This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/BqUKbsvLBxawTFe6lbocyvMayfo.roa File: BqUKbsvLBxawTFe6lbocyvMayfo.roa (raw, json) Hash identifier: Dyttb82AlsCtBruaEKcmePP+n2KCLIf+fF6BNWnXupI= Subject key identifier: 06:A5:0A:6E:CB:CB:07:16:B0:4C:57:BA:95:BA:1C:CA:F3:1A:C9:FA Certificate issuer: /CN=0f17bf2498f3682d7183e47f75b28af41c2815b9 Certificate serial: 019AE0B6CEA275DBA1A3B77AB2034DDABD2A Authority key identifier: 0F:17:BF:24:98:F3:68:2D:71:83:E4:7F:75:B2:8A:F4:1C:28:15:B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/BqUKbsvLBxawTFe6lbocyvMayfo.roa Signing time: Tue 02 Dec 2025 20:17:48 +0000 ROA not before: Tue 02 Dec 2025 20:17:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 3258 IP address blocks: 45.142.166.0/24 maxlen: 24 45.142.167.0/24 maxlen: 24 192.109.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.crl rsync://rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.mft rsync://rpki.ripe.net/repository/DEFAULT/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 04 Dec 2025 05:01:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e0:b6:ce:a2:75:db:a1:a3:b7:7a:b2:03:4d:da:bd:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f17bf2498f3682d7183e47f75b28af41c2815b9 Validity Not Before: Dec 2 20:17:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=06a50a6ecbcb0716b04c57ba95ba1ccaf31ac9fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:b9:e5:86:fa:1e:9e:81:d4:ce:4a:a3:bb:58: f8:80:e8:8f:a6:ec:70:de:2a:72:96:8e:ce:dc:42: 4d:79:9b:3a:22:32:51:c1:ed:c9:8f:20:00:67:13: 35:23:88:75:1a:2f:5a:26:8b:64:09:d4:6e:6d:61: 3a:ca:1b:a0:9f:f4:7d:72:2e:00:87:48:2e:8d:ac: 59:25:14:76:2b:11:8c:a3:4e:bc:f9:9f:9b:05:9c: 05:8f:d1:90:4c:a7:cb:e0:cb:d6:2b:39:8b:0c:60: 79:7b:0a:fe:7b:fa:49:f1:3b:bf:8b:44:bd:8c:11: 2c:dd:1b:cc:25:91:f7:ec:96:68:81:7b:4f:5e:25: 26:7d:b6:cc:0e:29:4b:f4:7c:e3:b6:d2:ee:9c:23: 54:5e:fd:8c:b1:f2:b2:1d:47:f0:63:f8:d0:57:1d: 0a:5c:5a:6b:f9:04:68:f2:69:d9:ed:2b:ba:ea:23: 6f:5b:f9:48:78:24:04:f4:b7:96:ce:2b:12:f3:0e: 4c:4f:49:83:f0:97:ae:6d:d4:bd:48:56:52:2b:19: 9f:2b:5d:7b:51:f5:84:70:ce:1a:52:c6:94:b8:f0: bf:15:e7:79:0a:89:3e:01:d7:e3:97:0e:eb:1c:62: 54:c3:89:33:75:16:8c:16:e7:37:fb:a8:4f:02:0c: 06:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:A5:0A:6E:CB:CB:07:16:B0:4C:57:BA:95:BA:1C:CA:F3:1A:C9:FA X509v3 Authority Key Identifier: keyid:0F:17:BF:24:98:F3:68:2D:71:83:E4:7F:75:B2:8A:F4:1C:28:15:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/BqUKbsvLBxawTFe6lbocyvMayfo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.142.166.0/23 192.109.233.0/24 Signature Algorithm: sha256WithRSAEncryption 1e:97:23:1e:95:2f:a6:bb:e3:da:77:64:cd:0b:02:90:da:29: 6b:c4:a5:84:93:31:2e:7d:03:95:ac:c9:b1:7e:f6:7a:87:9e: ff:2f:3a:03:a8:5e:6c:a7:42:c5:f1:b8:0b:5c:ac:8e:bd:34: 4c:a1:b0:8c:8c:65:0e:4a:6f:07:81:25:bf:a2:45:36:f2:b8: 6d:e9:f6:77:b6:c0:7f:65:17:85:6c:f1:63:65:44:4f:50:3d: 71:16:fa:13:be:43:1a:6a:1b:21:17:94:7b:0e:4c:9a:6d:5f: ca:eb:c9:34:57:c2:0d:62:af:3e:68:3d:e7:05:21:27:42:48: 56:67:3d:61:4c:2c:c0:f2:04:59:44:3c:8a:94:d3:74:78:ea: 15:e3:7d:e6:32:6b:0e:14:3c:2b:d7:54:ad:0d:e1:39:5a:cf: 9a:61:5a:0f:5b:3f:ff:fc:f2:9a:18:8c:0d:70:b9:e2:4b:e4: 84:9c:07:33:74:6d:1b:a9:2f:f2:a5:ce:e5:8d:b3:7b:aa:b8: f1:03:08:04:82:2e:41:bd:23:96:18:69:7a:90:20:8d:3d:b9: 64:59:bb:0c:75:e0:17:53:e7:4a:ab:76:b3:51:a6:cf:09:a3: 13:80:27:41:6c:56:8b:ac:14:d6:16:d3:f7:65:d9:ff:14:01: 9b:08:d9:c2 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZrgts6idduho7d6sgNN2r0qMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmMTdiZjI0OThmMzY4MmQ3MTgzZTQ3Zjc1YjI4YWY0MWMy ODE1YjkwHhcNMjUxMjAyMjAxNzQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNmE1MGE2ZWNiY2IwNzE2YjA0YzU3YmE5NWJhMWNjYWYzMWFjOWZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAubnlhvoenoHUzkqju1j4gOiPpuxw 3ipylo7O3EJNeZs6IjJRwe3JjyAAZxM1I4h1Gi9aJotkCdRubWE6yhugn/R9ci4A h0gujaxZJRR2KxGMo068+Z+bBZwFj9GQTKfL4MvWKzmLDGB5ewr+e/pJ8Tu/i0S9 jBEs3RvMJZH37JZogXtPXiUmfbbMDilL9HzjttLunCNUXv2MsfKyHUfwY/jQVx0K XFpr+QRo8mnZ7Su66iNvW/lIeCQE9LeWzisS8w5MT0mD8JeubdS9SFZSKxmfK117 UfWEcM4aUsaUuPC/Fed5Cok+Adfjlw7rHGJUw4kzdRaMFuc3+6hPAgwGgwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFAalCm7LywcWsExXupW6HMrzGsn6MB8GA1UdIwQY MBaAFA8XvySY82gtcYPkf3WyivQcKBW5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRHhlX0pKanphQzF4Zy1SX2RiS0s5QndvRmJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC83YmU2MTQtMWU2ZS00YjQwLWI2ZGMt YTQ5Y2JiODRmOTgyLzEvQnFVS2JzdkxCeGF3VEZlNmxib2N5dk1heWZvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC83YmU2MTQtMWU2ZS00YjQwLWI2ZGMtYTQ5Y2JiODRmOTgy LzEvRHhlX0pKanphQzF4Zy1SX2RiS0s5QndvRmJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBLY6mAwQA wG3pMA0GCSqGSIb3DQEBCwUAA4IBAQAelyMelS+mu+Pad2TNCwKQ2ilrxKWEkzEu fQOVrMmxfvZ6h57/LzoDqF5sp0LF8bgLXKyOvTRMobCMjGUOSm8HgSW/okU28rht 6fZ3tsB/ZReFbPFjZURPUD1xFvoTvkMaahshF5R7DkyabV/K68k0V8INYq8+aD3n BSEnQkhWZz1hTCzA8gRZRDyKlNN0eOoV433mMmsOFDwr11StDeE5Ws+aYVoPWz// /PKaGIwNcLniS+SEnAczdG0bqS/ypc7ljbN7qrjxAwgEgi5BvSOWGGl6kCCNPblk WbsMdeAXU+dKq3azUabPCaMTgCdBbFaLrBTWFtP3Zdn/FAGbCNnC -----END CERTIFICATE-----Generated at Wed Dec 3 13:10:04 2025 by rpki-client