This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/BicHq2-1R5w3awGHaJoeL58aBqU.roa File: BicHq2-1R5w3awGHaJoeL58aBqU.roa (raw, json) Hash identifier: n9oCc9tCEAEqLLGfxz9hQg4kycGG7d7qE2Ki2IkYUZI= Subject key identifier: 06:27:07:AB:6F:B5:47:9C:37:6B:01:87:68:9A:1E:2F:9F:1A:06:A5 Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Certificate serial: 019B78346259B570749E391CFB2B3648CBF4 Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/BicHq2-1R5w3awGHaJoeL58aBqU.roa Signing time: Thu 01 Jan 2026 06:17:37 +0000 ROA not before: Thu 01 Jan 2026 06:17:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47708 IP address blocks: 192.121.194.0/24 maxlen: 24 192.165.8.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:62:59:b5:70:74:9e:39:1c:fb:2b:36:48:cb:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Validity Not Before: Jan 1 06:17:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=062707ab6fb5479c376b0187689a1e2f9f1a06a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:a5:e8:2d:5f:49:3a:1f:81:b5:55:bf:17:5c: c9:1c:f6:1d:06:af:85:ee:43:51:bb:b5:10:71:a1: 77:bf:81:4f:f6:18:07:45:1a:be:75:d1:08:9b:d2: e9:bc:40:a9:99:6f:03:ac:ca:28:f9:34:d0:f7:42: 98:fc:09:1a:26:2a:10:62:9a:48:4a:b3:43:fb:b1: 71:95:71:5b:6a:95:cc:68:ae:82:df:16:e2:95:57: e5:df:ad:2a:04:fd:95:ce:8b:49:49:f0:24:eb:9f: 89:88:45:63:ac:e1:6c:80:f9:f3:4e:a5:c1:81:f3: 19:0c:88:9e:5c:97:50:db:01:73:aa:34:20:61:37: 06:06:2b:9c:f0:e5:36:ef:8d:2d:98:53:18:4b:77: e7:70:f0:46:c4:41:63:72:22:e8:df:3c:ae:47:da: 7a:64:8e:20:22:79:f2:06:75:9f:c4:f4:8e:85:82: 99:eb:0c:e3:09:d7:a9:41:4d:dd:49:1f:48:60:d4: 80:6e:c9:72:7a:c7:41:29:54:2b:ab:ad:f1:9b:49: 3b:cf:fe:f7:f9:ac:5e:3b:02:27:c7:69:21:d6:95: 64:72:39:53:de:5b:d7:bc:d7:60:9e:b2:71:7c:d4: b2:52:eb:8e:a2:cb:e1:f3:7d:61:9f:ff:95:33:ca: 32:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:27:07:AB:6F:B5:47:9C:37:6B:01:87:68:9A:1E:2F:9F:1A:06:A5 X509v3 Authority Key Identifier: keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/BicHq2-1R5w3awGHaJoeL58aBqU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.121.194.0/24 192.165.8.0/24 Signature Algorithm: sha256WithRSAEncryption b6:23:74:19:ca:a7:1d:9a:53:cc:47:47:ec:b0:c4:c8:4a:26: 74:97:39:03:31:46:78:42:fb:c7:4f:25:cf:34:cc:0a:d0:89: d9:bd:52:08:44:52:6a:45:cb:aa:45:2a:61:29:5e:1e:fb:2c: a0:6e:0c:c3:7e:c9:23:3f:54:d1:30:f3:66:56:8a:23:b3:af: 80:0e:ab:19:bc:7b:36:c1:33:00:45:af:de:9a:a5:95:99:6e: d7:db:02:86:48:ee:43:9a:e5:98:2c:a3:42:9f:07:ca:c0:61: 96:e8:c8:65:72:19:78:70:08:52:62:39:c7:13:07:ab:a0:74: c7:54:eb:51:6a:eb:1b:bd:82:df:96:0b:b2:34:a3:5b:27:4c: 47:36:8e:7c:77:26:81:bf:35:26:12:10:18:31:d1:96:2b:69: 9e:3f:90:d3:f2:1b:16:a1:d3:fc:b9:2b:dd:6a:fd:fd:b1:6c: 61:b0:32:d3:e3:85:e5:b3:c5:2d:f6:77:a0:3d:55:4e:f7:32: d0:46:0d:69:f0:7c:67:69:1e:b1:92:7a:1b:d0:05:54:32:bb: ad:7f:a3:2e:04:27:e1:69:d0:3f:69:00:99:9f:84:2a:c1:c0: 5b:59:01:37:6a:3c:30:47:82:37:f8:94:7b:53:ff:d6:e7:31: bb:b3:91:85 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt4NGJZtXB0njkc+ys2SMv0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxMzVjN2Y1NzFlZWZlYjY3NDA0YWI2YzQ1ZmQ0NzU1NTFh ZGFmMWIwHhcNMjYwMTAxMDYxNzM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNjI3MDdhYjZmYjU0NzljMzc2YjAxODc2ODlhMWUyZjlmMWEwNmE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs6XoLV9JOh+BtVW/F1zJHPYdBq+F 7kNRu7UQcaF3v4FP9hgHRRq+ddEIm9LpvECpmW8DrMoo+TTQ90KY/AkaJioQYppI SrND+7FxlXFbapXMaK6C3xbilVfl360qBP2VzotJSfAk65+JiEVjrOFsgPnzTqXB gfMZDIieXJdQ2wFzqjQgYTcGBiuc8OU2740tmFMYS3fncPBGxEFjciLo3zyuR9p6 ZI4gInnyBnWfxPSOhYKZ6wzjCdepQU3dSR9IYNSAbslyesdBKVQrq63xm0k7z/73 +axeOwInx2kh1pVkcjlT3lvXvNdgnrJxfNSyUuuOosvh831hn/+VM8oyNwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFAYnB6tvtUecN2sBh2iaHi+fGgalMB8GA1UdIwQY MBaAFCE1x/Vx7v62dASrbEX9R1VRra8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDIt OTQzZDAzMzIxMzI2LzEvQmljSHEyLTFSNXczYXdHSGFKb2VMNThhQnFVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDItOTQzZDAzMzIxMzI2 LzEvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwHnCAwQA wKUIMA0GCSqGSIb3DQEBCwUAA4IBAQC2I3QZyqcdmlPMR0fssMTISiZ0lzkDMUZ4 QvvHTyXPNMwK0InZvVIIRFJqRcuqRSphKV4e+yygbgzDfskjP1TRMPNmVoojs6+A DqsZvHs2wTMARa/emqWVmW7X2wKGSO5DmuWYLKNCnwfKwGGW6Mhlchl4cAhSYjnH EweroHTHVOtRausbvYLflguyNKNbJ0xHNo58dyaBvzUmEhAYMdGWK2meP5DT8hsW odP8uSvdav39sWxhsDLT44Xls8Ut9negPVVO9zLQRg1p8HxnaR6xknob0AVUMrut f6MuBCfhadA/aQCZn4QqwcBbWQE3ajwwR4I3+JR7U//W5zG7s5GF -----END CERTIFICATE-----Generated at Sun Jan 25 16:39:08 2026 by rpki-client