This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/bc401a-6938-4fdc-9c6e-fac3d5543a2c/1/BgUi9CSiMfO5dgzkDm9-J262d4Q.roa File: BgUi9CSiMfO5dgzkDm9-J262d4Q.roa (raw, json) Hash identifier: zVeqPqGn2wObT7AcmmdBWyGCymnATliHMrGmgsWQkqM= Subject key identifier: 06:05:22:F4:24:A2:31:F3:B9:76:0C:E4:0E:6F:7E:27:6E:B6:77:84 Certificate issuer: /CN=0babd682c1a8fc5037adbf68143ae77fd00f38ab Certificate serial: 019B7EA74A5B7A8FE3BD6462D0E31674CBEB Authority key identifier: 0B:AB:D6:82:C1:A8:FC:50:37:AD:BF:68:14:3A:E7:7F:D0:0F:38:AB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C6vWgsGo_FA3rb9oFDrnf9APOKs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/bc401a-6938-4fdc-9c6e-fac3d5543a2c/1/BgUi9CSiMfO5dgzkDm9-J262d4Q.roa Signing time: Fri 02 Jan 2026 12:20:51 +0000 ROA not before: Fri 02 Jan 2026 12:20:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42000 IP address blocks: 193.150.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/bc401a-6938-4fdc-9c6e-fac3d5543a2c/1/C6vWgsGo_FA3rb9oFDrnf9APOKs.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/bc401a-6938-4fdc-9c6e-fac3d5543a2c/1/C6vWgsGo_FA3rb9oFDrnf9APOKs.mft rsync://rpki.ripe.net/repository/DEFAULT/C6vWgsGo_FA3rb9oFDrnf9APOKs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:4a:5b:7a:8f:e3:bd:64:62:d0:e3:16:74:cb:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0babd682c1a8fc5037adbf68143ae77fd00f38ab Validity Not Before: Jan 2 12:20:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=060522f424a231f3b9760ce40e6f7e276eb67784 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:15:4f:d8:38:e6:2b:a0:bf:2a:e6:ea:71:dd: 99:32:1d:20:14:5a:41:ea:77:25:0a:53:d4:1d:64: 52:11:34:b2:ca:79:f6:cc:2a:4b:33:4c:8b:61:01: fb:a0:cf:82:28:b6:b6:48:b7:c5:ef:52:72:47:91: 6e:64:df:99:90:87:8d:83:d7:7b:e3:a3:e5:6d:cb: d8:ac:bd:42:2e:04:60:bb:c5:68:c2:14:ca:e1:a9: d0:0f:c2:eb:e6:9c:a8:20:ce:8b:e4:dc:f2:d7:ba: 7b:28:4f:3b:a8:57:1e:85:ff:3d:a9:11:db:35:94: 87:17:73:8f:56:d7:9c:6d:24:93:c9:f5:b0:7c:e0: 81:78:19:05:18:e1:42:20:b0:97:4a:71:68:ad:24: 34:6c:cd:8c:c1:98:e2:d6:0d:9b:c1:10:54:0b:86: 70:93:81:a9:13:b6:09:f3:ef:09:4a:eb:eb:f7:2c: 65:14:7a:d1:86:f7:48:66:5e:cb:18:bf:25:5b:58: eb:33:b7:04:dd:71:dc:5a:5f:28:9b:54:d4:42:60: 13:bd:00:ba:82:e0:0e:60:7b:35:28:91:46:d6:f0: 46:57:4b:85:8c:c5:da:0a:91:ba:4e:98:f8:02:aa: fa:cf:fc:a3:69:f0:f5:64:fe:3d:d2:d0:3b:42:17: c1:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:05:22:F4:24:A2:31:F3:B9:76:0C:E4:0E:6F:7E:27:6E:B6:77:84 X509v3 Authority Key Identifier: keyid:0B:AB:D6:82:C1:A8:FC:50:37:AD:BF:68:14:3A:E7:7F:D0:0F:38:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C6vWgsGo_FA3rb9oFDrnf9APOKs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/bc401a-6938-4fdc-9c6e-fac3d5543a2c/1/BgUi9CSiMfO5dgzkDm9-J262d4Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/bc401a-6938-4fdc-9c6e-fac3d5543a2c/1/C6vWgsGo_FA3rb9oFDrnf9APOKs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.150.134.0/24 Signature Algorithm: sha256WithRSAEncryption 50:c7:8f:4d:fe:9d:15:63:26:a6:e2:83:71:4c:d5:d9:62:14: 2e:29:2a:09:a6:c7:d7:f4:25:f7:3e:c3:e5:71:b0:b6:e3:76: 4d:d0:3b:88:75:ae:02:79:17:ed:71:c8:c4:d4:a0:b2:8d:73: 58:65:0e:d2:a8:68:f6:77:d6:1a:f3:de:a9:29:9b:1a:3c:2f: 1a:16:c5:7c:2c:25:ff:ad:fa:50:df:f2:ec:09:f1:b4:ce:d4: c2:fe:ab:59:54:99:e2:79:56:15:65:ad:aa:66:7c:88:7e:32: 30:45:e9:c8:aa:30:90:ce:25:b8:95:21:d1:91:b7:0e:6d:59: 63:78:50:7f:d9:43:a6:fe:7b:45:55:8d:89:20:a0:31:82:63: 82:99:47:ed:d5:2b:d2:c3:b2:15:19:5f:f0:3c:65:11:d4:6c: 58:ae:53:ce:fb:52:95:b0:62:0d:a1:85:19:fa:22:93:97:bf: 9e:e0:7c:1f:6d:cd:91:0a:6c:83:c6:ca:91:91:c3:0b:fc:a3: 62:fa:2a:79:16:46:fa:a2:e8:35:59:8a:6d:d7:65:6e:53:ee: 4a:59:1e:1f:7d:84:58:50:8c:8c:30:de:90:1a:2a:72:f7:6b: cc:0c:08:65:e8:57:f4:8b:51:da:0e:b3:fe:db:39:85:33:4c: dc:d1:ad:4b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+p0pbeo/jvWRi0OMWdMvrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiYWJkNjgyYzFhOGZjNTAzN2FkYmY2ODE0M2FlNzdmZDAw ZjM4YWIwHhcNMjYwMTAyMTIyMDUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNjA1MjJmNDI0YTIzMWYzYjk3NjBjZTQwZTZmN2UyNzZlYjY3Nzg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsBVP2DjmK6C/Kubqcd2ZMh0gFFpB 6nclClPUHWRSETSyynn2zCpLM0yLYQH7oM+CKLa2SLfF71JyR5FuZN+ZkIeNg9d7 46PlbcvYrL1CLgRgu8VowhTK4anQD8Lr5pyoIM6L5Nzy17p7KE87qFcehf89qRHb NZSHF3OPVtecbSSTyfWwfOCBeBkFGOFCILCXSnForSQ0bM2MwZji1g2bwRBUC4Zw k4GpE7YJ8+8JSuvr9yxlFHrRhvdIZl7LGL8lW1jrM7cE3XHcWl8om1TUQmATvQC6 guAOYHs1KJFG1vBGV0uFjMXaCpG6Tpj4Aqr6z/yjafD1ZP490tA7QhfBtwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAYFIvQkojHzuXYM5A5vfidutneEMB8GA1UdIwQY MBaAFAur1oLBqPxQN62/aBQ653/QDzirMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQzZ2V2dzR29fRkEzcmI5b0ZEcm5mOUFQT0tzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy9iYzQwMWEtNjkzOC00ZmRjLTljNmUt ZmFjM2Q1NTQzYTJjLzEvQmdVaTlDU2lNZk81ZGd6a0RtOS1KMjYyZDRRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy9iYzQwMWEtNjkzOC00ZmRjLTljNmUtZmFjM2Q1NTQzYTJj LzEvQzZ2V2dzR29fRkEzcmI5b0ZEcm5mOUFQT0tzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwZaGMA0G CSqGSIb3DQEBCwUAA4IBAQBQx49N/p0VYyam4oNxTNXZYhQuKSoJpsfX9CX3PsPl cbC243ZN0DuIda4CeRftccjE1KCyjXNYZQ7SqGj2d9Ya896pKZsaPC8aFsV8LCX/ rfpQ3/LsCfG0ztTC/qtZVJnieVYVZa2qZnyIfjIwRenIqjCQziW4lSHRkbcObVlj eFB/2UOm/ntFVY2JIKAxgmOCmUft1SvSw7IVGV/wPGUR1GxYrlPO+1KVsGINoYUZ +iKTl7+e4Hwfbc2RCmyDxsqRkcML/KNi+ip5Fkb6oug1WYpt12VuU+5KWR4ffYRY UIyMMN6QGipy92vMDAhl6Ff0i1HaDrP+2zmFM0zc0a1L -----END CERTIFICATE-----Generated at Sun Jan 25 23:31:44 2026 by rpki-client