This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/BJwqDvEK-nCoh3ufSuidM6ZUE1A.roa File: BJwqDvEK-nCoh3ufSuidM6ZUE1A.roa (raw, json) Hash identifier: vW/NQHIzNrOx5Hi9potciiZiLX1XFimvNIkuyFh5RtE= Subject key identifier: 04:9C:2A:0E:F1:0A:FA:70:A8:87:7B:9F:4A:E8:9D:33:A6:54:13:50 Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Certificate serial: 019A914D60FF56B7182540BF5FB0A71D3293 Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/BJwqDvEK-nCoh3ufSuidM6ZUE1A.roa Signing time: Mon 17 Nov 2025 10:12:38 +0000 ROA not before: Mon 17 Nov 2025 10:12:38 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 63199 IP address blocks: 80.240.95.0/24 maxlen: 24 82.152.10.0/24 maxlen: 24 82.152.179.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 24 Nov 2025 06:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:91:4d:60:ff:56:b7:18:25:40:bf:5f:b0:a7:1d:32:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Validity Not Before: Nov 17 10:12:38 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=049c2a0ef10afa70a8877b9f4ae89d33a6541350 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:91:ac:26:e1:f4:a8:cb:57:38:51:72:78:4e: d9:bc:ec:5e:c0:28:b8:32:ef:38:de:f2:b5:c2:21: 8b:e5:ee:1c:91:fd:85:b6:f0:6c:c7:83:64:d8:ac: c8:e1:eb:6a:a5:6d:06:23:c1:eb:29:69:1e:62:5c: 60:54:99:2e:03:69:8f:00:2e:bc:b4:84:ac:2f:b4: af:07:81:40:20:71:6c:cb:12:41:69:b5:be:ad:c8: 38:fc:85:5b:06:70:5c:c7:bd:cc:ab:ba:96:f2:f7: 1a:eb:4b:2b:8b:d6:d5:17:ec:44:5f:7c:61:96:1b: c1:39:7a:10:27:a3:04:71:ef:07:87:a0:8b:42:86: 09:5b:8f:6f:7f:35:26:4e:54:df:28:ff:8f:8f:fb: 09:8e:6a:a3:3d:87:87:a2:63:2c:fe:65:c7:c8:b7: ad:8c:b9:28:57:6e:23:2e:bb:4d:af:e1:9c:5e:ee: f8:a8:91:12:0c:b9:f9:d8:17:a4:a1:af:90:74:04: ee:03:81:30:d7:40:3c:17:95:12:62:0a:f0:08:4e: 6d:c0:d3:eb:bc:61:50:f4:61:b5:f5:59:58:bb:26: 04:9e:73:c4:28:7d:cf:4b:4b:9d:30:3a:8d:1e:a0: 38:59:87:e8:13:05:f8:61:90:95:7c:f4:dd:e9:19: e8:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:9C:2A:0E:F1:0A:FA:70:A8:87:7B:9F:4A:E8:9D:33:A6:54:13:50 X509v3 Authority Key Identifier: keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/BJwqDvEK-nCoh3ufSuidM6ZUE1A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.240.95.0/24 82.152.10.0/24 82.152.179.0/24 Signature Algorithm: sha256WithRSAEncryption a8:a7:05:ed:83:2e:c3:ef:4f:57:ce:5b:ca:c8:78:5b:ed:63: 16:f9:b8:b2:6c:0b:45:65:6f:31:bf:d7:a2:c7:d8:69:b5:95: 24:ab:31:cc:d5:f6:6c:a3:49:0b:f9:db:f5:b2:f4:fc:18:45: 7a:28:61:9a:55:8d:ea:1a:16:69:f7:06:e1:c1:52:9e:67:ab: c0:30:da:fd:06:75:a4:e0:79:10:2a:13:ce:f8:dd:96:0f:72: 00:8f:63:41:9b:89:38:1a:6c:61:73:16:91:d1:b1:74:98:51: 83:36:88:86:5e:ef:88:c0:51:de:63:a0:2f:c6:b6:35:b6:6e: ea:b0:9c:a5:c5:96:82:c8:62:78:01:1a:27:ef:a8:84:4b:5c: 99:67:f5:e4:7d:99:65:ce:92:7c:97:11:32:c8:f1:b1:66:f1: c3:02:69:ca:12:b4:38:70:b1:77:73:02:6b:db:6f:3d:44:35: f2:76:8a:47:00:32:be:06:e8:ce:0a:75:56:66:50:07:28:fc: 51:4c:d8:69:0e:40:fa:d2:56:ab:85:e9:cb:ed:cd:7b:fb:7f: b8:90:f6:62:19:a6:8c:f3:cf:2c:10:02:32:63:0b:56:8e:ba: c0:dd:9d:c4:8c:50:39:ba:44:93:d3:28:3e:cd:18:6a:7d:95: 0e:99:f0:1b -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZqRTWD/VrcYJUC/X7CnHTKTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh NTNiOWIwHhcNMjUxMTE3MTAxMjM4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNDljMmEwZWYxMGFmYTcwYTg4NzdiOWY0YWU4OWQzM2E2NTQxMzUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgpGsJuH0qMtXOFFyeE7ZvOxewCi4 Mu843vK1wiGL5e4ckf2FtvBsx4Nk2KzI4etqpW0GI8HrKWkeYlxgVJkuA2mPAC68 tISsL7SvB4FAIHFsyxJBabW+rcg4/IVbBnBcx73Mq7qW8vca60sri9bVF+xEX3xh lhvBOXoQJ6MEce8Hh6CLQoYJW49vfzUmTlTfKP+Pj/sJjmqjPYeHomMs/mXHyLet jLkoV24jLrtNr+GcXu74qJESDLn52Bekoa+QdATuA4Ew10A8F5USYgrwCE5twNPr vGFQ9GG19VlYuyYEnnPEKH3PS0udMDqNHqA4WYfoEwX4YZCVfPTd6RnoTwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFAScKg7xCvpwqId7n0ronTOmVBNQMB8GA1UdIwQY MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt NDEyMjhlMzlmZjdjLzEvQkp3cUR2RUstbkNvaDN1ZlN1aWRNNlpVRTFBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAUPBfAwQA UpgKAwQAUpizMA0GCSqGSIb3DQEBCwUAA4IBAQCopwXtgy7D709XzlvKyHhb7WMW +biybAtFZW8xv9eix9hptZUkqzHM1fZso0kL+dv1svT8GEV6KGGaVY3qGhZp9wbh wVKeZ6vAMNr9BnWk4HkQKhPO+N2WD3IAj2NBm4k4GmxhcxaR0bF0mFGDNoiGXu+I wFHeY6AvxrY1tm7qsJylxZaCyGJ4ARon76iES1yZZ/XkfZllzpJ8lxEyyPGxZvHD AmnKErQ4cLF3cwJr2289RDXydopHADK+BujOCnVWZlAHKPxRTNhpDkD60larhenL 7c17+3+4kPZiGaaM888sEAIyYwtWjrrA3Z3EjFA5ukST0yg+zRhqfZUOmfAb -----END CERTIFICATE-----Generated at Sun Nov 23 12:07:17 2025 by rpki-client