This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/e99b35-8cf6-4934-a591-9930f2194a0e/1/BfDjCxQZpVIvWuHPpUF1014sxPo.roa File: BfDjCxQZpVIvWuHPpUF1014sxPo.roa (raw, json) Hash identifier: xAMeCUjUJk50I2+3B3yRzk6L+sK+RxuSoLFdPe8pfMM= Subject key identifier: 05:F0:E3:0B:14:19:A5:52:2F:5A:E1:CF:A5:41:75:D3:5E:2C:C4:FA Certificate issuer: /CN=c41c7221ede3af5ee92e3206af2f18bd010d5dd9 Certificate serial: 019B76EB0A6D82A207AAC0183733ECAB90A1 Authority key identifier: C4:1C:72:21:ED:E3:AF:5E:E9:2E:32:06:AF:2F:18:BD:01:0D:5D:D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xBxyIe3jr17pLjIGry8YvQENXdk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/e99b35-8cf6-4934-a591-9930f2194a0e/1/BfDjCxQZpVIvWuHPpUF1014sxPo.roa Signing time: Thu 01 Jan 2026 00:17:53 +0000 ROA not before: Thu 01 Jan 2026 00:17:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35745 IP address blocks: 37.131.160.0/20 maxlen: 20 46.20.48.0/20 maxlen: 20 46.20.56.0/23 maxlen: 23 46.20.58.0/24 maxlen: 24 91.206.108.0/23 maxlen: 23 91.208.50.0/24 maxlen: 24 93.175.128.0/20 maxlen: 20 93.175.129.0/24 maxlen: 24 128.127.80.0/20 maxlen: 20 128.127.80.0/21 maxlen: 21 185.15.232.0/22 maxlen: 22 188.125.224.0/19 maxlen: 19 188.125.242.0/23 maxlen: 23 188.125.244.0/22 maxlen: 22 213.109.32.0/20 maxlen: 20 213.109.34.0/23 maxlen: 23 213.109.39.0/24 maxlen: 24 213.109.40.0/24 maxlen: 24 2a00:10a0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/e99b35-8cf6-4934-a591-9930f2194a0e/1/xBxyIe3jr17pLjIGry8YvQENXdk.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/e99b35-8cf6-4934-a591-9930f2194a0e/1/xBxyIe3jr17pLjIGry8YvQENXdk.mft rsync://rpki.ripe.net/repository/DEFAULT/xBxyIe3jr17pLjIGry8YvQENXdk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:0a:6d:82:a2:07:aa:c0:18:37:33:ec:ab:90:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c41c7221ede3af5ee92e3206af2f18bd010d5dd9 Validity Not Before: Jan 1 00:17:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=05f0e30b1419a5522f5ae1cfa54175d35e2cc4fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:e3:0e:62:fd:8b:b0:eb:72:de:a7:87:a5:49: 5d:f7:b7:b3:eb:ed:5a:32:4e:02:42:25:a5:81:2a: 6a:16:d4:0b:0b:b8:ea:6d:20:c5:57:2e:a5:b5:c0: 12:d3:f5:7c:7a:34:0f:d1:31:d9:55:39:52:40:b3: 8a:a0:9e:1d:53:25:77:66:33:e5:c7:42:20:f6:7c: 0b:61:8d:c2:8f:15:9e:72:80:60:da:75:76:81:62: f0:e4:39:9a:76:d6:68:3a:50:19:3f:bc:d2:88:a9: c2:9d:92:f6:57:4d:2d:b2:f4:32:f2:90:a3:3d:29: 59:89:43:99:92:16:5c:f5:fd:a6:21:e3:ca:67:67: 80:0f:2d:10:09:eb:45:b5:19:5d:af:8c:ad:cf:0e: 18:6c:ee:95:29:18:93:d4:f9:4c:58:04:13:a2:53: 4a:66:d6:51:1a:3d:df:b1:6e:2b:4e:07:9b:b1:a4: a6:4e:b1:04:30:5b:f9:da:5b:d9:77:12:b2:88:98: 00:d8:9b:4c:fd:c1:93:df:0f:7a:1e:21:6d:84:a8: 8a:17:16:b7:c6:13:8b:54:9f:a9:14:a5:3e:21:df: ac:67:0a:56:33:fb:76:44:31:e6:75:67:30:3b:d0: cb:b5:d0:54:02:6b:38:6d:d9:a9:7c:33:26:c6:af: 05:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:F0:E3:0B:14:19:A5:52:2F:5A:E1:CF:A5:41:75:D3:5E:2C:C4:FA X509v3 Authority Key Identifier: keyid:C4:1C:72:21:ED:E3:AF:5E:E9:2E:32:06:AF:2F:18:BD:01:0D:5D:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xBxyIe3jr17pLjIGry8YvQENXdk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/e99b35-8cf6-4934-a591-9930f2194a0e/1/BfDjCxQZpVIvWuHPpUF1014sxPo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/e99b35-8cf6-4934-a591-9930f2194a0e/1/xBxyIe3jr17pLjIGry8YvQENXdk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.131.160.0/20 46.20.48.0/20 91.206.108.0/23 91.208.50.0/24 93.175.128.0/20 128.127.80.0/20 185.15.232.0/22 188.125.224.0/19 213.109.32.0/20 IPv6: 2a00:10a0::/32 Signature Algorithm: sha256WithRSAEncryption 2f:b6:d6:18:11:11:6d:ae:57:40:da:e6:13:4f:9e:33:74:e1: 49:a2:4c:7d:cf:44:3b:48:1d:68:d4:f9:97:00:d7:9e:7e:3b: 26:22:36:39:99:8a:40:6d:b4:fe:a8:ba:a6:d9:9a:36:40:3e: 26:60:a2:37:ed:5b:d4:46:1d:e2:51:09:26:ba:7c:c7:98:c2: 54:df:6f:0d:c6:70:cb:a5:53:a4:eb:24:c7:06:4b:fe:a1:48: bc:2e:6a:fb:49:16:2b:e5:ee:f5:e2:19:e8:f9:b8:8f:01:07: f0:59:70:67:bc:7f:ba:93:9a:f8:e8:d4:c7:e6:12:7e:17:d3: 6b:a6:ac:55:0f:b2:7b:d6:22:11:1f:8d:06:ae:b7:ef:b2:82: 76:b2:a5:70:4a:93:77:91:f9:94:f6:89:0e:63:68:07:e8:22: ca:06:9f:0d:04:08:e7:18:d0:f7:28:42:d1:53:d9:b1:08:a4: 57:b7:fd:67:04:2b:eb:77:a3:5f:17:80:73:51:df:9d:a2:92: b4:83:a4:71:cd:c9:94:68:a8:1b:48:d1:e8:c4:e7:29:e7:e2: 16:43:b3:a0:09:72:47:df:0b:4c:69:15:99:ab:2a:ff:2b:5a: 75:e8:7e:91:ab:83:77:db:76:38:c8:b8:43:8f:ab:3e:8d:1e: 27:b1:1e:4f -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgISAZt26wptgqIHqsAYNzPsq5ChMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0MWM3MjIxZWRlM2FmNWVlOTJlMzIwNmFmMmYxOGJkMDEw ZDVkZDkwHhcNMjYwMTAxMDAxNzUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNWYwZTMwYjE0MTlhNTUyMmY1YWUxY2ZhNTQxNzVkMzVlMmNjNGZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwuMOYv2LsOty3qeHpUld97ez6+1a Mk4CQiWlgSpqFtQLC7jqbSDFVy6ltcAS0/V8ejQP0THZVTlSQLOKoJ4dUyV3ZjPl x0Ig9nwLYY3CjxWecoBg2nV2gWLw5DmadtZoOlAZP7zSiKnCnZL2V00tsvQy8pCj PSlZiUOZkhZc9f2mIePKZ2eADy0QCetFtRldr4ytzw4YbO6VKRiT1PlMWAQTolNK ZtZRGj3fsW4rTgebsaSmTrEEMFv52lvZdxKyiJgA2JtM/cGT3w96HiFthKiKFxa3 xhOLVJ+pFKU+Id+sZwpWM/t2RDHmdWcwO9DLtdBUAms4bdmpfDMmxq8FlwIDAQAB o4ICSDCCAkQwHQYDVR0OBBYEFAXw4wsUGaVSL1rhz6VBddNeLMT6MB8GA1UdIwQY MBaAFMQcciHt469e6S4yBq8vGL0BDV3ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveEJ4eUllM2pyMTdwTGpJR3J5OFl2UUVOWGRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9lOTliMzUtOGNmNi00OTM0LWE1OTEt OTkzMGYyMTk0YTBlLzEvQmZEakN4UVpwVkl2V3VIUHBVRjEwMTRzeFBvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC9lOTliMzUtOGNmNi00OTM0LWE1OTEtOTkzMGYyMTk0YTBl LzEveEJ4eUllM2pyMTdwTGpJR3J5OFl2UUVOWGRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMF4GCCsGAQUFBwEHAQH/BE8wTTA8BAIAATA2AwQEJYOgAwQE LhQwAwQBW85sAwQAW9AyAwQEXa+AAwQEgH9QAwQCuQ/oAwQFvH3gAwQE1W0gMA0E AgACMAcDBQAqABCgMA0GCSqGSIb3DQEBCwUAA4IBAQAvttYYERFtrldA2uYTT54z dOFJokx9z0Q7SB1o1PmXANeefjsmIjY5mYpAbbT+qLqm2Zo2QD4mYKI37VvURh3i UQkmunzHmMJU328NxnDLpVOk6yTHBkv+oUi8Lmr7SRYr5e714hno+biPAQfwWXBn vH+6k5r46NTH5hJ+F9NrpqxVD7J71iIRH40GrrfvsoJ2sqVwSpN3kfmU9okOY2gH 6CLKBp8NBAjnGND3KELRU9mxCKRXt/1nBCvrd6NfF4BzUd+dopK0g6RxzcmUaKgb SNHoxOcp5+IWQ7OgCXJH3wtMaRWZqyr/K1p16H6Rq4N323Y4yLhDj6s+jR4nsR5P -----END CERTIFICATE-----Generated at Mon Jan 26 09:43:23 2026 by rpki-client