This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/bdxHggY1z8yhCA2Rg7AN3LUxfWg.roa File: bdxHggY1z8yhCA2Rg7AN3LUxfWg.roa (raw, json) Hash identifier: e8+ghyr8h4YTXLXMeqn3m686ueaXgklFp0DYhIehaPM= Subject key identifier: 6D:DC:47:82:06:35:CF:CC:A1:08:0D:91:83:B0:0D:DC:B5:31:7D:68 Certificate issuer: /CN=2fa16ab06020067740a4c1fb47a912622f1d0722 Certificate serial: 019B213D9A2C4FAD5E44F6DBBE06F9DC8D84 Authority key identifier: 2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/bdxHggY1z8yhCA2Rg7AN3LUxfWg.roa Signing time: Mon 15 Dec 2025 09:00:43 +0000 ROA not before: Mon 15 Dec 2025 09:00:43 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 834 IP address blocks: 85.115.208.0/23 maxlen: 24 85.115.210.0/23 maxlen: 24 85.115.210.0/24 maxlen: 24 213.145.66.0/24 maxlen: 24 213.145.68.0/23 maxlen: 23 213.145.70.0/23 maxlen: 24 213.145.70.0/24 maxlen: 24 213.145.72.0/21 maxlen: 24 213.145.82.0/24 maxlen: 24 213.145.84.0/23 maxlen: 23 213.145.84.0/24 maxlen: 24 213.145.86.0/23 maxlen: 23 213.145.88.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.crl rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.mft rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 09:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:3d:9a:2c:4f:ad:5e:44:f6:db:be:06:f9:dc:8d:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2fa16ab06020067740a4c1fb47a912622f1d0722 Validity Not Before: Dec 15 09:00:43 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=6ddc47820635cfcca1080d9183b00ddcb5317d68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:3d:2c:ec:11:9f:e3:40:24:44:f4:06:f8:e4: cd:5a:ae:37:b2:0a:1f:53:f8:e5:c4:46:6c:f4:35: ad:41:ba:d0:20:8a:9f:53:30:55:59:41:0a:58:61: 9f:19:ae:02:aa:88:bf:f8:d4:e3:d7:a2:63:3d:a4: ff:61:bd:78:ce:98:3d:4d:aa:31:c9:a5:ab:71:f0: 58:65:47:e5:ae:2d:95:9b:f6:87:6b:41:65:7e:9a: ee:7c:ba:de:3d:1a:14:1b:c3:06:98:0c:4e:6c:6f: c9:1b:61:05:dc:8d:88:79:6c:0c:3e:80:6e:ed:5e: fe:28:c5:77:c1:29:dd:1f:43:ff:e8:e0:64:bf:99: 80:96:80:78:ac:54:c8:e2:44:1b:ba:8e:92:80:d5: 53:76:4c:1d:73:b1:65:ad:32:26:62:29:4a:5e:37: 3d:1a:f5:7f:aa:36:5f:eb:34:d7:77:24:f6:90:4b: 9f:af:81:a2:3f:80:11:e7:50:32:8e:fe:a0:17:3c: 01:12:fc:c1:5e:e8:2f:b5:9e:4f:76:39:c5:a0:2d: 33:f3:af:61:c2:ec:85:49:0e:22:97:73:ea:f4:55: b2:8b:35:3c:2a:b1:26:55:9c:47:70:d8:da:fd:a2: 6c:43:df:d5:81:00:9b:b5:73:fa:27:ca:50:ff:63: 96:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:DC:47:82:06:35:CF:CC:A1:08:0D:91:83:B0:0D:DC:B5:31:7D:68 X509v3 Authority Key Identifier: keyid:2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/bdxHggY1z8yhCA2Rg7AN3LUxfWg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.115.208.0/22 213.145.66.0/24 213.145.68.0-213.145.79.255 213.145.82.0/24 213.145.84.0-213.145.89.255 Signature Algorithm: sha256WithRSAEncryption 55:35:6e:c4:bb:d2:43:89:2a:80:99:20:6d:fb:9d:22:c8:16: 0a:25:16:33:8e:b5:3c:d0:57:e6:5e:ab:d6:dd:0d:48:32:af: 23:83:34:26:c2:2d:a5:7d:08:76:b9:b5:fc:e2:b3:3b:62:88: 18:1e:23:fd:59:26:19:6a:c5:73:5f:81:21:91:8e:30:df:6c: a1:57:26:6e:f1:da:f0:0b:2c:88:5b:f5:be:61:8f:e3:69:36: 4a:42:33:69:7f:6d:eb:9a:d9:9b:ed:76:be:64:45:1e:c2:99: 09:e8:c0:3a:f0:ff:2c:01:90:d5:f7:a9:d1:d0:69:89:0a:98: 9c:32:a8:5d:17:ac:97:f7:7f:bc:86:43:4c:53:5b:a7:78:ce: 62:6a:1c:a2:0c:1c:9c:12:40:0c:4e:34:05:43:7b:f2:ce:f3: cb:80:7c:80:4b:8d:34:ef:79:69:ee:41:40:e2:dd:e1:c2:c2: c0:49:ea:23:08:ad:cd:6f:4a:cf:f5:3e:3b:84:53:66:23:3b: 8d:fb:bc:cc:a4:14:2d:61:1d:b3:66:b7:87:63:e5:35:c7:e2: 0b:48:6a:e8:77:b7:a5:51:d0:90:a8:bc:14:d2:30:48:f6:83: 0a:1e:0d:d6:2b:d8:26:99:0c:ef:07:a6:27:f2:46:5c:ec:69: 6d:db:47:dd -----BEGIN CERTIFICATE----- MIIFJTCCBA2gAwIBAgISAZshPZosT61eRPbbvgb53I2EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmYTE2YWIwNjAyMDA2Nzc0MGE0YzFmYjQ3YTkxMjYyMmYx ZDA3MjIwHhcNMjUxMjE1MDkwMDQzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZGRjNDc4MjA2MzVjZmNjYTEwODBkOTE4M2IwMGRkY2I1MzE3ZDY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArz0s7BGf40AkRPQG+OTNWq43sgof U/jlxEZs9DWtQbrQIIqfUzBVWUEKWGGfGa4Cqoi/+NTj16JjPaT/Yb14zpg9Taox yaWrcfBYZUflri2Vm/aHa0FlfprufLrePRoUG8MGmAxObG/JG2EF3I2IeWwMPoBu 7V7+KMV3wSndH0P/6OBkv5mAloB4rFTI4kQbuo6SgNVTdkwdc7FlrTImYilKXjc9 GvV/qjZf6zTXdyT2kEufr4GiP4AR51Ayjv6gFzwBEvzBXugvtZ5PdjnFoC0z869h wuyFSQ4il3Pq9FWyizU8KrEmVZxHcNja/aJsQ9/VgQCbtXP6J8pQ/2OWCQIDAQAB o4ICMTCCAi0wHQYDVR0OBBYEFG3cR4IGNc/MoQgNkYOwDdy1MX1oMB8GA1UdIwQY MBaAFC+harBgIAZ3QKTB+0epEmIvHQciMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTDZGcXNHQWdCbmRBcE1IN1I2a1NZaThkQnlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy83ZjIzOTMtZDAxYS00MWY3LWE1MmUt ZDI0MmI2ZjNhOGExLzEvYmR4SGdnWTF6OHloQ0EyUmc3QU4zTFV4ZldnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNy83ZjIzOTMtZDAxYS00MWY3LWE1MmUtZDI0MmI2ZjNhOGEx LzEvTDZGcXNHQWdCbmRBcE1IN1I2a1NZaThkQnlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEcGCCsGAQUFBwEHAQH/BDgwNjA0BAIAATAuAwQCVXPQAwQA 1ZFCMAwDBALVkUQDBATVkUADBADVkVIwDAMEAtWRVAMEAdWRWDANBgkqhkiG9w0B AQsFAAOCAQEAVTVuxLvSQ4kqgJkgbfudIsgWCiUWM461PNBX5l6r1t0NSDKvI4M0 JsItpX0Idrm1/OKzO2KIGB4j/VkmGWrFc1+BIZGOMN9soVcmbvHa8AssiFv1vmGP 42k2SkIzaX9t65rZm+12vmRFHsKZCejAOvD/LAGQ1fep0dBpiQqYnDKoXResl/d/ vIZDTFNbp3jOYmocogwcnBJADE40BUN78s7zy4B8gEuNNO95ae5BQOLd4cLCwEnq IwitzW9Kz/U+O4RTZiM7jfu8zKQULWEds2a3h2PlNcfiC0hq6He3pVHQkKi8FNIw SPaDCh4N1ivYJpkM7wemJ/JGXOxpbdtH3Q== -----END CERTIFICATE-----Generated at Mon Dec 15 17:21:39 2025 by rpki-client