This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/30282c-3c82-4730-b95e-e745948983ed/1/BcWFvmkHW69qiQ1OA2aZX_x37lM.roa File: BcWFvmkHW69qiQ1OA2aZX_x37lM.roa (raw, json) Hash identifier: JdWQOJv7GyVK+x+bi13xGfiFs/Ati3c1UXy6psZk3Os= Subject key identifier: 05:C5:85:BE:69:07:5B:AF:6A:89:0D:4E:03:66:99:5F:FC:77:EE:53 Certificate issuer: /CN=09e5518e68467b4290c3509268b6d6d664962c86 Certificate serial: 019B084182C6487126CA348A411CD477B7EE Authority key identifier: 09:E5:51:8E:68:46:7B:42:90:C3:50:92:68:B6:D6:D6:64:96:2C:86 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CeVRjmhGe0KQw1CSaLbW1mSWLIY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/30282c-3c82-4730-b95e-e745948983ed/1/BcWFvmkHW69qiQ1OA2aZX_x37lM.roa Signing time: Wed 10 Dec 2025 12:34:29 +0000 ROA not before: Wed 10 Dec 2025 12:34:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 31515 IP address blocks: 161.30.0.0/16 maxlen: 16 161.30.4.0/24 maxlen: 24 161.30.5.0/24 maxlen: 24 161.30.6.0/24 maxlen: 24 161.30.7.0/24 maxlen: 24 161.30.8.0/24 maxlen: 24 161.30.9.0/24 maxlen: 24 161.30.10.0/23 maxlen: 24 161.30.10.0/24 maxlen: 24 161.30.12.0/22 maxlen: 22 161.30.16.0/22 maxlen: 22 161.30.20.0/24 maxlen: 24 161.30.22.0/23 maxlen: 23 161.30.28.0/24 maxlen: 24 161.30.29.0/24 maxlen: 24 161.30.33.0/24 maxlen: 24 161.30.40.0/23 maxlen: 23 161.30.42.0/23 maxlen: 24 161.30.44.0/23 maxlen: 24 161.30.112.0/23 maxlen: 23 161.30.114.0/23 maxlen: 23 161.30.115.0/24 maxlen: 24 161.30.116.0/23 maxlen: 23 161.30.118.0/24 maxlen: 24 161.30.119.0/24 maxlen: 24 161.30.120.0/24 maxlen: 24 161.30.121.0/24 maxlen: 24 161.30.124.0/23 maxlen: 23 161.30.126.0/23 maxlen: 23 161.30.128.0/23 maxlen: 23 161.30.129.0/24 maxlen: 24 161.30.130.0/24 maxlen: 24 161.30.155.0/24 maxlen: 24 161.30.162.0/24 maxlen: 24 161.30.163.0/24 maxlen: 24 161.30.164.0/24 maxlen: 24 161.30.165.0/24 maxlen: 24 161.30.166.0/24 maxlen: 24 161.30.167.0/24 maxlen: 24 161.30.169.0/24 maxlen: 24 161.30.171.0/24 maxlen: 24 161.30.176.0/20 maxlen: 20 161.30.193.0/24 maxlen: 24 161.30.194.0/23 maxlen: 23 161.30.201.0/24 maxlen: 24 161.30.202.0/24 maxlen: 24 161.30.203.0/24 maxlen: 24 161.30.220.0/24 maxlen: 24 161.30.221.0/24 maxlen: 24 161.30.236.0/22 maxlen: 24 161.30.236.0/24 maxlen: 24 161.30.237.0/24 maxlen: 24 161.30.238.0/24 maxlen: 24 161.30.239.0/24 maxlen: 24 161.30.240.0/24 maxlen: 24 161.30.241.0/24 maxlen: 24 161.30.246.0/24 maxlen: 24 161.30.250.0/24 maxlen: 24 161.30.251.0/24 maxlen: 24 2a11:ae00::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/30282c-3c82-4730-b95e-e745948983ed/1/CeVRjmhGe0KQw1CSaLbW1mSWLIY.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/30282c-3c82-4730-b95e-e745948983ed/1/CeVRjmhGe0KQw1CSaLbW1mSWLIY.mft rsync://rpki.ripe.net/repository/DEFAULT/CeVRjmhGe0KQw1CSaLbW1mSWLIY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 09:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:08:41:82:c6:48:71:26:ca:34:8a:41:1c:d4:77:b7:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09e5518e68467b4290c3509268b6d6d664962c86 Validity Not Before: Dec 10 12:34:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=05c585be69075baf6a890d4e0366995ffc77ee53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:07:1f:c5:41:50:ea:ad:a5:79:d5:c0:00:0d: d6:1a:e3:26:52:db:d7:54:5a:f9:f1:7a:0e:22:04: 68:40:81:05:12:3d:58:ef:30:25:18:95:52:83:7d: ad:82:20:f6:1e:fe:47:f7:44:1e:9a:82:9f:fb:5f: 55:53:fe:7e:e4:c6:7e:dc:f9:87:80:2d:1c:dc:ab: 00:cf:5b:21:7c:5f:15:61:cf:37:1f:7c:46:5f:f5: 2b:e7:8e:51:76:89:8b:13:5b:97:7f:59:14:3c:fc: 28:1e:21:8e:38:77:9b:bd:cb:ca:14:42:b0:2f:24: e4:5f:e2:9a:fa:f6:72:7c:46:3c:cc:6c:4e:b8:fb: ff:56:73:74:dd:2f:d9:c9:49:e2:4d:60:ea:52:80: eb:a5:c9:21:8e:52:53:6c:6f:ad:29:3e:8b:d4:75: c8:64:85:52:bc:78:15:a3:e6:02:1c:78:91:96:59: 92:cb:06:cd:2a:86:5b:4c:a9:8c:85:e0:8e:22:42: f3:69:a3:de:b7:63:fe:6f:98:b2:d6:d1:03:41:b2: 60:0e:b1:bc:19:17:ad:4c:96:70:95:a0:e5:f1:6a: 7a:66:9f:78:47:18:ce:6f:a6:be:c8:e4:6e:37:e0: 80:dd:7b:20:e8:fc:95:e1:b1:f0:f8:bf:3f:aa:ff: f7:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:C5:85:BE:69:07:5B:AF:6A:89:0D:4E:03:66:99:5F:FC:77:EE:53 X509v3 Authority Key Identifier: keyid:09:E5:51:8E:68:46:7B:42:90:C3:50:92:68:B6:D6:D6:64:96:2C:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CeVRjmhGe0KQw1CSaLbW1mSWLIY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/30282c-3c82-4730-b95e-e745948983ed/1/BcWFvmkHW69qiQ1OA2aZX_x37lM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/30282c-3c82-4730-b95e-e745948983ed/1/CeVRjmhGe0KQw1CSaLbW1mSWLIY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 161.30.0.0/16 IPv6: 2a11:ae00::/32 Signature Algorithm: sha256WithRSAEncryption 44:1f:f3:a3:d1:00:c8:d1:7d:92:37:20:84:13:f2:3f:9f:ac: 83:be:af:91:b5:91:c2:41:05:c9:17:af:fd:3d:2a:c3:32:7b: e1:c9:9b:4a:e3:f8:a0:60:62:a1:91:11:02:3a:a3:62:6f:da: ec:f4:8d:cb:bd:4f:70:d1:70:b6:90:0d:3a:1a:3e:af:0a:6f: a4:91:e4:cd:de:4b:4e:81:e4:72:6c:08:b1:ff:8a:39:11:6a: 06:43:52:07:93:d8:cb:58:a1:22:e1:ee:72:4d:17:6e:91:fb: 20:a1:8e:ac:80:18:a9:82:57:31:3a:64:30:fc:50:d8:7d:d4: 51:04:53:dc:34:40:0a:b9:fd:7d:6f:bf:13:dc:a2:55:6b:f9: e7:91:b4:c5:0b:2c:c3:47:b3:a8:ba:53:9c:3f:5c:38:0e:4e: c3:88:15:c1:40:56:61:1b:ad:f8:db:37:03:ab:33:4c:26:16: b7:8a:68:8c:c1:5c:e6:6c:9a:e6:d9:2a:e8:6b:58:9f:4a:ff: 73:03:98:33:5e:55:85:ed:7a:ad:0a:45:21:2c:c1:78:a6:d3: 35:31:2a:30:21:fe:0c:88:04:44:9f:90:26:97:bc:a9:9e:e4: 57:b4:35:67:a4:5c:6d:61:b8:40:61:63:ce:8d:46:de:e3:32: 8b:c8:1e:0b -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZsIQYLGSHEmyjSKQRzUd7fuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5ZTU1MThlNjg0NjdiNDI5MGMzNTA5MjY4YjZkNmQ2NjQ5 NjJjODYwHhcNMjUxMjEwMTIzNDI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNWM1ODViZTY5MDc1YmFmNmE4OTBkNGUwMzY2OTk1ZmZjNzdlZTUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5QcfxUFQ6q2ledXAAA3WGuMmUtvX VFr58XoOIgRoQIEFEj1Y7zAlGJVSg32tgiD2Hv5H90QemoKf+19VU/5+5MZ+3PmH gC0c3KsAz1shfF8VYc83H3xGX/Ur545RdomLE1uXf1kUPPwoHiGOOHebvcvKFEKw LyTkX+Ka+vZyfEY8zGxOuPv/VnN03S/ZyUniTWDqUoDrpckhjlJTbG+tKT6L1HXI ZIVSvHgVo+YCHHiRllmSywbNKoZbTKmMheCOIkLzaaPet2P+b5iy1tEDQbJgDrG8 GRetTJZwlaDl8Wp6Zp94RxjOb6a+yORuN+CA3Xsg6PyV4bHw+L8/qv/3wwIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFAXFhb5pB1uvaokNTgNmmV/8d+5TMB8GA1UdIwQY MBaAFAnlUY5oRntCkMNQkmi21tZkliyGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2VWUmptaEdlMEtRdzFDU2FMYlcxbVNXTElZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC8zMDI4MmMtM2M4Mi00NzMwLWI5NWUt ZTc0NTk0ODk4M2VkLzEvQmNXRnZta0hXNjlxaVExT0EyYVpYX3gzN2xNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC8zMDI4MmMtM2M4Mi00NzMwLWI5NWUtZTc0NTk0ODk4M2Vk LzEvQ2VWUmptaEdlMEtRdzFDU2FMYlcxbVNXTElZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDALBAIAATAFAwMAoR4wDQQC AAIwBwMFACoRrgAwDQYJKoZIhvcNAQELBQADggEBAEQf86PRAMjRfZI3IIQT8j+f rIO+r5G1kcJBBckXr/09KsMye+HJm0rj+KBgYqGREQI6o2Jv2uz0jcu9T3DRcLaQ DToaPq8Kb6SR5M3eS06B5HJsCLH/ijkRagZDUgeT2MtYoSLh7nJNF26R+yChjqyA GKmCVzE6ZDD8UNh91FEEU9w0QAq5/X1vvxPcolVr+eeRtMULLMNHs6i6U5w/XDgO TsOIFcFAVmEbrfjbNwOrM0wmFreKaIzBXOZsmubZKuhrWJ9K/3MDmDNeVYXteq0K RSEswXim0zUxKjAh/gyIBESfkCaXvKme5Fe0NWekXG1huEBhY86NRt7jMovIHgs= -----END CERTIFICATE-----Generated at Thu Dec 18 15:05:03 2025 by rpki-client