This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/BVFDyiebJ3IPBdRPaqYAtEWXiqE.roa File: BVFDyiebJ3IPBdRPaqYAtEWXiqE.roa (raw, json) Hash identifier: abuqP45sqRKH8JnbQXIZ8rdh8doWSwH0twk/s/CpXfk= Subject key identifier: 05:51:43:CA:27:9B:27:72:0F:05:D4:4F:6A:A6:00:B4:45:97:8A:A1 Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1 Certificate serial: 019AF3A46A71CD6D65A8994C992589C9CC05 Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/BVFDyiebJ3IPBdRPaqYAtEWXiqE.roa Signing time: Sat 06 Dec 2025 12:30:29 +0000 ROA not before: Sat 06 Dec 2025 12:30:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 48678 IP address blocks: 2.56.108.0/24 maxlen: 24 2.56.109.0/24 maxlen: 24 5.181.85.0/24 maxlen: 24 5.181.87.0/24 maxlen: 24 45.13.190.0/24 maxlen: 24 45.81.113.0/24 maxlen: 24 45.81.115.0/24 maxlen: 24 45.88.139.0/24 maxlen: 24 45.94.170.0/24 maxlen: 24 45.132.181.0/24 maxlen: 24 45.132.183.0/24 maxlen: 24 45.144.213.0/24 maxlen: 24 77.83.37.0/24 maxlen: 24 85.209.120.0/24 maxlen: 24 193.57.41.0/24 maxlen: 24 194.15.52.0/24 maxlen: 24 195.211.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.mft rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 17:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:a4:6a:71:cd:6d:65:a8:99:4c:99:25:89:c9:cc:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1 Validity Not Before: Dec 6 12:30:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=055143ca279b27720f05d44f6aa600b445978aa1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:45:c6:70:55:75:c1:92:b0:e5:19:0d:13:25: cb:a5:5b:70:df:c6:2c:20:da:2b:d6:34:51:9a:84: 8d:c1:0a:2e:3a:be:c1:ef:01:ce:c0:47:07:43:67: ad:45:b1:99:af:4c:8d:9f:aa:ee:3c:06:8a:96:7a: 67:6f:28:63:e4:e2:5b:3e:0e:fd:cf:8e:27:4d:8d: db:32:fd:c4:24:31:16:d8:42:a7:35:17:81:e2:b9: ec:07:eb:14:c2:43:e1:35:19:28:ac:09:cb:77:41: b9:32:49:8c:44:22:07:3f:b3:d9:0f:c9:6c:94:34: 2d:86:c7:02:a0:d6:b2:84:0d:4b:0a:36:c9:08:4b: 6d:34:eb:0b:d2:da:a1:5c:56:9f:41:60:f6:7f:a7: 96:73:3d:ad:78:0a:4d:78:20:c6:b0:50:6d:e6:4c: 0d:43:89:f5:39:dc:61:3e:c5:6b:56:18:d8:07:4c: c3:f1:9a:4c:aa:91:6b:34:77:87:c2:61:5d:62:8f: 18:4a:5e:1a:fb:02:88:38:d2:77:f2:c6:73:f1:17: e5:56:9a:c9:d0:23:b7:e8:65:72:59:ed:a9:40:9a: 65:7d:0a:d6:69:a5:5e:4f:76:43:f4:14:dc:44:2e: 82:4f:98:53:fc:dc:b0:a3:49:20:4a:ea:46:7c:01: 7e:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:51:43:CA:27:9B:27:72:0F:05:D4:4F:6A:A6:00:B4:45:97:8A:A1 X509v3 Authority Key Identifier: keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/BVFDyiebJ3IPBdRPaqYAtEWXiqE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.56.108.0/23 5.181.85.0/24 5.181.87.0/24 45.13.190.0/24 45.81.113.0/24 45.81.115.0/24 45.88.139.0/24 45.94.170.0/24 45.132.181.0/24 45.132.183.0/24 45.144.213.0/24 77.83.37.0/24 85.209.120.0/24 193.57.41.0/24 194.15.52.0/24 195.211.188.0/24 Signature Algorithm: sha256WithRSAEncryption 80:95:61:76:d2:50:0d:7b:07:4e:d7:a7:f3:37:a6:93:a4:31: 17:fd:ef:9e:69:7e:f1:3c:6a:3a:22:f9:5e:8f:d1:a1:bf:4c: 51:9b:7f:23:91:b4:8f:ee:1a:c7:e5:ed:6d:7b:52:21:40:a0: 31:0e:82:5f:e3:20:12:18:a1:21:3f:cb:c3:b6:c0:86:97:27: f9:06:74:04:4c:95:f0:a5:bc:d4:bd:30:bc:24:db:e8:b2:22: fe:9d:8e:be:4d:3f:40:0d:ad:ba:d8:03:96:9a:99:6d:89:6d: 71:a4:a5:0f:cd:20:48:2f:be:20:f4:68:84:a4:ec:72:f7:45: 18:93:91:49:43:06:81:c3:e3:18:5d:a5:26:36:c8:24:8b:a7: 62:0a:29:05:30:4b:98:cf:8b:93:b9:ac:a8:51:e7:49:d6:42: b9:d7:d1:12:9d:b5:b3:3f:25:c0:de:d5:20:40:31:3f:6c:2a: fe:d3:f0:2c:22:07:1e:a5:bb:07:a5:5e:58:e0:20:8c:b2:c7: 98:6f:24:2d:38:0a:9e:54:61:30:6c:2b:f8:c7:32:54:f8:db: 67:b1:29:81:dc:be:d7:fc:59:53:70:3a:9e:41:3a:b8:76:e7: 03:0c:19:84:dc:d3:1d:53:97:0e:25:bf:ef:80:20:90:de:56: e2:3f:c0:13 -----BEGIN CERTIFICATE----- MIIFVzCCBD+gAwIBAgISAZrzpGpxzW1lqJlMmSWJycwFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkMmE0NzhiYjBiMDhlNjYxYjBiMmY5ZmJlODkzNWJjOWMy YTI4YTEwHhcNMjUxMjA2MTIzMDI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNTUxNDNjYTI3OWIyNzcyMGYwNWQ0NGY2YWE2MDBiNDQ1OTc4YWExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj0XGcFV1wZKw5RkNEyXLpVtw38Ys INor1jRRmoSNwQouOr7B7wHOwEcHQ2etRbGZr0yNn6ruPAaKlnpnbyhj5OJbPg79 z44nTY3bMv3EJDEW2EKnNReB4rnsB+sUwkPhNRkorAnLd0G5MkmMRCIHP7PZD8ls lDQthscCoNayhA1LCjbJCEttNOsL0tqhXFafQWD2f6eWcz2teApNeCDGsFBt5kwN Q4n1OdxhPsVrVhjYB0zD8ZpMqpFrNHeHwmFdYo8YSl4a+wKIONJ38sZz8RflVprJ 0CO36GVyWe2pQJplfQrWaaVeT3ZD9BTcRC6CT5hT/Nywo0kgSupGfAF+TQIDAQAB o4ICYzCCAl8wHQYDVR0OBBYEFAVRQ8onmydyDwXUT2qmALRFl4qhMB8GA1UdIwQY MBaAFJ0qR4uwsI5mGwsvn76JNbycKiihMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMt ZWVmMzUxMWY2YzYwLzEvQlZGRHlpZWJKM0lQQmRSUGFxWUF0RVdYaXFFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMtZWVmMzUxMWY2YzYw LzEvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMHkGCCsGAQUFBwEHAQH/BGowaDBmBAIAATBgAwQBAjhsAwQA BbVVAwQABbVXAwQALQ2+AwQALVFxAwQALVFzAwQALViLAwQALV6qAwQALYS1AwQA LYS3AwQALZDVAwQATVMlAwQAVdF4AwQAwTkpAwQAwg80AwQAw9O8MA0GCSqGSIb3 DQEBCwUAA4IBAQCAlWF20lANewdO16fzN6aTpDEX/e+eaX7xPGo6Ivlej9Ghv0xR m38jkbSP7hrH5e1te1IhQKAxDoJf4yASGKEhP8vDtsCGlyf5BnQETJXwpbzUvTC8 JNvosiL+nY6+TT9ADa262AOWmpltiW1xpKUPzSBIL74g9GiEpOxy90UYk5FJQwaB w+MYXaUmNsgki6diCikFMEuYz4uTuayoUedJ1kK519ESnbWzPyXA3tUgQDE/bCr+ 0/AsIgcepbsHpV5Y4CCMsseYbyQtOAqeVGEwbCv4xzJU+NtnsSmB3L7X/FlTcDqe QTq4ducDDBmE3NMdU5cOJb/vgCCQ3lbiP8AT -----END CERTIFICATE-----Generated at Mon Dec 15 01:24:48 2025 by rpki-client