0sQemi8IF1ihC77J/PS20pxo8y895nrfGxaC3LPe9kiTIeTNoYWTRxR4ucmot06 ka6ac/dxVGDTXMpYJnEIaHFidc66InEZfkQU4YxpK7vLT9wqyuasNxP9R0RwfGYd ydIUaZP7Z+acMzqhcNPn8spcC5vy2FHXW/a38D07Grlc5rO1nPGI8qQntQIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFAUJw8c8VcaJ8oDlPsV5i9qC9XUlMB8GA1UdIwQY MBaAFPjmJjThvVEzqd5FEq6YytGyIZtZMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1PWW1OT0c5VVRPcDNrVVNycGpLMGJJaG0xay5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzgvZGEzMzk4LTY2OTgtNDVmMi1iYWFl LTkyZTI1ZmUxNjMzMS8xL0JRbkR4enhWeG9ueWdPVS14WG1MMm9MMWRTVS5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNzgvZGEzMzk4LTY2OTgtNDVmMi1iYWFlLTkyZTI1ZmUxNjMz MS8xLzEtT1ltTk9HOVVUT3Aza1VTcnBqSzBiSWhtMWsuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC81IIw DQYJKoZIhvcNAQELBQADggEBAGD643vCi9C9CGn4ZPea/JEHRbaNo5K9fCTNvWzw IeM/zGQbjdiKzaJySh8y82Na+5YTxpnUiyJMOkePGOMMI0/lMwzm3tsFBbE5g7FB Fx4qoGON7y2MzPcdMxvV9U7U5Uk2ZzuE5LaS4eqNsFadmnCC+e4kq37fABqLz52H I8nMPayePvyis0LQ3m+Nv2qmm38d7OHnEPqavr2lPq1ecgqOUwTmZc0kNo1yfi5M yaE5SrY4aDtDcpo8NRePyk9rVpFkrYqcfG4ov/YYEraMDzoYVCbwkYXcVj38quxf +3dLAfofHTEC1urJFXlXR9UFaQ/kmbsM5IU/KzM2pvMKKVw= -----END CERTIFICATE-----Generated at Sun Jan 25 13:01:34 2026 by rpki-client