This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/8d6943-ca75-4372-b77f-5c6502bffa1f/1/bdjR-oD_Oii7Pli7R8XyAmbHV-o.roa File: bdjR-oD_Oii7Pli7R8XyAmbHV-o.roa (raw, json) Hash identifier: ggKFIgIElCHZMireZeFZrOPcIaJP8Yn+MeT51gputK0= Subject key identifier: 6D:D8:D1:FA:80:FF:3A:28:BB:3E:58:BB:47:C5:F2:02:66:C7:57:EA Certificate issuer: /CN=c6d18653fbfb6fd5732dc940c1d65d77ab0bbfa3 Certificate serial: 019B7F84A39AF700A2645C3A6ABF08784AD0 Authority key identifier: C6:D1:86:53:FB:FB:6F:D5:73:2D:C9:40:C1:D6:5D:77:AB:0B:BF:A3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xtGGU_v7b9VzLclAwdZdd6sLv6M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/8d6943-ca75-4372-b77f-5c6502bffa1f/1/bdjR-oD_Oii7Pli7R8XyAmbHV-o.roa Signing time: Fri 02 Jan 2026 16:22:37 +0000 ROA not before: Fri 02 Jan 2026 16:22:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31042 IP address blocks: 5.22.160.0/19 maxlen: 19 94.127.0.0/21 maxlen: 21 94.127.0.0/24 maxlen: 24 185.20.36.0/22 maxlen: 24 217.26.208.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/8d6943-ca75-4372-b77f-5c6502bffa1f/1/xtGGU_v7b9VzLclAwdZdd6sLv6M.crl rsync://rpki.ripe.net/repository/DEFAULT/81/8d6943-ca75-4372-b77f-5c6502bffa1f/1/xtGGU_v7b9VzLclAwdZdd6sLv6M.mft rsync://rpki.ripe.net/repository/DEFAULT/xtGGU_v7b9VzLclAwdZdd6sLv6M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:a3:9a:f7:00:a2:64:5c:3a:6a:bf:08:78:4a:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c6d18653fbfb6fd5732dc940c1d65d77ab0bbfa3 Validity Not Before: Jan 2 16:22:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6dd8d1fa80ff3a28bb3e58bb47c5f20266c757ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:17:4b:72:6d:39:02:67:b7:9d:c4:76:1e:8d: 09:c9:93:25:e8:9a:90:cb:e1:0d:80:fa:e6:9c:c0: 47:e5:55:64:69:7a:74:89:ec:6c:90:66:34:89:b1: bb:38:15:7d:56:48:56:f1:8c:16:45:22:4e:81:ba: ed:d7:6a:4f:fc:58:32:ed:b1:55:fa:fe:0e:2c:1a: 93:4c:e2:52:fe:bd:a2:55:73:fa:91:c9:2b:9d:0d: 20:5e:c5:3a:60:28:0e:be:04:15:15:ff:33:29:e1: 6f:ad:43:a9:59:16:02:56:65:91:17:fd:23:34:fa: 78:50:bb:6e:c5:fc:53:a5:15:fc:ec:46:5b:47:fd: d6:d4:ed:aa:99:ac:c7:f4:9f:6c:89:ed:b7:13:03: 28:2e:62:2a:52:7a:da:86:1b:02:57:b2:a5:66:7f: 42:42:83:2a:e3:47:21:1c:37:36:4d:fe:f3:f8:c0: b9:93:99:71:a5:dd:f5:ae:81:45:e0:b3:31:3b:ff: 78:a4:eb:3a:f7:27:fc:6a:7d:97:ed:fe:86:e1:88: 99:1a:97:1d:31:28:1a:28:7e:45:17:5e:f4:02:9e: ce:21:b1:12:16:b3:72:da:3e:59:4c:07:45:f1:94: 5c:ac:4c:5e:4d:a7:13:ef:85:52:02:01:d5:6d:61: 30:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:D8:D1:FA:80:FF:3A:28:BB:3E:58:BB:47:C5:F2:02:66:C7:57:EA X509v3 Authority Key Identifier: keyid:C6:D1:86:53:FB:FB:6F:D5:73:2D:C9:40:C1:D6:5D:77:AB:0B:BF:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xtGGU_v7b9VzLclAwdZdd6sLv6M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/8d6943-ca75-4372-b77f-5c6502bffa1f/1/bdjR-oD_Oii7Pli7R8XyAmbHV-o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/8d6943-ca75-4372-b77f-5c6502bffa1f/1/xtGGU_v7b9VzLclAwdZdd6sLv6M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.22.160.0/19 94.127.0.0/21 185.20.36.0/22 217.26.208.0/21 Signature Algorithm: sha256WithRSAEncryption 44:95:20:05:3b:95:a4:ad:1c:6f:e7:80:f3:ff:77:bb:c4:28: 39:d7:2f:c4:1c:53:0c:cb:da:e2:65:34:74:19:da:a6:3b:71: c0:09:87:da:79:e5:18:ff:fe:bc:d4:e8:3d:6f:9b:4c:8c:f1: 83:5a:53:cd:6a:41:31:6b:04:66:97:cf:3d:1d:cc:8f:21:d9: 2d:82:86:52:be:d9:b5:c0:d2:5b:40:14:82:3a:82:01:a9:11: 1e:0e:e1:9f:77:c7:66:e5:b1:1c:d9:c2:4e:0f:20:35:19:98: 9a:70:ca:34:21:dc:2b:b6:b3:ea:48:e1:6d:8f:88:a5:d4:39: 3b:7d:6b:9c:7e:11:f3:7d:4a:84:96:a1:bf:45:94:6e:ae:b1: bb:ed:ef:fe:ef:52:10:bd:11:57:a6:0d:fb:3b:7d:51:85:32: ec:6a:c0:4c:4e:9b:78:79:db:14:33:f6:06:61:ad:13:00:fa: 06:25:58:4d:c1:bb:91:60:88:88:b0:30:9f:87:b6:fd:c7:69: 1b:d0:f0:d1:b3:4c:13:fa:5f:a9:1e:9a:6d:96:63:62:45:f9: 7a:52:20:f6:96:5d:e9:2a:8e:31:f7:6f:f7:07:87:64:bc:8c: 74:15:6e:d4:60:77:5e:76:c2:c5:b5:03:1f:27:de:99:af:4e: 31:1e:c9:91 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt/hKOa9wCiZFw6ar8IeErQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2ZDE4NjUzZmJmYjZmZDU3MzJkYzk0MGMxZDY1ZDc3YWIw YmJmYTMwHhcNMjYwMTAyMTYyMjM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZGQ4ZDFmYTgwZmYzYTI4YmIzZTU4YmI0N2M1ZjIwMjY2Yzc1N2VhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAphdLcm05Ame3ncR2Ho0JyZMl6JqQ y+ENgPrmnMBH5VVkaXp0iexskGY0ibG7OBV9VkhW8YwWRSJOgbrt12pP/Fgy7bFV +v4OLBqTTOJS/r2iVXP6kckrnQ0gXsU6YCgOvgQVFf8zKeFvrUOpWRYCVmWRF/0j NPp4ULtuxfxTpRX87EZbR/3W1O2qmazH9J9sie23EwMoLmIqUnrahhsCV7KlZn9C QoMq40chHDc2Tf7z+MC5k5lxpd31roFF4LMxO/94pOs69yf8an2X7f6G4YiZGpcd MSgaKH5FF170Ap7OIbESFrNy2j5ZTAdF8ZRcrExeTacT74VSAgHVbWEw3QIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFG3Y0fqA/zoouz5Yu0fF8gJmx1fqMB8GA1UdIwQY MBaAFMbRhlP7+2/Vcy3JQMHWXXerC7+jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveHRHR1VfdjdiOVZ6TGNsQXdkWmRkNnNMdjZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS84ZDY5NDMtY2E3NS00MzcyLWI3N2Yt NWM2NTAyYmZmYTFmLzEvYmRqUi1vRF9PaWk3UGxpN1I4WHlBbWJIVi1vLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS84ZDY5NDMtY2E3NS00MzcyLWI3N2YtNWM2NTAyYmZmYTFm LzEveHRHR1VfdjdiOVZ6TGNsQXdkWmRkNnNMdjZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQFBRagAwQD Xn8AAwQCuRQkAwQD2RrQMA0GCSqGSIb3DQEBCwUAA4IBAQBElSAFO5WkrRxv54Dz /3e7xCg51y/EHFMMy9riZTR0GdqmO3HACYfaeeUY//681Og9b5tMjPGDWlPNakEx awRml889HcyPIdktgoZSvtm1wNJbQBSCOoIBqREeDuGfd8dm5bEc2cJODyA1GZia cMo0IdwrtrPqSOFtj4il1Dk7fWucfhHzfUqElqG/RZRurrG77e/+71IQvRFXpg37 O31RhTLsasBMTpt4edsUM/YGYa0TAPoGJVhNwbuRYIiIsDCfh7b9x2kb0PDRs0wT +l+pHpptlmNiRfl6UiD2ll3pKo4x92/3B4dkvIx0FW7UYHdedsLFtQMfJ96Zr04x HsmR -----END CERTIFICATE-----Generated at Tue Feb 10 02:46:21 2026 by rpki-client