This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/BGMxTE0_-Ky6TibuPNRzmTxUL6k.roa File: BGMxTE0_-Ky6TibuPNRzmTxUL6k.roa (raw, json) Hash identifier: a0OwK3rrYXMHfxjEnabs1KjSXWbcFZrLT7UxZW9tjc0= Subject key identifier: 04:63:31:4C:4D:3F:F8:AC:BA:4E:26:EE:3C:D4:73:99:3C:54:2F:A9 Certificate issuer: /CN=cf1df6667da38e57a25b1945fa40e593e5adfa00 Certificate serial: 019B79EC4350B3F6F82A2FCB86FEBA9C5D88 Authority key identifier: CF:1D:F6:66:7D:A3:8E:57:A2:5B:19:45:FA:40:E5:93:E5:AD:FA:00 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zx32Zn2jjleiWxlF-kDlk-Wt-gA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/BGMxTE0_-Ky6TibuPNRzmTxUL6k.roa Signing time: Thu 01 Jan 2026 14:18:05 +0000 ROA not before: Thu 01 Jan 2026 14:18:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50949 IP address blocks: 195.26.82.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.mft rsync://rpki.ripe.net/repository/DEFAULT/zx32Zn2jjleiWxlF-kDlk-Wt-gA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 23:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:43:50:b3:f6:f8:2a:2f:cb:86:fe:ba:9c:5d:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf1df6667da38e57a25b1945fa40e593e5adfa00 Validity Not Before: Jan 1 14:18:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0463314c4d3ff8acba4e26ee3cd473993c542fa9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:d4:de:8c:7b:e0:ce:59:97:10:71:02:94:bb: 67:24:63:66:2f:64:b6:b9:8d:39:10:21:05:ce:2c: 2c:24:b8:9a:fb:e3:9c:19:92:01:85:dd:e1:cd:d9: c4:50:6e:48:5d:75:05:78:0d:03:74:86:91:53:bb: 04:7f:2e:82:7c:90:19:1e:c0:cc:c9:a0:ee:6b:40: 60:d1:42:e2:e2:89:45:1f:7e:36:58:da:4c:f0:80: a4:07:7b:93:60:eb:92:2c:48:f2:23:49:f9:10:99: 8d:ed:3d:ca:01:e1:90:a7:4c:3c:87:9e:61:75:04: ef:58:64:96:51:67:0e:a0:11:16:7b:7a:a3:ed:7a: 9c:58:9e:0e:ba:e6:a1:8a:0f:9b:7d:42:13:a1:d3: c1:24:9c:fd:18:63:15:06:5a:b1:7b:b7:f0:54:86: 1d:6b:03:c0:aa:c7:d7:fd:56:20:63:be:0e:f4:61: 93:cb:fd:74:72:9d:9d:d7:e6:bb:b4:6b:0e:2c:70: d8:77:bb:75:ec:06:a8:c7:db:5a:d3:10:11:c9:dc: 1f:c0:18:46:ee:b5:01:de:fb:f5:70:86:e1:e6:22: 5a:44:84:cb:e6:d6:86:84:ae:f3:05:16:90:e0:66: 15:6a:60:a9:0a:c9:b2:2c:9f:24:17:f5:35:b3:6b: 07:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:63:31:4C:4D:3F:F8:AC:BA:4E:26:EE:3C:D4:73:99:3C:54:2F:A9 X509v3 Authority Key Identifier: keyid:CF:1D:F6:66:7D:A3:8E:57:A2:5B:19:45:FA:40:E5:93:E5:AD:FA:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zx32Zn2jjleiWxlF-kDlk-Wt-gA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/BGMxTE0_-Ky6TibuPNRzmTxUL6k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.26.82.0/23 Signature Algorithm: sha256WithRSAEncryption 32:a8:6a:8e:4e:14:d9:59:8b:cb:57:4c:cf:d9:70:6d:97:12: c2:9a:45:e7:77:0f:71:a5:1f:9a:af:13:c5:ec:c7:f7:f1:fd: d3:93:50:8c:43:ec:63:4c:cf:c9:da:5d:b2:c2:9a:fc:0a:3b: c0:85:e8:29:4d:c2:ce:1c:6d:44:13:37:a5:df:e3:9a:71:c9: ef:fc:d8:c7:9e:1c:d9:c6:90:a6:cf:0e:9e:45:b0:57:f0:ba: 75:60:ec:99:69:65:0d:a0:38:2c:26:5b:b0:bb:05:f3:4a:b8: f4:fe:0a:f4:db:d2:69:20:80:70:ba:77:bb:e6:7b:60:a0:23: 7c:ed:8a:c7:6d:72:40:85:8e:7f:d9:bf:a8:5c:da:21:b1:02: 0b:a2:ce:20:86:0f:33:41:75:0b:3f:a9:7c:b2:2d:10:01:ac: 53:bf:b7:b7:2e:8c:07:5c:9e:99:ff:f7:01:61:3d:75:ea:fc: 11:60:7f:79:a8:3e:e1:23:a5:ca:bb:df:27:93:a3:aa:46:9e: ff:c5:0e:61:e4:a4:a3:43:b3:73:32:b5:8c:5f:93:d8:43:3d: d0:65:c2:db:fa:09:1c:d5:9c:af:e7:77:35:61:da:4f:74:99: b1:76:dc:fa:92:bb:fa:f2:9e:8b:ba:b4:ee:e4:57:38:22:31: 69:b4:07:7d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57ENQs/b4Ki/Lhv66nF2IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmMWRmNjY2N2RhMzhlNTdhMjViMTk0NWZhNDBlNTkzZTVh ZGZhMDAwHhcNMjYwMTAxMTQxODA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNDYzMzE0YzRkM2ZmOGFjYmE0ZTI2ZWUzY2Q0NzM5OTNjNTQyZmE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0tTejHvgzlmXEHEClLtnJGNmL2S2 uY05ECEFziwsJLia++OcGZIBhd3hzdnEUG5IXXUFeA0DdIaRU7sEfy6CfJAZHsDM yaDua0Bg0ULi4olFH342WNpM8ICkB3uTYOuSLEjyI0n5EJmN7T3KAeGQp0w8h55h dQTvWGSWUWcOoBEWe3qj7XqcWJ4Ouuahig+bfUITodPBJJz9GGMVBlqxe7fwVIYd awPAqsfX/VYgY74O9GGTy/10cp2d1+a7tGsOLHDYd7t17Aaox9ta0xARydwfwBhG 7rUB3vv1cIbh5iJaRITL5taGhK7zBRaQ4GYVamCpCsmyLJ8kF/U1s2sHqQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFARjMUxNP/isuk4m7jzUc5k8VC+pMB8GA1UdIwQY MBaAFM8d9mZ9o45XolsZRfpA5ZPlrfoAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvengzMlpuMmpqbGVpV3hsRi1rRGxrLVd0LWdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9lNTc4OWEtMTYwZC00ODk2LWEyNWEt OGRmMzYzMzdlNmJjLzEvQkdNeFRFMF8tS3k2VGlidVBOUnptVHhVTDZrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi9lNTc4OWEtMTYwZC00ODk2LWEyNWEtOGRmMzYzMzdlNmJj LzEvengzMlpuMmpqbGVpV3hsRi1rRGxrLVd0LWdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwxpSMA0G CSqGSIb3DQEBCwUAA4IBAQAyqGqOThTZWYvLV0zP2XBtlxLCmkXndw9xpR+arxPF 7Mf38f3Tk1CMQ+xjTM/J2l2ywpr8CjvAhegpTcLOHG1EEzel3+Oaccnv/NjHnhzZ xpCmzw6eRbBX8Lp1YOyZaWUNoDgsJluwuwXzSrj0/gr029JpIIBwune75ntgoCN8 7YrHbXJAhY5/2b+oXNohsQILos4ghg8zQXULP6l8si0QAaxTv7e3LowHXJ6Z//cB YT116vwRYH95qD7hI6XKu98nk6OqRp7/xQ5h5KSjQ7NzMrWMX5PYQz3QZcLb+gkc 1Zyv53c1YdpPdJmxdtz6krv68p6LurTu5Fc4IjFptAd9 -----END CERTIFICATE-----Generated at Mon Jan 26 09:25:43 2026 by rpki-client