This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/BDkjuey1sBOVmIH9OEHfJ19lLgE.roa File: BDkjuey1sBOVmIH9OEHfJ19lLgE.roa (raw, json) Hash identifier: J+2KpDrG7ec3E0I/KCCAOaYLDFv2AkjzEaFquCmMOwE= Subject key identifier: 04:39:23:B9:EC:B5:B0:13:95:98:81:FD:38:41:DF:27:5F:65:2E:01 Certificate issuer: /CN=b9481119afe1bff229facd4ef9c8c61b0fabeaf2 Certificate serial: 019AC1BDD8FB5E3FEB5CF968BDA5C3E20085 Authority key identifier: B9:48:11:19:AF:E1:BF:F2:29:FA:CD:4E:F9:C8:C6:1B:0F:AB:EA:F2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/BDkjuey1sBOVmIH9OEHfJ19lLgE.roa Signing time: Wed 26 Nov 2025 19:57:15 +0000 ROA not before: Wed 26 Nov 2025 19:57:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 57888 IP address blocks: 5.59.160.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.mft rsync://rpki.ripe.net/repository/DEFAULT/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:c1:bd:d8:fb:5e:3f:eb:5c:f9:68:bd:a5:c3:e2:00:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b9481119afe1bff229facd4ef9c8c61b0fabeaf2 Validity Not Before: Nov 26 19:57:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=043923b9ecb5b013959881fd3841df275f652e01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:d7:4c:1d:4f:74:bd:8d:3a:d0:e0:c8:4e:0b: 58:6b:72:7f:e5:a8:50:02:40:b8:d5:91:6e:6f:41: 60:3c:b4:64:3d:82:8a:07:c5:e0:31:6b:93:bc:78: 1e:43:c0:83:a6:74:af:d7:60:ee:44:e9:c2:be:a1: 63:23:d1:9f:4c:f8:0b:52:a3:58:be:79:a6:b1:cc: 3a:b8:93:75:0a:08:a1:20:65:2e:b7:29:0c:72:c7: 7a:de:b3:50:0c:0a:50:4b:d7:5c:58:aa:5a:b3:55: c4:79:2c:96:a7:d6:bf:b7:2d:97:a5:db:ae:c7:5b: 62:77:38:a8:23:c8:64:58:de:ad:fc:03:63:65:aa: 0f:7b:7f:41:0c:05:27:a6:4a:de:a6:21:75:0b:8e: 9b:c3:b2:1d:34:ca:df:22:3f:79:a3:2d:e1:8e:ed: 83:9f:01:3b:04:80:67:dc:a8:ef:4e:fd:29:13:b1: 1b:66:17:ca:f0:ea:bc:0c:1c:ea:44:ad:9c:52:bf: bf:de:aa:8a:f3:4a:60:36:59:e7:e6:be:05:49:51: 07:b9:e9:96:82:3e:2b:3e:d0:19:dd:5e:31:4f:8a: 55:f9:a1:7c:0b:38:be:76:f3:9b:df:78:05:f5:34: 17:96:f9:00:47:3f:09:0c:1a:20:de:a8:ec:a7:bf: cf:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:39:23:B9:EC:B5:B0:13:95:98:81:FD:38:41:DF:27:5F:65:2E:01 X509v3 Authority Key Identifier: keyid:B9:48:11:19:AF:E1:BF:F2:29:FA:CD:4E:F9:C8:C6:1B:0F:AB:EA:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/BDkjuey1sBOVmIH9OEHfJ19lLgE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.59.160.0/21 Signature Algorithm: sha256WithRSAEncryption 13:6d:8d:96:bc:4d:2d:2a:6e:f2:7e:92:b6:86:d6:ff:74:16: ab:b3:8e:ca:9e:8b:b3:69:4f:7a:82:0e:e5:d5:f2:35:9b:4c: cb:f8:7a:ff:f7:ba:25:dc:55:1c:2d:81:03:12:65:15:17:b6: 2f:48:09:98:21:42:dd:a2:c0:68:83:40:44:28:90:64:82:8d: 74:11:40:44:b1:8f:28:e3:3f:fb:7b:21:d7:df:37:fd:5e:78: 7e:6d:de:be:f0:e2:30:cf:d4:72:88:ba:ad:00:88:f2:18:c6: 52:c6:8d:7d:e4:64:93:04:b9:73:e2:13:b3:97:34:47:61:f1: a6:e1:9a:58:d8:65:51:e3:d4:ce:40:7d:7d:3d:d1:c1:74:6c: 85:97:e2:96:48:ef:77:e5:53:fa:03:9e:92:cc:ad:08:1e:bb: 75:81:7d:a3:41:0a:4f:f4:d4:4e:87:13:f1:47:e0:b9:1b:d5: 3b:f8:37:47:c3:e0:e9:97:50:38:e5:0b:1f:41:b3:f4:a1:c0: f2:5a:c8:95:a0:22:85:b8:97:16:de:91:5d:ba:79:33:f2:35: d6:3a:fa:39:51:c3:a2:37:57:b1:87:64:c8:c2:78:78:5e:1d: 70:f5:f5:84:49:f0:1d:7e:8d:33:4e:32:11:1a:84:9e:4f:e6: 6f:fc:f5:6a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZrBvdj7Xj/rXPlovaXD4gCFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5NDgxMTE5YWZlMWJmZjIyOWZhY2Q0ZWY5YzhjNjFiMGZh YmVhZjIwHhcNMjUxMTI2MTk1NzE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNDM5MjNiOWVjYjViMDEzOTU5ODgxZmQzODQxZGYyNzVmNjUyZTAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6tdMHU90vY060ODITgtYa3J/5ahQ AkC41ZFub0FgPLRkPYKKB8XgMWuTvHgeQ8CDpnSv12DuROnCvqFjI9GfTPgLUqNY vnmmscw6uJN1CgihIGUutykMcsd63rNQDApQS9dcWKpas1XEeSyWp9a/ty2Xpduu x1tidzioI8hkWN6t/ANjZaoPe39BDAUnpkrepiF1C46bw7IdNMrfIj95oy3hju2D nwE7BIBn3KjvTv0pE7EbZhfK8Oq8DBzqRK2cUr+/3qqK80pgNlnn5r4FSVEHuemW gj4rPtAZ3V4xT4pV+aF8Czi+dvOb33gF9TQXlvkARz8JDBog3qjsp7/PzwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAQ5I7nstbATlZiB/ThB3ydfZS4BMB8GA1UdIwQY MBaAFLlIERmv4b/yKfrNTvnIxhsPq+ryMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdVVnUkdhX2h2X0lwLXMxTy1jakdHdy1yNnZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9jYjAwMDctM2VhOS00NzU5LThkNzAt OWI5YmNlMTVlMGM2LzEvQkRranVleTFzQk9WbUlIOU9FSGZKMTlsTGdFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9jYjAwMDctM2VhOS00NzU5LThkNzAtOWI5YmNlMTVlMGM2 LzEvdVVnUkdhX2h2X0lwLXMxTy1jakdHdy1yNnZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDBTugMA0G CSqGSIb3DQEBCwUAA4IBAQATbY2WvE0tKm7yfpK2htb/dBars47KnouzaU96gg7l 1fI1m0zL+Hr/97ol3FUcLYEDEmUVF7YvSAmYIULdosBog0BEKJBkgo10EUBEsY8o 4z/7eyHX3zf9Xnh+bd6+8OIwz9RyiLqtAIjyGMZSxo195GSTBLlz4hOzlzRHYfGm 4ZpY2GVR49TOQH19PdHBdGyFl+KWSO935VP6A56SzK0IHrt1gX2jQQpP9NROhxPx R+C5G9U7+DdHw+Dpl1A45QsfQbP0ocDyWsiVoCKFuJcW3pFdunkz8jXWOvo5UcOi N1exh2TIwnh4Xh1w9fWESfAdfo0zTjIRGoSeT+Zv/PVq -----END CERTIFICATE-----Generated at Sat Dec 6 16:41:30 2025 by rpki-client