This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/5eb130-a0f7-49af-a271-ebec2a42e60d/1/BsiQkly5iU4gw1q2lU_R_QYiUVI.roa File: BsiQkly5iU4gw1q2lU_R_QYiUVI.roa (raw, json) Hash identifier: GSu5+TouG087KCKliG/UXdeib+u9Od4yfNdV1aL8UDE= Subject key identifier: 06:C8:90:92:5C:B9:89:4E:20:C3:5A:B6:95:4F:D1:FD:06:22:51:52 Certificate issuer: /CN=0260b70a50adead39b709b590046c52e0cc6929b Certificate serial: 019B0E081676080599B7DF5AB2AEBA14F7A9 Authority key identifier: 02:60:B7:0A:50:AD:EA:D3:9B:70:9B:59:00:46:C5:2E:0C:C6:92:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AmC3ClCt6tObcJtZAEbFLgzGkps.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/5eb130-a0f7-49af-a271-ebec2a42e60d/1/BsiQkly5iU4gw1q2lU_R_QYiUVI.roa Signing time: Thu 11 Dec 2025 15:29:29 +0000 ROA not before: Thu 11 Dec 2025 15:29:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 200547 IP address blocks: 85.136.192.0/22 maxlen: 22 85.136.192.0/24 maxlen: 24 85.136.193.0/24 maxlen: 24 85.136.194.0/24 maxlen: 24 85.136.195.0/24 maxlen: 24 160.238.112.0/22 maxlen: 22 160.238.112.0/24 maxlen: 24 160.238.113.0/24 maxlen: 24 160.238.114.0/24 maxlen: 24 160.238.115.0/24 maxlen: 24 185.95.236.0/22 maxlen: 24 185.95.237.0/24 maxlen: 24 185.95.238.0/24 maxlen: 24 185.95.239.0/24 maxlen: 24 185.236.52.0/24 maxlen: 24 185.238.148.0/22 maxlen: 24 185.238.149.0/24 maxlen: 24 185.238.150.0/24 maxlen: 24 185.238.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/5eb130-a0f7-49af-a271-ebec2a42e60d/1/AmC3ClCt6tObcJtZAEbFLgzGkps.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/5eb130-a0f7-49af-a271-ebec2a42e60d/1/AmC3ClCt6tObcJtZAEbFLgzGkps.mft rsync://rpki.ripe.net/repository/DEFAULT/AmC3ClCt6tObcJtZAEbFLgzGkps.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 12:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:08:16:76:08:05:99:b7:df:5a:b2:ae:ba:14:f7:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0260b70a50adead39b709b590046c52e0cc6929b Validity Not Before: Dec 11 15:29:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=06c890925cb9894e20c35ab6954fd1fd06225152 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:81:9c:57:8a:ab:ed:13:97:5f:a2:03:13:37: dc:81:f3:e7:35:87:bb:cd:be:98:fe:49:43:53:bb: 39:f5:c5:bf:f9:ef:88:dd:0d:cb:ec:da:27:ef:63: e0:48:4e:00:d8:e4:05:d2:88:a4:0b:cc:29:d7:92: 08:bf:4b:f2:15:8b:4d:fc:6b:9c:43:97:fb:5c:44: e6:0d:9b:2a:0d:63:26:89:fc:ee:20:99:55:20:23: 6f:17:64:b5:cf:65:f7:62:0b:86:34:98:b1:a3:6a: 3c:b2:af:19:52:b0:d2:54:aa:b9:21:ae:29:ed:4a: 8e:b0:0c:b4:da:1e:3f:8f:2f:39:87:96:65:11:c6: 86:1d:16:3b:b2:5b:0d:55:ea:5c:e2:ef:79:70:d7: 8c:35:6a:d5:16:e0:85:db:f2:4c:a3:00:c1:2f:96: 77:ce:ce:da:2b:44:97:75:66:e6:da:79:b0:3f:17: 69:ea:f2:06:05:7d:aa:1b:42:90:fa:d5:ef:41:a2: 50:91:98:68:f6:8d:5d:0f:93:e0:1e:44:aa:8a:70: 29:43:03:34:be:db:4e:ce:4f:1e:1f:2a:7e:f2:b4: ac:84:99:bc:fa:3c:5d:41:8c:48:e3:98:ec:72:a9: 40:59:8c:5e:22:d6:68:ee:60:21:c1:78:41:d7:03: 0f:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:C8:90:92:5C:B9:89:4E:20:C3:5A:B6:95:4F:D1:FD:06:22:51:52 X509v3 Authority Key Identifier: keyid:02:60:B7:0A:50:AD:EA:D3:9B:70:9B:59:00:46:C5:2E:0C:C6:92:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AmC3ClCt6tObcJtZAEbFLgzGkps.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/5eb130-a0f7-49af-a271-ebec2a42e60d/1/BsiQkly5iU4gw1q2lU_R_QYiUVI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/5eb130-a0f7-49af-a271-ebec2a42e60d/1/AmC3ClCt6tObcJtZAEbFLgzGkps.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.136.192.0/22 160.238.112.0/22 185.95.236.0/22 185.236.52.0/24 185.238.148.0/22 Signature Algorithm: sha256WithRSAEncryption 3d:2d:f9:cd:cf:8a:d0:e7:fe:43:ec:5f:73:f5:03:4e:5f:c9: a0:0e:03:60:56:ae:9b:6e:18:eb:0b:96:0c:1c:73:9b:1f:7d: 39:a6:75:39:fa:7c:c1:cd:c9:bb:4d:34:36:18:03:b1:a5:ab: 40:b9:e1:9e:82:1f:c5:4e:7e:9d:f4:57:7a:e3:7d:63:67:fa: bc:bf:0d:92:0a:f4:a9:ac:75:32:1a:d6:02:5c:4b:9a:eb:74: 07:e3:ab:bc:20:da:a9:b1:82:cc:c5:42:38:96:a5:80:99:bc: a5:ce:2f:35:b7:f9:d6:1c:1e:56:06:25:ff:ce:7c:c4:19:96: 4f:ab:12:d9:e6:70:8e:58:a4:89:2b:60:6f:0a:1b:f8:bc:ad: 35:c2:b9:e6:19:60:4b:5a:a7:7f:f9:65:f4:8e:aa:2b:99:1e: 34:a2:45:78:60:a7:77:ba:5f:7b:91:9b:bb:b9:09:ba:ca:77: 30:b3:50:0a:34:43:68:3c:b8:12:bf:4c:0e:54:c3:cf:c9:87: ee:3d:e5:ca:76:9f:83:e3:34:c2:88:49:14:05:f4:95:62:f0: ec:44:a8:ae:19:9a:c5:d9:b4:dc:26:41:d5:45:27:df:49:cc: 4d:67:d6:0e:3d:a1:b3:43:9f:7a:09:90:81:e8:09:00:44:68: c7:f0:5a:a2 -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZsOCBZ2CAWZt99asq66FPepMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAyNjBiNzBhNTBhZGVhZDM5YjcwOWI1OTAwNDZjNTJlMGNj NjkyOWIwHhcNMjUxMjExMTUyOTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNmM4OTA5MjVjYjk4OTRlMjBjMzVhYjY5NTRmZDFmZDA2MjI1MTUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApIGcV4qr7ROXX6IDEzfcgfPnNYe7 zb6Y/klDU7s59cW/+e+I3Q3L7Non72PgSE4A2OQF0oikC8wp15IIv0vyFYtN/Guc Q5f7XETmDZsqDWMmifzuIJlVICNvF2S1z2X3YguGNJixo2o8sq8ZUrDSVKq5Ia4p 7UqOsAy02h4/jy85h5ZlEcaGHRY7slsNVepc4u95cNeMNWrVFuCF2/JMowDBL5Z3 zs7aK0SXdWbm2nmwPxdp6vIGBX2qG0KQ+tXvQaJQkZho9o1dD5PgHkSqinApQwM0 vttOzk8eHyp+8rSshJm8+jxdQYxI45jscqlAWYxeItZo7mAhwXhB1wMPRwIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFAbIkJJcuYlOIMNatpVP0f0GIlFSMB8GA1UdIwQY MBaAFAJgtwpQrerTm3CbWQBGxS4MxpKbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQW1DM0NsQ3Q2dE9iY0p0WkFFYkZMZ3pHa3BzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy81ZWIxMzAtYTBmNy00OWFmLWEyNzEt ZWJlYzJhNDJlNjBkLzEvQnNpUWtseTVpVTRndzFxMmxVX1JfUVlpVVZJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy81ZWIxMzAtYTBmNy00OWFmLWEyNzEtZWJlYzJhNDJlNjBk LzEvQW1DM0NsQ3Q2dE9iY0p0WkFFYkZMZ3pHa3BzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQCVYjAAwQC oO5wAwQCuV/sAwQAuew0AwQCue6UMA0GCSqGSIb3DQEBCwUAA4IBAQA9LfnNz4rQ 5/5D7F9z9QNOX8mgDgNgVq6bbhjrC5YMHHObH305pnU5+nzBzcm7TTQ2GAOxpatA ueGegh/FTn6d9Fd6431jZ/q8vw2SCvSprHUyGtYCXEua63QH46u8INqpsYLMxUI4 lqWAmbylzi81t/nWHB5WBiX/znzEGZZPqxLZ5nCOWKSJK2BvChv4vK01wrnmGWBL Wqd/+WX0jqormR40okV4YKd3ul97kZu7uQm6yncws1AKNENoPLgSv0wOVMPPyYfu PeXKdp+D4zTCiEkUBfSVYvDsRKiuGZrF2bTcJkHVRSffScxNZ9YOPaGzQ596CZCB 6AkARGjH8Fqi -----END CERTIFICATE-----Generated at Tue Dec 16 22:10:14 2025 by rpki-client