This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/BUdyw1-SGZIPLhIdmkFoIijVZNQ.roa File: BUdyw1-SGZIPLhIdmkFoIijVZNQ.roa (raw, json) Hash identifier: POuTPJV5w0ptjI2Zk74d4sYkk88TP0THdSg61Bf1T5U= Subject key identifier: 05:47:72:C3:5F:92:19:92:0F:2E:12:1D:9A:41:68:22:28:D5:64:D4 Certificate issuer: /CN=eac2c1afd4bdec980506fa07df7c8662d554fa46 Certificate serial: 019A584895C85640C21C4A0D121CAAD01E3E Authority key identifier: EA:C2:C1:AF:D4:BD:EC:98:05:06:FA:07:DF:7C:86:62:D5:54:FA:46 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6sLBr9S97JgFBvoH33yGYtVU-kY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/BUdyw1-SGZIPLhIdmkFoIijVZNQ.roa Signing time: Thu 06 Nov 2025 08:29:03 +0000 ROA not before: Thu 06 Nov 2025 08:29:03 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 211440 IP address blocks: 64.190.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/6sLBr9S97JgFBvoH33yGYtVU-kY.crl rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/6sLBr9S97JgFBvoH33yGYtVU-kY.mft rsync://rpki.ripe.net/repository/DEFAULT/6sLBr9S97JgFBvoH33yGYtVU-kY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:58:48:95:c8:56:40:c2:1c:4a:0d:12:1c:aa:d0:1e:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eac2c1afd4bdec980506fa07df7c8662d554fa46 Validity Not Before: Nov 6 08:29:03 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=054772c35f9219920f2e121d9a41682228d564d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:f2:ca:32:74:43:15:29:1a:f8:a4:3a:f0:1f: f3:b6:0e:52:89:c0:6d:4c:d7:48:52:83:63:79:88: a3:49:f9:58:99:2a:88:cd:3b:75:cf:f7:ec:be:ff: b6:f0:6a:28:1b:f0:7b:3f:1d:44:2c:7e:12:b9:2d: 80:f5:ae:9f:01:56:f8:2d:c2:88:58:bd:bb:81:36: b4:42:ae:2f:e3:84:a2:f1:d4:f3:79:20:4a:e9:0c: 2a:0b:e5:76:36:4d:af:ea:5c:76:63:a9:a2:71:2c: 3b:de:32:3f:08:0a:7e:af:4d:0c:d2:63:61:09:b4: c4:60:5a:fc:0d:aa:22:57:6c:4f:2a:72:c6:09:7a: 1d:70:c0:e5:aa:3b:97:32:72:63:75:21:05:89:3c: 9c:bb:2f:48:4f:39:76:f3:99:75:05:ac:52:f2:af: 94:3b:23:94:a3:13:1a:ab:05:0c:6a:6d:73:2a:e0: ed:3c:c2:a3:1d:44:a6:ff:96:c9:52:d2:21:90:77: 89:ac:9c:0d:c0:93:8c:2d:a0:9b:c1:57:51:9b:0f: fd:3a:a9:f2:0a:95:27:ab:ef:03:33:7a:6c:1c:21: 8e:f5:a8:54:49:94:89:61:23:f8:e3:c6:44:1f:17: cc:a1:85:8b:d9:b7:91:c0:74:0a:3a:89:36:19:fc: e4:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:47:72:C3:5F:92:19:92:0F:2E:12:1D:9A:41:68:22:28:D5:64:D4 X509v3 Authority Key Identifier: keyid:EA:C2:C1:AF:D4:BD:EC:98:05:06:FA:07:DF:7C:86:62:D5:54:FA:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6sLBr9S97JgFBvoH33yGYtVU-kY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/BUdyw1-SGZIPLhIdmkFoIijVZNQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/6sLBr9S97JgFBvoH33yGYtVU-kY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 64.190.139.0/24 Signature Algorithm: sha256WithRSAEncryption 09:d6:b5:9e:31:9a:d4:02:fd:71:d9:09:e4:a1:52:85:1b:94: a5:f6:99:f5:ee:f1:f5:12:8f:1d:06:10:38:a0:a1:51:3d:3e: ef:32:dc:20:ca:ca:2b:74:51:08:8c:d9:d3:6c:1e:bd:8a:16: 3a:87:98:9b:eb:72:ea:23:eb:46:15:d2:44:92:e3:9e:a7:a1: 6a:6c:ce:36:d5:67:ac:dc:60:00:31:b9:15:79:4e:c6:fc:27: 62:c8:dd:fe:e4:aa:87:46:19:a4:cb:f4:bb:3a:5c:22:32:56: c5:73:65:3d:00:6b:ce:8b:0b:73:ad:64:94:d3:5d:e0:89:07: 97:e5:93:47:03:1f:fc:26:c6:e8:11:50:1e:aa:86:41:d0:55: 20:a6:93:62:d4:49:fa:52:19:d2:c8:1e:ce:fb:3b:44:d5:0f: 16:31:71:1f:4a:8c:be:ca:d6:f6:d9:83:74:03:57:6f:13:45: 48:4f:12:a9:a1:e2:c7:2c:23:13:98:6b:76:35:a5:6b:18:fa: f6:39:2b:b0:46:32:66:d1:bf:8d:b6:49:45:7d:0c:9b:1c:ea: 95:eb:ef:90:88:e2:47:ae:9a:68:5f:10:ea:07:95:f7:bf:44: c5:32:d2:a4:df:18:74:46:fa:34:b2:97:0e:bb:ac:06:5b:01: 32:a4:91:01 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZpYSJXIVkDCHEoNEhyq0B4+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhYzJjMWFmZDRiZGVjOTgwNTA2ZmEwN2RmN2M4NjYyZDU1 NGZhNDYwHhcNMjUxMTA2MDgyOTAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNTQ3NzJjMzVmOTIxOTkyMGYyZTEyMWQ5YTQxNjgyMjI4ZDU2NGQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyvLKMnRDFSka+KQ68B/ztg5SicBt TNdIUoNjeYijSflYmSqIzTt1z/fsvv+28GooG/B7Px1ELH4SuS2A9a6fAVb4LcKI WL27gTa0Qq4v44Si8dTzeSBK6QwqC+V2Nk2v6lx2Y6micSw73jI/CAp+r00M0mNh CbTEYFr8DaoiV2xPKnLGCXodcMDlqjuXMnJjdSEFiTycuy9ITzl285l1BaxS8q+U OyOUoxMaqwUMam1zKuDtPMKjHUSm/5bJUtIhkHeJrJwNwJOMLaCbwVdRmw/9Oqny CpUnq+8DM3psHCGO9ahUSZSJYSP448ZEHxfMoYWL2beRwHQKOok2GfzkOQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAVHcsNfkhmSDy4SHZpBaCIo1WTUMB8GA1UdIwQY MBaAFOrCwa/UveyYBQb6B998hmLVVPpGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNnNMQnI5Uzk3SmdGQnZvSDMzeUdZdFZVLWtZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS81ODlhNmItNGQ3ZS00MDEyLWEwZmMt YzBjZWIwMzdhZDQyLzEvQlVkeXcxLVNHWklQTGhJZG1rRm9JaWpWWk5RLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNS81ODlhNmItNGQ3ZS00MDEyLWEwZmMtYzBjZWIwMzdhZDQy LzEvNnNMQnI5Uzk3SmdGQnZvSDMzeUdZdFZVLWtZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQL6LMA0G CSqGSIb3DQEBCwUAA4IBAQAJ1rWeMZrUAv1x2QnkoVKFG5Sl9pn17vH1Eo8dBhA4 oKFRPT7vMtwgysordFEIjNnTbB69ihY6h5ib63LqI+tGFdJEkuOep6FqbM421Wes 3GAAMbkVeU7G/CdiyN3+5KqHRhmky/S7OlwiMlbFc2U9AGvOiwtzrWSU013giQeX 5ZNHAx/8JsboEVAeqoZB0FUgppNi1En6UhnSyB7O+ztE1Q8WMXEfSoy+ytb22YN0 A1dvE0VITxKpoeLHLCMTmGt2NaVrGPr2OSuwRjJm0b+NtklFfQybHOqV6++QiOJH rppoXxDqB5X3v0TFMtKk3xh0Rvo0spcOu6wGWwEypJEB -----END CERTIFICATE-----Generated at Sat Dec 6 16:17:33 2025 by rpki-client