This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/c04d99-de44-40ab-a2c0-08279455f941/1/BDsUG_qKwMK-zw5cb5re_OOs500.roa File: BDsUG_qKwMK-zw5cb5re_OOs500.roa (raw, json) Hash identifier: MK43bq66jUMUM5Ahm8KsScwtAMlZLSz7Ozov3YQzRIE= Subject key identifier: 04:3B:14:1B:FA:8A:C0:C2:BE:CF:0E:5C:6F:9A:DE:FC:E3:AC:E7:4D Certificate issuer: /CN=faa6e5e86023c9b314ee651291fafe8c6dd69a83 Certificate serial: 019B7B36B027ACA29E90156B340376052404 Authority key identifier: FA:A6:E5:E8:60:23:C9:B3:14:EE:65:12:91:FA:FE:8C:6D:D6:9A:83 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-qbl6GAjybMU7mUSkfr-jG3WmoM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/c04d99-de44-40ab-a2c0-08279455f941/1/BDsUG_qKwMK-zw5cb5re_OOs500.roa Signing time: Thu 01 Jan 2026 20:19:00 +0000 ROA not before: Thu 01 Jan 2026 20:19:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212994 IP address blocks: 185.39.28.0/23 maxlen: 24 185.237.216.0/24 maxlen: 24 185.237.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/c04d99-de44-40ab-a2c0-08279455f941/1/1-qbl6GAjybMU7mUSkfr-jG3WmoM.crl rsync://rpki.ripe.net/repository/DEFAULT/00/c04d99-de44-40ab-a2c0-08279455f941/1/1-qbl6GAjybMU7mUSkfr-jG3WmoM.mft rsync://rpki.ripe.net/repository/DEFAULT/1-qbl6GAjybMU7mUSkfr-jG3WmoM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:b0:27:ac:a2:9e:90:15:6b:34:03:76:05:24:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=faa6e5e86023c9b314ee651291fafe8c6dd69a83 Validity Not Before: Jan 1 20:19:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=043b141bfa8ac0c2becf0e5c6f9adefce3ace74d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:3d:ab:34:a4:61:12:ed:bf:3c:70:83:36:12: f8:60:cc:db:83:47:ca:3f:e9:62:2a:63:4a:ca:ec: 13:48:ed:5c:87:b5:52:35:b5:0a:af:9d:d6:e2:36: 0d:d4:e0:00:e7:91:00:21:c6:e1:ef:91:b4:07:d9: 9a:e1:19:20:22:fa:23:6e:c8:ab:07:4e:66:09:26: 20:c1:c0:49:f3:42:e6:3c:e7:14:04:36:57:fb:6e: 8e:c6:8c:c5:a1:7b:dc:b9:2a:3f:df:68:b9:17:8c: 6c:93:fa:e1:e6:49:06:0c:f3:4f:c0:2c:b7:38:77: e9:06:79:b6:15:27:ea:bb:fb:68:a2:f1:13:8b:c6: f5:b9:9b:0c:a2:ca:8b:5c:2b:c3:f0:6d:6e:4a:86: 6d:d3:80:f7:34:57:5d:e1:70:2e:8c:d7:1d:6e:26: 88:1e:87:d7:9a:49:ae:af:c1:ee:d5:6a:4b:8d:71: 0e:db:4d:2f:fa:b3:8d:f8:37:72:c7:ab:85:95:4a: bd:b0:98:ba:2e:3e:d2:c5:e6:f0:ee:f1:33:ec:80: 8f:da:f2:e4:0e:b1:b6:53:50:8c:4c:86:60:78:9e: ce:ca:ce:ca:70:db:98:3c:44:cb:37:04:36:7d:87: 3a:30:2c:50:b1:d8:2d:c1:44:51:69:29:a6:e7:d3: 10:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:3B:14:1B:FA:8A:C0:C2:BE:CF:0E:5C:6F:9A:DE:FC:E3:AC:E7:4D X509v3 Authority Key Identifier: keyid:FA:A6:E5:E8:60:23:C9:B3:14:EE:65:12:91:FA:FE:8C:6D:D6:9A:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-qbl6GAjybMU7mUSkfr-jG3WmoM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c04d99-de44-40ab-a2c0-08279455f941/1/BDsUG_qKwMK-zw5cb5re_OOs500.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c04d99-de44-40ab-a2c0-08279455f941/1/1-qbl6GAjybMU7mUSkfr-jG3WmoM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.39.28.0/23 185.237.216.0/23 Signature Algorithm: sha256WithRSAEncryption 5b:27:fc:f5:ee:c7:1c:9c:90:5d:42:59:c5:94:86:30:bf:c7: c2:5b:1b:f6:24:67:2e:6e:42:ae:4f:ff:73:b6:94:04:6f:6e: 42:bb:d6:36:1d:37:b1:73:05:a5:8a:78:18:92:85:4f:62:5c: 7d:17:77:2f:9e:b3:6b:9e:77:e9:20:0f:55:0e:9d:a3:2f:8b: 9c:82:90:50:ab:e6:54:3f:bb:34:98:6b:ae:c6:fe:29:a7:16: 81:79:18:3d:a1:7e:6f:1c:9e:09:d8:87:8a:19:74:27:d5:fc: f7:c1:d9:b5:99:a5:cb:2d:e9:24:ce:ab:c0:78:d2:a9:90:47: 30:9f:07:df:1c:29:f5:b4:71:aa:f3:05:06:91:e2:a3:77:e0: 4f:34:ea:59:23:95:13:2b:49:4c:47:cc:ff:7c:5f:51:f7:cb: 2a:aa:6f:11:f5:94:2f:6e:b0:f3:fd:72:95:e0:90:d5:b4:5c: de:d0:68:34:0a:13:8d:85:8e:b4:dd:56:08:47:26:7e:9c:e9: a4:8b:02:37:0d:1d:e7:fd:0b:a5:e7:77:11:70:b5:23:c5:6b: ae:d4:bb:94:b1:09:0a:d8:71:e5:62:be:34:86:30:99:14:ab: 59:15:08:17:f2:f4:ef:e2:fd:10:47:ef:25:79:af:bf:a4:73: 56:c1:af:b3 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt7NrAnrKKekBVrNAN2BSQEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhYTZlNWU4NjAyM2M5YjMxNGVlNjUxMjkxZmFmZThjNmRk NjlhODMwHhcNMjYwMTAxMjAxOTAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNDNiMTQxYmZhOGFjMGMyYmVjZjBlNWM2ZjlhZGVmY2UzYWNlNzRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyD2rNKRhEu2/PHCDNhL4YMzbg0fK P+liKmNKyuwTSO1ch7VSNbUKr53W4jYN1OAA55EAIcbh75G0B9ma4RkgIvojbsir B05mCSYgwcBJ80LmPOcUBDZX+26OxozFoXvcuSo/32i5F4xsk/rh5kkGDPNPwCy3 OHfpBnm2FSfqu/toovETi8b1uZsMosqLXCvD8G1uSoZt04D3NFdd4XAujNcdbiaI HofXmkmur8Hu1WpLjXEO200v+rON+Ddyx6uFlUq9sJi6Lj7Sxebw7vEz7ICP2vLk DrG2U1CMTIZgeJ7Oys7KcNuYPETLNwQ2fYc6MCxQsdgtwURRaSmm59MQ6wIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFAQ7FBv6isDCvs8OXG+a3vzjrOdNMB8GA1UdIwQY MBaAFPqm5ehgI8mzFO5lEpH6/oxt1pqDMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1xYmw2R0FqeWJNVTdtVVNrZnItakczV21vTS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDAvYzA0ZDk5LWRlNDQtNDBhYi1hMmMw LTA4Mjc5NDU1Zjk0MS8xL0JEc1VHX3FLd01LLXp3NWNiNXJlX09PczUwMC5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvMDAvYzA0ZDk5LWRlNDQtNDBhYi1hMmMwLTA4Mjc5NDU1Zjk0 MS8xLzEtcWJsNkdBanliTVU3bVVTa2ZyLWpHM1dtb00uY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwDBAG5JxwD BAG57dgwDQYJKoZIhvcNAQELBQADggEBAFsn/PXuxxyckF1CWcWUhjC/x8JbG/Yk Zy5uQq5P/3O2lARvbkK71jYdN7FzBaWKeBiShU9iXH0Xdy+es2ued+kgD1UOnaMv i5yCkFCr5lQ/uzSYa67G/imnFoF5GD2hfm8cngnYh4oZdCfV/PfB2bWZpcst6STO q8B40qmQRzCfB98cKfW0carzBQaR4qN34E806lkjlRMrSUxHzP98X1H3yyqqbxH1 lC9usPP9cpXgkNW0XN7QaDQKE42FjrTdVghHJn6c6aSLAjcNHef9C6XndxFwtSPF a67Uu5SxCQrYceVivjSGMJkUq1kVCBfy9O/i/RBH7yV5r7+kc1bBr7M= -----END CERTIFICATE-----Generated at Sun Jan 25 22:30:41 2026 by rpki-client