This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/7ed7b1-b8f3-43f3-96e3-1dc54d1c03a3/1/BGnZrxh766n-RwiVyZM8GwNTqh0.roa File: BGnZrxh766n-RwiVyZM8GwNTqh0.roa (raw, json) Hash identifier: /zWDyCDhQQVXOZUHRipaDLFDgbYWX/UYPO8XJtBp0uE= Subject key identifier: 04:69:D9:AF:18:7B:EB:A9:FE:47:08:95:C9:93:3C:1B:03:53:AA:1D Certificate issuer: /CN=4c3789ecf67e04298c5ee44c67d8fb7f5d6d95a1 Certificate serial: 019B77C6C838AC9B4CA4426A906A17809B98 Authority key identifier: 4C:37:89:EC:F6:7E:04:29:8C:5E:E4:4C:67:D8:FB:7F:5D:6D:95:A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TDeJ7PZ-BCmMXuRMZ9j7f11tlaE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/7ed7b1-b8f3-43f3-96e3-1dc54d1c03a3/1/BGnZrxh766n-RwiVyZM8GwNTqh0.roa Signing time: Thu 01 Jan 2026 04:17:54 +0000 ROA not before: Thu 01 Jan 2026 04:17:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48278 IP address blocks: 94.244.0.0/18 maxlen: 22 185.191.148.0/22 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/7ed7b1-b8f3-43f3-96e3-1dc54d1c03a3/1/TDeJ7PZ-BCmMXuRMZ9j7f11tlaE.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/7ed7b1-b8f3-43f3-96e3-1dc54d1c03a3/1/TDeJ7PZ-BCmMXuRMZ9j7f11tlaE.mft rsync://rpki.ripe.net/repository/DEFAULT/TDeJ7PZ-BCmMXuRMZ9j7f11tlaE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 Jan 2026 22:01:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:c8:38:ac:9b:4c:a4:42:6a:90:6a:17:80:9b:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c3789ecf67e04298c5ee44c67d8fb7f5d6d95a1 Validity Not Before: Jan 1 04:17:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0469d9af187beba9fe470895c9933c1b0353aa1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:c1:c5:a3:aa:29:49:ef:35:b4:2b:45:68:8c: c9:6a:f2:6a:cd:e9:1f:14:88:85:af:27:b4:a6:c2: 8f:e5:f5:51:c9:8c:45:9d:56:87:76:20:59:f6:69: 32:36:70:ae:1b:91:7e:10:8f:3e:79:fc:ed:c1:c0: 3e:a6:70:a5:a9:1c:f8:97:ef:cc:e6:2b:84:47:94: 2e:b8:6e:51:51:bd:5f:9c:b6:fc:c0:99:91:5c:19: 50:15:3c:80:ee:fa:75:62:1d:b4:25:17:f5:49:39: b4:24:01:28:51:d9:5d:fc:66:8f:68:a2:15:23:73: 78:be:95:2c:21:78:c6:b1:4a:8a:5c:1d:2b:03:95: 8f:58:81:dd:98:76:61:2b:57:f7:87:3e:95:b7:47: cc:5d:3e:dc:8f:c9:cc:0e:81:f2:2c:7b:7d:ec:25: 71:b3:7f:d0:1b:2d:ff:bf:d1:6a:c4:b3:43:6b:ec: 8c:7d:01:0c:94:01:6d:b1:05:8b:18:f3:e7:1c:17: 07:c7:59:9f:88:d6:08:87:56:6a:5f:9d:85:ea:f3: 23:f7:4d:46:13:b1:b5:f5:2a:6a:b3:e6:bb:5d:61: 23:bd:ba:a1:ef:26:b8:79:ad:d2:67:e1:02:c3:53: e3:2f:ca:99:cb:ed:0d:de:ba:dd:9b:75:b6:e2:bc: 7a:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:69:D9:AF:18:7B:EB:A9:FE:47:08:95:C9:93:3C:1B:03:53:AA:1D X509v3 Authority Key Identifier: keyid:4C:37:89:EC:F6:7E:04:29:8C:5E:E4:4C:67:D8:FB:7F:5D:6D:95:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDeJ7PZ-BCmMXuRMZ9j7f11tlaE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/7ed7b1-b8f3-43f3-96e3-1dc54d1c03a3/1/BGnZrxh766n-RwiVyZM8GwNTqh0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/7ed7b1-b8f3-43f3-96e3-1dc54d1c03a3/1/TDeJ7PZ-BCmMXuRMZ9j7f11tlaE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.244.0.0/18 185.191.148.0/22 Signature Algorithm: sha256WithRSAEncryption 98:e5:c9:b1:96:3a:4b:1f:ea:b9:e4:22:75:ad:30:7d:01:cc: 4a:a4:81:18:3c:90:bc:b6:cf:f5:aa:d2:3a:2e:e1:a6:d6:02: 09:b4:3f:74:c3:45:26:c4:92:8d:a6:d8:6a:fd:4e:f8:e6:2c: 76:d2:3d:49:a5:bb:88:63:f2:97:10:27:2e:08:e0:be:81:bd: da:ae:e0:15:e2:74:c3:5a:7c:e0:18:d4:b8:24:2c:12:bb:aa: 0c:d0:5a:07:b7:06:a8:54:64:de:56:ae:e9:c6:6f:1b:c0:ff: 7e:0c:bb:fd:44:a0:6a:eb:87:50:6c:05:be:12:dd:75:c6:4e: 43:f6:19:6c:dd:49:d3:71:ce:30:3d:b6:c4:f8:96:bd:5a:1e: 64:81:73:b5:ed:68:33:c4:d3:b1:b9:0c:69:d7:3e:5a:58:b8: 37:1c:59:25:cc:c1:bb:01:dc:d4:3b:1c:c1:f9:d2:43:c0:e4: 0f:75:37:f0:48:7b:86:d8:50:f9:05:d6:32:ea:b1:62:bb:bb: a9:eb:13:5b:2b:00:0d:10:85:d0:4c:52:84:14:5e:62:bd:6d: 15:cf:30:d2:ea:90:e1:6b:ef:48:bb:e5:b8:74:d5:49:38:b8: a7:43:92:68:11:8b:88:f4:4f:fd:a5:9d:dd:ed:ac:9c:dc:40: cf:64:01:fe -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt3xsg4rJtMpEJqkGoXgJuYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjMzc4OWVjZjY3ZTA0Mjk4YzVlZTQ0YzY3ZDhmYjdmNWQ2 ZDk1YTEwHhcNMjYwMTAxMDQxNzU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNDY5ZDlhZjE4N2JlYmE5ZmU0NzA4OTVjOTkzM2MxYjAzNTNhYTFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0cHFo6opSe81tCtFaIzJavJqzekf FIiFrye0psKP5fVRyYxFnVaHdiBZ9mkyNnCuG5F+EI8+efztwcA+pnClqRz4l+/M 5iuER5QuuG5RUb1fnLb8wJmRXBlQFTyA7vp1Yh20JRf1STm0JAEoUdld/GaPaKIV I3N4vpUsIXjGsUqKXB0rA5WPWIHdmHZhK1f3hz6Vt0fMXT7cj8nMDoHyLHt97CVx s3/QGy3/v9FqxLNDa+yMfQEMlAFtsQWLGPPnHBcHx1mfiNYIh1ZqX52F6vMj901G E7G19Spqs+a7XWEjvbqh7ya4ea3SZ+ECw1PjL8qZy+0N3rrdm3W24rx6JwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFARp2a8Ye+up/kcIlcmTPBsDU6odMB8GA1UdIwQY MBaAFEw3iez2fgQpjF7kTGfY+39dbZWhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVERlSjdQWi1CQ21NWHVSTVo5ajdmMTF0bGFFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC83ZWQ3YjEtYjhmMy00M2YzLTk2ZTMt MWRjNTRkMWMwM2EzLzEvQkduWnJ4aDc2Nm4tUndpVnlaTThHd05UcWgwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC83ZWQ3YjEtYjhmMy00M2YzLTk2ZTMtMWRjNTRkMWMwM2Ez LzEvVERlSjdQWi1CQ21NWHVSTVo5ajdmMTF0bGFFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQGXvQAAwQC ub+UMA0GCSqGSIb3DQEBCwUAA4IBAQCY5cmxljpLH+q55CJ1rTB9AcxKpIEYPJC8 ts/1qtI6LuGm1gIJtD90w0UmxJKNpthq/U745ix20j1JpbuIY/KXECcuCOC+gb3a ruAV4nTDWnzgGNS4JCwSu6oM0FoHtwaoVGTeVq7pxm8bwP9+DLv9RKBq64dQbAW+ Et11xk5D9hls3UnTcc4wPbbE+Ja9Wh5kgXO17WgzxNOxuQxp1z5aWLg3HFklzMG7 AdzUOxzB+dJDwOQPdTfwSHuG2FD5BdYy6rFiu7up6xNbKwANEIXQTFKEFF5ivW0V zzDS6pDha+9Iu+W4dNVJOLinQ5JoEYuI9E/9pZ3d7ayc3EDPZAH+ -----END CERTIFICATE-----Generated at Sun Jan 11 07:32:17 2026 by rpki-client