This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/e0af68-dc6e-41cc-a6de-5583e61adb38/1/BXI5ofFp8mb6gJRdDdim1c_uINA.roa File: BXI5ofFp8mb6gJRdDdim1c_uINA.roa (raw, json) Hash identifier: PcZNAv5gh3OSvPv6RyLwjWyyXj09fuAhEv8CUwdyHpI= Subject key identifier: 05:72:39:A1:F1:69:F2:66:FA:80:94:5D:0D:D8:A6:D5:CF:EE:20:D0 Certificate issuer: /CN=ab7be34f5d269da502aa68348bf07b92d92c0cc4 Certificate serial: 019B7B36682CF977B92DEFF9C0980368E0D9 Authority key identifier: AB:7B:E3:4F:5D:26:9D:A5:02:AA:68:34:8B:F0:7B:92:D9:2C:0C:C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q3vjT10mnaUCqmg0i_B7ktksDMQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/e0af68-dc6e-41cc-a6de-5583e61adb38/1/BXI5ofFp8mb6gJRdDdim1c_uINA.roa Signing time: Thu 01 Jan 2026 20:18:41 +0000 ROA not before: Thu 01 Jan 2026 20:18:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49556 IP address blocks: 45.89.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/e0af68-dc6e-41cc-a6de-5583e61adb38/1/q3vjT10mnaUCqmg0i_B7ktksDMQ.crl rsync://rpki.ripe.net/repository/DEFAULT/19/e0af68-dc6e-41cc-a6de-5583e61adb38/1/q3vjT10mnaUCqmg0i_B7ktksDMQ.mft rsync://rpki.ripe.net/repository/DEFAULT/q3vjT10mnaUCqmg0i_B7ktksDMQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 14:01:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:68:2c:f9:77:b9:2d:ef:f9:c0:98:03:68:e0:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab7be34f5d269da502aa68348bf07b92d92c0cc4 Validity Not Before: Jan 1 20:18:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=057239a1f169f266fa80945d0dd8a6d5cfee20d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:5f:de:1d:67:e9:14:81:fc:67:ab:c1:c4:e7: 2a:ba:f7:66:b1:28:74:16:67:bf:f1:60:99:2c:e1: a1:5d:17:77:a2:18:cd:c2:73:75:cc:c1:c5:b9:27: ea:93:07:8a:8b:3f:6d:69:22:1e:ad:96:39:7e:9a: 31:96:27:ac:8c:4d:12:8a:ef:c1:79:72:7c:21:00: 89:dd:6a:90:92:33:7d:29:e8:c4:8b:16:a4:9f:26: 14:6d:8a:94:42:c7:31:cc:d7:ef:8a:f4:1e:9c:1d: 8e:94:2f:d4:82:14:1b:01:65:5c:9c:c7:8c:63:84: 94:df:23:33:61:ef:47:6a:d0:98:73:58:b9:bd:0a: c8:a0:b1:96:4d:70:d3:6c:3d:c2:a4:7b:ea:6d:f0: 52:10:9f:49:5d:c4:55:de:2c:58:dd:1a:40:73:28: 60:d7:53:9a:e5:84:f4:76:27:17:76:be:07:a9:85: de:ac:e6:fb:bc:79:71:8e:24:dc:e9:c3:d5:ee:8e: 03:55:c5:0e:aa:de:33:78:6d:ef:d5:2d:84:62:ab: 6f:78:90:98:70:95:97:99:b7:73:cf:84:15:f8:91: 1a:46:7b:54:55:60:1e:7d:d4:6d:b7:0e:16:60:4f: e8:8f:b6:da:99:2a:80:c7:3d:7f:e9:09:42:95:01: d6:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:72:39:A1:F1:69:F2:66:FA:80:94:5D:0D:D8:A6:D5:CF:EE:20:D0 X509v3 Authority Key Identifier: keyid:AB:7B:E3:4F:5D:26:9D:A5:02:AA:68:34:8B:F0:7B:92:D9:2C:0C:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q3vjT10mnaUCqmg0i_B7ktksDMQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/e0af68-dc6e-41cc-a6de-5583e61adb38/1/BXI5ofFp8mb6gJRdDdim1c_uINA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/e0af68-dc6e-41cc-a6de-5583e61adb38/1/q3vjT10mnaUCqmg0i_B7ktksDMQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.89.221.0/24 Signature Algorithm: sha256WithRSAEncryption 88:0d:da:ed:00:21:99:81:fd:f3:ad:13:36:69:ce:bf:7e:77: 78:8b:0a:b2:12:a4:99:28:ea:02:c9:05:da:0f:06:2a:66:68: cb:81:89:d5:66:38:83:5e:b7:9b:a9:8a:bf:fe:ff:14:ee:33: db:18:84:48:28:ca:5f:f3:2b:8b:dd:23:5b:88:14:28:87:32: d5:22:99:58:25:30:de:d6:4d:f7:57:8f:13:77:6c:75:54:be: 5e:da:e4:a2:31:c5:fd:e5:d0:b8:45:10:c5:6f:4c:d4:65:01: 0e:26:6f:e1:95:d2:58:51:2b:bc:29:71:0a:d3:89:ec:ac:45: af:0c:83:b3:74:6b:de:a3:dc:1e:82:0d:03:91:89:ff:bc:c1: 96:35:8d:53:aa:de:ee:1a:5d:85:78:71:76:a0:98:3f:52:a7: 2e:dd:12:ff:f9:12:d1:18:82:5e:00:43:b0:96:7a:a5:50:92: 3b:75:d3:ae:2f:d8:f2:82:ab:15:5f:fc:da:ab:12:a1:b1:fb: 73:0a:98:e1:84:14:12:5c:94:61:2b:7d:20:58:2a:17:4e:38: 79:b3:24:c8:74:7a:14:04:08:88:f5:9b:b7:6c:ee:4d:8b:41: 90:d4:ce:09:60:01:de:5b:f6:92:e5:52:07:dc:87:97:5c:a0: 8b:7c:07:91 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7Nmgs+Xe5Le/5wJgDaODZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiN2JlMzRmNWQyNjlkYTUwMmFhNjgzNDhiZjA3YjkyZDky YzBjYzQwHhcNMjYwMTAxMjAxODQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNTcyMzlhMWYxNjlmMjY2ZmE4MDk0NWQwZGQ4YTZkNWNmZWUyMGQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtl/eHWfpFIH8Z6vBxOcquvdmsSh0 Fme/8WCZLOGhXRd3ohjNwnN1zMHFuSfqkweKiz9taSIerZY5fpoxliesjE0Siu/B eXJ8IQCJ3WqQkjN9KejEixaknyYUbYqUQscxzNfvivQenB2OlC/UghQbAWVcnMeM Y4SU3yMzYe9HatCYc1i5vQrIoLGWTXDTbD3CpHvqbfBSEJ9JXcRV3ixY3RpAcyhg 11Oa5YT0dicXdr4HqYXerOb7vHlxjiTc6cPV7o4DVcUOqt4zeG3v1S2EYqtveJCY cJWXmbdzz4QV+JEaRntUVWAefdRttw4WYE/oj7bamSqAxz1/6QlClQHWNwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAVyOaHxafJm+oCUXQ3YptXP7iDQMB8GA1UdIwQY MBaAFKt7409dJp2lAqpoNIvwe5LZLAzEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcTN2alQxMG1uYVVDcW1nMGlfQjdrdGtzRE1RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9lMGFmNjgtZGM2ZS00MWNjLWE2ZGUt NTU4M2U2MWFkYjM4LzEvQlhJNW9mRnA4bWI2Z0pSZERkaW0xY191SU5BLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS9lMGFmNjgtZGM2ZS00MWNjLWE2ZGUtNTU4M2U2MWFkYjM4 LzEvcTN2alQxMG1uYVVDcW1nMGlfQjdrdGtzRE1RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALVndMA0G CSqGSIb3DQEBCwUAA4IBAQCIDdrtACGZgf3zrRM2ac6/fnd4iwqyEqSZKOoCyQXa DwYqZmjLgYnVZjiDXrebqYq//v8U7jPbGIRIKMpf8yuL3SNbiBQohzLVIplYJTDe 1k33V48Td2x1VL5e2uSiMcX95dC4RRDFb0zUZQEOJm/hldJYUSu8KXEK04nsrEWv DIOzdGveo9wegg0DkYn/vMGWNY1Tqt7uGl2FeHF2oJg/Uqcu3RL/+RLRGIJeAEOw lnqlUJI7ddOuL9jygqsVX/zaqxKhsftzCpjhhBQSXJRhK30gWCoXTjh5syTIdHoU BAiI9Zu3bO5Ni0GQ1M4JYAHeW/aS5VIH3IeXXKCLfAeR -----END CERTIFICATE-----Generated at Mon Jan 26 23:21:19 2026 by rpki-client