This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/2fb473-8e6b-4f0d-ad30-d4934493a679/1/BdXkp0jd5mZ59rClK2iWtZn7TxU.roa File: BdXkp0jd5mZ59rClK2iWtZn7TxU.roa (raw, json) Hash identifier: wSBDoJL04+StGfAFdruIEpNNi0ajEzoFpxeVenzGlJw= Subject key identifier: 05:D5:E4:A7:48:DD:E6:66:79:F6:B0:A5:2B:68:96:B5:99:FB:4F:15 Certificate issuer: /CN=31b0f64c69d330b66ebcd03a9bf0fdc19f3147d8 Certificate serial: 019B77C73D9A5931F3887F53A6A7A4449D05 Authority key identifier: 31:B0:F6:4C:69:D3:30:B6:6E:BC:D0:3A:9B:F0:FD:C1:9F:31:47:D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/2fb473-8e6b-4f0d-ad30-d4934493a679/1/BdXkp0jd5mZ59rClK2iWtZn7TxU.roa Signing time: Thu 01 Jan 2026 04:18:24 +0000 ROA not before: Thu 01 Jan 2026 04:18:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12481 IP address blocks: 5.100.232.0/21 maxlen: 21 94.142.144.0/21 maxlen: 21 212.103.192.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/2fb473-8e6b-4f0d-ad30-d4934493a679/1/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/2fb473-8e6b-4f0d-ad30-d4934493a679/1/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.mft rsync://rpki.ripe.net/repository/DEFAULT/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:3d:9a:59:31:f3:88:7f:53:a6:a7:a4:44:9d:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31b0f64c69d330b66ebcd03a9bf0fdc19f3147d8 Validity Not Before: Jan 1 04:18:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=05d5e4a748dde66679f6b0a52b6896b599fb4f15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:59:9c:3c:57:95:f4:84:e9:82:57:17:f0:b0: 56:58:aa:f8:0a:75:60:02:11:4d:5c:1d:23:1c:56: 3d:9b:77:7d:3b:54:7c:f3:e3:0e:0c:70:7b:e0:e2: 25:cf:5b:c7:09:3f:65:c3:20:a6:63:57:8d:0b:69: c1:cb:3e:f7:e5:75:21:06:51:13:6d:e4:7c:9f:b7: e7:66:43:63:7b:e7:b4:09:b0:a3:25:80:f0:cb:ae: 00:ef:8e:1b:b6:e7:f3:48:dd:0f:00:e0:df:fb:15: e5:cf:da:56:e4:7b:5e:0f:5e:e3:da:53:c8:99:a2: df:4a:48:1a:b6:38:7a:7e:8f:36:09:b9:96:ab:96: 37:a6:bb:10:ea:bd:f2:02:fd:2a:4b:40:63:46:da: 26:ad:62:1a:2d:1d:e6:78:1e:1e:08:e9:c9:01:b3: a6:d6:3b:7a:7b:96:21:33:ea:6a:1c:8d:ac:e1:e5: 63:fd:96:a4:77:18:8d:01:e5:7b:65:6a:4e:c4:43: 84:b1:eb:ec:9a:79:44:22:65:f3:2a:54:07:b5:cf: 9b:0e:9d:9b:34:60:bf:ab:79:16:67:fc:c2:b7:1c: b0:ad:4e:a8:90:59:7a:1e:0d:e2:c5:4a:6b:f3:68: 3f:db:ed:94:35:1c:e8:3d:2a:c2:0f:e9:32:dc:b2: b9:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:D5:E4:A7:48:DD:E6:66:79:F6:B0:A5:2B:68:96:B5:99:FB:4F:15 X509v3 Authority Key Identifier: keyid:31:B0:F6:4C:69:D3:30:B6:6E:BC:D0:3A:9B:F0:FD:C1:9F:31:47:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2fb473-8e6b-4f0d-ad30-d4934493a679/1/BdXkp0jd5mZ59rClK2iWtZn7TxU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2fb473-8e6b-4f0d-ad30-d4934493a679/1/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.100.232.0/21 94.142.144.0/21 212.103.192.0/19 Signature Algorithm: sha256WithRSAEncryption 45:2c:26:98:1e:e9:0b:49:a3:82:38:a3:24:59:23:b7:e0:4a: a9:9d:cd:13:ce:ee:4e:2b:36:3f:f5:23:ff:9b:3e:9a:c5:cd: c4:7f:58:fa:7b:e2:8b:22:e2:84:3d:3b:f6:f3:3f:81:3b:39: e7:cd:97:6f:98:40:64:47:42:67:50:a8:67:2b:3f:29:cf:34: 1a:98:54:b3:26:cb:f3:c0:0e:3b:55:54:7e:83:14:92:43:b2: 3d:a6:78:ab:32:c3:47:d6:8f:6a:22:36:e6:27:a5:2c:8e:eb: 31:3d:26:a5:13:ab:01:1b:86:44:9a:09:8f:55:27:d1:d4:b7: c7:1f:25:dd:37:99:a8:33:20:48:f6:f9:6d:94:73:cd:50:31: 2a:ab:36:d9:de:47:0c:66:ee:99:28:a1:d0:98:db:bb:16:f2: 71:8a:e3:b1:62:b3:29:42:38:48:48:95:b4:30:1a:55:b7:5f: 82:5f:3a:aa:92:b5:a2:4b:81:4a:dd:50:dc:f0:7b:ff:91:a4: 5d:49:7c:37:cc:ce:09:f9:02:e2:0d:8c:0a:4c:11:05:75:0d: f6:6d:f6:49:38:e7:dd:4c:ce:6e:6c:c9:57:27:9f:5e:95:a8: a2:50:0c:ab:32:54:39:eb:64:e0:37:95:10:1e:fd:27:88:2b: 1e:db:6f:ba -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt3xz2aWTHziH9TpqekRJ0FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxYjBmNjRjNjlkMzMwYjY2ZWJjZDAzYTliZjBmZGMxOWYz MTQ3ZDgwHhcNMjYwMTAxMDQxODI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNWQ1ZTRhNzQ4ZGRlNjY2NzlmNmIwYTUyYjY4OTZiNTk5ZmI0ZjE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqFmcPFeV9ITpglcX8LBWWKr4CnVg AhFNXB0jHFY9m3d9O1R88+MODHB74OIlz1vHCT9lwyCmY1eNC2nByz735XUhBlET beR8n7fnZkNje+e0CbCjJYDwy64A744btufzSN0PAODf+xXlz9pW5HteD17j2lPI maLfSkgatjh6fo82CbmWq5Y3prsQ6r3yAv0qS0BjRtomrWIaLR3meB4eCOnJAbOm 1jt6e5YhM+pqHI2s4eVj/ZakdxiNAeV7ZWpOxEOEsevsmnlEImXzKlQHtc+bDp2b NGC/q3kWZ/zCtxywrU6okFl6Hg3ixUpr82g/2+2UNRzoPSrCD+ky3LK56QIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFAXV5KdI3eZmefawpStolrWZ+08VMB8GA1UdIwQY MBaAFDGw9kxp0zC2brzQOpvw/cGfMUfYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTWJEMlRHblRNTFp1dk5BNm1fRDl3Wjh4UjlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8yZmI0NzMtOGU2Yi00ZjBkLWFkMzAt ZDQ5MzQ0OTNhNjc5LzEvQmRYa3AwamQ1bVo1OXJDbEsyaVd0Wm43VHhVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi8yZmI0NzMtOGU2Yi00ZjBkLWFkMzAtZDQ5MzQ0OTNhNjc5 LzEvTWJEMlRHblRNTFp1dk5BNm1fRDl3Wjh4UjlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQDBWToAwQD Xo6QAwQF1GfAMA0GCSqGSIb3DQEBCwUAA4IBAQBFLCaYHukLSaOCOKMkWSO34Eqp nc0Tzu5OKzY/9SP/mz6axc3Ef1j6e+KLIuKEPTv28z+BOznnzZdvmEBkR0JnUKhn Kz8pzzQamFSzJsvzwA47VVR+gxSSQ7I9pnirMsNH1o9qIjbmJ6UsjusxPSalE6sB G4ZEmgmPVSfR1LfHHyXdN5moMyBI9vltlHPNUDEqqzbZ3kcMZu6ZKKHQmNu7FvJx iuOxYrMpQjhISJW0MBpVt1+CXzqqkrWiS4FK3VDc8Hv/kaRdSXw3zM4J+QLiDYwK TBEFdQ32bfZJOOfdTM5ubMlXJ59elaiiUAyrMlQ562TgN5UQHv0niCse22+6 -----END CERTIFICATE-----Generated at Tue Feb 10 00:29:11 2026 by rpki-client