This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/0205f2-df2a-41d6-bc2d-72827fe6d7af/1/beJshXTCFytgHzjAamZUfkQuubM.roa File: beJshXTCFytgHzjAamZUfkQuubM.roa (raw, json) Hash identifier: Lh9/62VbhV+tIPQCobGS97fKdIV26rAllSw/ibORPkA= Subject key identifier: 6D:E2:6C:85:74:C2:17:2B:60:1F:38:C0:6A:66:54:7E:44:2E:B9:B3 Certificate issuer: /CN=7e058377510a3a9245ce72cbe88e0efa19719204 Certificate serial: 019B7CECC85DAF979E42E29CD9477827FDE8 Authority key identifier: 7E:05:83:77:51:0A:3A:92:45:CE:72:CB:E8:8E:0E:FA:19:71:92:04 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fgWDd1EKOpJFznLL6I4O-hlxkgQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/0205f2-df2a-41d6-bc2d-72827fe6d7af/1/beJshXTCFytgHzjAamZUfkQuubM.roa Signing time: Fri 02 Jan 2026 04:17:31 +0000 ROA not before: Fri 02 Jan 2026 04:17:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42468 IP address blocks: 185.83.208.0/24 maxlen: 24 185.83.209.0/24 maxlen: 24 185.83.210.0/24 maxlen: 24 185.83.211.0/24 maxlen: 24 2a03:6da0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/0205f2-df2a-41d6-bc2d-72827fe6d7af/1/fgWDd1EKOpJFznLL6I4O-hlxkgQ.crl rsync://rpki.ripe.net/repository/DEFAULT/16/0205f2-df2a-41d6-bc2d-72827fe6d7af/1/fgWDd1EKOpJFznLL6I4O-hlxkgQ.mft rsync://rpki.ripe.net/repository/DEFAULT/fgWDd1EKOpJFznLL6I4O-hlxkgQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ec:c8:5d:af:97:9e:42:e2:9c:d9:47:78:27:fd:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e058377510a3a9245ce72cbe88e0efa19719204 Validity Not Before: Jan 2 04:17:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6de26c8574c2172b601f38c06a66547e442eb9b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:c0:69:40:90:5e:94:22:74:52:9f:e7:3f:bb: 02:89:d5:fd:43:08:8f:5e:a7:04:55:a1:f1:97:45: f1:07:c3:7e:6d:ed:b6:60:34:36:c1:37:e0:75:2c: d9:2f:90:0f:9b:b5:fc:5a:1a:19:ba:fd:a2:22:4f: 01:45:c5:7b:80:8e:6b:64:e0:17:5a:ef:d2:1a:de: 80:6a:47:46:eb:40:04:bd:30:c6:bb:50:a2:fa:9d: 98:79:f4:0a:93:cb:0b:05:df:75:bd:a9:42:ba:6b: 62:1c:34:77:c3:1a:7b:0b:32:88:ad:56:46:5e:e8: 6a:e0:a1:cf:aa:0a:a4:23:83:d7:88:61:66:9a:0e: 97:6e:55:c3:11:4b:ef:1c:18:ee:66:94:cd:46:54: e8:35:d5:1f:4c:0c:4e:12:df:17:13:9f:8b:05:74: 34:98:43:0d:36:4f:15:97:21:09:db:4c:b0:6c:e3: d7:69:bf:0b:06:e0:77:4c:9a:6b:85:c2:e2:83:d6: 43:bf:80:40:dc:2c:2d:08:ce:94:5e:fc:a4:1a:bc: f2:6a:16:80:93:f4:70:51:fe:c5:f0:38:89:df:a5: 38:15:7f:b6:55:14:0c:1b:7b:34:78:ed:a1:93:e6: 3f:d2:4b:b9:39:e3:66:a6:72:4f:74:3c:86:11:9b: fd:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:E2:6C:85:74:C2:17:2B:60:1F:38:C0:6A:66:54:7E:44:2E:B9:B3 X509v3 Authority Key Identifier: keyid:7E:05:83:77:51:0A:3A:92:45:CE:72:CB:E8:8E:0E:FA:19:71:92:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fgWDd1EKOpJFznLL6I4O-hlxkgQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/0205f2-df2a-41d6-bc2d-72827fe6d7af/1/beJshXTCFytgHzjAamZUfkQuubM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/0205f2-df2a-41d6-bc2d-72827fe6d7af/1/fgWDd1EKOpJFznLL6I4O-hlxkgQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.83.208.0/22 IPv6: 2a03:6da0::/32 Signature Algorithm: sha256WithRSAEncryption 7f:d9:9f:21:b6:91:00:5b:0a:a7:dc:f7:f8:e4:9d:de:d1:9e: 92:f7:1f:14:00:00:36:58:5a:d0:d7:bb:24:60:f0:93:d5:6f: 86:c9:be:f3:fa:2e:8a:8b:66:8c:ba:d4:6d:15:99:73:b8:c2: 55:cd:16:1e:00:7c:92:38:9a:25:23:c6:fd:7d:00:00:25:fa: fd:c1:24:3d:cf:c0:98:81:69:2b:57:ef:64:d8:31:39:90:bb: e1:ec:52:83:c9:32:65:73:e2:0b:55:86:1f:71:c1:ea:fe:e5: 17:c3:80:56:0b:7b:71:f2:cc:51:11:60:c1:aa:52:c5:b1:9c: 75:84:88:ad:ea:be:58:ea:92:7b:8a:07:fc:aa:e9:4a:b3:d4: 57:cf:ab:a4:af:87:a5:fb:63:57:e4:1c:3d:5a:b4:32:e3:99: 1a:7b:61:ac:0e:7d:0f:9f:17:de:0c:0d:77:bb:54:51:ea:c4: e6:95:be:07:0d:e3:b9:75:b1:94:96:92:16:4c:fd:81:c2:22: 09:89:82:53:90:94:10:f2:f7:1b:f9:af:74:8b:8b:b2:45:39: c4:27:38:ae:06:1d:a0:a4:45:4f:83:26:db:d1:48:f6:10:ed: 62:0c:08:65:9d:ea:75:a8:dc:cf:7e:1c:84:a1:b6:86:3e:15: dc:5c:12:33 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt87Mhdr5eeQuKc2Ud4J/3oMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlMDU4Mzc3NTEwYTNhOTI0NWNlNzJjYmU4OGUwZWZhMTk3 MTkyMDQwHhcNMjYwMTAyMDQxNzMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZGUyNmM4NTc0YzIxNzJiNjAxZjM4YzA2YTY2NTQ3ZTQ0MmViOWIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2cBpQJBelCJ0Up/nP7sCidX9QwiP XqcEVaHxl0XxB8N+be22YDQ2wTfgdSzZL5APm7X8WhoZuv2iIk8BRcV7gI5rZOAX Wu/SGt6AakdG60AEvTDGu1Ci+p2YefQKk8sLBd91valCumtiHDR3wxp7CzKIrVZG Xuhq4KHPqgqkI4PXiGFmmg6XblXDEUvvHBjuZpTNRlToNdUfTAxOEt8XE5+LBXQ0 mEMNNk8VlyEJ20ywbOPXab8LBuB3TJprhcLig9ZDv4BA3CwtCM6UXvykGrzyahaA k/RwUf7F8DiJ36U4FX+2VRQMG3s0eO2hk+Y/0ku5OeNmpnJPdDyGEZv9PQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFG3ibIV0whcrYB84wGpmVH5ELrmzMB8GA1UdIwQY MBaAFH4Fg3dRCjqSRc5yy+iODvoZcZIEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmdXRGQxRUtPcEpGem5MTDZJNE8taGx4a2dRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi8wMjA1ZjItZGYyYS00MWQ2LWJjMmQt NzI4MjdmZTZkN2FmLzEvYmVKc2hYVENGeXRnSHpqQWFtWlVma1F1dWJNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi8wMjA1ZjItZGYyYS00MWQ2LWJjMmQtNzI4MjdmZTZkN2Fm LzEvZmdXRGQxRUtPcEpGem5MTDZJNE8taGx4a2dRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuVPQMA0E AgACMAcDBQAqA22gMA0GCSqGSIb3DQEBCwUAA4IBAQB/2Z8htpEAWwqn3Pf45J3e 0Z6S9x8UAAA2WFrQ17skYPCT1W+Gyb7z+i6Ki2aMutRtFZlzuMJVzRYeAHySOJol I8b9fQAAJfr9wSQ9z8CYgWkrV+9k2DE5kLvh7FKDyTJlc+ILVYYfccHq/uUXw4BW C3tx8sxREWDBqlLFsZx1hIit6r5Y6pJ7igf8qulKs9RXz6ukr4el+2NX5Bw9WrQy 45kae2GsDn0PnxfeDA13u1RR6sTmlb4HDeO5dbGUlpIWTP2BwiIJiYJTkJQQ8vcb +a90i4uyRTnEJziuBh2gpEVPgybb0Uj2EO1iDAhlnep1qNzPfhyEobaGPhXcXBIz -----END CERTIFICATE-----Generated at Mon Jan 12 02:50:26 2026 by rpki-client