This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/bXVrxlVdI4qAAAO-JnB2Pdm9qp0.roa File: bXVrxlVdI4qAAAO-JnB2Pdm9qp0.roa (raw, json) Hash identifier: 72otF4TInR6Q172fut2kjaHVHz20mtF6Laz6xJ2s+vk= Subject key identifier: 6D:75:6B:C6:55:5D:23:8A:80:00:03:BE:26:70:76:3D:D9:BD:AA:9D Certificate issuer: /CN=b45999899f76d2e2e4ccdfc817f9879cfac06bbe Certificate serial: 019AEE905DA385D7C97FA9BEE4E179BEC18C Authority key identifier: B4:59:99:89:9F:76:D2:E2:E4:CC:DF:C8:17:F9:87:9C:FA:C0:6B:BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/bXVrxlVdI4qAAAO-JnB2Pdm9qp0.roa Signing time: Fri 05 Dec 2025 12:50:29 +0000 ROA not before: Fri 05 Dec 2025 12:50:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 29119 IP address blocks: 43.251.0.0/22 maxlen: 22 45.6.44.0/22 maxlen: 22 45.120.220.0/22 maxlen: 22 62.106.67.0/24 maxlen: 24 80.174.128.0/17 maxlen: 17 83.143.168.0/21 maxlen: 21 93.95.16.0/21 maxlen: 21 128.0.40.0/24 maxlen: 24 202.58.108.0/22 maxlen: 22 212.86.98.0/24 maxlen: 24 212.118.61.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.crl rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.mft rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ee:90:5d:a3:85:d7:c9:7f:a9:be:e4:e1:79:be:c1:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b45999899f76d2e2e4ccdfc817f9879cfac06bbe Validity Not Before: Dec 5 12:50:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=6d756bc6555d238a800003be2670763dd9bdaa9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:92:95:0d:e0:32:ee:47:3a:45:65:d1:74:93: 97:cb:da:2d:b9:a5:00:4d:9d:0f:c5:5a:f2:66:d4: 3a:99:fd:2b:1b:6f:a8:0d:52:86:c5:4d:18:87:68: 22:5e:37:55:0e:d4:b2:07:05:ef:85:79:43:f3:4d: ff:14:c9:44:8a:2e:4e:d6:e0:24:39:4a:23:6a:20: da:7f:be:dd:f8:5c:c1:f8:55:1a:f3:14:1d:76:2e: c5:98:cc:50:4f:28:d2:4a:67:ea:c6:16:e2:ae:82: 9d:38:73:a6:5a:25:3f:6a:00:05:ef:e7:39:f1:c5: b6:4a:44:b1:48:a9:10:32:5a:38:86:58:e6:22:35: d8:ad:6e:51:69:33:44:66:a3:56:57:26:b8:16:02: 8f:22:d4:95:40:3f:4a:bc:59:3c:01:80:b4:66:e3: ee:ce:13:c3:76:69:2b:10:83:1a:d6:8d:ce:69:c5: 8f:6c:79:99:57:76:77:41:9f:72:36:18:d7:c7:db: 70:0b:d7:d3:30:3a:40:94:ec:c9:d2:2b:d3:c4:ce: 30:3f:43:d3:ed:d5:19:4f:c2:f0:3f:7c:2a:e5:6a: 88:69:eb:9e:bc:3b:68:e9:97:96:8b:6f:56:ea:29: 8a:4d:c0:1c:fe:7e:39:fe:ae:12:f3:b8:14:c6:67: 9d:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:75:6B:C6:55:5D:23:8A:80:00:03:BE:26:70:76:3D:D9:BD:AA:9D X509v3 Authority Key Identifier: keyid:B4:59:99:89:9F:76:D2:E2:E4:CC:DF:C8:17:F9:87:9C:FA:C0:6B:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/bXVrxlVdI4qAAAO-JnB2Pdm9qp0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.251.0.0/22 45.6.44.0/22 45.120.220.0/22 62.106.67.0/24 80.174.128.0/17 83.143.168.0/21 93.95.16.0/21 128.0.40.0/24 202.58.108.0/22 212.86.98.0/24 212.118.61.0/24 Signature Algorithm: sha256WithRSAEncryption 3f:3b:f4:ac:04:c5:7c:8d:c9:9c:2c:ec:4d:a7:89:b0:fc:af: 67:77:ca:c8:55:20:ed:8d:28:87:ef:88:94:d7:c7:b4:35:7d: d9:00:76:37:81:b1:36:7c:74:57:e1:5f:11:98:66:ee:89:23: 58:26:e5:eb:d1:a8:83:12:e0:3e:5c:0c:11:f5:de:03:10:59: 83:25:c1:5b:51:6e:ac:53:e9:15:88:b0:b7:8d:22:79:4d:ab: f2:36:d6:51:27:dd:8c:75:55:59:93:20:ef:2d:aa:2a:80:96: 2e:94:2f:f9:d3:64:70:d9:14:e2:34:05:da:16:47:35:dc:09: 19:93:7d:89:54:af:b3:45:1f:74:d0:f2:b9:2b:2c:46:d6:5a: 5f:2a:c2:8d:dc:c2:cb:75:25:85:db:ee:e4:4c:68:86:7f:9f: ca:7a:f1:78:4e:b1:da:c6:6f:c1:ae:92:df:90:85:e9:90:0b: 43:c9:d9:07:9e:53:15:cb:b1:b1:b5:5b:44:80:ee:f8:f5:9f: 3e:1a:8c:c3:0d:3f:e5:8d:68:bc:79:e0:2d:75:52:33:75:bb: 3d:3d:d4:71:a4:7f:57:e8:29:63:0d:e8:84:d2:09:db:e0:4d: b9:ea:e9:1a:b7:db:ae:fd:7b:f5:fb:2e:16:ac:e3:a2:a1:85: 35:1b:2a:fb -----BEGIN CERTIFICATE----- MIIFOTCCBCGgAwIBAgISAZrukF2jhdfJf6m+5OF5vsGMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0NTk5OTg5OWY3NmQyZTJlNGNjZGZjODE3Zjk4NzljZmFj MDZiYmUwHhcNMjUxMjA1MTI1MDI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZDc1NmJjNjU1NWQyMzhhODAwMDAzYmUyNjcwNzYzZGQ5YmRhYTlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsJKVDeAy7kc6RWXRdJOXy9otuaUA TZ0PxVryZtQ6mf0rG2+oDVKGxU0Yh2giXjdVDtSyBwXvhXlD803/FMlEii5O1uAk OUojaiDaf77d+FzB+FUa8xQddi7FmMxQTyjSSmfqxhbiroKdOHOmWiU/agAF7+c5 8cW2SkSxSKkQMlo4hljmIjXYrW5RaTNEZqNWVya4FgKPItSVQD9KvFk8AYC0ZuPu zhPDdmkrEIMa1o3OacWPbHmZV3Z3QZ9yNhjXx9twC9fTMDpAlOzJ0ivTxM4wP0PT 7dUZT8LwP3wq5WqIaeuevDto6ZeWi29W6imKTcAc/n45/q4S87gUxmed4wIDAQAB o4ICRTCCAkEwHQYDVR0OBBYEFG11a8ZVXSOKgAADviZwdj3ZvaqdMB8GA1UdIwQY MBaAFLRZmYmfdtLi5MzfyBf5h5z6wGu+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdEZtWmlaOTIwdUxrek5fSUZfbUhuUHJBYTc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC9jYjdiMjEtMzM1Yy00MmNhLTg1OWUt NzM0MjhmOWM3YmZmLzEvYlhWcnhsVmRJNHFBQUFPLUpuQjJQZG05cXAwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC9jYjdiMjEtMzM1Yy00MmNhLTg1OWUtNzM0MjhmOWM3YmZm LzEvdEZtWmlaOTIwdUxrek5fSUZfbUhuUHJBYTc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFsGCCsGAQUFBwEHAQH/BEwwSjBIBAIAATBCAwQCK/sAAwQC LQYsAwQCLXjcAwQAPmpDAwQHUK6AAwQDU4+oAwQDXV8QAwQAgAAoAwQCyjpsAwQA 1FZiAwQA1HY9MA0GCSqGSIb3DQEBCwUAA4IBAQA/O/SsBMV8jcmcLOxNp4mw/K9n d8rIVSDtjSiH74iU18e0NX3ZAHY3gbE2fHRX4V8RmGbuiSNYJuXr0aiDEuA+XAwR 9d4DEFmDJcFbUW6sU+kViLC3jSJ5TavyNtZRJ92MdVVZkyDvLaoqgJYulC/502Rw 2RTiNAXaFkc13AkZk32JVK+zRR900PK5KyxG1lpfKsKN3MLLdSWF2+7kTGiGf5/K evF4TrHaxm/BrpLfkIXpkAtDydkHnlMVy7GxtVtEgO749Z8+GozDDT/ljWi8eeAt dVIzdbs9PdRxpH9X6CljDeiE0gnb4E256ukat9uu/Xv1+y4WrOOioYU1Gyr7 -----END CERTIFICATE-----Generated at Sat Dec 6 19:44:55 2025 by rpki-client