This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/a407a0-8bc1-4416-9437-24246682bf00/1/bEqxgWflQukJ8O98vGGp4LMFKBw.roa File: bEqxgWflQukJ8O98vGGp4LMFKBw.roa (raw, json) Hash identifier: Gaf1MwZeCFBwfsW0oOzvsK8aJItv5fxmI2bAgLbfTec= Subject key identifier: 6C:4A:B1:81:67:E5:42:E9:09:F0:EF:7C:BC:61:A9:E0:B3:05:28:1C Certificate issuer: /CN=0ae4bc9401d9f87772c8c9c69834077512f42611 Certificate serial: 019AFE39747C610286F3EC19BFC1E2CF9755 Authority key identifier: 0A:E4:BC:94:01:D9:F8:77:72:C8:C9:C6:98:34:07:75:12:F4:26:11 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CuS8lAHZ-HdyyMnGmDQHdRL0JhE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/a407a0-8bc1-4416-9437-24246682bf00/1/bEqxgWflQukJ8O98vGGp4LMFKBw.roa Signing time: Mon 08 Dec 2025 13:49:29 +0000 ROA not before: Mon 08 Dec 2025 13:49:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 49791 IP address blocks: 81.85.73.0/24 maxlen: 24 213.155.29.0/24 maxlen: 24 2a11:2cc0:12::/47 maxlen: 47 2a11:2cc0:14::/47 maxlen: 47 2a11:2cc0:16::/47 maxlen: 47 2a11:2cc0:18::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/a407a0-8bc1-4416-9437-24246682bf00/1/CuS8lAHZ-HdyyMnGmDQHdRL0JhE.crl rsync://rpki.ripe.net/repository/DEFAULT/84/a407a0-8bc1-4416-9437-24246682bf00/1/CuS8lAHZ-HdyyMnGmDQHdRL0JhE.mft rsync://rpki.ripe.net/repository/DEFAULT/CuS8lAHZ-HdyyMnGmDQHdRL0JhE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fe:39:74:7c:61:02:86:f3:ec:19:bf:c1:e2:cf:97:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ae4bc9401d9f87772c8c9c69834077512f42611 Validity Not Before: Dec 8 13:49:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=6c4ab18167e542e909f0ef7cbc61a9e0b305281c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:9f:a1:87:45:c7:bc:45:e9:c2:d6:26:91:d6: 34:59:06:f0:c7:84:65:a4:8a:77:ba:78:d7:6a:11: db:35:d6:4e:d8:b4:5c:c4:3d:43:dd:f8:70:59:be: 54:6d:05:24:7d:21:ea:64:39:d5:ba:b7:27:13:14: 98:a6:65:01:79:b2:28:c7:f3:9c:96:a2:f4:a4:de: 91:9a:c2:e2:d6:05:db:c6:c7:7f:b0:e7:cc:e8:0c: 4d:03:64:d6:68:19:c7:bd:67:e3:45:3d:8b:75:c1: bd:1f:2c:fd:66:42:f4:9f:0c:c6:d8:3e:8c:16:72: 86:b6:66:d9:ae:bc:b5:77:c7:c4:6a:7d:44:75:ab: 54:a1:bb:8b:4e:1e:13:82:7d:72:d1:3a:80:f8:bb: 31:fe:ae:a6:28:c4:39:f2:11:47:f6:f9:25:cc:22: 5e:fa:92:82:35:b5:02:9f:f2:4d:31:68:c4:d2:0e: e9:10:96:b2:7e:68:6b:61:5e:47:ce:dc:9c:c7:f0: cd:1f:d6:b3:1b:7b:ff:35:cc:17:b4:78:96:d9:54: f6:20:01:e6:56:4a:5f:19:60:eb:7a:f0:7b:d0:47: eb:b1:fd:82:5c:60:5f:e9:8d:25:8d:56:35:f3:1a: c5:b4:4a:e9:f3:84:a5:d8:98:b4:f0:19:0c:dd:d8: 06:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:4A:B1:81:67:E5:42:E9:09:F0:EF:7C:BC:61:A9:E0:B3:05:28:1C X509v3 Authority Key Identifier: keyid:0A:E4:BC:94:01:D9:F8:77:72:C8:C9:C6:98:34:07:75:12:F4:26:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CuS8lAHZ-HdyyMnGmDQHdRL0JhE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a407a0-8bc1-4416-9437-24246682bf00/1/bEqxgWflQukJ8O98vGGp4LMFKBw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a407a0-8bc1-4416-9437-24246682bf00/1/CuS8lAHZ-HdyyMnGmDQHdRL0JhE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.85.73.0/24 213.155.29.0/24 IPv6: 2a11:2cc0:12::-2a11:2cc0:19:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 87:31:20:0d:09:9d:23:a3:3d:06:9a:98:83:18:18:c9:84:65: c7:90:99:7f:14:9f:01:ce:c5:6e:3c:9f:af:3b:04:3e:d8:1d: 85:de:6b:4a:32:8a:49:2a:c2:50:f2:31:96:90:ff:ec:5a:e3: 04:a9:a3:f9:0e:39:6d:08:9a:de:c2:60:4c:44:15:23:dc:a1: 33:01:07:4f:eb:84:d2:5b:40:11:af:3f:57:de:4b:53:2b:78: 3a:d7:ef:7a:09:8f:e6:17:9d:82:ff:99:6b:7a:b6:a4:43:8d: 70:df:6d:0c:be:d1:27:96:a2:03:a3:db:3c:fb:07:e1:de:4d: 9a:87:5c:db:4e:90:bc:e8:8a:ae:d5:f3:72:2c:ad:e6:c1:3d: f8:f9:db:a7:99:51:19:d9:be:30:f7:6b:01:72:d3:1b:09:fc: 2c:45:8a:7d:36:58:56:5e:7b:48:69:7f:39:03:36:15:6d:30: 6f:eb:65:57:1f:06:a8:5b:10:1c:f7:db:71:d1:51:54:50:a5: 25:36:5b:b4:64:2f:59:c7:68:d3:84:2e:c2:f5:db:19:da:af: 29:50:43:39:c2:88:28:54:a5:53:1e:6d:f6:3b:6d:b1:6c:37: c3:d1:0d:57:69:c0:6e:62:76:0b:0a:40:74:48:1b:9c:8e:f2: 64:b8:2f:41 -----BEGIN CERTIFICATE----- MIIFHzCCBAegAwIBAgISAZr+OXR8YQKG8+wZv8Hiz5dVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhZTRiYzk0MDFkOWY4Nzc3MmM4YzljNjk4MzQwNzc1MTJm NDI2MTEwHhcNMjUxMjA4MTM0OTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YzRhYjE4MTY3ZTU0MmU5MDlmMGVmN2NiYzYxYTllMGIzMDUyODFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJ+hh0XHvEXpwtYmkdY0WQbwx4Rl pIp3unjXahHbNdZO2LRcxD1D3fhwWb5UbQUkfSHqZDnVurcnExSYpmUBebIox/Oc lqL0pN6RmsLi1gXbxsd/sOfM6AxNA2TWaBnHvWfjRT2LdcG9Hyz9ZkL0nwzG2D6M FnKGtmbZrry1d8fEan1EdatUobuLTh4Tgn1y0TqA+Lsx/q6mKMQ58hFH9vklzCJe +pKCNbUCn/JNMWjE0g7pEJayfmhrYV5Hztycx/DNH9azG3v/NcwXtHiW2VT2IAHm VkpfGWDrevB70Efrsf2CXGBf6Y0ljVY18xrFtErp84Sl2Ji08BkM3dgGUwIDAQAB o4ICKzCCAicwHQYDVR0OBBYEFGxKsYFn5ULpCfDvfLxhqeCzBSgcMB8GA1UdIwQY MBaAFArkvJQB2fh3csjJxpg0B3US9CYRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ3VTOGxBSFotSGR5eU1uR21EUUhkUkwwSmhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC9hNDA3YTAtOGJjMS00NDE2LTk0Mzct MjQyNDY2ODJiZjAwLzEvYkVxeGdXZmxRdWtKOE85OHZHR3A0TE1GS0J3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC9hNDA3YTAtOGJjMS00NDE2LTk0MzctMjQyNDY2ODJiZjAw LzEvQ3VTOGxBSFotSGR5eU1uR21EUUhkUkwwSmhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEEGCCsGAQUFBwEHAQH/BDIwMDASBAIAATAMAwQAUVVJAwQA 1ZsdMBoEAgACMBQwEgMHASoRLMAAEgMHASoRLMAAGDANBgkqhkiG9w0BAQsFAAOC AQEAhzEgDQmdI6M9BpqYgxgYyYRlx5CZfxSfAc7FbjyfrzsEPtgdhd5rSjKKSSrC UPIxlpD/7FrjBKmj+Q45bQia3sJgTEQVI9yhMwEHT+uE0ltAEa8/V95LUyt4Otfv egmP5hedgv+Za3q2pEONcN9tDL7RJ5aiA6PbPPsH4d5Nmodc206QvOiKrtXzciyt 5sE9+Pnbp5lRGdm+MPdrAXLTGwn8LEWKfTZYVl57SGl/OQM2FW0wb+tlVx8GqFsQ HPfbcdFRVFClJTZbtGQvWcdo04QuwvXbGdqvKVBDOcKIKFSlUx5t9jttsWw3w9EN V2nAbmJ2CwpAdEgbnI7yZLgvQQ== -----END CERTIFICATE-----Generated at Thu Dec 11 23:59:38 2025 by rpki-client