This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/BXp-oLfEs3EBkTBpGIiYgzDecww.roa File: BXp-oLfEs3EBkTBpGIiYgzDecww.roa (raw, json) Hash identifier: B73NIFz6jY+e+XGtBa4sdt9mCFiKLmtLtJfO1UuQTD8= Subject key identifier: 05:7A:7E:A0:B7:C4:B3:71:01:91:30:69:18:88:98:83:30:DE:73:0C Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Certificate serial: 019B78A2E3FE8755C848DF264D784D663659 Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/BXp-oLfEs3EBkTBpGIiYgzDecww.roa Signing time: Thu 01 Jan 2026 08:18:19 +0000 ROA not before: Thu 01 Jan 2026 08:18:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20665 IP address blocks: 93.123.7.0/24 maxlen: 24 217.145.80.0/20 maxlen: 21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 02:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:e3:fe:87:55:c8:48:df:26:4d:78:4d:66:36:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Validity Not Before: Jan 1 08:18:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=057a7ea0b7c4b371019130691888988330de730c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:33:77:92:07:b0:ae:87:31:34:4c:74:8a:7d: 02:cf:dc:24:7a:99:53:a4:a2:ad:8c:23:f8:bf:9a: dc:f6:40:c6:59:c1:f1:fb:48:fb:e3:78:6f:be:33: 97:14:eb:fa:38:a8:33:ac:67:d3:32:d0:16:59:ce: ba:53:6f:97:5f:08:30:4d:04:92:41:c9:09:da:af: 53:44:69:b4:aa:fb:a9:cc:85:8f:09:c6:b3:bd:b9: 66:db:68:00:c3:54:15:f7:f9:ea:4e:53:79:13:33: a1:8b:ab:35:2f:8b:07:ed:42:9d:bd:13:8b:9c:e4: 6e:dc:39:b6:f2:31:bf:f4:6d:8e:e8:33:c2:77:f7: 29:71:5f:06:bd:67:66:e7:9f:da:36:55:06:86:7b: 73:4a:bc:88:5f:4d:08:0c:3e:e1:50:dc:81:85:81: c7:46:58:0c:46:c9:09:47:ae:7b:cf:e0:06:eb:32: fd:9b:ed:e5:69:3e:52:f3:77:2b:1c:30:f6:f4:95: 0f:97:86:0e:06:37:d0:60:3e:1e:33:ae:0c:76:d8: e3:32:f2:9d:3d:35:49:01:cc:4d:1f:c0:bb:36:a2: 79:48:76:4d:c2:0c:e7:92:12:fa:f3:5c:6a:3a:40: 22:7b:29:b9:29:23:32:07:ee:d8:f0:7a:31:b1:64: 00:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:7A:7E:A0:B7:C4:B3:71:01:91:30:69:18:88:98:83:30:DE:73:0C X509v3 Authority Key Identifier: keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/BXp-oLfEs3EBkTBpGIiYgzDecww.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.123.7.0/24 217.145.80.0/20 Signature Algorithm: sha256WithRSAEncryption 70:2a:56:7c:03:50:1b:8c:b8:07:c4:ce:d4:19:7b:16:7e:27: a9:5d:99:cf:c7:2e:64:bb:ea:8e:b8:c4:73:e7:e0:10:ba:d3: 9e:8a:78:37:da:03:c5:5f:9c:ed:af:94:9d:78:f8:68:d4:9c: 51:b2:98:dc:8e:31:c5:c7:a3:cf:3d:c8:65:bb:79:76:b6:5d: b4:ed:b8:6a:3a:10:1c:09:69:b5:9c:08:59:bf:d0:dc:39:c9: 5d:84:10:44:73:ba:18:36:9a:83:e6:32:82:74:31:da:a7:22: 7d:3b:a1:64:19:be:fc:e4:de:4c:d9:3c:5a:9f:27:cf:e0:99: c2:e5:6a:b9:57:7a:c1:3f:7c:3b:24:b7:13:7a:87:0c:b0:df: 9d:00:c5:cf:4d:c3:5d:36:41:64:11:d7:80:4c:a5:58:2c:36: c8:75:b0:ef:05:8d:0a:7e:80:22:44:c7:47:7f:72:8b:a2:f6: 75:ad:3e:48:43:b0:72:05:38:7d:49:b4:bf:e7:09:c7:a9:a7: 0a:50:c2:e4:75:99:54:0b:e9:0c:ab:75:70:71:4d:79:b9:db: bd:77:63:7e:8e:15:27:30:20:3e:e4:3e:e5:32:8d:15:52:41: 27:44:1a:66:9c:77:20:5f:1d:3b:e8:58:92:7a:3f:86:78:74: 39:ac:63:4b -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt4ouP+h1XISN8mTXhNZjZZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3 NzVlOWQwHhcNMjYwMTAxMDgxODE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNTdhN2VhMGI3YzRiMzcxMDE5MTMwNjkxODg4OTg4MzMwZGU3MzBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyDN3kgewrocxNEx0in0Cz9wkeplT pKKtjCP4v5rc9kDGWcHx+0j743hvvjOXFOv6OKgzrGfTMtAWWc66U2+XXwgwTQSS QckJ2q9TRGm0qvupzIWPCcazvblm22gAw1QV9/nqTlN5EzOhi6s1L4sH7UKdvROL nORu3Dm28jG/9G2O6DPCd/cpcV8GvWdm55/aNlUGhntzSryIX00IDD7hUNyBhYHH RlgMRskJR657z+AG6zL9m+3laT5S83crHDD29JUPl4YOBjfQYD4eM64MdtjjMvKd PTVJAcxNH8C7NqJ5SHZNwgznkhL681xqOkAieym5KSMyB+7Y8HoxsWQAxwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFAV6fqC3xLNxAZEwaRiImIMw3nMMMB8GA1UdIwQY MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct Y2QzY2E1OTc1NzEyLzEvQlhwLW9MZkVzM0VCa1RCcEdJaVlnekRlY3d3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAXXsHAwQE 2ZFQMA0GCSqGSIb3DQEBCwUAA4IBAQBwKlZ8A1AbjLgHxM7UGXsWfiepXZnPxy5k u+qOuMRz5+AQutOeing32gPFX5ztr5SdePho1JxRspjcjjHFx6PPPchlu3l2tl20 7bhqOhAcCWm1nAhZv9DcOcldhBBEc7oYNpqD5jKCdDHapyJ9O6FkGb785N5M2Txa nyfP4JnC5Wq5V3rBP3w7JLcTeocMsN+dAMXPTcNdNkFkEdeATKVYLDbIdbDvBY0K foAiRMdHf3KLovZ1rT5IQ7ByBTh9SbS/5wnHqacKUMLkdZlUC+kMq3VwcU15udu9 d2N+jhUnMCA+5D7lMo0VUkEnRBpmnHcgXx076FiSej+GeHQ5rGNL -----END CERTIFICATE-----Generated at Fri Jan 2 12:07:57 2026 by rpki-client