This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/beJcu8jp7XoMcK6rAEcUFSDQrYI.roa File: beJcu8jp7XoMcK6rAEcUFSDQrYI.roa (raw, json) Hash identifier: zYxTg1jfn9EG78umE8ZucP90B5Y2rJZ1b3uK6DJnlYk= Subject key identifier: 6D:E2:5C:BB:C8:E9:ED:7A:0C:70:AE:AB:00:47:14:15:20:D0:AD:82 Certificate issuer: /CN=04cbe5b4623dab42f15a905002db7ce62e854f29 Certificate serial: 019B78A315E9E604E759DB636DA3408F2B37 Authority key identifier: 04:CB:E5:B4:62:3D:AB:42:F1:5A:90:50:02:DB:7C:E6:2E:85:4F:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/beJcu8jp7XoMcK6rAEcUFSDQrYI.roa Signing time: Thu 01 Jan 2026 08:18:32 +0000 ROA not before: Thu 01 Jan 2026 08:18:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60139 IP address blocks: 37.202.15.0/24 maxlen: 24 212.113.113.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.crl rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.mft rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:15:e9:e6:04:e7:59:db:63:6d:a3:40:8f:2b:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04cbe5b4623dab42f15a905002db7ce62e854f29 Validity Not Before: Jan 1 08:18:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6de25cbbc8e9ed7a0c70aeab0047141520d0ad82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:42:6c:9b:cd:c9:8b:39:3a:db:67:12:58:43: 5b:46:22:f8:71:09:3e:03:1d:17:db:c9:27:b0:7b: 5f:a9:fd:ca:6a:e5:01:3f:c6:c9:e0:cb:0b:c9:59: 2a:54:dc:63:d2:f0:77:d6:4e:d0:bd:4b:78:56:4d: 2a:21:b9:41:6f:5d:00:08:c4:8c:f4:46:4a:e9:7c: c9:56:27:11:78:60:2b:f4:b6:52:c8:ed:62:05:d1: 33:b6:18:bf:d5:02:79:c5:fd:71:8a:34:2b:d6:e8: 98:44:e3:21:b4:9b:3b:8c:cd:41:ac:73:90:69:d1: e0:f6:e3:9b:b0:b1:73:df:d6:48:ae:45:c2:92:e9: fd:a4:ea:04:2c:18:7b:2e:6c:54:fe:d3:0c:47:50: 5b:63:37:e1:ac:93:93:c9:b0:02:a3:5e:08:dc:c8: 29:6a:94:42:0b:02:f7:83:c3:28:dd:f5:b2:cf:88: 48:ba:79:70:e1:94:4b:d7:73:ff:da:80:0a:d4:38: 06:e3:97:3a:36:5d:21:83:a0:a4:0d:3e:71:61:9e: 43:20:67:58:9a:32:49:34:ac:4e:a2:5a:76:9a:fe: 4e:79:0d:d9:86:aa:b2:36:27:75:64:e5:5c:4b:9e: d3:5c:58:c3:80:66:f9:39:22:58:30:3a:0d:32:4f: 9e:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:E2:5C:BB:C8:E9:ED:7A:0C:70:AE:AB:00:47:14:15:20:D0:AD:82 X509v3 Authority Key Identifier: keyid:04:CB:E5:B4:62:3D:AB:42:F1:5A:90:50:02:DB:7C:E6:2E:85:4F:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/beJcu8jp7XoMcK6rAEcUFSDQrYI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.202.15.0/24 212.113.113.0/24 Signature Algorithm: sha256WithRSAEncryption 27:49:04:57:1d:56:dd:42:30:e0:b3:f5:25:57:11:3e:25:d1: 14:be:f4:52:e4:6d:ff:42:f8:1a:1d:f7:ad:44:0a:32:12:62: e8:52:95:6b:84:bc:35:d2:5b:44:44:6a:78:2c:20:09:e4:1a: 24:78:2e:4c:1c:fa:67:d2:a9:e8:b8:1d:38:f1:a7:26:87:95: 7e:c3:70:dd:70:21:13:f5:f3:c3:c2:4d:4b:7e:93:92:29:de: 81:32:55:bb:27:3e:4a:ee:ef:3d:4c:d8:52:95:ac:e1:e9:1d: 21:ad:cc:00:d1:8d:24:13:2a:02:b7:e2:fc:12:c1:7f:26:6a: 23:6d:5c:51:a9:52:ea:45:f7:88:e2:db:7c:14:8d:b3:fc:29: 98:c0:e6:2e:af:1c:8a:a4:83:cd:9f:5d:5f:6c:92:f0:a3:2a: 19:75:07:eb:7d:60:e9:20:ee:c2:69:96:a7:56:4a:a6:ee:c4: 91:d4:29:57:6d:85:75:5d:81:b3:6e:7b:8b:ef:9e:f9:b3:9f: 85:60:11:30:22:e4:71:ea:ca:05:37:9f:f5:33:c9:ae:c5:8a: b2:66:51:ad:31:30:fd:b2:13:6b:d6:e9:64:32:38:87:20:06: 9f:46:fc:70:bd:91:c9:82:5b:95:ed:e5:8c:0a:ed:19:f1:d1: 2a:81:49:95 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt4oxXp5gTnWdtjbaNAjys3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0Y2JlNWI0NjIzZGFiNDJmMTVhOTA1MDAyZGI3Y2U2MmU4 NTRmMjkwHhcNMjYwMTAxMDgxODMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZGUyNWNiYmM4ZTllZDdhMGM3MGFlYWIwMDQ3MTQxNTIwZDBhZDgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuEJsm83Jizk622cSWENbRiL4cQk+ Ax0X28knsHtfqf3KauUBP8bJ4MsLyVkqVNxj0vB31k7QvUt4Vk0qIblBb10ACMSM 9EZK6XzJVicReGAr9LZSyO1iBdEzthi/1QJ5xf1xijQr1uiYROMhtJs7jM1BrHOQ adHg9uObsLFz39ZIrkXCkun9pOoELBh7LmxU/tMMR1BbYzfhrJOTybACo14I3Mgp apRCCwL3g8Mo3fWyz4hIunlw4ZRL13P/2oAK1DgG45c6Nl0hg6CkDT5xYZ5DIGdY mjJJNKxOolp2mv5OeQ3ZhqqyNid1ZOVcS57TXFjDgGb5OSJYMDoNMk+eBwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFG3iXLvI6e16DHCuqwBHFBUg0K2CMB8GA1UdIwQY MBaAFATL5bRiPatC8VqQUALbfOYuhU8pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQk12bHRHSTlxMEx4V3BCUUF0dDg1aTZGVHlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS8zZDNhMmQtYTAzOS00NmY0LTg2ODct MDU3ODE3YmE5ZmI3LzEvYmVKY3U4anA3WG9NY0s2ckFFY1VGU0RRcllJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS8zZDNhMmQtYTAzOS00NmY0LTg2ODctMDU3ODE3YmE5ZmI3 LzEvQk12bHRHSTlxMEx4V3BCUUF0dDg1aTZGVHlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAJcoPAwQA 1HFxMA0GCSqGSIb3DQEBCwUAA4IBAQAnSQRXHVbdQjDgs/UlVxE+JdEUvvRS5G3/ QvgaHfetRAoyEmLoUpVrhLw10ltERGp4LCAJ5BokeC5MHPpn0qnouB048acmh5V+ w3DdcCET9fPDwk1LfpOSKd6BMlW7Jz5K7u89TNhSlazh6R0hrcwA0Y0kEyoCt+L8 EsF/JmojbVxRqVLqRfeI4tt8FI2z/CmYwOYurxyKpIPNn11fbJLwoyoZdQfrfWDp IO7CaZanVkqm7sSR1ClXbYV1XYGzbnuL7575s5+FYBEwIuRx6soFN5/1M8muxYqy ZlGtMTD9shNr1ulkMjiHIAafRvxwvZHJgluV7eWMCu0Z8dEqgUmV -----END CERTIFICATE-----Generated at Sun Jan 25 22:47:42 2026 by rpki-client