This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/BO427x2c7jIqTdgpqBoUV4GBfMs.roa File: BO427x2c7jIqTdgpqBoUV4GBfMs.roa (raw, json) Hash identifier: Z+LPI5HQTMc7FwlY1uBiG1UEgvyt8D5Gy5/1/idKBvQ= Subject key identifier: 04:EE:36:EF:1D:9C:EE:32:2A:4D:D8:29:A8:1A:14:57:81:81:7C:CB Certificate issuer: /CN=7df132df13e4be53d8250c8c48420264eef6c14c Certificate serial: 019B7B360E5728C2522196DB9E7AC09D1D8A Authority key identifier: 7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/BO427x2c7jIqTdgpqBoUV4GBfMs.roa Signing time: Thu 01 Jan 2026 20:18:18 +0000 ROA not before: Thu 01 Jan 2026 20:18:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50667 IP address blocks: 185.99.88.0/24 maxlen: 24 185.99.89.0/24 maxlen: 24 185.99.90.0/24 maxlen: 24 188.214.156.0/24 maxlen: 24 188.240.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.crl rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.mft rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:01:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:0e:57:28:c2:52:21:96:db:9e:7a:c0:9d:1d:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7df132df13e4be53d8250c8c48420264eef6c14c Validity Not Before: Jan 1 20:18:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=04ee36ef1d9cee322a4dd829a81a145781817ccb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:8b:74:e8:70:4a:58:85:b3:0a:69:76:4d:ee: b8:1c:fd:b3:95:3f:dd:dc:f5:4f:c2:5c:47:ac:0c: 06:04:44:01:ce:70:5c:55:0f:f2:1e:78:53:b1:11: 31:24:cb:af:1a:b7:65:42:d6:dd:aa:c2:ca:e7:c4: eb:b2:0f:45:ab:56:83:3d:08:e4:dc:39:ed:91:f4: 4a:35:a7:d6:90:3f:0e:70:52:37:3f:da:70:54:d5: 92:63:4f:c0:b4:3b:39:67:a9:12:23:41:de:2d:df: 5a:c6:2c:c1:b7:18:f6:4b:a0:74:3e:6a:c9:71:e3: d0:f7:48:bf:bc:2f:f0:57:01:7f:f5:f1:a4:dc:c3: fd:c7:2f:41:d3:b3:16:3e:c9:90:21:41:1d:62:d5: c9:65:0a:2f:21:57:90:df:07:cb:7c:59:5f:69:6c: 31:61:66:cd:4f:e8:75:2e:48:36:7a:28:60:b8:7a: 4e:0c:c1:1c:89:ad:25:3d:2f:58:63:0a:97:72:79: 4f:50:93:26:ab:c5:89:4e:af:cf:67:92:29:de:92: 39:b9:0d:be:ec:da:f4:1d:16:82:1e:5f:d9:97:da: 30:3a:f9:ec:e2:d6:8e:e6:c9:28:c4:c6:ea:e1:5f: 09:f0:d2:62:d9:f3:c0:a4:23:a3:c1:2a:55:b9:ae: fc:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:EE:36:EF:1D:9C:EE:32:2A:4D:D8:29:A8:1A:14:57:81:81:7C:CB X509v3 Authority Key Identifier: keyid:7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/BO427x2c7jIqTdgpqBoUV4GBfMs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.99.88.0-185.99.90.255 188.214.156.0/24 188.240.12.0/24 Signature Algorithm: sha256WithRSAEncryption 85:ab:a6:ee:99:05:8c:67:cd:ef:5c:da:e1:4c:bb:d1:a7:2f: 93:a3:c7:c9:1f:50:80:be:d5:72:bf:e2:e2:ca:e5:e2:78:82: 1a:d8:49:70:c0:68:19:82:72:97:ac:d7:a0:7e:0e:b3:18:38: 8f:f4:6d:14:f3:d2:a7:bb:25:73:90:10:f6:b2:4e:aa:f5:16: 73:c0:25:b7:a1:de:b4:c8:e6:51:5b:c6:6c:57:67:7b:35:d9: b6:7e:7e:06:dd:6f:e9:bf:65:94:5f:ba:a4:fe:fc:26:42:95: 1d:57:3f:fb:a3:78:b7:a5:fd:17:d2:a2:7e:3f:b2:3d:f0:fe: 1f:3d:95:5f:4e:ac:24:d8:30:94:53:1e:ea:ca:38:81:6d:5d: ed:dc:82:c6:fe:02:d2:3b:23:46:43:d6:f8:44:0e:af:72:4f: a9:3a:c6:6c:cb:48:da:5f:8d:17:d0:3f:e9:28:2d:7a:c4:34: 95:db:34:2c:52:fb:07:0a:c9:e1:d2:84:57:4b:93:fe:ad:1f: 15:ba:35:d7:7a:de:05:ef:c3:9d:16:fd:d8:35:e2:0f:11:6d: 62:69:d2:bc:53:37:79:66:6d:b0:2a:d8:26:70:81:23:b0:c6: 31:ed:09:6d:51:1e:66:31:30:d9:22:b7:90:f9:f9:d5:4f:4c: f4:bd:cf:f8 -----BEGIN CERTIFICATE----- MIIFETCCA/mgAwIBAgISAZt7Ng5XKMJSIZbbnnrAnR2KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkZjEzMmRmMTNlNGJlNTNkODI1MGM4YzQ4NDIwMjY0ZWVm NmMxNGMwHhcNMjYwMTAxMjAxODE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNGVlMzZlZjFkOWNlZTMyMmE0ZGQ4MjlhODFhMTQ1NzgxODE3Y2NiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsot06HBKWIWzCml2Te64HP2zlT/d 3PVPwlxHrAwGBEQBznBcVQ/yHnhTsRExJMuvGrdlQtbdqsLK58Trsg9Fq1aDPQjk 3DntkfRKNafWkD8OcFI3P9pwVNWSY0/AtDs5Z6kSI0HeLd9axizBtxj2S6B0PmrJ cePQ90i/vC/wVwF/9fGk3MP9xy9B07MWPsmQIUEdYtXJZQovIVeQ3wfLfFlfaWwx YWbNT+h1Lkg2eihguHpODMEcia0lPS9YYwqXcnlPUJMmq8WJTq/PZ5Ip3pI5uQ2+ 7Nr0HRaCHl/Zl9owOvns4taO5skoxMbq4V8J8NJi2fPApCOjwSpVua78lwIDAQAB o4ICHTCCAhkwHQYDVR0OBBYEFATuNu8dnO4yKk3YKagaFFeBgXzLMB8GA1UdIwQY MBaAFH3xMt8T5L5T2CUMjEhCAmTu9sFMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmZFeTN4UGt2bFBZSlF5TVNFSUNaTzcyd1V3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS9jMzc0OTctNjM3Ni00NjFlLTkzYzYt OTc3ODY3NGVkYzk3LzEvQk80Mjd4MmM3aklxVGRncHFCb1VWNEdCZk1zLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS9jMzc0OTctNjM3Ni00NjFlLTkzYzYtOTc3ODY3NGVkYzk3 LzEvZmZFeTN4UGt2bFBZSlF5TVNFSUNaTzcyd1V3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaMAwDBAO5Y1gD BAC5Y1oDBAC81pwDBAC88AwwDQYJKoZIhvcNAQELBQADggEBAIWrpu6ZBYxnze9c 2uFMu9GnL5Ojx8kfUIC+1XK/4uLK5eJ4ghrYSXDAaBmCcpes16B+DrMYOI/0bRTz 0qe7JXOQEPayTqr1FnPAJbeh3rTI5lFbxmxXZ3s12bZ+fgbdb+m/ZZRfuqT+/CZC lR1XP/ujeLel/RfSon4/sj3w/h89lV9OrCTYMJRTHurKOIFtXe3cgsb+AtI7I0ZD 1vhEDq9yT6k6xmzLSNpfjRfQP+koLXrENJXbNCxS+wcKyeHShFdLk/6tHxW6Ndd6 3gXvw50W/dg14g8RbWJp0rxTN3lmbbAq2CZwgSOwxjHtCW1RHmYxMNkit5D5+dVP TPS9z/g= -----END CERTIFICATE-----Generated at Sun Jan 25 21:19:36 2026 by rpki-client