This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/bKyX5SG6DyCqJiQSkFdqFjg1o-E.roa File: bKyX5SG6DyCqJiQSkFdqFjg1o-E.roa (raw, json) Hash identifier: yT9Yzf+uBBeDkqte+YCfH3PUHF4dkiH/zoa5XVP6GqA= Subject key identifier: 6C:AC:97:E5:21:BA:0F:20:AA:26:24:12:90:57:6A:16:38:35:A3:E1 Certificate issuer: /CN=14bee0ebd06b4b812f9e13716e25f1c3c3d14cc6 Certificate serial: 019AA59A79763CE0C5114734FD40E822D44A Authority key identifier: 14:BE:E0:EB:D0:6B:4B:81:2F:9E:13:71:6E:25:F1:C3:C3:D1:4C:C6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FL7g69BrS4EvnhNxbiXxw8PRTMY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/bKyX5SG6DyCqJiQSkFdqFjg1o-E.roa Signing time: Fri 21 Nov 2025 08:49:15 +0000 ROA not before: Fri 21 Nov 2025 08:49:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 39855 IP address blocks: 195.226.205.0/24 maxlen: 24 213.249.73.0/24 maxlen: 24 213.249.74.0/23 maxlen: 24 213.249.76.0/24 maxlen: 24 213.249.77.0/24 maxlen: 24 213.249.78.0/23 maxlen: 24 213.249.81.0/24 maxlen: 24 213.249.82.0/23 maxlen: 24 213.249.84.0/24 maxlen: 24 213.249.85.0/24 maxlen: 24 213.249.86.0/23 maxlen: 24 213.249.89.0/24 maxlen: 24 213.249.90.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/FL7g69BrS4EvnhNxbiXxw8PRTMY.crl rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/FL7g69BrS4EvnhNxbiXxw8PRTMY.mft rsync://rpki.ripe.net/repository/DEFAULT/FL7g69BrS4EvnhNxbiXxw8PRTMY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 05:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:a5:9a:79:76:3c:e0:c5:11:47:34:fd:40:e8:22:d4:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14bee0ebd06b4b812f9e13716e25f1c3c3d14cc6 Validity Not Before: Nov 21 08:49:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=6cac97e521ba0f20aa26241290576a163835a3e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:39:91:a9:12:9b:a1:11:4c:fa:d1:f6:78:ce: de:a0:2d:f2:09:07:ce:3b:96:d8:bd:5d:41:cb:df: e3:66:4e:00:9a:56:38:f6:04:08:37:8d:4b:fa:dc: cb:88:3f:b9:5c:e1:5b:47:c5:53:3f:0e:4a:2c:dd: b3:95:d4:8c:b9:ab:00:1f:eb:4d:e7:73:7b:d6:99: 5a:3e:ed:5d:ff:b4:68:c1:c8:61:49:f8:a1:13:5c: 01:1f:d0:53:3b:75:5b:49:03:57:fe:12:b5:66:ed: 59:d4:35:77:8d:6e:7e:c4:16:a3:7e:9a:88:b3:45: 01:05:5d:f0:2b:65:be:21:91:24:8c:d0:36:72:bc: 65:53:30:22:64:be:88:c3:5e:a0:6d:ab:e6:71:62: 02:0a:d0:b0:f0:ff:bf:29:a6:81:8b:b6:61:9e:7f: 8f:ea:6a:4e:79:d5:9f:6e:d0:2f:0b:90:b8:47:24: af:28:e7:88:4f:8d:60:7b:3f:46:f7:6d:6d:34:9e: b7:36:ae:4e:77:67:cf:33:80:61:f4:b0:9e:61:e1: 5a:86:eb:30:2f:c4:68:36:92:48:72:e7:34:c4:cf: 95:7b:60:82:a7:b0:3f:3a:26:9c:b2:0f:67:20:41: 98:03:55:84:dd:1c:4d:e4:fe:49:e0:73:b9:15:e3: 66:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:AC:97:E5:21:BA:0F:20:AA:26:24:12:90:57:6A:16:38:35:A3:E1 X509v3 Authority Key Identifier: keyid:14:BE:E0:EB:D0:6B:4B:81:2F:9E:13:71:6E:25:F1:C3:C3:D1:4C:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FL7g69BrS4EvnhNxbiXxw8PRTMY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/bKyX5SG6DyCqJiQSkFdqFjg1o-E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/FL7g69BrS4EvnhNxbiXxw8PRTMY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.226.205.0/24 213.249.73.0-213.249.79.255 213.249.81.0-213.249.87.255 213.249.89.0-213.249.91.255 Signature Algorithm: sha256WithRSAEncryption 1d:a8:a6:6d:ae:10:a1:e3:06:9c:2e:ce:79:a0:a4:9d:19:c3: f3:de:d6:35:1b:a6:b5:fb:30:a3:5d:73:b6:e9:ee:ce:1b:55: a5:21:dc:e6:84:b9:a4:4f:2f:34:ba:41:8a:4f:9e:84:1c:79: a0:8c:d9:da:af:79:7c:4b:71:1d:82:95:ce:b4:20:c1:0e:40: db:ea:6e:63:69:33:24:e5:bf:ba:b1:1d:1a:46:4a:b5:fe:5e: 10:c8:9d:3d:ad:46:e9:83:42:64:a0:c4:9e:46:38:0d:2b:19: 9e:42:ab:57:5d:2b:7e:c5:5a:2e:cc:4c:99:df:35:26:c9:36: 9f:dc:4c:80:35:df:8d:7e:36:01:cc:96:de:19:61:24:d0:4b: ec:b1:f4:10:5c:3a:a4:a7:c9:b9:73:f9:48:86:e5:5b:c9:d9: 73:76:5c:9b:e8:70:68:c5:91:51:00:32:1e:62:94:cc:22:15: 79:74:8d:cf:47:2c:81:ae:0e:ee:e6:42:17:48:c5:ce:8e:c3: 50:2f:a4:db:eb:c3:27:46:31:94:b3:92:a7:ab:a8:9c:2a:5f: f4:d6:13:7a:73:2f:86:03:50:62:5a:1f:3f:50:f8:79:f9:31: a5:c5:26:37:dd:f3:a4:e1:ea:79:60:83:20:b0:d9:6c:a9:ea: 69:ca:b0:ac -----BEGIN CERTIFICATE----- MIIFJzCCBA+gAwIBAgISAZqlmnl2PODFEUc0/UDoItRKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE0YmVlMGViZDA2YjRiODEyZjllMTM3MTZlMjVmMWMzYzNk MTRjYzYwHhcNMjUxMTIxMDg0OTE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2Y2FjOTdlNTIxYmEwZjIwYWEyNjI0MTI5MDU3NmExNjM4MzVhM2UxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqjmRqRKboRFM+tH2eM7eoC3yCQfO O5bYvV1By9/jZk4AmlY49gQIN41L+tzLiD+5XOFbR8VTPw5KLN2zldSMuasAH+tN 53N71plaPu1d/7RowchhSfihE1wBH9BTO3VbSQNX/hK1Zu1Z1DV3jW5+xBajfpqI s0UBBV3wK2W+IZEkjNA2crxlUzAiZL6Iw16gbavmcWICCtCw8P+/KaaBi7Zhnn+P 6mpOedWfbtAvC5C4RySvKOeIT41gez9G921tNJ63Nq5Od2fPM4Bh9LCeYeFahusw L8RoNpJIcuc0xM+Ve2CCp7A/Oiacsg9nIEGYA1WE3RxN5P5J4HO5FeNmYQIDAQAB o4ICMzCCAi8wHQYDVR0OBBYEFGysl+Uhug8gqiYkEpBXahY4NaPhMB8GA1UdIwQY MBaAFBS+4OvQa0uBL54TcW4l8cPD0UzGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRkw3ZzY5QnJTNEV2bmhOeGJpWHh3OFBSVE1ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8xNjFjM2YtYjgzZC00NWIxLWFhOGUt ZDFiYjZiNGRkNzAxLzEvYkt5WDVTRzZEeUNxSmlRU2tGZHFGamcxby1FLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS8xNjFjM2YtYjgzZC00NWIxLWFhOGUtZDFiYjZiNGRkNzAx LzEvRkw3ZzY5QnJTNEV2bmhOeGJpWHh3OFBSVE1ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwAwQAw+LNMAwD BADV+UkDBATV+UAwDAMEANX5UQMEA9X5UDAMAwQA1flZAwQC1flYMA0GCSqGSIb3 DQEBCwUAA4IBAQAdqKZtrhCh4wacLs55oKSdGcPz3tY1G6a1+zCjXXO26e7OG1Wl IdzmhLmkTy80ukGKT56EHHmgjNnar3l8S3EdgpXOtCDBDkDb6m5jaTMk5b+6sR0a Rkq1/l4QyJ09rUbpg0JkoMSeRjgNKxmeQqtXXSt+xVouzEyZ3zUmyTaf3EyANd+N fjYBzJbeGWEk0EvssfQQXDqkp8m5c/lIhuVbydlzdlyb6HBoxZFRADIeYpTMIhV5 dI3PRyyBrg7u5kIXSMXOjsNQL6Tb68MnRjGUs5Knq6icKl/01hN6cy+GA1BiWh8/ UPh5+TGlxSY33fOk4ep5YIMgsNlsqeppyrCs -----END CERTIFICATE-----Generated at Fri Dec 5 15:20:26 2025 by rpki-client