This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/BvESQLZXtRiPGHqxs9FyNfPfrYg.roa File: BvESQLZXtRiPGHqxs9FyNfPfrYg.roa (raw, json) Hash identifier: LyZpgxx2BuXtLEeunp2Ouh42NJ2FpH+nCWj9B99EJZA= Subject key identifier: 06:F1:12:40:B6:57:B5:18:8F:18:7A:B1:B3:D1:72:35:F3:DF:AD:88 Certificate issuer: /CN=583d76051017d0afa915fcfb790a00f4667b0a88 Certificate serial: 019B7DCAB8E9964E3A27763E35E293C4EC1F Authority key identifier: 58:3D:76:05:10:17:D0:AF:A9:15:FC:FB:79:0A:00:F4:66:7B:0A:88 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/BvESQLZXtRiPGHqxs9FyNfPfrYg.roa Signing time: Fri 02 Jan 2026 08:19:56 +0000 ROA not before: Fri 02 Jan 2026 08:19:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29577 IP address blocks: 194.225.125.0/24 maxlen: 24 194.225.126.0/24 maxlen: 24 2001:14e8:8::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.crl rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.mft rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:b8:e9:96:4e:3a:27:76:3e:35:e2:93:c4:ec:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=583d76051017d0afa915fcfb790a00f4667b0a88 Validity Not Before: Jan 2 08:19:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=06f11240b657b5188f187ab1b3d17235f3dfad88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:ef:a1:b5:58:9d:44:64:bc:0f:2a:1b:82:de: 13:b6:9c:1e:91:1b:d5:e2:c9:ae:eb:a2:af:ab:17: b2:bf:f3:ae:6e:f0:aa:5d:12:26:62:b7:78:eb:59: c2:3b:55:c0:7a:27:95:2a:45:2f:7a:ac:d6:eb:6b: 02:74:aa:f9:a1:96:cd:bc:c1:18:f4:60:ac:82:55: a2:68:4c:d3:c9:27:13:6a:ec:e1:80:4b:22:e2:22: 86:51:8f:f2:74:9c:5f:79:cb:e7:59:bf:12:c0:6f: aa:69:0a:d0:93:a6:c0:a2:6d:47:ce:1a:e7:ae:7e: bb:77:24:ed:89:f1:50:2d:0c:a6:16:fa:24:5c:15: c7:ad:44:8c:f2:77:a5:7d:c7:8d:59:2f:58:77:ee: c1:4c:13:f4:41:87:2e:8d:39:6f:e1:e5:ea:57:55: ed:bf:1c:a3:a6:ff:ca:8f:fb:b3:bc:8b:48:48:13: 11:d6:45:18:c8:01:b4:2a:11:f0:bb:a9:2b:80:60: ae:fd:54:fe:fe:2e:82:69:6a:5d:19:7e:c4:9c:fc: 8c:1e:5d:04:8d:f8:32:63:e6:f0:d2:76:25:1e:4f: 5a:ec:9b:4b:75:8a:0b:8a:91:09:8f:ab:aa:85:2a: a8:93:79:05:be:fc:32:29:e5:17:3a:7f:9a:98:f1: e4:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:F1:12:40:B6:57:B5:18:8F:18:7A:B1:B3:D1:72:35:F3:DF:AD:88 X509v3 Authority Key Identifier: keyid:58:3D:76:05:10:17:D0:AF:A9:15:FC:FB:79:0A:00:F4:66:7B:0A:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/BvESQLZXtRiPGHqxs9FyNfPfrYg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.225.125.0-194.225.126.255 IPv6: 2001:14e8:8::/48 Signature Algorithm: sha256WithRSAEncryption 86:eb:09:d1:46:cb:8d:6f:92:8a:e1:bd:ed:7e:fc:84:0b:0e: 10:e0:98:e6:0a:2b:99:d5:36:fa:aa:b2:94:e6:71:bc:79:41: 8d:0e:43:c2:db:c4:e8:79:68:70:03:23:1b:10:9e:39:d6:6f: b1:ef:e5:d6:b5:8d:c6:7b:61:a8:68:8f:66:26:9d:a8:e6:55: 3f:41:66:ad:30:8a:b8:3e:c3:cc:2c:2f:04:05:bc:f3:76:1d: b2:62:e1:05:38:3f:88:db:57:47:8d:b0:a9:68:c3:12:34:d1: 8f:24:31:a0:b9:36:17:3b:c2:39:6a:25:44:72:53:a3:e5:b9: 85:16:5b:0d:a3:12:3d:cc:31:51:28:eb:6e:14:18:de:5b:a6: cd:91:f9:50:ab:d5:42:2a:01:83:bc:fd:db:85:ef:cc:a9:99: 78:31:04:eb:99:53:4d:52:6b:0f:ce:ea:91:b2:06:ca:16:4e: 67:85:2f:ca:2b:79:f3:2b:83:1b:06:a0:12:57:0b:75:5c:95: 66:1e:f0:fd:01:e8:e1:17:af:62:ac:4b:28:04:e3:2e:50:37: c3:da:ea:2e:db:18:85:2c:43:f8:4f:9c:f4:c7:7f:a2:df:78: 8f:13:05:44:e5:10:c0:da:c0:ca:08:35:2e:19:6d:eb:6d:47: 50:c3:d8:79 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt9yrjplk46J3Y+NeKTxOwfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4M2Q3NjA1MTAxN2QwYWZhOTE1ZmNmYjc5MGEwMGY0NjY3 YjBhODgwHhcNMjYwMTAyMDgxOTU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNmYxMTI0MGI2NTdiNTE4OGYxODdhYjFiM2QxNzIzNWYzZGZhZDg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm++htVidRGS8Dyobgt4TtpwekRvV 4smu66Kvqxeyv/OubvCqXRImYrd461nCO1XAeieVKkUveqzW62sCdKr5oZbNvMEY 9GCsglWiaEzTyScTauzhgEsi4iKGUY/ydJxfecvnWb8SwG+qaQrQk6bAom1Hzhrn rn67dyTtifFQLQymFvokXBXHrUSM8nelfceNWS9Yd+7BTBP0QYcujTlv4eXqV1Xt vxyjpv/Kj/uzvItISBMR1kUYyAG0KhHwu6krgGCu/VT+/i6CaWpdGX7EnPyMHl0E jfgyY+bw0nYlHk9a7JtLdYoLipEJj6uqhSqok3kFvvwyKeUXOn+amPHkkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAbxEkC2V7UYjxh6sbPRcjXz362IMB8GA1UdIwQY MBaAFFg9dgUQF9CvqRX8+3kKAPRmewqIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0QxMkJSQVgwSy1wRmZ6N2VRb0E5R1o3Q29nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC80ZjFiMjctMzI2YS00Njc5LWE2NGIt ZGE2MTUzODg1ZjNiLzEvQnZFU1FMWlh0UmlQR0hxeHM5RnlOZlBmcllnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC80ZjFiMjctMzI2YS00Njc5LWE2NGItZGE2MTUzODg1ZjNi LzEvV0QxMkJSQVgwSy1wRmZ6N2VRb0E5R1o3Q29nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDgGCCsGAQUFBwEHAQH/BCkwJzAUBAIAATAOMAwDBADC4X0D BADC4X4wDwQCAAIwCQMHACABFOgACDANBgkqhkiG9w0BAQsFAAOCAQEAhusJ0UbL jW+SiuG97X78hAsOEOCY5gormdU2+qqylOZxvHlBjQ5DwtvE6HlocAMjGxCeOdZv se/l1rWNxnthqGiPZiadqOZVP0FmrTCKuD7DzCwvBAW883YdsmLhBTg/iNtXR42w qWjDEjTRjyQxoLk2FzvCOWolRHJTo+W5hRZbDaMSPcwxUSjrbhQY3lumzZH5UKvV QioBg7z924XvzKmZeDEE65lTTVJrD87qkbIGyhZOZ4Uvyit58yuDGwagElcLdVyV Zh7w/QHo4RevYqxLKATjLlA3w9rqLtsYhSxD+E+c9Md/ot94jxMFROUQwNrAygg1 Lhlt621HUMPYeQ== -----END CERTIFICATE-----Generated at Mon Jan 26 04:42:36 2026 by rpki-client