This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/3502fc-d9f7-4fa8-baf6-77d529be53d7/1/BdxIgcii9AZbDowEljfzUYckHC8.roa File: BdxIgcii9AZbDowEljfzUYckHC8.roa (raw, json) Hash identifier: ILwiF18gnTvRp3a0NE/1xK+Rukgr4WGOEG3uBi/izZY= Subject key identifier: 05:DC:48:81:C8:A2:F4:06:5B:0E:8C:04:96:37:F3:51:87:24:1C:2F Certificate issuer: /CN=b4b0bbd6445578edbc7ba6b5bf7ca9368d2417bf Certificate serial: 019B7F81546DB1851B3FEF9C8F329F1A26D1 Authority key identifier: B4:B0:BB:D6:44:55:78:ED:BC:7B:A6:B5:BF:7C:A9:36:8D:24:17:BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tLC71kRVeO28e6a1v3ypNo0kF78.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/3502fc-d9f7-4fa8-baf6-77d529be53d7/1/BdxIgcii9AZbDowEljfzUYckHC8.roa Signing time: Fri 02 Jan 2026 16:19:00 +0000 ROA not before: Fri 02 Jan 2026 16:19:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12731 IP address blocks: 194.113.42.0/23 maxlen: 23 2a0f:f640::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/3502fc-d9f7-4fa8-baf6-77d529be53d7/1/tLC71kRVeO28e6a1v3ypNo0kF78.crl rsync://rpki.ripe.net/repository/DEFAULT/cb/3502fc-d9f7-4fa8-baf6-77d529be53d7/1/tLC71kRVeO28e6a1v3ypNo0kF78.mft rsync://rpki.ripe.net/repository/DEFAULT/tLC71kRVeO28e6a1v3ypNo0kF78.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:81:54:6d:b1:85:1b:3f:ef:9c:8f:32:9f:1a:26:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4b0bbd6445578edbc7ba6b5bf7ca9368d2417bf Validity Not Before: Jan 2 16:19:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=05dc4881c8a2f4065b0e8c049637f35187241c2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:41:b9:66:d5:75:54:0c:d4:3b:19:d6:29:95: 4f:a1:f2:4c:cd:69:81:e4:61:02:25:63:32:5d:9c: 77:12:b1:fb:23:b3:cd:2c:0a:ea:80:09:b8:e2:e7: ac:8b:47:2e:99:99:ac:d0:d1:63:c5:7d:b5:ae:51: bd:28:2d:3c:9f:57:bd:bd:b0:84:48:cc:03:4c:90: 6f:e0:62:7d:4b:f5:e9:c1:8d:cb:d8:25:5a:57:cd: d5:7d:9a:4b:97:e1:3a:7c:09:0f:a5:4b:84:7f:ab: 3e:c4:37:ad:ec:a2:fd:6e:d0:df:c5:e9:79:55:ab: 2a:36:52:27:62:84:7c:78:9f:e8:95:fe:4a:79:df: e2:32:4f:cd:6d:0c:12:5b:53:e8:5c:79:41:bc:73: 81:9d:17:86:fa:c2:1c:dd:ee:e1:4d:91:96:07:5c: d8:9b:30:59:b9:39:8c:d9:7d:fd:eb:03:b1:90:66: 64:85:06:c0:ac:9c:1e:bb:02:c9:56:86:78:3c:9c: 41:5c:5a:5e:cf:6a:76:f6:e7:24:66:c3:b5:87:92: d6:93:2f:e7:d4:b1:22:8a:28:23:59:50:ad:31:40: d2:cc:ae:e3:6b:21:5d:35:56:0a:a3:71:e7:14:06: 80:10:58:13:36:86:81:55:36:8d:04:78:58:eb:82: 1f:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:DC:48:81:C8:A2:F4:06:5B:0E:8C:04:96:37:F3:51:87:24:1C:2F X509v3 Authority Key Identifier: keyid:B4:B0:BB:D6:44:55:78:ED:BC:7B:A6:B5:BF:7C:A9:36:8D:24:17:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tLC71kRVeO28e6a1v3ypNo0kF78.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/3502fc-d9f7-4fa8-baf6-77d529be53d7/1/BdxIgcii9AZbDowEljfzUYckHC8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/3502fc-d9f7-4fa8-baf6-77d529be53d7/1/tLC71kRVeO28e6a1v3ypNo0kF78.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.113.42.0/23 IPv6: 2a0f:f640::/47 Signature Algorithm: sha256WithRSAEncryption 5f:69:1a:dc:7a:ce:5b:db:35:d9:2d:80:92:dd:d9:d7:a7:b4: 86:45:c6:76:1e:a6:33:59:5e:51:38:20:82:ae:f7:18:ce:b8: cf:1e:82:77:ff:23:27:c3:9f:52:52:7f:f7:71:29:7d:24:36: 53:d9:65:29:55:18:40:4c:8b:3f:93:73:bc:b4:15:03:bf:00: 6f:79:59:85:57:8d:32:4c:8a:66:98:b1:cb:0c:d2:ba:64:a6: 41:c5:b9:88:c4:e8:c7:62:ec:96:bd:11:9f:5a:f9:51:e1:59: eb:4c:6f:72:69:a9:2d:b2:fa:cb:27:47:0a:d3:29:65:bf:8c: 4c:28:3e:d7:69:d7:5c:b8:5f:ad:03:2a:0f:46:a2:a7:e3:3d: 21:33:7b:fa:78:8b:90:93:f6:02:f4:86:8b:32:ee:ce:63:97: 65:bc:e3:ea:06:a4:e9:b0:71:96:c5:94:13:ff:d5:3a:ec:ab: ca:f4:68:3b:36:f9:9b:b7:df:e4:8f:1e:16:ff:73:84:35:cc: cb:ff:b8:9a:93:15:04:e8:b9:b0:ee:69:04:82:c9:5d:9d:e7: fc:56:a2:78:78:35:8e:25:b6:24:87:e9:9a:73:60:0a:fe:a7: dd:07:59:ef:56:8d:38:1e:00:ca:1f:31:f9:34:a9:59:19:58: 33:29:36:90 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt/gVRtsYUbP++cjzKfGibRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0YjBiYmQ2NDQ1NTc4ZWRiYzdiYTZiNWJmN2NhOTM2OGQy NDE3YmYwHhcNMjYwMTAyMTYxOTAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNWRjNDg4MWM4YTJmNDA2NWIwZThjMDQ5NjM3ZjM1MTg3MjQxYzJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzEG5ZtV1VAzUOxnWKZVPofJMzWmB 5GECJWMyXZx3ErH7I7PNLArqgAm44uesi0cumZms0NFjxX21rlG9KC08n1e9vbCE SMwDTJBv4GJ9S/XpwY3L2CVaV83VfZpLl+E6fAkPpUuEf6s+xDet7KL9btDfxel5 VasqNlInYoR8eJ/olf5Ked/iMk/NbQwSW1PoXHlBvHOBnReG+sIc3e7hTZGWB1zY mzBZuTmM2X396wOxkGZkhQbArJweuwLJVoZ4PJxBXFpez2p29uckZsO1h5LWky/n 1LEiiigjWVCtMUDSzK7jayFdNVYKo3HnFAaAEFgTNoaBVTaNBHhY64IfIwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFAXcSIHIovQGWw6MBJY381GHJBwvMB8GA1UdIwQY MBaAFLSwu9ZEVXjtvHumtb98qTaNJBe/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdExDNzFrUlZlTzI4ZTZhMXYzeXBObzBrRjc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi8zNTAyZmMtZDlmNy00ZmE4LWJhZjYt NzdkNTI5YmU1M2Q3LzEvQmR4SWdjaWk5QVpiRG93RWxqZnpVWWNrSEM4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYi8zNTAyZmMtZDlmNy00ZmE4LWJhZjYtNzdkNTI5YmU1M2Q3 LzEvdExDNzFrUlZlTzI4ZTZhMXYzeXBObzBrRjc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBwnEqMA8E AgACMAkDBwEqD/ZAAAAwDQYJKoZIhvcNAQELBQADggEBAF9pGtx6zlvbNdktgJLd 2dentIZFxnYepjNZXlE4IIKu9xjOuM8egnf/IyfDn1JSf/dxKX0kNlPZZSlVGEBM iz+Tc7y0FQO/AG95WYVXjTJMimaYscsM0rpkpkHFuYjE6Mdi7Ja9EZ9a+VHhWetM b3JpqS2y+ssnRwrTKWW/jEwoPtdp11y4X60DKg9GoqfjPSEze/p4i5CT9gL0hosy 7s5jl2W84+oGpOmwcZbFlBP/1Trsq8r0aDs2+Zu33+SPHhb/c4Q1zMv/uJqTFQTo ubDuaQSCyV2d5/xWonh4NY4ltiSH6ZpzYAr+p90HWe9WjTgeAMofMfk0qVkZWDMp NpA= -----END CERTIFICATE-----Generated at Sun Jan 25 22:29:51 2026 by rpki-client