This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/BRHlUoVs4kTAJJzJpj2fQx42B0g.roa File: BRHlUoVs4kTAJJzJpj2fQx42B0g.roa (raw, json) Hash identifier: v4G5+buvZ/BhLTazPK7WGSu5PzG/f4FLXfPXo1ZLswM= Subject key identifier: 05:11:E5:52:85:6C:E2:44:C0:24:9C:C9:A6:3D:9F:43:1E:36:07:48 Certificate issuer: /CN=94166b704843d3d9754095c83a91b493828200a2 Certificate serial: 019B197448636C75D75228F983C346661FE5 Authority key identifier: 94:16:6B:70:48:43:D3:D9:75:40:95:C8:3A:91:B4:93:82:82:00:A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lBZrcEhD09l1QJXIOpG0k4KCAKI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/BRHlUoVs4kTAJJzJpj2fQx42B0g.roa Signing time: Sat 13 Dec 2025 20:43:29 +0000 ROA not before: Sat 13 Dec 2025 20:43:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 29491 IP address blocks: 95.111.143.0/24 maxlen: 24 2a12:27c0::/29 maxlen: 29 2a12:3640::/29 maxlen: 29 2a12:4840::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/lBZrcEhD09l1QJXIOpG0k4KCAKI.crl rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/lBZrcEhD09l1QJXIOpG0k4KCAKI.mft rsync://rpki.ripe.net/repository/DEFAULT/lBZrcEhD09l1QJXIOpG0k4KCAKI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:19:74:48:63:6c:75:d7:52:28:f9:83:c3:46:66:1f:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94166b704843d3d9754095c83a91b493828200a2 Validity Not Before: Dec 13 20:43:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=0511e552856ce244c0249cc9a63d9f431e360748 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:8c:8d:2f:b4:d0:5b:b0:76:cc:cc:57:fa:39: 71:2c:5e:29:f9:06:5f:6c:3d:94:94:8b:a8:74:a9: 2d:4f:b7:b1:04:f4:4c:95:b0:bb:d7:ba:0f:6b:52: bd:f7:ab:52:c2:49:07:89:1a:d1:25:c9:cf:bc:86: 0f:af:04:80:b3:b7:42:86:76:ee:b2:43:b1:1c:45: 87:5c:58:d0:bc:b2:f8:bc:aa:a5:ed:0d:11:9d:fe: 10:a8:76:76:06:8d:ce:bf:1e:8d:58:72:c4:14:eb: dd:47:9b:f6:f5:d9:6a:b4:53:9e:0f:46:0f:c8:24: 12:a0:7c:69:59:3f:e7:00:8e:92:7d:44:50:c7:2a: cc:a1:ca:83:d9:18:5e:0a:b9:be:cf:7e:89:d1:1f: cb:f5:fd:4f:ea:c3:c0:ce:4a:6c:cf:80:f2:ed:b5: 27:3a:75:da:ef:71:88:7b:07:72:10:4b:4d:41:a1: a3:0d:2b:3a:ee:e5:e9:24:eb:a4:4a:64:06:ab:c4: 3c:3c:ac:9e:a5:66:83:98:30:21:96:e2:a3:99:16: 59:79:64:d7:af:57:2d:82:25:15:ef:9c:c7:0d:6e: a5:e8:b5:0a:e0:42:0a:ef:41:e5:2c:24:b3:78:de: 6a:df:fa:eb:54:42:79:ea:af:7f:89:d5:94:0f:49: 98:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:11:E5:52:85:6C:E2:44:C0:24:9C:C9:A6:3D:9F:43:1E:36:07:48 X509v3 Authority Key Identifier: keyid:94:16:6B:70:48:43:D3:D9:75:40:95:C8:3A:91:B4:93:82:82:00:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lBZrcEhD09l1QJXIOpG0k4KCAKI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/BRHlUoVs4kTAJJzJpj2fQx42B0g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/lBZrcEhD09l1QJXIOpG0k4KCAKI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.111.143.0/24 IPv6: 2a12:27c0::/29 2a12:3640::/29 2a12:4840::/29 Signature Algorithm: sha256WithRSAEncryption 91:01:90:40:7b:72:67:0b:0d:f9:43:ff:ce:eb:65:28:4f:e6: 31:63:ec:b8:bf:30:fa:55:ee:bc:50:62:65:51:4a:3d:e4:21: a5:de:77:ad:af:7b:2c:3b:86:c5:27:b5:49:c6:0c:34:b4:2a: 9c:17:6e:e6:9a:23:e0:4e:be:74:ba:a7:21:3f:f8:81:ee:4b: 5a:21:00:c7:19:b8:e9:ec:ec:fb:49:51:a9:1e:8e:f9:9c:26: ae:f6:f1:5c:98:01:cc:d0:8a:27:f7:80:19:d5:64:dc:d2:10: 90:b6:b3:da:26:f0:b4:d3:7a:68:b6:69:bb:cc:fb:d7:c2:ad: c7:0e:ed:ea:3a:56:74:b0:60:79:80:0e:d5:0d:3f:9c:5c:f7: 53:0b:23:01:52:d9:a1:58:e6:c3:cd:c0:c0:43:bf:87:6d:07: 29:ae:01:b6:1e:51:9b:8d:2f:72:8e:4f:db:19:c6:36:82:c2: 61:f9:44:15:c7:44:1d:58:89:14:25:bb:1e:20:55:c0:17:2d: 9c:b4:e4:83:63:87:63:43:f8:16:16:33:20:3c:c7:39:55:c5: 53:a0:f8:92:55:fb:d3:d7:f3:ff:0e:39:9c:a7:ea:ec:7a:c4: 00:cd:31:f6:bd:7e:e2:db:d7:6e:70:bb:ea:6a:d4:6c:dd:a0: 43:7e:95:f6 -----BEGIN CERTIFICATE----- MIIFGjCCBAKgAwIBAgISAZsZdEhjbHXXUij5g8NGZh/lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk0MTY2YjcwNDg0M2QzZDk3NTQwOTVjODNhOTFiNDkzODI4 MjAwYTIwHhcNMjUxMjEzMjA0MzI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNTExZTU1Mjg1NmNlMjQ0YzAyNDljYzlhNjNkOWY0MzFlMzYwNzQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsYyNL7TQW7B2zMxX+jlxLF4p+QZf bD2UlIuodKktT7exBPRMlbC717oPa1K996tSwkkHiRrRJcnPvIYPrwSAs7dChnbu skOxHEWHXFjQvLL4vKql7Q0Rnf4QqHZ2Bo3Ovx6NWHLEFOvdR5v29dlqtFOeD0YP yCQSoHxpWT/nAI6SfURQxyrMocqD2RheCrm+z36J0R/L9f1P6sPAzkpsz4Dy7bUn OnXa73GIewdyEEtNQaGjDSs67uXpJOukSmQGq8Q8PKyepWaDmDAhluKjmRZZeWTX r1ctgiUV75zHDW6l6LUK4EIK70HlLCSzeN5q3/rrVEJ56q9/idWUD0mYxwIDAQAB o4ICJjCCAiIwHQYDVR0OBBYEFAUR5VKFbOJEwCScyaY9n0MeNgdIMB8GA1UdIwQY MBaAFJQWa3BIQ9PZdUCVyDqRtJOCggCiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbEJacmNFaEQwOWwxUUpYSU9wRzBrNEtDQUtJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi80M2ZmOGYtY2Q1NC00Y2YxLThhYWYt NGJlMThlZjEyOGI0LzEvQlJIbFVvVnM0a1RBSkp6SnBqMmZReDQyQjBnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi80M2ZmOGYtY2Q1NC00Y2YxLThhYWYtNGJlMThlZjEyOGI0 LzEvbEJacmNFaEQwOWwxUUpYSU9wRzBrNEtDQUtJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDwGCCsGAQUFBwEHAQH/BC0wKzAMBAIAATAGAwQAX2+PMBsE AgACMBUDBQMqEifAAwUDKhI2QAMFAyoSSEAwDQYJKoZIhvcNAQELBQADggEBAJEB kEB7cmcLDflD/87rZShP5jFj7Li/MPpV7rxQYmVRSj3kIaXed62veyw7hsUntUnG DDS0KpwXbuaaI+BOvnS6pyE/+IHuS1ohAMcZuOns7PtJUakejvmcJq728VyYAczQ iif3gBnVZNzSEJC2s9om8LTTemi2abvM+9fCrccO7eo6VnSwYHmADtUNP5xc91ML IwFS2aFY5sPNwMBDv4dtBymuAbYeUZuNL3KOT9sZxjaCwmH5RBXHRB1YiRQlux4g VcAXLZy05INjh2ND+BYWMyA8xzlVxVOg+JJV+9PX8/8OOZyn6ux6xADNMfa9fuLb 125wu+pq1GzdoEN+lfY= -----END CERTIFICATE-----Generated at Mon Dec 15 05:52:42 2025 by rpki-client