This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/BI1SH6cdFsA5GEGW8SQ3lGHnj2g.roa File: BI1SH6cdFsA5GEGW8SQ3lGHnj2g.roa (raw, json) Hash identifier: PKKSpBd/xQ5aGIm6aWWymFvyFPnqDkVShXjROLOevvU= Subject key identifier: 04:8D:52:1F:A7:1D:16:C0:39:18:41:96:F1:24:37:94:61:E7:8F:68 Certificate issuer: /CN=1b2c219f3c297b775880c3b651a2003f9be6de5e Certificate serial: 019ADA4F1957D95CB20C5182469F1DAC7480 Authority key identifier: 1B:2C:21:9F:3C:29:7B:77:58:80:C3:B6:51:A2:00:3F:9B:E6:DE:5E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gywhnzwpe3dYgMO2UaIAP5vm3l4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/BI1SH6cdFsA5GEGW8SQ3lGHnj2g.roa Signing time: Mon 01 Dec 2025 14:26:48 +0000 ROA not before: Mon 01 Dec 2025 14:26:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 215376 IP address blocks: 109.120.136.0/24 maxlen: 24 176.98.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/Gywhnzwpe3dYgMO2UaIAP5vm3l4.crl rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/Gywhnzwpe3dYgMO2UaIAP5vm3l4.mft rsync://rpki.ripe.net/repository/DEFAULT/Gywhnzwpe3dYgMO2UaIAP5vm3l4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:da:4f:19:57:d9:5c:b2:0c:51:82:46:9f:1d:ac:74:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b2c219f3c297b775880c3b651a2003f9be6de5e Validity Not Before: Dec 1 14:26:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=048d521fa71d16c039184196f124379461e78f68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:f9:4a:5f:12:5b:9a:3a:af:95:19:0d:b4:a0: 4c:fe:87:78:39:7d:11:10:c9:ae:0c:29:ab:ec:ca: c4:10:ef:7b:fc:ce:66:3f:dc:f4:c5:51:01:70:94: 88:96:1a:63:2e:45:21:e7:f2:3f:2f:ed:3b:6e:7e: 5f:2b:3d:41:60:b2:e9:ae:82:63:bb:50:50:e2:eb: 90:d9:5b:e8:6f:3a:f8:44:c1:2b:e2:dc:8b:00:a0: 13:09:10:7c:53:6f:c5:6b:58:de:7e:0f:23:23:fc: b1:d1:ca:49:41:dc:d3:f4:27:ea:32:80:f2:c3:eb: 66:b3:62:8c:08:b6:5b:fa:81:4d:be:a3:5a:af:29: df:d5:50:86:9a:47:6f:7d:44:9e:c0:25:3b:f5:7d: 39:38:dd:8a:26:f6:85:30:06:c7:ae:34:00:83:82: 68:0a:bc:03:a2:cc:a0:4b:61:7c:9b:de:51:d0:b3: b4:09:42:51:f1:a6:12:ce:16:05:6e:9e:6d:fe:d0: c0:61:e7:ef:ba:ac:61:e2:81:8f:53:3a:0d:7c:24: 88:14:ba:ff:8d:c1:dc:8d:8e:85:e4:f8:11:b8:1b: 68:c0:db:1b:94:b5:55:c0:ec:b5:48:db:d9:e8:bb: 72:39:7a:07:9b:63:84:94:ac:78:f3:4b:64:7d:d2: 3c:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:8D:52:1F:A7:1D:16:C0:39:18:41:96:F1:24:37:94:61:E7:8F:68 X509v3 Authority Key Identifier: keyid:1B:2C:21:9F:3C:29:7B:77:58:80:C3:B6:51:A2:00:3F:9B:E6:DE:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gywhnzwpe3dYgMO2UaIAP5vm3l4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/BI1SH6cdFsA5GEGW8SQ3lGHnj2g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/Gywhnzwpe3dYgMO2UaIAP5vm3l4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.120.136.0/24 176.98.187.0/24 Signature Algorithm: sha256WithRSAEncryption 20:53:42:91:98:86:54:5d:cb:ad:c4:2d:0d:c4:c0:74:bd:27: 70:90:a0:e0:02:19:25:83:e1:83:f3:bd:ff:68:e9:bc:5a:19: 06:53:27:65:5a:97:4c:2c:50:e9:04:38:8f:26:55:ae:1a:45: 2e:9d:b4:b5:45:2e:38:71:0e:49:86:66:83:ad:35:ac:24:87: e8:ab:8c:46:00:78:c0:c6:d8:f7:81:a6:52:fa:2f:8f:1b:9b: 9f:37:0c:a3:12:5c:c5:1d:52:fa:cd:33:ae:ba:11:41:c6:30: 3c:4d:7d:1b:d1:69:1a:f2:40:fd:63:36:de:db:f0:eb:fa:ed: c8:86:e2:fb:8d:96:f3:61:f3:4a:c4:94:a5:eb:48:e6:39:d6: 0c:78:67:8f:e4:93:a2:28:6c:da:75:c2:5c:66:ea:25:8c:54: 2c:3f:47:15:15:f2:a1:fe:48:14:25:97:6b:21:49:a4:fd:5e: 55:c9:7b:10:ef:0b:7c:50:56:5e:c3:e4:c7:26:13:9e:f5:74: e5:5a:61:b3:1d:7b:c9:e7:be:53:a2:25:4f:55:30:44:51:58: b3:38:c7:ea:b5:38:f4:e0:b3:9d:8e:fc:a0:df:23:06:9e:2a: c7:f1:6a:4f:5f:49:ff:1a:ed:22:ad:e0:ae:4d:b1:2c:b6:f2: a5:91:f3:a9 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZraTxlX2VyyDFGCRp8drHSAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiMmMyMTlmM2MyOTdiNzc1ODgwYzNiNjUxYTIwMDNmOWJl NmRlNWUwHhcNMjUxMjAxMTQyNjQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNDhkNTIxZmE3MWQxNmMwMzkxODQxOTZmMTI0Mzc5NDYxZTc4ZjY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4flKXxJbmjqvlRkNtKBM/od4OX0R EMmuDCmr7MrEEO97/M5mP9z0xVEBcJSIlhpjLkUh5/I/L+07bn5fKz1BYLLproJj u1BQ4uuQ2Vvobzr4RMEr4tyLAKATCRB8U2/Fa1jefg8jI/yx0cpJQdzT9CfqMoDy w+tms2KMCLZb+oFNvqNarynf1VCGmkdvfUSewCU79X05ON2KJvaFMAbHrjQAg4Jo CrwDosygS2F8m95R0LO0CUJR8aYSzhYFbp5t/tDAYefvuqxh4oGPUzoNfCSIFLr/ jcHcjY6F5PgRuBtowNsblLVVwOy1SNvZ6LtyOXoHm2OElKx480tkfdI8YQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFASNUh+nHRbAORhBlvEkN5Rh549oMB8GA1UdIwQY MBaAFBssIZ88KXt3WIDDtlGiAD+b5t5eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3l3aG56d3BlM2RZZ01PMlVhSUFQNXZtM2w0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi9iMTFhNDAtNDhlOS00ZTA2LWJmMTEt OTJjODFmMjJlNzEyLzEvQkkxU0g2Y2RGc0E1R0VHVzhTUTNsR0huajJnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Zi9iMTFhNDAtNDhlOS00ZTA2LWJmMTEtOTJjODFmMjJlNzEy LzEvR3l3aG56d3BlM2RZZ01PMlVhSUFQNXZtM2w0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAbXiIAwQA sGK7MA0GCSqGSIb3DQEBCwUAA4IBAQAgU0KRmIZUXcutxC0NxMB0vSdwkKDgAhkl g+GD873/aOm8WhkGUydlWpdMLFDpBDiPJlWuGkUunbS1RS44cQ5JhmaDrTWsJIfo q4xGAHjAxtj3gaZS+i+PG5ufNwyjElzFHVL6zTOuuhFBxjA8TX0b0Wka8kD9Yzbe 2/Dr+u3IhuL7jZbzYfNKxJSl60jmOdYMeGeP5JOiKGzadcJcZuoljFQsP0cVFfKh /kgUJZdrIUmk/V5VyXsQ7wt8UFZew+THJhOe9XTlWmGzHXvJ575ToiVPVTBEUViz OMfqtTj04LOdjvyg3yMGnirH8WpPX0n/Gu0ireCuTbEstvKlkfOp -----END CERTIFICATE-----Generated at Sat Dec 6 12:27:32 2025 by rpki-client