This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/3716d9-473f-4af3-a1d3-24e6c0d4fad7/1/bcgCJp2ss3z06m9HQCfHzCBP0hQ.roa File: bcgCJp2ss3z06m9HQCfHzCBP0hQ.roa (raw, json) Hash identifier: NnbPwHGrcdim6yrTkVQg/I67nU9XxwzvJk8QjULLx4A= Subject key identifier: 6D:C8:02:26:9D:AC:B3:7C:F4:EA:6F:47:40:27:C7:CC:20:4F:D2:14 Certificate issuer: /CN=09b4bf37f39eec62982c4b63709fab5d146c7373 Certificate serial: 019B7AC795CFD4A19257423E5F57026811CB Authority key identifier: 09:B4:BF:37:F3:9E:EC:62:98:2C:4B:63:70:9F:AB:5D:14:6C:73:73 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CbS_N_Oe7GKYLEtjcJ-rXRRsc3M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/3716d9-473f-4af3-a1d3-24e6c0d4fad7/1/bcgCJp2ss3z06m9HQCfHzCBP0hQ.roa Signing time: Thu 01 Jan 2026 18:17:38 +0000 ROA not before: Thu 01 Jan 2026 18:17:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35393 IP address blocks: 84.246.224.0/21 maxlen: 24 92.39.240.0/20 maxlen: 24 94.247.24.0/21 maxlen: 24 185.111.228.0/22 maxlen: 24 185.158.44.0/22 maxlen: 24 188.208.198.0/23 maxlen: 24 2a02:23e0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/3716d9-473f-4af3-a1d3-24e6c0d4fad7/1/CbS_N_Oe7GKYLEtjcJ-rXRRsc3M.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/3716d9-473f-4af3-a1d3-24e6c0d4fad7/1/CbS_N_Oe7GKYLEtjcJ-rXRRsc3M.mft rsync://rpki.ripe.net/repository/DEFAULT/CbS_N_Oe7GKYLEtjcJ-rXRRsc3M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 03:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:95:cf:d4:a1:92:57:42:3e:5f:57:02:68:11:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09b4bf37f39eec62982c4b63709fab5d146c7373 Validity Not Before: Jan 1 18:17:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6dc802269dacb37cf4ea6f474027c7cc204fd214 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:62:30:da:cb:b8:da:21:80:26:03:b6:5c:8c: 1a:ac:b1:e5:bd:54:68:c5:9d:b9:f8:74:58:45:71: a2:ba:e7:8d:cb:52:2d:b6:fe:0b:fc:8e:62:79:bd: be:d1:1b:9b:f7:b2:27:a1:34:56:2e:c6:b5:f9:30: 75:c6:37:79:97:ce:67:61:69:2a:6b:73:fb:8b:db: 9f:4c:ab:9d:72:a2:b7:78:08:e6:76:51:dd:05:dc: e3:ba:b0:5a:40:f4:d8:64:47:5c:80:c7:79:03:79: f5:b1:61:57:fe:6f:f5:70:18:95:da:57:a7:ce:14: 65:8d:7a:fd:2f:a0:dd:f2:d0:dc:67:5e:bd:2c:ae: 39:67:4c:86:26:fd:f8:ce:88:82:b7:9b:61:2e:5b: 5b:a4:55:77:79:a4:53:26:d2:78:48:c1:d3:cb:f6: dc:b7:c3:46:2b:15:f8:56:25:2b:a7:56:61:43:77: e8:72:c9:82:22:cb:45:62:0c:aa:82:da:57:88:0d: f2:80:ca:b1:21:5f:78:54:b1:aa:9e:fc:80:d0:71: 0f:37:37:4d:9d:6d:4a:7b:0b:86:76:3d:c4:d2:94: bb:19:45:2b:9d:38:fc:26:d7:3e:c4:c0:97:da:9a: 76:35:e8:01:3a:ed:8e:03:21:18:22:12:2d:a5:ce: cf:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:C8:02:26:9D:AC:B3:7C:F4:EA:6F:47:40:27:C7:CC:20:4F:D2:14 X509v3 Authority Key Identifier: keyid:09:B4:BF:37:F3:9E:EC:62:98:2C:4B:63:70:9F:AB:5D:14:6C:73:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CbS_N_Oe7GKYLEtjcJ-rXRRsc3M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/3716d9-473f-4af3-a1d3-24e6c0d4fad7/1/bcgCJp2ss3z06m9HQCfHzCBP0hQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/3716d9-473f-4af3-a1d3-24e6c0d4fad7/1/CbS_N_Oe7GKYLEtjcJ-rXRRsc3M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.246.224.0/21 92.39.240.0/20 94.247.24.0/21 185.111.228.0/22 185.158.44.0/22 188.208.198.0/23 IPv6: 2a02:23e0::/32 Signature Algorithm: sha256WithRSAEncryption 46:56:e9:b3:81:12:b5:cb:71:c3:97:1c:f2:48:9c:bb:55:62: 10:64:28:38:c1:dc:d4:8f:4f:4a:44:7c:f4:f7:3b:5f:5f:7f: 91:5a:f5:1e:8f:3a:0d:e0:87:47:87:2f:1e:1f:7f:40:ec:ea: 79:bd:dd:61:c6:a7:16:ac:71:c3:6c:d5:7c:81:21:24:2c:b1: d3:0c:aa:09:65:db:d6:80:fb:d6:35:50:c6:47:b9:4f:94:df: 00:cd:c7:8f:6f:64:61:81:a1:be:97:20:62:b5:69:f7:db:d0: bb:d6:14:71:e3:45:e3:5f:67:03:24:1b:18:24:52:b7:f8:dd: 3b:47:59:76:d6:96:8d:3b:bb:6d:da:44:5a:7c:d9:20:8a:7f: 74:a4:16:15:81:c6:33:d5:aa:94:01:b9:9c:c9:74:d2:35:c1: b2:8a:bb:2d:f3:40:57:7e:3b:fc:d0:6e:6b:3a:91:b7:be:2b: 88:46:f9:8a:b9:10:ab:40:d2:0a:fa:dd:1a:48:8b:de:c7:2a: 31:6e:14:6b:99:6e:70:2f:22:42:85:e4:4d:8d:ee:ce:0d:17: 46:f2:01:ea:15:0f:65:64:51:53:f4:34:6d:e0:e1:34:03:fa: d9:67:36:2f:a3:ee:bd:53:ae:e0:0f:8f:b2:c3:eb:ca:95:fc: 7d:79:7a:ad -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgISAZt6x5XP1KGSV0I+X1cCaBHLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5YjRiZjM3ZjM5ZWVjNjI5ODJjNGI2MzcwOWZhYjVkMTQ2 YzczNzMwHhcNMjYwMTAxMTgxNzM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZGM4MDIyNjlkYWNiMzdjZjRlYTZmNDc0MDI3YzdjYzIwNGZkMjE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArGIw2su42iGAJgO2XIwarLHlvVRo xZ25+HRYRXGiuueNy1Ittv4L/I5ieb2+0Rub97InoTRWLsa1+TB1xjd5l85nYWkq a3P7i9ufTKudcqK3eAjmdlHdBdzjurBaQPTYZEdcgMd5A3n1sWFX/m/1cBiV2len zhRljXr9L6Dd8tDcZ169LK45Z0yGJv34zoiCt5thLltbpFV3eaRTJtJ4SMHTy/bc t8NGKxX4ViUrp1ZhQ3focsmCIstFYgyqgtpXiA3ygMqxIV94VLGqnvyA0HEPNzdN nW1KewuGdj3E0pS7GUUrnTj8Jtc+xMCX2pp2NegBOu2OAyEYIhItpc7PDQIDAQAB o4ICNjCCAjIwHQYDVR0OBBYEFG3IAiadrLN89OpvR0Anx8wgT9IUMB8GA1UdIwQY MBaAFAm0vzfznuximCxLY3Cfq10UbHNzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2JTX05fT2U3R0tZTEV0amNKLXJYUlJzYzNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi8zNzE2ZDktNDczZi00YWYzLWExZDMt MjRlNmMwZDRmYWQ3LzEvYmNnQ0pwMnNzM3owNm05SFFDZkh6Q0JQMGhRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi8zNzE2ZDktNDczZi00YWYzLWExZDMtMjRlNmMwZDRmYWQ3 LzEvQ2JTX05fT2U3R0tZTEV0amNKLXJYUlJzYzNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEwGCCsGAQUFBwEHAQH/BD0wOzAqBAIAATAkAwQDVPbgAwQE XCfwAwQDXvcYAwQCuW/kAwQCuZ4sAwQBvNDGMA0EAgACMAcDBQAqAiPgMA0GCSqG SIb3DQEBCwUAA4IBAQBGVumzgRK1y3HDlxzySJy7VWIQZCg4wdzUj09KRHz09ztf X3+RWvUejzoN4IdHhy8eH39A7Op5vd1hxqcWrHHDbNV8gSEkLLHTDKoJZdvWgPvW NVDGR7lPlN8AzcePb2RhgaG+lyBitWn329C71hRx40XjX2cDJBsYJFK3+N07R1l2 1paNO7tt2kRafNkgin90pBYVgcYz1aqUAbmcyXTSNcGyirst80BXfjv80G5rOpG3 viuIRvmKuRCrQNIK+t0aSIvexyoxbhRrmW5wLyJCheRNje7ODRdG8gHqFQ9lZFFT 9DRt4OE0A/rZZzYvo+69U67gD4+yw+vKlfx9eXqt -----END CERTIFICATE-----Generated at Mon Jan 26 12:17:36 2026 by rpki-client