This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/bc8e10-461e-4ce4-8be9-6239733c6184/1/BSE98FzK5j337SGXcJiqoMH_kF4.roa File: BSE98FzK5j337SGXcJiqoMH_kF4.roa (raw, json) Hash identifier: xTUQIPRKlSvAwXtZUqS4ipgxLNyVd2NotYhIujM5Dgk= Subject key identifier: 05:21:3D:F0:5C:CA:E6:3D:F7:ED:21:97:70:98:AA:A0:C1:FF:90:5E Certificate issuer: /CN=977775ce8804695996ce77c7d3681b9c241b362f Certificate serial: 019B7910A5195E62AC4EC65AFA689DD0F8E6 Authority key identifier: 97:77:75:CE:88:04:69:59:96:CE:77:C7:D3:68:1B:9C:24:1B:36:2F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l3d1zogEaVmWznfH02gbnCQbNi8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/bc8e10-461e-4ce4-8be9-6239733c6184/1/BSE98FzK5j337SGXcJiqoMH_kF4.roa Signing time: Thu 01 Jan 2026 10:18:12 +0000 ROA not before: Thu 01 Jan 2026 10:18:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15943 IP address blocks: 185.45.16.0/22 maxlen: 22 2a01:7960::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/bc8e10-461e-4ce4-8be9-6239733c6184/1/l3d1zogEaVmWznfH02gbnCQbNi8.crl rsync://rpki.ripe.net/repository/DEFAULT/f9/bc8e10-461e-4ce4-8be9-6239733c6184/1/l3d1zogEaVmWznfH02gbnCQbNi8.mft rsync://rpki.ripe.net/repository/DEFAULT/l3d1zogEaVmWznfH02gbnCQbNi8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:a5:19:5e:62:ac:4e:c6:5a:fa:68:9d:d0:f8:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=977775ce8804695996ce77c7d3681b9c241b362f Validity Not Before: Jan 1 10:18:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=05213df05ccae63df7ed21977098aaa0c1ff905e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:91:4a:75:34:44:a0:ec:59:4d:67:88:bc:2a: aa:cb:80:e1:18:42:e6:62:ac:81:e6:77:2e:d0:2b: 84:ea:12:03:ce:cf:f0:cd:78:26:cb:c8:78:ce:95: b2:0b:3e:99:e9:bf:23:f7:96:b1:c3:70:88:d4:ed: 47:c8:7a:7a:36:e8:02:ad:8f:7a:09:e3:af:29:b3: 54:67:82:5c:c0:7e:70:09:7a:ed:04:38:1c:29:10: b9:91:da:73:fa:b0:3a:e5:7c:b2:86:f6:a2:06:7d: b7:b6:0f:96:39:0d:1e:13:30:38:0f:a1:7f:70:6c: fd:bf:7e:1e:0e:37:d0:5a:c8:ab:ca:ff:41:2f:b9: 1c:cd:94:c6:29:49:98:e0:a5:8d:a8:90:24:82:30: 6b:10:6e:6b:67:9c:e3:db:75:e8:2c:3d:93:e1:31: c4:34:45:02:d6:84:c7:33:07:2f:c2:c9:e0:f8:1d: 55:ad:12:a1:2c:76:e2:1e:5a:07:ee:55:5f:f4:a7: 99:b4:02:45:f3:03:f9:b8:be:42:8d:28:39:82:b1: 21:4b:a1:39:c3:79:e3:e5:4b:69:b7:1b:11:e9:4c: 11:a9:83:55:a3:20:db:f8:4c:67:ef:bc:3c:38:ed: 2a:09:55:d2:6b:08:0e:93:78:2e:2a:90:60:30:cd: f3:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:21:3D:F0:5C:CA:E6:3D:F7:ED:21:97:70:98:AA:A0:C1:FF:90:5E X509v3 Authority Key Identifier: keyid:97:77:75:CE:88:04:69:59:96:CE:77:C7:D3:68:1B:9C:24:1B:36:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l3d1zogEaVmWznfH02gbnCQbNi8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/bc8e10-461e-4ce4-8be9-6239733c6184/1/BSE98FzK5j337SGXcJiqoMH_kF4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/bc8e10-461e-4ce4-8be9-6239733c6184/1/l3d1zogEaVmWznfH02gbnCQbNi8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.45.16.0/22 IPv6: 2a01:7960::/32 Signature Algorithm: sha256WithRSAEncryption 51:e0:2f:c8:eb:76:9a:a6:40:a4:90:8c:e6:d0:82:fe:01:b4: f0:50:5c:6a:ee:8c:92:a3:6d:10:8e:22:3a:d2:c5:b1:8b:55: 41:b7:73:7d:d1:9e:cb:87:ad:06:72:b3:41:0c:33:20:30:23: 17:7e:43:1e:84:31:71:3b:7e:e6:78:00:e3:13:64:a1:6d:c6: bc:14:94:92:28:84:8a:06:f1:b9:53:9c:e1:3a:05:ac:66:da: 1d:57:07:e1:c6:fd:3e:f9:49:6a:ca:65:94:2a:46:4b:dc:2e: 43:5b:33:ab:2f:0f:a4:13:93:f1:87:85:2f:8b:37:8e:84:2c: 82:20:81:97:60:89:76:64:15:7c:f6:ee:1e:f9:b8:30:99:2f: a4:f7:bf:80:16:6a:ee:90:dc:76:00:24:a5:0f:51:1c:8b:93: bd:2e:b1:b8:e8:5b:be:0d:6b:d8:da:9b:e3:3c:c6:e0:64:af: aa:3b:ba:b8:c3:fa:c1:c4:60:cf:c1:06:e0:e9:60:af:29:b0: ee:0b:2f:29:ca:91:1f:c5:93:8c:d2:0a:14:6c:20:9f:4e:68: 26:f1:18:7d:d1:b0:77:8d:d3:63:f8:65:f9:b8:e7:bb:96:21: 70:13:d9:99:7b:af:c3:2c:e5:8c:61:cd:7a:99:d8:c7:55:3f: 61:32:cf:7c -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt5EKUZXmKsTsZa+mid0PjmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3Nzc3NWNlODgwNDY5NTk5NmNlNzdjN2QzNjgxYjljMjQx YjM2MmYwHhcNMjYwMTAxMTAxODEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNTIxM2RmMDVjY2FlNjNkZjdlZDIxOTc3MDk4YWFhMGMxZmY5MDVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5JFKdTREoOxZTWeIvCqqy4DhGELm YqyB5ncu0CuE6hIDzs/wzXgmy8h4zpWyCz6Z6b8j95axw3CI1O1HyHp6NugCrY96 CeOvKbNUZ4JcwH5wCXrtBDgcKRC5kdpz+rA65XyyhvaiBn23tg+WOQ0eEzA4D6F/ cGz9v34eDjfQWsiryv9BL7kczZTGKUmY4KWNqJAkgjBrEG5rZ5zj23XoLD2T4THE NEUC1oTHMwcvwsng+B1VrRKhLHbiHloH7lVf9KeZtAJF8wP5uL5CjSg5grEhS6E5 w3nj5UtptxsR6UwRqYNVoyDb+Exn77w8OO0qCVXSawgOk3guKpBgMM3ziwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFAUhPfBcyuY99+0hl3CYqqDB/5BeMB8GA1UdIwQY MBaAFJd3dc6IBGlZls53x9NoG5wkGzYvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbDNkMXpvZ0VhVm1Xem5mSDAyZ2JuQ1FiTmk4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS9iYzhlMTAtNDYxZS00Y2U0LThiZTkt NjIzOTczM2M2MTg0LzEvQlNFOThGeks1ajMzN1NHWGNKaXFvTUhfa0Y0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOS9iYzhlMTAtNDYxZS00Y2U0LThiZTktNjIzOTczM2M2MTg0 LzEvbDNkMXpvZ0VhVm1Xem5mSDAyZ2JuQ1FiTmk4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuS0QMA0E AgACMAcDBQAqAXlgMA0GCSqGSIb3DQEBCwUAA4IBAQBR4C/I63aapkCkkIzm0IL+ AbTwUFxq7oySo20QjiI60sWxi1VBt3N90Z7Lh60GcrNBDDMgMCMXfkMehDFxO37m eADjE2Shbca8FJSSKISKBvG5U5zhOgWsZtodVwfhxv0++UlqymWUKkZL3C5DWzOr Lw+kE5Pxh4UvizeOhCyCIIGXYIl2ZBV89u4e+bgwmS+k97+AFmrukNx2ACSlD1Ec i5O9LrG46Fu+DWvY2pvjPMbgZK+qO7q4w/rBxGDPwQbg6WCvKbDuCy8pypEfxZOM 0goUbCCfTmgm8Rh90bB3jdNj+GX5uOe7liFwE9mZe6/DLOWMYc16mdjHVT9hMs98 -----END CERTIFICATE-----Generated at Sun Jan 25 17:44:37 2026 by rpki-client