This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/d33ce0-69a0-4ba3-b3c9-998278f4fbb2/1/BpdGbagGv2_-Y3TyelIg9iJMEKo.roa File: BpdGbagGv2_-Y3TyelIg9iJMEKo.roa (raw, json) Hash identifier: l3T/M5x9/uGHTqM8Mx88SLVI1m/1mGk3r20lwOBjOe8= Subject key identifier: 06:97:46:6D:A8:06:BF:6F:FE:63:74:F2:7A:52:20:F6:22:4C:10:AA Certificate issuer: /CN=93b76ac9f7a84ad790ad57c880bc9f862ad4c9e7 Certificate serial: 019B7C7FD211B6F13752C10AEFD61526505D Authority key identifier: 93:B7:6A:C9:F7:A8:4A:D7:90:AD:57:C8:80:BC:9F:86:2A:D4:C9:E7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k7dqyfeoSteQrVfIgLyfhirUyec.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/d33ce0-69a0-4ba3-b3c9-998278f4fbb2/1/BpdGbagGv2_-Y3TyelIg9iJMEKo.roa Signing time: Fri 02 Jan 2026 02:18:30 +0000 ROA not before: Fri 02 Jan 2026 02:18:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 393559 IP address blocks: 94.136.231.0/24 maxlen: 24 94.136.236.0/23 maxlen: 23 94.136.240.0/22 maxlen: 22 109.72.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/d33ce0-69a0-4ba3-b3c9-998278f4fbb2/1/k7dqyfeoSteQrVfIgLyfhirUyec.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/d33ce0-69a0-4ba3-b3c9-998278f4fbb2/1/k7dqyfeoSteQrVfIgLyfhirUyec.mft rsync://rpki.ripe.net/repository/DEFAULT/k7dqyfeoSteQrVfIgLyfhirUyec.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:d2:11:b6:f1:37:52:c1:0a:ef:d6:15:26:50:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=93b76ac9f7a84ad790ad57c880bc9f862ad4c9e7 Validity Not Before: Jan 2 02:18:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0697466da806bf6ffe6374f27a5220f6224c10aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:3c:cb:b0:f8:59:6e:bd:6d:0b:0c:77:b9:80: 3d:1b:67:9a:ac:62:66:b0:6e:d9:2a:b3:11:f9:11: eb:e7:82:65:32:cd:6b:31:d3:e0:a2:d3:99:e7:8d: 36:c8:b4:b7:31:ce:ba:c7:0d:fc:88:03:3b:9a:56: ab:0f:4a:31:9a:7b:cb:1c:59:c0:25:dd:b1:66:1b: b1:26:55:e6:46:c4:9f:84:63:d0:85:34:1b:43:4a: 85:86:88:f1:31:39:f8:1f:b5:1f:ef:9a:33:a6:d2: 01:10:e5:0b:6c:c6:4d:88:dc:50:1b:1f:25:ac:75: 09:a0:37:5e:cf:7e:c5:5b:59:e3:f5:83:26:11:39: 0b:89:99:d2:98:26:26:15:66:34:85:63:4d:58:33: 1c:ad:5f:11:5a:a4:28:5d:01:75:f9:72:25:f8:44: 96:ec:33:68:27:2e:8f:db:8d:72:d2:c0:1f:0c:d1: 3c:d8:d3:6e:a2:43:2d:39:df:b3:47:c2:eb:9c:bc: 8f:de:4b:7c:d2:f3:d5:29:1b:80:cf:20:98:15:a4: 31:03:aa:f0:0c:5a:f1:fa:56:a6:49:75:a3:a3:ce: b6:30:26:87:cd:ed:a1:cc:3a:a3:38:56:8f:52:be: 7e:5e:c2:5f:86:f4:d2:34:5f:00:8c:60:45:e0:24: 14:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:97:46:6D:A8:06:BF:6F:FE:63:74:F2:7A:52:20:F6:22:4C:10:AA X509v3 Authority Key Identifier: keyid:93:B7:6A:C9:F7:A8:4A:D7:90:AD:57:C8:80:BC:9F:86:2A:D4:C9:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k7dqyfeoSteQrVfIgLyfhirUyec.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/d33ce0-69a0-4ba3-b3c9-998278f4fbb2/1/BpdGbagGv2_-Y3TyelIg9iJMEKo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/d33ce0-69a0-4ba3-b3c9-998278f4fbb2/1/k7dqyfeoSteQrVfIgLyfhirUyec.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.136.231.0/24 94.136.236.0/23 94.136.240.0/22 109.72.17.0/24 Signature Algorithm: sha256WithRSAEncryption 89:9a:ce:88:78:fb:df:81:11:00:ab:12:08:c1:c3:14:53:37: 3a:f1:db:b8:97:76:2c:45:1b:47:4f:3f:87:2a:f0:cb:88:9a: 10:f0:80:43:a5:06:0d:80:f7:7d:d6:03:e8:24:7c:38:b5:81: 59:1f:f2:cd:ba:02:87:0a:69:ed:2c:7c:c3:66:c8:97:8a:bf: 41:7e:d0:39:a6:d2:5f:4e:2e:b1:a5:f6:50:95:34:30:af:03: c5:51:0a:e3:e0:04:0c:bc:1b:fe:7c:9d:12:ed:fe:e7:a7:d0: 5e:dc:ca:09:d0:7b:e2:1e:a0:f8:1d:b4:72:c2:89:e9:be:60: e6:b1:60:32:01:41:16:2e:bd:29:15:0b:b5:43:b8:31:2a:7e: e2:ec:39:ce:12:b6:d6:dc:57:7c:ad:85:87:0f:8d:be:12:5f: a9:7d:12:cb:f7:4a:86:db:c1:9d:5f:f5:74:bd:83:ae:bc:ea: 00:03:10:95:23:a8:d5:ab:9a:f8:e6:49:88:15:f8:a5:5c:dd: c8:03:aa:df:3e:ac:27:fb:0d:5a:97:c7:36:91:5f:93:5c:1e: dc:44:ed:ee:44:f7:41:98:07:f3:66:e3:02:69:78:32:82:99: 1f:9b:64:7b:0f:4c:91:54:44:8c:06:ba:9f:b8:1c:75:fe:14: f0:ba:15:d7 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt8f9IRtvE3UsEK79YVJlBdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzYjc2YWM5ZjdhODRhZDc5MGFkNTdjODgwYmM5Zjg2MmFk NGM5ZTcwHhcNMjYwMTAyMDIxODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNjk3NDY2ZGE4MDZiZjZmZmU2Mzc0ZjI3YTUyMjBmNjIyNGMxMGFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApDzLsPhZbr1tCwx3uYA9G2earGJm sG7ZKrMR+RHr54JlMs1rMdPgotOZ5402yLS3Mc66xw38iAM7mlarD0oxmnvLHFnA Jd2xZhuxJlXmRsSfhGPQhTQbQ0qFhojxMTn4H7Uf75ozptIBEOULbMZNiNxQGx8l rHUJoDdez37FW1nj9YMmETkLiZnSmCYmFWY0hWNNWDMcrV8RWqQoXQF1+XIl+ESW 7DNoJy6P241y0sAfDNE82NNuokMtOd+zR8LrnLyP3kt80vPVKRuAzyCYFaQxA6rw DFrx+lamSXWjo862MCaHze2hzDqjOFaPUr5+XsJfhvTSNF8AjGBF4CQUCwIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFAaXRm2oBr9v/mN08npSIPYiTBCqMB8GA1UdIwQY MBaAFJO3asn3qErXkK1XyIC8n4Yq1MnnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazdkcXlmZW9TdGVRclZmSWdMeWZoaXJVeWVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9kMzNjZTAtNjlhMC00YmEzLWIzYzkt OTk4Mjc4ZjRmYmIyLzEvQnBkR2JhZ0d2Ml8tWTNUeWVsSWc5aUpNRUtvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC9kMzNjZTAtNjlhMC00YmEzLWIzYzktOTk4Mjc4ZjRmYmIy LzEvazdkcXlmZW9TdGVRclZmSWdMeWZoaXJVeWVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAXojnAwQB XojsAwQCXojwAwQAbUgRMA0GCSqGSIb3DQEBCwUAA4IBAQCJms6IePvfgREAqxII wcMUUzc68du4l3YsRRtHTz+HKvDLiJoQ8IBDpQYNgPd91gPoJHw4tYFZH/LNugKH CmntLHzDZsiXir9BftA5ptJfTi6xpfZQlTQwrwPFUQrj4AQMvBv+fJ0S7f7np9Be 3MoJ0HviHqD4HbRywonpvmDmsWAyAUEWLr0pFQu1Q7gxKn7i7DnOErbW3Fd8rYWH D42+El+pfRLL90qG28GdX/V0vYOuvOoAAxCVI6jVq5r45kmIFfilXN3IA6rfPqwn +w1al8c2kV+TXB7cRO3uRPdBmAfzZuMCaXgygpkfm2R7D0yRVESMBrqfuBx1/hTw uhXX -----END CERTIFICATE-----Generated at Sun Jan 25 10:20:55 2026 by rpki-client