This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/6149a5-c8de-4c61-beb7-2201203a0bab/1/BxDQYAMULDIcgzCGoRbOdQoc-sM.roa File: BxDQYAMULDIcgzCGoRbOdQoc-sM.roa (raw, json) Hash identifier: 3NcdmgeMlXSMuQ/j+h+4gy0qcuBqA1IJLcvSxfX1/aU= Subject key identifier: 07:10:D0:60:03:14:2C:32:1C:83:30:86:A1:16:CE:75:0A:1C:FA:C3 Certificate issuer: /CN=57e2b86a33c9f97214536d8ca2919d7f3c3800ce Certificate serial: 019B7C134793D668EE3C30BF447AFFA0AFB1 Authority key identifier: 57:E2:B8:6A:33:C9:F9:72:14:53:6D:8C:A2:91:9D:7F:3C:38:00:CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V-K4ajPJ-XIUU22MopGdfzw4AM4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/6149a5-c8de-4c61-beb7-2201203a0bab/1/BxDQYAMULDIcgzCGoRbOdQoc-sM.roa Signing time: Fri 02 Jan 2026 00:19:56 +0000 ROA not before: Fri 02 Jan 2026 00:19:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39700 IP address blocks: 185.42.72.0/22 maxlen: 24 2a01:5be0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/6149a5-c8de-4c61-beb7-2201203a0bab/1/V-K4ajPJ-XIUU22MopGdfzw4AM4.crl rsync://rpki.ripe.net/repository/DEFAULT/92/6149a5-c8de-4c61-beb7-2201203a0bab/1/V-K4ajPJ-XIUU22MopGdfzw4AM4.mft rsync://rpki.ripe.net/repository/DEFAULT/V-K4ajPJ-XIUU22MopGdfzw4AM4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 15:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:47:93:d6:68:ee:3c:30:bf:44:7a:ff:a0:af:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57e2b86a33c9f97214536d8ca2919d7f3c3800ce Validity Not Before: Jan 2 00:19:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0710d06003142c321c833086a116ce750a1cfac3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:a3:ca:63:b6:46:8c:04:23:33:46:34:33:29: eb:d7:ac:d1:ef:11:8e:42:0b:ba:64:97:db:a2:cc: e2:65:60:02:14:71:6b:71:da:d1:15:2e:9c:b0:27: 5f:e1:e0:f4:b6:f5:8f:d9:79:e6:e5:5f:e4:eb:29: f7:dd:32:c4:51:46:01:31:3d:19:14:1a:ab:3b:6b: 90:a1:01:9c:62:fb:d3:e3:a0:2a:63:96:39:69:49: 53:af:3c:d5:d0:7d:76:9f:72:a2:96:39:01:6b:8d: 23:9e:74:f7:14:54:fe:ea:06:9f:e7:3d:af:72:4a: fc:19:e5:f0:39:d9:7f:16:f1:e9:bd:88:2a:a2:15: d5:b0:97:3a:d9:e4:90:2e:76:c6:6d:4f:fe:12:92: da:70:ec:1f:2b:83:6b:67:17:10:da:2f:c2:bb:00: a8:4c:b6:49:f4:ae:57:73:df:47:74:ad:b5:78:64: 78:64:91:44:82:7b:43:3c:90:a7:1c:f2:10:ed:59: 88:82:ff:41:5c:68:40:ad:45:f1:54:da:d4:0b:6e: 3a:47:7e:a1:e0:a1:e7:f1:8f:d3:2f:68:b8:e2:31: 20:4c:fe:85:cc:7b:56:7a:ce:72:74:2c:06:1f:5d: 21:48:59:b0:0a:92:77:79:e5:9a:cd:bb:31:ff:63: 08:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:10:D0:60:03:14:2C:32:1C:83:30:86:A1:16:CE:75:0A:1C:FA:C3 X509v3 Authority Key Identifier: keyid:57:E2:B8:6A:33:C9:F9:72:14:53:6D:8C:A2:91:9D:7F:3C:38:00:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V-K4ajPJ-XIUU22MopGdfzw4AM4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/6149a5-c8de-4c61-beb7-2201203a0bab/1/BxDQYAMULDIcgzCGoRbOdQoc-sM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/6149a5-c8de-4c61-beb7-2201203a0bab/1/V-K4ajPJ-XIUU22MopGdfzw4AM4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.42.72.0/22 IPv6: 2a01:5be0::/32 Signature Algorithm: sha256WithRSAEncryption 8f:52:49:9a:7d:59:dd:ba:a3:7a:db:7d:de:e0:94:f6:86:16: f6:c8:65:94:b1:74:12:ba:00:e4:c8:dc:1c:f6:20:8d:23:a7: 85:b8:5d:1e:62:ce:e7:d5:5f:69:9c:e3:a6:3e:89:a3:e1:06: bf:19:c0:62:51:64:52:76:49:c7:b3:79:9a:7f:6a:fc:eb:df: 7b:b3:f4:1b:d4:4f:3b:fa:49:df:7e:88:69:4c:f2:9c:d3:79: 69:21:28:d7:bc:bd:47:cc:84:84:78:34:1e:18:7a:7e:2e:be: 45:2f:f0:d6:22:a9:b1:35:a3:f0:ef:ff:b5:bb:20:34:8e:35: c2:1b:5f:2e:b6:da:ef:c6:bf:35:45:a0:63:62:02:46:b6:50: c1:ed:26:58:4a:dd:4e:bc:dd:b8:1d:f5:f2:06:d4:f8:e5:29: 82:64:d6:3c:64:a8:2e:bc:c4:79:24:f5:88:ad:ef:fe:72:f4: c1:b8:2b:bb:35:c8:15:2d:c1:cc:ed:ae:ea:0c:cc:4a:b0:71: 7f:8d:dd:8d:8e:6e:a1:66:78:37:e1:98:3c:5c:59:90:05:3a: 7f:dc:dd:ed:c8:46:a9:8c:f4:d4:f1:8b:1d:92:08:f3:54:6b: 82:26:0f:92:ba:78:45:24:c2:9e:77:63:54:37:84:52:d9:a9: a9:ce:be:ce -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt8E0eT1mjuPDC/RHr/oK+xMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3ZTJiODZhMzNjOWY5NzIxNDUzNmQ4Y2EyOTE5ZDdmM2Mz ODAwY2UwHhcNMjYwMTAyMDAxOTU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNzEwZDA2MDAzMTQyYzMyMWM4MzMwODZhMTE2Y2U3NTBhMWNmYWMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs6PKY7ZGjAQjM0Y0Mynr16zR7xGO Qgu6ZJfbosziZWACFHFrcdrRFS6csCdf4eD0tvWP2Xnm5V/k6yn33TLEUUYBMT0Z FBqrO2uQoQGcYvvT46AqY5Y5aUlTrzzV0H12n3KiljkBa40jnnT3FFT+6gaf5z2v ckr8GeXwOdl/FvHpvYgqohXVsJc62eSQLnbGbU/+EpLacOwfK4NrZxcQ2i/CuwCo TLZJ9K5Xc99HdK21eGR4ZJFEgntDPJCnHPIQ7VmIgv9BXGhArUXxVNrUC246R36h 4KHn8Y/TL2i44jEgTP6FzHtWes5ydCwGH10hSFmwCpJ3eeWazbsx/2MIsQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFAcQ0GADFCwyHIMwhqEWznUKHPrDMB8GA1UdIwQY MBaAFFfiuGozyflyFFNtjKKRnX88OADOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVi1LNGFqUEotWElVVTIyTW9wR2Rmenc0QU00LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi82MTQ5YTUtYzhkZS00YzYxLWJlYjct MjIwMTIwM2EwYmFiLzEvQnhEUVlBTVVMREljZ3pDR29SYk9kUW9jLXNNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi82MTQ5YTUtYzhkZS00YzYxLWJlYjctMjIwMTIwM2EwYmFi LzEvVi1LNGFqUEotWElVVTIyTW9wR2Rmenc0QU00LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuSpIMA0E AgACMAcDBQAqAVvgMA0GCSqGSIb3DQEBCwUAA4IBAQCPUkmafVnduqN6233e4JT2 hhb2yGWUsXQSugDkyNwc9iCNI6eFuF0eYs7n1V9pnOOmPomj4Qa/GcBiUWRSdknH s3maf2r86997s/Qb1E87+knffohpTPKc03lpISjXvL1HzISEeDQeGHp+Lr5FL/DW IqmxNaPw7/+1uyA0jjXCG18uttrvxr81RaBjYgJGtlDB7SZYSt1OvN24HfXyBtT4 5SmCZNY8ZKguvMR5JPWIre/+cvTBuCu7NcgVLcHM7a7qDMxKsHF/jd2Njm6hZng3 4Zg8XFmQBTp/3N3tyEapjPTU8YsdkgjzVGuCJg+SunhFJMKed2NUN4RS2ampzr7O -----END CERTIFICATE-----Generated at Mon Jan 26 01:40:03 2026 by rpki-client