This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/a1399a-ea6b-4a09-8b40-90c0bde09869/1/BdsuDRm80ULk9aLfJ7zh20INiU8.roa File: BdsuDRm80ULk9aLfJ7zh20INiU8.roa (raw, json) Hash identifier: 0BqcT0T81e3M/0LPrL5e9ii3yguHiKnmLWj00gesJkU= Subject key identifier: 05:DB:2E:0D:19:BC:D1:42:E4:F5:A2:DF:27:BC:E1:DB:42:0D:89:4F Certificate issuer: /CN=ad80679b96ca322bfa85500cab206c6d47412edf Certificate serial: 019B78A35F3ED1F64E2EBFD8B45219FA7527 Authority key identifier: AD:80:67:9B:96:CA:32:2B:FA:85:50:0C:AB:20:6C:6D:47:41:2E:DF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rYBnm5bKMiv6hVAMqyBsbUdBLt8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/a1399a-ea6b-4a09-8b40-90c0bde09869/1/BdsuDRm80ULk9aLfJ7zh20INiU8.roa Signing time: Thu 01 Jan 2026 08:18:51 +0000 ROA not before: Thu 01 Jan 2026 08:18:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 185.69.1.0/24 maxlen: 24 195.42.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/a1399a-ea6b-4a09-8b40-90c0bde09869/1/rYBnm5bKMiv6hVAMqyBsbUdBLt8.crl rsync://rpki.ripe.net/repository/DEFAULT/28/a1399a-ea6b-4a09-8b40-90c0bde09869/1/rYBnm5bKMiv6hVAMqyBsbUdBLt8.mft rsync://rpki.ripe.net/repository/DEFAULT/rYBnm5bKMiv6hVAMqyBsbUdBLt8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 02:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:5f:3e:d1:f6:4e:2e:bf:d8:b4:52:19:fa:75:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ad80679b96ca322bfa85500cab206c6d47412edf Validity Not Before: Jan 1 08:18:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=05db2e0d19bcd142e4f5a2df27bce1db420d894f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:ef:60:8c:f1:2f:ed:4a:37:d0:43:c7:f1:02: c3:5b:85:03:63:62:bd:a5:c8:4d:2a:f7:6e:6c:cb: 8f:5e:92:be:e0:fd:c6:98:0c:c5:50:24:67:d1:a9: 5b:93:a6:15:52:b5:8b:33:db:b0:97:fe:36:32:1e: af:90:59:28:8e:5c:5c:25:6e:59:5c:87:54:00:2a: 82:7f:1e:1d:10:3a:4c:c8:22:f6:1c:bf:7c:cc:9b: 9d:b1:e2:7c:8a:56:1e:70:6f:f5:a7:2e:0c:9e:9e: dc:89:31:3b:4b:92:50:fc:42:d5:c5:39:b8:53:48: 94:ee:68:e3:3a:40:98:5a:a7:02:b9:2f:80:36:af: 70:1d:8a:95:9f:7b:90:39:43:46:6d:ff:72:72:21: 7a:6f:ad:e4:c0:85:5a:01:90:ad:88:84:59:ed:fc: a8:0e:3a:8e:7d:f7:50:67:89:5e:b4:fd:4c:31:cf: 04:66:e2:61:ec:07:3b:ff:c5:10:1b:ac:3d:c3:ad: b6:b1:08:e1:25:79:52:dc:d3:50:03:66:8a:86:74: 0e:12:a4:de:93:b7:a2:6e:a6:1c:16:00:5c:9f:01: 89:dc:51:cf:b6:e1:e9:fd:d6:7c:65:b9:6b:d8:ad: 49:4c:f4:64:42:a5:3b:63:5b:33:8b:4d:56:f1:84: 42:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:DB:2E:0D:19:BC:D1:42:E4:F5:A2:DF:27:BC:E1:DB:42:0D:89:4F X509v3 Authority Key Identifier: keyid:AD:80:67:9B:96:CA:32:2B:FA:85:50:0C:AB:20:6C:6D:47:41:2E:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rYBnm5bKMiv6hVAMqyBsbUdBLt8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/a1399a-ea6b-4a09-8b40-90c0bde09869/1/BdsuDRm80ULk9aLfJ7zh20INiU8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/a1399a-ea6b-4a09-8b40-90c0bde09869/1/rYBnm5bKMiv6hVAMqyBsbUdBLt8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.69.1.0/24 195.42.240.0/24 Signature Algorithm: sha256WithRSAEncryption 0a:a8:e8:a0:66:fd:0c:eb:db:94:8e:23:fa:33:9a:dc:5f:29: 26:3e:b1:78:36:b6:75:fe:a7:dd:68:5e:10:45:26:4f:c5:d0: 0d:2f:63:65:f9:1d:64:c0:97:dc:7f:bc:69:c8:63:e7:77:96: f8:e6:17:1f:3a:8b:c8:6b:ab:ea:15:45:fe:01:4b:f8:f7:1d: 26:f0:a4:00:fb:26:d4:3a:0b:1f:7f:7f:41:db:a7:8a:28:20: 43:5e:dd:c3:07:82:8a:14:e6:08:38:5f:73:85:4e:37:da:b9: af:64:81:33:fc:f2:d0:68:3a:96:25:37:37:84:fe:5a:e4:9e: ce:2b:ca:19:e6:10:07:5e:3b:ba:51:34:f9:fe:d2:83:8d:fe: 7b:99:12:03:67:48:1f:14:ab:ce:01:a0:5a:d1:8a:31:1f:11: 80:9b:32:bb:b5:10:2c:9c:78:d9:70:a6:b8:a4:9d:fd:60:40: a6:91:6d:6a:cf:7c:74:91:86:89:44:1a:f2:00:36:6b:8b:b3: 57:00:fd:1f:73:40:87:4e:6a:1b:02:52:23:97:c0:0b:03:0a: cf:53:a6:58:13:ea:92:07:65:49:e1:ac:0a:b1:51:63:2d:a6: 5d:a0:f1:2c:c5:3d:fa:b3:ae:12:8b:94:62:a2:0a:fd:54:83: 14:34:3f:dc -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt4o18+0fZOLr/YtFIZ+nUnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkODA2NzliOTZjYTMyMmJmYTg1NTAwY2FiMjA2YzZkNDc0 MTJlZGYwHhcNMjYwMTAxMDgxODUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNWRiMmUwZDE5YmNkMTQyZTRmNWEyZGYyN2JjZTFkYjQyMGQ4OTRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxe9gjPEv7Uo30EPH8QLDW4UDY2K9 pchNKvdubMuPXpK+4P3GmAzFUCRn0albk6YVUrWLM9uwl/42Mh6vkFkojlxcJW5Z XIdUACqCfx4dEDpMyCL2HL98zJudseJ8ilYecG/1py4Mnp7ciTE7S5JQ/ELVxTm4 U0iU7mjjOkCYWqcCuS+ANq9wHYqVn3uQOUNGbf9yciF6b63kwIVaAZCtiIRZ7fyo DjqOffdQZ4letP1MMc8EZuJh7Ac7/8UQG6w9w622sQjhJXlS3NNQA2aKhnQOEqTe k7eibqYcFgBcnwGJ3FHPtuHp/dZ8Zblr2K1JTPRkQqU7Y1szi01W8YRCcwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFAXbLg0ZvNFC5PWi3ye84dtCDYlPMB8GA1UdIwQY MBaAFK2AZ5uWyjIr+oVQDKsgbG1HQS7fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcllCbm01YktNaXY2aFZBTXF5QnNiVWRCTHQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9hMTM5OWEtZWE2Yi00YTA5LThiNDAt OTBjMGJkZTA5ODY5LzEvQmRzdURSbTgwVUxrOWFMZko3emgyMElOaVU4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC9hMTM5OWEtZWE2Yi00YTA5LThiNDAtOTBjMGJkZTA5ODY5 LzEvcllCbm01YktNaXY2aFZBTXF5QnNiVWRCTHQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAuUUBAwQA wyrwMA0GCSqGSIb3DQEBCwUAA4IBAQAKqOigZv0M69uUjiP6M5rcXykmPrF4NrZ1 /qfdaF4QRSZPxdANL2Nl+R1kwJfcf7xpyGPnd5b45hcfOovIa6vqFUX+AUv49x0m 8KQA+ybUOgsff39B26eKKCBDXt3DB4KKFOYIOF9zhU432rmvZIEz/PLQaDqWJTc3 hP5a5J7OK8oZ5hAHXju6UTT5/tKDjf57mRIDZ0gfFKvOAaBa0YoxHxGAmzK7tRAs nHjZcKa4pJ39YECmkW1qz3x0kYaJRBryADZri7NXAP0fc0CHTmobAlIjl8ALAwrP U6ZYE+qSB2VJ4awKsVFjLaZdoPEsxT36s64Si5Riogr9VIMUND/c -----END CERTIFICATE-----Generated at Fri Jan 2 11:03:57 2026 by rpki-client