This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/a733bc-68f8-499f-850f-8e924ffbe584/1/bqo8i7e61pUqD5FEzLFkWy1XymQ.roa File: bqo8i7e61pUqD5FEzLFkWy1XymQ.roa (raw, json) Hash identifier: vjG4lCHF0gVIg6PrqwyEnNN05XaS1Wdmc8r5NDC7CZY= Subject key identifier: 6E:AA:3C:8B:B7:BA:D6:95:2A:0F:91:44:CC:B1:64:5B:2D:57:CA:64 Certificate issuer: /CN=c09fc8a067fa6d2476bdce24afffad17131d9e86 Certificate serial: 019AFEF523C7B834AC12277BE661E241F3E2 Authority key identifier: C0:9F:C8:A0:67:FA:6D:24:76:BD:CE:24:AF:FF:AD:17:13:1D:9E:86 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wJ_IoGf6bSR2vc4kr_-tFxMdnoY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/a733bc-68f8-499f-850f-8e924ffbe584/1/bqo8i7e61pUqD5FEzLFkWy1XymQ.roa Signing time: Mon 08 Dec 2025 17:14:29 +0000 ROA not before: Mon 08 Dec 2025 17:14:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 211607 IP address blocks: 195.230.103.0/24 maxlen: 24 216.25.124.0/24 maxlen: 24 216.25.125.0/24 maxlen: 24 216.25.126.0/24 maxlen: 24 2001:678:e70::/48 maxlen: 48 2a10:b640:3000::/36 maxlen: 48 2a10:b641::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/a733bc-68f8-499f-850f-8e924ffbe584/1/wJ_IoGf6bSR2vc4kr_-tFxMdnoY.crl rsync://rpki.ripe.net/repository/DEFAULT/56/a733bc-68f8-499f-850f-8e924ffbe584/1/wJ_IoGf6bSR2vc4kr_-tFxMdnoY.mft rsync://rpki.ripe.net/repository/DEFAULT/wJ_IoGf6bSR2vc4kr_-tFxMdnoY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fe:f5:23:c7:b8:34:ac:12:27:7b:e6:61:e2:41:f3:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c09fc8a067fa6d2476bdce24afffad17131d9e86 Validity Not Before: Dec 8 17:14:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=6eaa3c8bb7bad6952a0f9144ccb1645b2d57ca64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:60:ff:8e:90:5e:ab:26:27:96:59:69:f6:54: 17:40:73:5a:7e:0e:0c:c8:cf:d8:dc:a1:c5:2d:80: db:d8:9d:7f:1b:a3:13:f7:c9:a6:03:fd:98:98:46: 5f:35:b1:17:b7:64:27:54:74:d6:a7:bf:47:d4:b5: af:d5:a2:a3:02:65:a4:c7:c7:a5:92:de:1c:6f:71: f7:bf:d9:79:ed:c0:f5:8a:f5:ad:ea:89:49:52:33: db:0c:e5:c2:62:ab:ec:7a:bb:fc:c8:5f:e6:74:2c: 1f:c5:ae:05:7e:61:ba:3f:e2:17:c6:c9:19:47:19: 4d:6b:d5:98:1a:36:d3:6d:c7:8f:b3:10:9f:e8:fe: e7:9d:3c:fe:e4:e8:16:7e:44:5d:1d:89:de:31:9f: 37:16:cb:d0:67:97:9b:ca:11:e2:6a:51:62:66:fe: b5:bc:1f:58:29:90:a6:1f:9e:45:6b:c5:e6:98:ef: a6:13:b2:5e:b6:b2:71:7c:b1:15:7d:88:57:fe:cb: 8c:04:34:c4:6b:c9:7d:2d:04:03:07:40:27:e0:3d: b4:04:cc:9a:75:e1:33:ae:62:52:e0:9a:12:ab:37: d9:d0:95:0d:50:a6:06:fd:6f:2d:e9:5d:19:73:f0: 3d:63:a9:28:b1:b2:92:e3:8c:a3:3a:5f:a3:be:24: 97:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:AA:3C:8B:B7:BA:D6:95:2A:0F:91:44:CC:B1:64:5B:2D:57:CA:64 X509v3 Authority Key Identifier: keyid:C0:9F:C8:A0:67:FA:6D:24:76:BD:CE:24:AF:FF:AD:17:13:1D:9E:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wJ_IoGf6bSR2vc4kr_-tFxMdnoY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/a733bc-68f8-499f-850f-8e924ffbe584/1/bqo8i7e61pUqD5FEzLFkWy1XymQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/a733bc-68f8-499f-850f-8e924ffbe584/1/wJ_IoGf6bSR2vc4kr_-tFxMdnoY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.230.103.0/24 216.25.124.0-216.25.126.255 IPv6: 2001:678:e70::/48 2a10:b640:3000::/36 2a10:b641::/36 Signature Algorithm: sha256WithRSAEncryption 59:05:b4:91:e1:ed:47:f6:dc:a2:01:20:ac:12:3b:3e:f1:93: 38:ba:19:0c:de:c7:49:97:75:c2:20:ae:e6:7f:36:c8:c5:59: 5d:c2:e1:7b:41:79:1a:b7:e1:2a:49:aa:d3:c2:51:9c:12:22: 57:fe:e1:8b:4c:d7:60:ee:30:92:49:df:a9:d0:9d:db:76:40: 53:8e:ab:42:61:c2:c4:49:eb:0f:a3:57:a6:72:42:0a:87:9f: 51:9f:41:69:de:8f:a1:35:6f:85:74:a5:fb:ed:42:c9:09:89: 91:71:66:74:6a:1e:3e:94:32:45:48:9a:64:93:d8:c2:d0:f8: 6d:2f:f5:6f:23:c5:5c:fd:1a:5f:b6:d8:d5:d6:37:56:50:3a: 2e:2c:6d:44:22:bf:7a:b9:fc:e8:06:94:b7:11:ca:c9:f3:55: 3c:30:eb:85:1c:42:9e:4c:fd:37:82:c2:2a:02:9f:ea:27:61: cb:f2:08:00:47:6d:9f:2d:34:2b:95:30:d0:f8:79:76:1c:2a: 07:68:b7:9a:cb:3e:04:fd:6c:c7:8b:a9:b0:5f:19:dd:ab:c9: 1a:08:a5:88:48:c0:a8:98:7f:c6:4b:c4:9f:24:3d:72:33:8e: 96:1d:10:8c:cc:56:9c:f5:04:20:17:cb:d9:e1:7c:1a:4a:1d: 93:1d:55:7d -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgISAZr+9SPHuDSsEid75mHiQfPiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwOWZjOGEwNjdmYTZkMjQ3NmJkY2UyNGFmZmZhZDE3MTMx ZDllODYwHhcNMjUxMjA4MTcxNDI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZWFhM2M4YmI3YmFkNjk1MmEwZjkxNDRjY2IxNjQ1YjJkNTdjYTY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtWD/jpBeqyYnlllp9lQXQHNafg4M yM/Y3KHFLYDb2J1/G6MT98mmA/2YmEZfNbEXt2QnVHTWp79H1LWv1aKjAmWkx8el kt4cb3H3v9l57cD1ivWt6olJUjPbDOXCYqvserv8yF/mdCwfxa4FfmG6P+IXxskZ RxlNa9WYGjbTbcePsxCf6P7nnTz+5OgWfkRdHYneMZ83FsvQZ5ebyhHialFiZv61 vB9YKZCmH55Fa8XmmO+mE7JetrJxfLEVfYhX/suMBDTEa8l9LQQDB0An4D20BMya deEzrmJS4JoSqzfZ0JUNUKYG/W8t6V0Zc/A9Y6kosbKS44yjOl+jviSX1QIDAQAB o4ICODCCAjQwHQYDVR0OBBYEFG6qPIu3utaVKg+RRMyxZFstV8pkMB8GA1UdIwQY MBaAFMCfyKBn+m0kdr3OJK//rRcTHZ6GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd0pfSW9HZjZiU1IydmM0a3JfLXRGeE1kbm9ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9hNzMzYmMtNjhmOC00OTlmLTg1MGYt OGU5MjRmZmJlNTg0LzEvYnFvOGk3ZTYxcFVxRDVGRXpMRmtXeTFYeW1RLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni9hNzMzYmMtNjhmOC00OTlmLTg1MGYtOGU5MjRmZmJlNTg0 LzEvd0pfSW9HZjZiU1IydmM0a3JfLXRGeE1kbm9ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CME4GCCsGAQUFBwEHAQH/BD8wPTAaBAIAATAUAwQAw+ZnMAwD BALYGXwDBADYGX4wHwQCAAIwGQMHACABBngOcAMGBCoQtkAwAwYEKhC2QQAwDQYJ KoZIhvcNAQELBQADggEBAFkFtJHh7Uf23KIBIKwSOz7xkzi6GQzex0mXdcIgruZ/ NsjFWV3C4XtBeRq34SpJqtPCUZwSIlf+4YtM12DuMJJJ36nQndt2QFOOq0JhwsRJ 6w+jV6ZyQgqHn1GfQWnej6E1b4V0pfvtQskJiZFxZnRqHj6UMkVImmST2MLQ+G0v 9W8jxVz9Gl+22NXWN1ZQOi4sbUQiv3q5/OgGlLcRysnzVTww64UcQp5M/TeCwioC n+onYcvyCABHbZ8tNCuVMND4eXYcKgdot5rLPgT9bMeLqbBfGd2ryRoIpYhIwKiY f8ZLxJ8kPXIzjpYdEIzMVpz1BCAXy9nhfBpKHZMdVX0= -----END CERTIFICATE-----Generated at Sat Dec 20 02:37:17 2025 by rpki-client