This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/a5c3dd-9f98-4c7f-af43-4cec71210734/1/BgaIoZwQRt2oZC2BzablBd309Sk.roa File: BgaIoZwQRt2oZC2BzablBd309Sk.roa (raw, json) Hash identifier: 0smh/WGipg6DXsx63DMVAp+gWZ9HDNa2kEwq3ysrdfQ= Subject key identifier: 06:06:88:A1:9C:10:46:DD:A8:64:2D:81:CD:A6:E5:05:DD:F4:F5:29 Certificate issuer: /CN=b6b726f0592b504e723305f67bab5147d4ea696d Certificate serial: 019B7D5B6493350BCF789F19F0374058CE05 Authority key identifier: B6:B7:26:F0:59:2B:50:4E:72:33:05:F6:7B:AB:51:47:D4:EA:69:6D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/trcm8FkrUE5yMwX2e6tRR9TqaW0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/a5c3dd-9f98-4c7f-af43-4cec71210734/1/BgaIoZwQRt2oZC2BzablBd309Sk.roa Signing time: Fri 02 Jan 2026 06:18:20 +0000 ROA not before: Fri 02 Jan 2026 06:18:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50506 IP address blocks: 195.191.94.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/a5c3dd-9f98-4c7f-af43-4cec71210734/1/trcm8FkrUE5yMwX2e6tRR9TqaW0.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/a5c3dd-9f98-4c7f-af43-4cec71210734/1/trcm8FkrUE5yMwX2e6tRR9TqaW0.mft rsync://rpki.ripe.net/repository/DEFAULT/trcm8FkrUE5yMwX2e6tRR9TqaW0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 18:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:64:93:35:0b:cf:78:9f:19:f0:37:40:58:ce:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b6b726f0592b504e723305f67bab5147d4ea696d Validity Not Before: Jan 2 06:18:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=060688a19c1046dda8642d81cda6e505ddf4f529 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:68:8b:2c:a8:40:13:5b:0c:29:32:f7:10:4d: 01:9e:90:20:62:04:32:cc:25:40:2f:c6:84:1c:bf: ee:3e:c9:26:d7:04:b6:22:03:c1:52:7a:c0:4a:e9: 0c:fd:2e:d7:d8:6c:d6:54:ab:9f:1a:16:bc:96:69: a6:8c:70:ef:46:43:23:33:17:ed:66:c3:d3:81:75: e6:2e:c3:9d:4b:fa:13:22:3a:4c:38:d7:14:83:53: 41:f8:09:39:77:fd:e8:a6:c4:ee:07:e3:f4:7f:5e: 72:43:56:4b:c1:94:c2:42:63:e5:de:85:6e:f9:56: 1d:62:d4:bf:d9:ee:38:5c:33:a1:df:f5:91:29:55: c0:72:15:e7:b0:fc:cb:6c:c1:d7:43:fa:f2:3a:dd: 53:14:73:ba:1f:10:5d:11:24:fa:fc:c7:aa:cd:30: 56:42:2b:88:a4:8c:64:e3:82:64:92:bd:1d:80:09: 2d:64:39:c5:2d:5c:ff:a9:d8:bc:d9:e3:4f:49:28: a8:8d:e0:09:06:2c:47:a2:56:17:4f:c6:8a:7a:b3: 46:cf:62:5f:51:5f:18:f6:5a:b6:48:51:86:d3:f9: c3:e7:77:cb:8e:b7:8a:f5:3d:88:d1:56:b7:26:c5: 43:24:a6:9d:55:6d:52:5f:63:99:f6:a4:be:fb:9d: cd:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:06:88:A1:9C:10:46:DD:A8:64:2D:81:CD:A6:E5:05:DD:F4:F5:29 X509v3 Authority Key Identifier: keyid:B6:B7:26:F0:59:2B:50:4E:72:33:05:F6:7B:AB:51:47:D4:EA:69:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/trcm8FkrUE5yMwX2e6tRR9TqaW0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a5c3dd-9f98-4c7f-af43-4cec71210734/1/BgaIoZwQRt2oZC2BzablBd309Sk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a5c3dd-9f98-4c7f-af43-4cec71210734/1/trcm8FkrUE5yMwX2e6tRR9TqaW0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.191.94.0/23 Signature Algorithm: sha256WithRSAEncryption 3d:52:38:f0:42:c7:08:bf:0a:67:8a:df:ca:78:d5:3f:87:85: 25:86:d4:9e:31:5f:b6:97:3c:93:2d:96:05:18:22:7d:8a:af: 7f:22:53:6d:bb:0e:dd:e4:0b:09:22:b6:61:a5:19:2f:00:d0: f5:d9:22:bb:c5:c6:a8:8f:57:84:34:78:c2:45:d7:7b:85:08: 76:0c:68:d0:4d:66:7a:13:75:99:08:e0:31:2a:21:65:a5:7a: f7:83:b5:3d:2a:36:de:f7:0e:ae:b1:01:14:99:5f:2a:10:ee: c8:66:d9:c3:68:a8:53:9e:2d:e2:4a:5c:3a:00:65:a0:2d:97: 7b:41:7c:d4:88:52:c5:72:b9:72:39:15:fd:f9:32:7c:89:a5: 18:6e:0c:9d:44:c2:12:01:b6:00:f3:8d:13:81:44:2e:c7:0e: 0a:4d:9a:a9:69:2e:ca:00:2b:b3:5f:89:c5:a3:b9:5b:84:00: 93:89:02:00:b5:c0:97:3b:cc:34:43:ba:93:74:90:7f:a1:ed: dc:6c:95:bf:38:f2:4b:b5:19:bb:74:8a:01:8a:1d:71:d7:7f: 3e:98:61:6e:26:70:73:de:15:b7:7e:be:48:bf:16:4f:1f:47: 4e:a4:2f:d5:cb:0e:cd:cc:2a:7b:83:69:c1:39:79:e4:33:4c: 7d:81:2f:29 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9W2STNQvPeJ8Z8DdAWM4FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2YjcyNmYwNTkyYjUwNGU3MjMzMDVmNjdiYWI1MTQ3ZDRl YTY5NmQwHhcNMjYwMTAyMDYxODIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNjA2ODhhMTljMTA0NmRkYTg2NDJkODFjZGE2ZTUwNWRkZjRmNTI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy2iLLKhAE1sMKTL3EE0BnpAgYgQy zCVAL8aEHL/uPskm1wS2IgPBUnrASukM/S7X2GzWVKufGha8lmmmjHDvRkMjMxft ZsPTgXXmLsOdS/oTIjpMONcUg1NB+Ak5d/3opsTuB+P0f15yQ1ZLwZTCQmPl3oVu +VYdYtS/2e44XDOh3/WRKVXAchXnsPzLbMHXQ/ryOt1TFHO6HxBdEST6/MeqzTBW QiuIpIxk44Jkkr0dgAktZDnFLVz/qdi82eNPSSiojeAJBixHolYXT8aKerNGz2Jf UV8Y9lq2SFGG0/nD53fLjreK9T2I0Va3JsVDJKadVW1SX2OZ9qS++53NUQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAYGiKGcEEbdqGQtgc2m5QXd9PUpMB8GA1UdIwQY MBaAFLa3JvBZK1BOcjMF9nurUUfU6mltMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdHJjbThGa3JVRTV5TXdYMmU2dFJSOVRxYVcwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9hNWMzZGQtOWY5OC00YzdmLWFmNDMt NGNlYzcxMjEwNzM0LzEvQmdhSW9ad1FSdDJvWkMyQnphYmxCZDMwOVNrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC9hNWMzZGQtOWY5OC00YzdmLWFmNDMtNGNlYzcxMjEwNzM0 LzEvdHJjbThGa3JVRTV5TXdYMmU2dFJSOVRxYVcwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBw79eMA0G CSqGSIb3DQEBCwUAA4IBAQA9UjjwQscIvwpnit/KeNU/h4UlhtSeMV+2lzyTLZYF GCJ9iq9/IlNtuw7d5AsJIrZhpRkvAND12SK7xcaoj1eENHjCRdd7hQh2DGjQTWZ6 E3WZCOAxKiFlpXr3g7U9Kjbe9w6usQEUmV8qEO7IZtnDaKhTni3iSlw6AGWgLZd7 QXzUiFLFcrlyORX9+TJ8iaUYbgydRMISAbYA840TgUQuxw4KTZqpaS7KACuzX4nF o7lbhACTiQIAtcCXO8w0Q7qTdJB/oe3cbJW/OPJLtRm7dIoBih1x138+mGFuJnBz 3hW3fr5IvxZPH0dOpC/Vyw7NzCp7g2nBOXnkM0x9gS8p -----END CERTIFICATE-----Generated at Sat Jan 10 04:20:34 2026 by rpki-client