This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/64e1ef-9ba8-4307-bfad-6587f76fd810/1/BGnG6gtmJf9oXbmJn6G8to3OAXQ.roa File: BGnG6gtmJf9oXbmJn6G8to3OAXQ.roa (raw, json) Hash identifier: 7lUuJCGm6EGdC4KlGNBvD3jQRgoMt2XAzy3kEwKql7A= Subject key identifier: 04:69:C6:EA:0B:66:25:FF:68:5D:B9:89:9F:A1:BC:B6:8D:CE:01:74 Certificate issuer: /CN=fe1d18d9a222736dbac231110b88deac8db0336d Certificate serial: 019B7F15A954C4483C63FA72BF43FD0A3BA1 Authority key identifier: FE:1D:18:D9:A2:22:73:6D:BA:C2:31:11:0B:88:DE:AC:8D:B0:33:6D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_h0Y2aIic226wjERC4jerI2wM20.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/64e1ef-9ba8-4307-bfad-6587f76fd810/1/BGnG6gtmJf9oXbmJn6G8to3OAXQ.roa Signing time: Fri 02 Jan 2026 14:21:24 +0000 ROA not before: Fri 02 Jan 2026 14:21:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 5626 IP address blocks: 89.26.128.0/17 maxlen: 24 194.38.128.0/19 maxlen: 24 213.146.192.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/64e1ef-9ba8-4307-bfad-6587f76fd810/1/_h0Y2aIic226wjERC4jerI2wM20.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/64e1ef-9ba8-4307-bfad-6587f76fd810/1/_h0Y2aIic226wjERC4jerI2wM20.mft rsync://rpki.ripe.net/repository/DEFAULT/_h0Y2aIic226wjERC4jerI2wM20.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 06:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:a9:54:c4:48:3c:63:fa:72:bf:43:fd:0a:3b:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fe1d18d9a222736dbac231110b88deac8db0336d Validity Not Before: Jan 2 14:21:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0469c6ea0b6625ff685db9899fa1bcb68dce0174 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:0d:14:7a:6f:ac:0e:f1:aa:78:e5:c4:9e:0d: fd:9d:74:19:f2:d2:e2:97:1a:91:14:7e:90:fe:42: cf:70:4e:ff:a5:34:c2:73:00:55:92:7d:f3:81:27: 3d:af:42:6b:cd:93:48:6f:96:06:d4:cf:8e:ec:de: 26:4a:9e:f2:2f:48:84:3e:0f:0c:97:65:bc:d3:77: 96:bb:21:e6:c3:cf:cc:cf:c9:87:4d:3b:f1:0b:c6: 74:ed:63:5a:7c:4e:94:89:9d:f4:95:f7:c5:a6:b4: 89:90:e1:b7:8b:33:e6:f1:bd:3f:b8:f7:fd:7c:19: 74:8c:ae:46:64:c0:13:17:df:61:24:ef:ca:bf:58: f3:83:48:da:09:a2:d8:fd:99:ab:b4:a4:70:51:e9: e9:05:72:24:f9:49:ed:34:17:84:01:2d:03:c4:d5: 58:3a:bd:2d:65:00:9a:73:ad:19:87:39:8d:b3:76: 2f:e5:01:d9:7b:1f:64:39:82:99:7c:e1:e0:5d:45: 80:a4:a3:ef:b7:39:0b:ed:db:b2:5f:eb:26:09:8e: 8a:38:44:f4:86:5e:2a:7e:7a:e3:c6:22:8f:1b:51: 6e:ef:f6:2b:0b:84:03:16:74:ff:48:28:03:c3:63: 53:96:08:fd:94:4f:2f:bf:66:91:1f:b2:c6:e0:d7: 83:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:69:C6:EA:0B:66:25:FF:68:5D:B9:89:9F:A1:BC:B6:8D:CE:01:74 X509v3 Authority Key Identifier: keyid:FE:1D:18:D9:A2:22:73:6D:BA:C2:31:11:0B:88:DE:AC:8D:B0:33:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_h0Y2aIic226wjERC4jerI2wM20.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/64e1ef-9ba8-4307-bfad-6587f76fd810/1/BGnG6gtmJf9oXbmJn6G8to3OAXQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/64e1ef-9ba8-4307-bfad-6587f76fd810/1/_h0Y2aIic226wjERC4jerI2wM20.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.26.128.0/17 194.38.128.0/19 213.146.192.0/19 Signature Algorithm: sha256WithRSAEncryption 4c:65:0b:e6:ac:8a:cd:5b:23:b8:6f:45:20:42:3a:77:e9:7f: 2c:49:73:f4:38:00:73:42:87:f0:23:2c:00:9e:cc:41:7b:7d: 65:10:6e:fc:67:8a:ec:14:bc:2c:5e:09:8a:57:7a:d0:37:c7: 73:9f:3f:63:c4:43:86:6f:28:48:1a:0a:9f:8c:3f:43:a0:41: 09:1b:3e:50:97:91:51:26:3d:8c:6f:9d:a7:0f:fa:65:2c:35: 12:3a:e6:5e:83:6e:7b:88:f4:ed:46:55:b7:3b:77:d8:3e:33: 05:94:1e:90:82:e3:5f:94:61:24:6c:38:1a:ce:39:29:fd:63: 41:2a:88:07:29:a5:49:f2:41:ce:3c:3c:6d:5c:ae:f2:c6:26: 35:43:fc:ea:69:87:b5:4f:9e:fc:4a:64:04:49:92:ca:9e:a0: c4:e1:4f:60:0a:ae:6f:67:a8:47:38:ee:87:ca:ad:85:48:02: ed:84:37:c8:40:ad:cf:3e:0b:d3:74:23:fe:da:84:a5:bb:9c: 0a:03:11:13:45:c3:21:cd:f7:99:e3:ae:db:d8:ba:a5:0e:e0: 33:38:f3:e9:a3:1a:b2:1b:66:ed:06:47:9a:2d:0e:29:49:f0: 4c:56:4f:c2:6f:e7:0a:40:4f:37:84:bd:2b:ad:11:e6:25:cc: 77:02:f3:b3 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt/FalUxEg8Y/pyv0P9CjuhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZlMWQxOGQ5YTIyMjczNmRiYWMyMzExMTBiODhkZWFjOGRi MDMzNmQwHhcNMjYwMTAyMTQyMTI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNDY5YzZlYTBiNjYyNWZmNjg1ZGI5ODk5ZmExYmNiNjhkY2UwMTc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1g0Uem+sDvGqeOXEng39nXQZ8tLi lxqRFH6Q/kLPcE7/pTTCcwBVkn3zgSc9r0JrzZNIb5YG1M+O7N4mSp7yL0iEPg8M l2W803eWuyHmw8/Mz8mHTTvxC8Z07WNafE6UiZ30lffFprSJkOG3izPm8b0/uPf9 fBl0jK5GZMATF99hJO/Kv1jzg0jaCaLY/ZmrtKRwUenpBXIk+UntNBeEAS0DxNVY Or0tZQCac60ZhzmNs3Yv5QHZex9kOYKZfOHgXUWApKPvtzkL7duyX+smCY6KOET0 hl4qfnrjxiKPG1Fu7/YrC4QDFnT/SCgDw2NTlgj9lE8vv2aRH7LG4NeDpQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFARpxuoLZiX/aF25iZ+hvLaNzgF0MB8GA1UdIwQY MBaAFP4dGNmiInNtusIxEQuI3qyNsDNtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX2gwWTJhSWljMjI2d2pFUkM0amVySTJ3TTIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC82NGUxZWYtOWJhOC00MzA3LWJmYWQt NjU4N2Y3NmZkODEwLzEvQkduRzZndG1KZjlvWGJtSm42Rzh0bzNPQVhRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC82NGUxZWYtOWJhOC00MzA3LWJmYWQtNjU4N2Y3NmZkODEw LzEvX2gwWTJhSWljMjI2d2pFUkM0amVySTJ3TTIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQHWRqAAwQF wiaAAwQF1ZLAMA0GCSqGSIb3DQEBCwUAA4IBAQBMZQvmrIrNWyO4b0UgQjp36X8s SXP0OABzQofwIywAnsxBe31lEG78Z4rsFLwsXgmKV3rQN8dznz9jxEOGbyhIGgqf jD9DoEEJGz5Ql5FRJj2Mb52nD/plLDUSOuZeg257iPTtRlW3O3fYPjMFlB6QguNf lGEkbDgazjkp/WNBKogHKaVJ8kHOPDxtXK7yxiY1Q/zqaYe1T578SmQESZLKnqDE 4U9gCq5vZ6hHOO6Hyq2FSALthDfIQK3PPgvTdCP+2oSlu5wKAxETRcMhzfeZ467b 2LqlDuAzOPPpoxqyG2btBkeaLQ4pSfBMVk/Cb+cKQE83hL0rrRHmJcx3AvOz -----END CERTIFICATE-----Generated at Mon Jan 26 15:02:37 2026 by rpki-client