This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/0fbd8d-820d-4979-81a3-8be9571eb10d/1/BQk9R-N3GOOYrja30Pn_XVDUf88.roa File: BQk9R-N3GOOYrja30Pn_XVDUf88.roa (raw, json) Hash identifier: Yweym3mWkXHkGOyAmG6nDG9vHGdFCmlWDKJNXExlolQ= Subject key identifier: 05:09:3D:47:E3:77:18:E3:98:AE:36:B7:D0:F9:FF:5D:50:D4:7F:CF Certificate issuer: /CN=c69ceb1240844cde8a168897e47c1df5d6ecbf21 Certificate serial: 019B7C12B049B1F2AAA57F00B040B52AB629 Authority key identifier: C6:9C:EB:12:40:84:4C:DE:8A:16:88:97:E4:7C:1D:F5:D6:EC:BF:21 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xpzrEkCETN6KFoiX5Hwd9dbsvyE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/0fbd8d-820d-4979-81a3-8be9571eb10d/1/BQk9R-N3GOOYrja30Pn_XVDUf88.roa Signing time: Fri 02 Jan 2026 00:19:18 +0000 ROA not before: Fri 02 Jan 2026 00:19:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200370 IP address blocks: 95.142.231.0/24 maxlen: 24 95.142.232.0/24 maxlen: 24 95.142.238.0/24 maxlen: 24 95.142.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/0fbd8d-820d-4979-81a3-8be9571eb10d/1/xpzrEkCETN6KFoiX5Hwd9dbsvyE.crl rsync://rpki.ripe.net/repository/DEFAULT/8c/0fbd8d-820d-4979-81a3-8be9571eb10d/1/xpzrEkCETN6KFoiX5Hwd9dbsvyE.mft rsync://rpki.ripe.net/repository/DEFAULT/xpzrEkCETN6KFoiX5Hwd9dbsvyE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 15:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:b0:49:b1:f2:aa:a5:7f:00:b0:40:b5:2a:b6:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c69ceb1240844cde8a168897e47c1df5d6ecbf21 Validity Not Before: Jan 2 00:19:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=05093d47e37718e398ae36b7d0f9ff5d50d47fcf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:e1:0f:67:28:04:81:09:8a:d9:d9:fd:5d:ce: 5e:27:33:1c:38:f5:fb:b6:78:b6:21:ff:8f:1f:f3: d6:e0:4e:99:97:84:37:e8:71:2b:65:ab:f1:c6:c9: ed:cf:dc:b4:6b:69:7a:35:b6:e3:32:31:93:e1:04: df:e7:f8:4a:8a:09:d9:e6:54:18:26:4e:ed:58:63: 4b:16:b4:7d:80:39:bf:34:9b:22:e3:b7:b9:9c:91: fb:9f:a5:17:39:a3:d4:f7:48:6d:5a:c8:db:d6:e8: 0f:ac:4a:6b:4f:6b:32:22:76:03:ed:fb:16:81:17: d9:7c:fc:11:5a:42:32:a4:e4:1c:9c:39:c0:f0:a7: 43:43:45:04:42:dd:7c:0d:6d:88:34:0d:41:88:d8: 86:1f:38:e0:08:7b:2c:7d:1f:58:90:41:d0:b2:fc: ac:75:07:3a:8a:c9:f4:d7:33:c2:b7:c1:e5:b8:fc: ba:d5:ab:17:01:bd:31:bd:ac:64:fa:84:5d:90:23: 70:19:7e:c8:81:ac:bc:ad:5b:57:ca:b8:fb:ee:86: 13:ed:75:7e:c0:d1:2e:d1:1f:16:ee:ea:10:49:e5: 57:5c:ac:de:58:dc:36:68:9c:a8:c3:89:cd:c9:a7: 06:3d:80:b3:90:83:dd:98:b7:03:06:9c:9d:d9:54: 45:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:09:3D:47:E3:77:18:E3:98:AE:36:B7:D0:F9:FF:5D:50:D4:7F:CF X509v3 Authority Key Identifier: keyid:C6:9C:EB:12:40:84:4C:DE:8A:16:88:97:E4:7C:1D:F5:D6:EC:BF:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xpzrEkCETN6KFoiX5Hwd9dbsvyE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/0fbd8d-820d-4979-81a3-8be9571eb10d/1/BQk9R-N3GOOYrja30Pn_XVDUf88.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/0fbd8d-820d-4979-81a3-8be9571eb10d/1/xpzrEkCETN6KFoiX5Hwd9dbsvyE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.142.231.0-95.142.232.255 95.142.238.0/23 Signature Algorithm: sha256WithRSAEncryption 58:47:ba:96:63:50:b8:56:88:aa:93:14:10:69:30:6f:dd:21: 39:09:3e:93:87:8d:c5:2e:f9:5e:7d:c1:1f:6a:98:bf:b0:82: 41:a0:d2:5f:bd:d0:f1:33:d4:87:ed:a4:77:b8:3f:52:fb:25: ef:f0:34:61:d4:0f:e2:90:e9:f2:7a:c1:9e:29:cd:1c:62:e6: d6:b8:b6:57:2b:2a:ff:fe:27:59:51:40:6d:07:ca:d1:18:35: 3f:aa:3a:75:d9:07:86:d7:67:62:c5:cf:54:eb:ef:c1:59:2e: c3:55:cf:86:38:23:af:fc:a0:b8:39:4f:91:89:ee:14:69:2c: 02:2f:8d:83:ee:4e:0c:04:56:27:66:01:c2:dc:ff:32:d3:e7: 6c:3e:38:88:1a:7e:12:90:c6:4b:15:6a:f6:b7:fa:aa:ac:b5: 1f:ef:c4:ad:23:22:86:1f:ad:93:5e:7c:a8:4b:54:73:7f:4b: 8c:3f:b6:4d:72:3e:b3:93:30:67:19:1d:11:3d:44:44:93:7a: 7b:c6:46:39:fd:a2:ea:2f:ad:97:00:0c:e4:06:64:cf:1b:10: d1:de:a7:a1:96:a1:d7:5f:8b:4d:2b:93:22:e7:c4:dc:5d:f4: 82:e1:c8:ca:fd:00:94:15:28:1e:af:39:b1:28:09:93:64:e4: 6c:d2:cc:4c -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt8ErBJsfKqpX8AsEC1KrYpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2OWNlYjEyNDA4NDRjZGU4YTE2ODg5N2U0N2MxZGY1ZDZl Y2JmMjEwHhcNMjYwMTAyMDAxOTE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNTA5M2Q0N2UzNzcxOGUzOThhZTM2YjdkMGY5ZmY1ZDUwZDQ3ZmNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvuEPZygEgQmK2dn9Xc5eJzMcOPX7 tni2If+PH/PW4E6Zl4Q36HErZavxxsntz9y0a2l6NbbjMjGT4QTf5/hKignZ5lQY Jk7tWGNLFrR9gDm/NJsi47e5nJH7n6UXOaPU90htWsjb1ugPrEprT2syInYD7fsW gRfZfPwRWkIypOQcnDnA8KdDQ0UEQt18DW2INA1BiNiGHzjgCHssfR9YkEHQsvys dQc6isn01zPCt8HluPy61asXAb0xvaxk+oRdkCNwGX7Igay8rVtXyrj77oYT7XV+ wNEu0R8W7uoQSeVXXKzeWNw2aJyow4nNyacGPYCzkIPdmLcDBpyd2VRF2wIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFAUJPUfjdxjjmK42t9D5/11Q1H/PMB8GA1UdIwQY MBaAFMac6xJAhEzeihaIl+R8HfXW7L8hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveHB6ckVrQ0VUTjZLRm9pWDVId2Q5ZGJzdnlFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy8wZmJkOGQtODIwZC00OTc5LTgxYTMt OGJlOTU3MWViMTBkLzEvQlFrOVItTjNHT09ZcmphMzBQbl9YVkRVZjg4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yy8wZmJkOGQtODIwZC00OTc5LTgxYTMtOGJlOTU3MWViMTBk LzEveHB6ckVrQ0VUTjZLRm9pWDVId2Q5ZGJzdnlFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBABfjucD BABfjugDBAFfju4wDQYJKoZIhvcNAQELBQADggEBAFhHupZjULhWiKqTFBBpMG/d ITkJPpOHjcUu+V59wR9qmL+wgkGg0l+90PEz1IftpHe4P1L7Je/wNGHUD+KQ6fJ6 wZ4pzRxi5ta4tlcrKv/+J1lRQG0HytEYNT+qOnXZB4bXZ2LFz1Tr78FZLsNVz4Y4 I6/8oLg5T5GJ7hRpLAIvjYPuTgwEVidmAcLc/zLT52w+OIgafhKQxksVava3+qqs tR/vxK0jIoYfrZNefKhLVHN/S4w/tk1yPrOTMGcZHRE9RESTenvGRjn9ouovrZcA DOQGZM8bENHep6GWoddfi00rkyLnxNxd9ILhyMr9AJQVKB6vObEoCZNk5GzSzEw= -----END CERTIFICATE-----Generated at Mon Jan 26 02:32:04 2026 by rpki-client