This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/6683f4-3eec-4dcb-8787-731abc6f75ca/1/Bd_-p60TI6uHYJcW2YwJ_7uszJA.roa File: Bd_-p60TI6uHYJcW2YwJ_7uszJA.roa (raw, json) Hash identifier: 0MA/+j+VxQh1LxC/NSYyAnFrHH/9psMCJlvc4eBnQhA= Subject key identifier: 05:DF:FE:A7:AD:13:23:AB:87:60:97:16:D9:8C:09:FF:BB:AC:CC:90 Certificate issuer: /CN=1795ac843cd8ba90188f7313652bb561299b296f Certificate serial: 019AF7DF7B2E5799AB80ECDDE15C3B96859C Authority key identifier: 17:95:AC:84:3C:D8:BA:90:18:8F:73:13:65:2B:B5:61:29:9B:29:6F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F5WshDzYupAYj3MTZSu1YSmbKW8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/6683f4-3eec-4dcb-8787-731abc6f75ca/1/Bd_-p60TI6uHYJcW2YwJ_7uszJA.roa Signing time: Sun 07 Dec 2025 08:13:29 +0000 ROA not before: Sun 07 Dec 2025 08:13:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 28727 IP address blocks: 185.59.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/6683f4-3eec-4dcb-8787-731abc6f75ca/1/F5WshDzYupAYj3MTZSu1YSmbKW8.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/6683f4-3eec-4dcb-8787-731abc6f75ca/1/F5WshDzYupAYj3MTZSu1YSmbKW8.mft rsync://rpki.ripe.net/repository/DEFAULT/F5WshDzYupAYj3MTZSu1YSmbKW8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 02:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f7:df:7b:2e:57:99:ab:80:ec:dd:e1:5c:3b:96:85:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1795ac843cd8ba90188f7313652bb561299b296f Validity Not Before: Dec 7 08:13:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=05dffea7ad1323ab87609716d98c09ffbbaccc90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:30:98:6e:bc:e1:8f:fe:60:3a:48:bd:22:18: 73:d2:ac:9e:14:94:bc:4d:47:95:c8:e3:eb:4d:1e: f1:b1:1b:41:2e:fe:d8:b0:2a:9e:a9:83:c5:e2:6d: 3f:9c:b7:54:0e:84:ee:01:08:46:97:03:8d:5b:ab: c0:26:9e:4f:14:dc:1b:04:b8:f9:e8:9b:dd:c0:35: bd:a4:d2:4f:18:31:a0:3d:d7:49:0a:b1:7b:b9:0a: b5:4e:f0:63:ad:a4:a4:7e:14:d3:0b:51:67:3f:b1: 81:30:b8:47:fa:96:d6:21:07:37:56:ce:75:02:4c: e0:b0:42:f4:75:71:a8:e0:04:05:1b:de:1d:19:02: 0b:6e:d2:66:a6:72:b4:e6:06:94:75:3b:a8:06:ea: 45:b7:f1:d0:12:2f:cf:d4:08:b7:54:56:55:b9:6f: 48:cc:53:ed:a8:8c:b5:1d:06:92:c8:cd:ee:e3:93: 58:c5:96:5f:f2:66:36:5f:0b:16:6b:6e:bc:b5:ee: c6:cd:95:d6:e5:13:c3:e9:1d:e3:db:b3:cb:ec:24: d6:95:2c:0f:9a:a5:80:6d:2a:55:2f:07:7a:be:b5: 61:b4:4b:0e:ac:fb:da:f4:17:e0:ef:0b:db:f0:5f: 64:d0:9d:62:1a:3c:83:7e:ce:39:db:aa:11:82:58: 5c:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:DF:FE:A7:AD:13:23:AB:87:60:97:16:D9:8C:09:FF:BB:AC:CC:90 X509v3 Authority Key Identifier: keyid:17:95:AC:84:3C:D8:BA:90:18:8F:73:13:65:2B:B5:61:29:9B:29:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F5WshDzYupAYj3MTZSu1YSmbKW8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/6683f4-3eec-4dcb-8787-731abc6f75ca/1/Bd_-p60TI6uHYJcW2YwJ_7uszJA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/6683f4-3eec-4dcb-8787-731abc6f75ca/1/F5WshDzYupAYj3MTZSu1YSmbKW8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.59.240.0/24 Signature Algorithm: sha256WithRSAEncryption aa:e6:d2:88:f6:54:05:ee:9e:8d:33:9d:99:ab:b2:c3:76:78: 1a:8c:af:44:08:72:dc:59:85:d6:93:73:23:9c:97:8e:56:07: 73:a0:87:ba:48:68:ce:85:37:f7:98:9a:2d:83:27:f6:3b:2b: e5:25:c7:c2:6f:01:89:74:7e:f2:e0:40:64:f5:91:f7:69:e3: d2:0c:a1:d8:f9:84:65:75:7f:3f:6d:5a:c0:d6:33:80:09:b4: 47:77:c2:31:a5:fc:51:72:86:92:55:0b:8e:32:86:d8:46:f3: 39:f2:69:49:8a:80:c7:d1:dc:45:35:76:e6:65:93:a7:43:98: 2b:a3:18:4e:7b:36:a3:39:7d:b6:8e:bd:c6:91:5e:be:08:3d: cf:0c:97:22:a3:ac:1a:09:8e:a7:a2:ea:3d:23:d4:6b:d2:bb: ed:02:4c:08:c3:b5:bc:f9:c4:4c:39:50:23:e4:7e:b0:f4:19: a6:06:79:39:1a:a7:a0:96:35:4f:73:95:6d:4c:39:52:ae:bf: 41:22:67:bb:25:48:29:5c:53:3c:98:ea:01:e9:ca:a6:ae:a6: 25:8b:07:66:16:7c:12:e3:1c:aa:3d:2e:ef:a5:4b:b8:7a:38: 51:c2:43:62:ec:29:da:f9:a6:9e:b9:eb:e9:75:fe:63:e3:7d: 48:d6:b0:56 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZr333suV5mrgOzd4Vw7loWcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3OTVhYzg0M2NkOGJhOTAxODhmNzMxMzY1MmJiNTYxMjk5 YjI5NmYwHhcNMjUxMjA3MDgxMzI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNWRmZmVhN2FkMTMyM2FiODc2MDk3MTZkOThjMDlmZmJiYWNjYzkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtTCYbrzhj/5gOki9Ihhz0qyeFJS8 TUeVyOPrTR7xsRtBLv7YsCqeqYPF4m0/nLdUDoTuAQhGlwONW6vAJp5PFNwbBLj5 6JvdwDW9pNJPGDGgPddJCrF7uQq1TvBjraSkfhTTC1FnP7GBMLhH+pbWIQc3Vs51 AkzgsEL0dXGo4AQFG94dGQILbtJmpnK05gaUdTuoBupFt/HQEi/P1Ai3VFZVuW9I zFPtqIy1HQaSyM3u45NYxZZf8mY2XwsWa268te7GzZXW5RPD6R3j27PL7CTWlSwP mqWAbSpVLwd6vrVhtEsOrPva9Bfg7wvb8F9k0J1iGjyDfs4526oRglhcUwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAXf/qetEyOrh2CXFtmMCf+7rMyQMB8GA1UdIwQY MBaAFBeVrIQ82LqQGI9zE2UrtWEpmylvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRjVXc2hEell1cEFZajNNVFpTdTFZU21iS1c4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS82NjgzZjQtM2VlYy00ZGNiLTg3ODct NzMxYWJjNmY3NWNhLzEvQmRfLXA2MFRJNnVIWUpjVzJZd0pfN3VzekpBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS82NjgzZjQtM2VlYy00ZGNiLTg3ODctNzMxYWJjNmY3NWNh LzEvRjVXc2hEell1cEFZajNNVFpTdTFZU21iS1c4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuTvwMA0G CSqGSIb3DQEBCwUAA4IBAQCq5tKI9lQF7p6NM52Zq7LDdngajK9ECHLcWYXWk3Mj nJeOVgdzoIe6SGjOhTf3mJotgyf2OyvlJcfCbwGJdH7y4EBk9ZH3aePSDKHY+YRl dX8/bVrA1jOACbRHd8IxpfxRcoaSVQuOMobYRvM58mlJioDH0dxFNXbmZZOnQ5gr oxhOezajOX22jr3GkV6+CD3PDJcio6waCY6nouo9I9Rr0rvtAkwIw7W8+cRMOVAj 5H6w9BmmBnk5GqegljVPc5VtTDlSrr9BIme7JUgpXFM8mOoB6cqmrqYliwdmFnwS 4xyqPS7vpUu4ejhRwkNi7Cna+aaeuevpdf5j431I1rBW -----END CERTIFICATE-----Generated at Sat Dec 20 11:37:35 2025 by rpki-client