This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/849281-a302-4ff8-92e3-3ae4f9cf2683/1/BDIXWUULXF4ZYctzL1dIOfhWd84.roa File: BDIXWUULXF4ZYctzL1dIOfhWd84.roa (raw, json) Hash identifier: S93eCFJP6MwqLRSBsJT6plLVugSYsxuO2UQgR9jVAWE= Subject key identifier: 04:32:17:59:45:0B:5C:5E:19:61:CB:73:2F:57:48:39:F8:56:77:CE Certificate issuer: /CN=736ef5730050c720f8c790466eb8b8a48efbe749 Certificate serial: 019B7835507EE2F9F4DDEC5E7A2F03B93F2B Authority key identifier: 73:6E:F5:73:00:50:C7:20:F8:C7:90:46:6E:B8:B8:A4:8E:FB:E7:49 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c271cwBQxyD4x5BGbri4pI7750k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/849281-a302-4ff8-92e3-3ae4f9cf2683/1/BDIXWUULXF4ZYctzL1dIOfhWd84.roa Signing time: Thu 01 Jan 2026 06:18:38 +0000 ROA not before: Thu 01 Jan 2026 06:18:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42977 IP address blocks: 185.192.12.0/24 maxlen: 24 185.192.13.0/24 maxlen: 24 185.192.14.0/24 maxlen: 24 2a0a:25c0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/849281-a302-4ff8-92e3-3ae4f9cf2683/1/c271cwBQxyD4x5BGbri4pI7750k.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/849281-a302-4ff8-92e3-3ae4f9cf2683/1/c271cwBQxyD4x5BGbri4pI7750k.mft rsync://rpki.ripe.net/repository/DEFAULT/c271cwBQxyD4x5BGbri4pI7750k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:50:7e:e2:f9:f4:dd:ec:5e:7a:2f:03:b9:3f:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=736ef5730050c720f8c790466eb8b8a48efbe749 Validity Not Before: Jan 1 06:18:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=04321759450b5c5e1961cb732f574839f85677ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:c4:f6:d1:54:5f:c5:0b:3e:3a:41:ff:63:80: e9:41:78:a7:21:88:61:cc:7f:94:0f:f5:b8:d5:c2: a1:4f:f8:af:8f:23:f6:c4:a9:34:e9:86:78:83:9f: 70:fe:d6:0c:1b:39:d0:bf:35:3a:e6:f2:47:d4:33: ab:f4:97:05:ce:e1:fa:12:7f:8a:5f:0e:b1:aa:54: 70:80:ba:de:a0:c2:fd:e9:27:43:fb:d7:03:06:76: 89:3f:53:0f:96:00:e9:82:50:ac:cc:a2:b7:10:1a: 3e:56:20:1d:ae:d1:64:b0:1d:7e:50:5e:ee:2d:a4: 3f:f0:c0:79:c4:17:7d:bb:39:c9:04:5c:f9:ac:cc: 84:9f:f8:30:26:b7:6b:01:71:92:ed:63:9d:81:59: 87:26:ca:1f:d2:15:bc:bd:ea:92:fd:c3:47:07:ba: c1:40:f6:86:e6:25:4f:70:9e:ed:7e:2b:48:5e:5d: 6e:e7:04:63:2d:b3:a4:49:f7:3d:14:ba:12:ac:70: 6e:35:47:d2:41:ef:29:75:8a:5a:ca:3c:ae:31:ad: 1a:e9:be:1d:ba:cb:12:35:2d:de:34:a5:b9:00:2a: 4c:9e:50:c1:1a:d8:70:95:6f:d2:e1:14:be:29:8d: 2c:d6:a6:63:08:83:a0:90:aa:75:fe:af:90:ac:94: 96:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:32:17:59:45:0B:5C:5E:19:61:CB:73:2F:57:48:39:F8:56:77:CE X509v3 Authority Key Identifier: keyid:73:6E:F5:73:00:50:C7:20:F8:C7:90:46:6E:B8:B8:A4:8E:FB:E7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c271cwBQxyD4x5BGbri4pI7750k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/849281-a302-4ff8-92e3-3ae4f9cf2683/1/BDIXWUULXF4ZYctzL1dIOfhWd84.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/849281-a302-4ff8-92e3-3ae4f9cf2683/1/c271cwBQxyD4x5BGbri4pI7750k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.192.12.0-185.192.14.255 IPv6: 2a0a:25c0::/29 Signature Algorithm: sha256WithRSAEncryption c5:d5:72:13:c0:ce:80:03:ef:f5:9d:9e:90:7c:bd:fb:e5:c1: 40:87:76:e8:d5:54:4f:e8:a8:de:44:14:e8:3b:6c:a0:97:15: 3a:13:5d:0e:91:59:3f:82:75:e8:2d:8d:64:36:29:bb:16:39: 62:b3:f4:38:8a:f4:f1:93:ba:fa:88:58:24:d5:94:00:85:87: e2:5d:77:4f:03:5c:75:36:9f:31:04:5f:3b:3d:41:0e:b9:03: cc:6f:78:9b:1e:13:08:1b:7e:7b:5a:79:c3:d8:7a:45:29:01: 70:d6:75:d6:3d:0e:c8:7c:4b:7a:de:9f:2d:37:41:25:f9:a8: c2:ae:42:97:dc:55:ce:f2:b3:7a:e5:3e:dc:c6:18:1d:bd:d8: 30:18:59:71:8b:1e:10:20:e5:60:8e:dd:18:06:fa:59:54:79: 82:5d:da:06:dc:d9:45:ad:3d:e2:fa:b5:ca:d2:5c:7e:c2:9c: fb:da:e2:03:6b:14:94:71:0a:43:96:57:17:58:56:95:a3:99: b1:2a:15:0d:d9:82:bb:a0:5a:a5:ad:2b:20:36:5f:90:7d:54: f9:40:c9:ff:ff:42:0a:be:df:03:05:19:e4:55:37:16:d9:58: c9:a2:ab:5c:45:a4:03:bf:10:d2:ec:67:fa:9f:3a:b4:b6:f1: 95:0a:c7:17 -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgISAZt4NVB+4vn03exeei8DuT8rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDczNmVmNTczMDA1MGM3MjBmOGM3OTA0NjZlYjhiOGE0OGVm YmU3NDkwHhcNMjYwMTAxMDYxODM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNDMyMTc1OTQ1MGI1YzVlMTk2MWNiNzMyZjU3NDgzOWY4NTY3N2NlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzMT20VRfxQs+OkH/Y4DpQXinIYhh zH+UD/W41cKhT/ivjyP2xKk06YZ4g59w/tYMGznQvzU65vJH1DOr9JcFzuH6En+K Xw6xqlRwgLreoML96SdD+9cDBnaJP1MPlgDpglCszKK3EBo+ViAdrtFksB1+UF7u LaQ/8MB5xBd9uznJBFz5rMyEn/gwJrdrAXGS7WOdgVmHJsof0hW8veqS/cNHB7rB QPaG5iVPcJ7tfitIXl1u5wRjLbOkSfc9FLoSrHBuNUfSQe8pdYpayjyuMa0a6b4d ussSNS3eNKW5ACpMnlDBGthwlW/S4RS+KY0s1qZjCIOgkKp1/q+QrJSWswIDAQAB o4ICIDCCAhwwHQYDVR0OBBYEFAQyF1lFC1xeGWHLcy9XSDn4VnfOMB8GA1UdIwQY MBaAFHNu9XMAUMcg+MeQRm64uKSO++dJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYzI3MWN3QlF4eUQ0eDVCR2JyaTRwSTc3NTBrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy84NDkyODEtYTMwMi00ZmY4LTkyZTMt M2FlNGY5Y2YyNjgzLzEvQkRJWFdVVUxYRjRaWWN0ekwxZElPZmhXZDg0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy84NDkyODEtYTMwMi00ZmY4LTkyZTMtM2FlNGY5Y2YyNjgz LzEvYzI3MWN3QlF4eUQ0eDVCR2JyaTRwSTc3NTBrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTAUBAIAATAOMAwDBAK5wAwD BAC5wA4wDQQCAAIwBwMFAyoKJcAwDQYJKoZIhvcNAQELBQADggEBAMXVchPAzoAD 7/WdnpB8vfvlwUCHdujVVE/oqN5EFOg7bKCXFToTXQ6RWT+CdegtjWQ2KbsWOWKz 9DiK9PGTuvqIWCTVlACFh+Jdd08DXHU2nzEEXzs9QQ65A8xveJseEwgbfntaecPY ekUpAXDWddY9Dsh8S3reny03QSX5qMKuQpfcVc7ys3rlPtzGGB292DAYWXGLHhAg 5WCO3RgG+llUeYJd2gbc2UWtPeL6tcrSXH7CnPva4gNrFJRxCkOWVxdYVpWjmbEq FQ3ZgrugWqWtKyA2X5B9VPlAyf//Qgq+3wMFGeRVNxbZWMmiq1xFpAO/ENLsZ/qf OrS28ZUKxxc= -----END CERTIFICATE-----Generated at Tue Feb 10 03:07:16 2026 by rpki-client