This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/BQ3nctp54hpoqH9aS2uSfJvE8bg.roa File: BQ3nctp54hpoqH9aS2uSfJvE8bg.roa (raw, json) Hash identifier: peFLsrKl1kPT5FDKZlT1iVOrpcv7PGajE9mux449P1I= Subject key identifier: 05:0D:E7:72:DA:79:E2:1A:68:A8:7F:5A:4B:6B:92:7C:9B:C4:F1:B8 Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Certificate serial: 019B27A25B617939C335B3D49CC1665989B4 Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/BQ3nctp54hpoqH9aS2uSfJvE8bg.roa Signing time: Tue 16 Dec 2025 14:48:30 +0000 ROA not before: Tue 16 Dec 2025 14:48:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 16509 IP address blocks: 192.36.247.0/24 maxlen: 24 192.71.84.0/24 maxlen: 24 192.71.254.0/23 maxlen: 24 192.176.43.0/24 maxlen: 24 193.182.113.0/24 maxlen: 24 193.234.120.0/22 maxlen: 24 194.103.8.0/24 maxlen: 24 2a01:280:6::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 14:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:27:a2:5b:61:79:39:c3:35:b3:d4:9c:c1:66:59:89:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Validity Not Before: Dec 16 14:48:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=050de772da79e21a68a87f5a4b6b927c9bc4f1b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:6a:a4:84:47:87:a2:2f:76:d1:5c:48:32:39: e8:18:12:9a:a7:8a:22:6b:ed:78:da:ca:96:90:87: 47:c9:f7:4a:94:ac:42:20:9f:d5:98:9e:08:78:9a: af:ac:4c:b9:05:e2:76:e3:9a:b7:b5:f4:18:6c:fb: e2:61:d0:fa:29:d6:d6:dc:89:40:b4:3b:c3:8b:47: db:33:ae:6a:51:63:14:0f:a8:d9:5a:4f:46:5d:10: 01:7b:1e:3c:f0:e4:41:40:13:a4:9d:06:1f:23:b6: 4a:46:db:61:c5:0f:93:8a:48:bf:b3:6c:45:6f:3d: 07:65:05:1d:ec:5f:97:45:45:c8:7d:ef:6d:76:b6: 05:c5:3a:1a:69:5e:7b:a2:71:5b:36:7f:0b:d7:2e: 77:39:af:fa:5c:c7:df:b9:97:dc:d0:57:b6:d3:38: 0e:84:72:19:40:5a:34:2b:66:58:4d:fa:a3:1f:82: c3:fc:31:63:d6:e9:be:e1:2a:6b:a7:c8:54:10:2d: 37:a5:40:ae:81:5e:8a:cd:a1:6b:e2:2e:9d:19:06: ba:b6:67:d9:d8:fa:a9:4c:9c:47:35:b5:87:df:74: d8:1c:f2:da:55:ab:63:05:ba:77:90:5b:e5:e7:56: 69:fd:83:e5:20:b1:71:41:26:44:c8:66:19:2d:6e: 9c:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:0D:E7:72:DA:79:E2:1A:68:A8:7F:5A:4B:6B:92:7C:9B:C4:F1:B8 X509v3 Authority Key Identifier: keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/BQ3nctp54hpoqH9aS2uSfJvE8bg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.36.247.0/24 192.71.84.0/24 192.71.254.0/23 192.176.43.0/24 193.182.113.0/24 193.234.120.0/22 194.103.8.0/24 IPv6: 2a01:280:6::/48 Signature Algorithm: sha256WithRSAEncryption 83:9f:47:71:a3:a8:06:fd:b5:86:60:78:35:6d:2b:0e:2b:08: 6d:63:fa:64:45:ae:a6:d3:38:b8:80:e4:64:03:e9:84:41:7f: 7f:99:e0:ed:65:88:b8:7d:05:11:b8:7d:9e:12:48:7b:29:06: b4:a6:6d:fe:9b:f7:b9:77:27:6e:f2:42:24:09:42:75:45:c4: bc:e9:6c:be:37:67:60:58:5e:9a:35:32:27:92:78:25:c5:25: 7a:4c:47:55:e0:ff:7f:ef:30:26:a1:7f:38:00:ce:74:9e:70: 99:99:9c:06:4a:f2:98:08:36:ec:30:0f:07:16:11:b2:14:72: 94:74:51:2a:69:b5:be:fe:bb:cb:f4:b2:af:70:fc:0e:af:52: 34:90:2e:bb:e4:57:fd:02:48:db:46:42:73:6b:5f:3b:ea:b7: 30:59:cd:1b:10:98:5c:a3:07:ce:30:86:88:a6:be:d3:81:87: f8:97:e7:e2:a5:49:fd:73:a4:bc:56:10:0f:43:28:29:9a:38: 3d:ee:69:b6:44:a4:d3:62:b3:82:3e:fe:51:43:94:92:51:3c: 83:dd:49:23:68:0a:3b:7f:a0:3b:62:04:a6:64:25:3c:6b:2f: 72:17:da:42:78:f1:ec:22:57:d2:ac:9a:df:b0:1a:52:17:10: d3:4a:0d:56 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgISAZsnoltheTnDNbPUnMFmWYm0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxMzVjN2Y1NzFlZWZlYjY3NDA0YWI2YzQ1ZmQ0NzU1NTFh ZGFmMWIwHhcNMjUxMjE2MTQ0ODMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNTBkZTc3MmRhNzllMjFhNjhhODdmNWE0YjZiOTI3YzliYzRmMWI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvGqkhEeHoi920VxIMjnoGBKap4oi a+142sqWkIdHyfdKlKxCIJ/VmJ4IeJqvrEy5BeJ245q3tfQYbPviYdD6KdbW3IlA tDvDi0fbM65qUWMUD6jZWk9GXRABex488ORBQBOknQYfI7ZKRtthxQ+Tiki/s2xF bz0HZQUd7F+XRUXIfe9tdrYFxToaaV57onFbNn8L1y53Oa/6XMffuZfc0Fe20zgO hHIZQFo0K2ZYTfqjH4LD/DFj1um+4Sprp8hUEC03pUCugV6KzaFr4i6dGQa6tmfZ 2PqpTJxHNbWH33TYHPLaVatjBbp3kFvl51Zp/YPlILFxQSZEyGYZLW6coQIDAQAB o4ICPjCCAjowHQYDVR0OBBYEFAUN53LaeeIaaKh/WktrknybxPG4MB8GA1UdIwQY MBaAFCE1x/Vx7v62dASrbEX9R1VRra8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDIt OTQzZDAzMzIxMzI2LzEvQlEzbmN0cDU0aHBvcUg5YVMydVNmSnZFOGJnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDItOTQzZDAzMzIxMzI2 LzEvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFQGCCsGAQUFBwEHAQH/BEUwQzAwBAIAATAqAwQAwCT3AwQA wEdUAwQBwEf+AwQAwLArAwQAwbZxAwQCwep4AwQAwmcIMA8EAgACMAkDBwAqAQKA AAYwDQYJKoZIhvcNAQELBQADggEBAIOfR3GjqAb9tYZgeDVtKw4rCG1j+mRFrqbT OLiA5GQD6YRBf3+Z4O1liLh9BRG4fZ4SSHspBrSmbf6b97l3J27yQiQJQnVFxLzp bL43Z2BYXpo1MieSeCXFJXpMR1Xg/3/vMCahfzgAznSecJmZnAZK8pgINuwwDwcW EbIUcpR0USpptb7+u8v0sq9w/A6vUjSQLrvkV/0CSNtGQnNrXzvqtzBZzRsQmFyj B84whoimvtOBh/iX5+KlSf1zpLxWEA9DKCmaOD3uabZEpNNis4I+/lFDlJJRPIPd SSNoCjt/oDtiBKZkJTxrL3IX2kJ48ewiV9Ksmt+wGlIXENNKDVY= -----END CERTIFICATE-----Generated at Fri Dec 19 23:21:59 2025 by rpki-client