This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/bb3b62-3302-45aa-968a-ecbb3fc0a725/1/BSURPBQvXpuCpbYMk4EscNV2NGg.roa File: BSURPBQvXpuCpbYMk4EscNV2NGg.roa (raw, json) Hash identifier: usmbumk2NjOoHhKjq8HbSTuaHBgHl6uoN4Uf/sG7QEY= Subject key identifier: 05:25:11:3C:14:2F:5E:9B:82:A5:B6:0C:93:81:2C:70:D5:76:34:68 Certificate issuer: /CN=b172c8d4fc986deb9fceb1f0d0cae27c1c3135c3 Certificate serial: 019B78A21ADEF2288775488BD5B4287823D1 Authority key identifier: B1:72:C8:D4:FC:98:6D:EB:9F:CE:B1:F0:D0:CA:E2:7C:1C:31:35:C3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sXLI1PyYbeufzrHw0MrifBwxNcM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/bb3b62-3302-45aa-968a-ecbb3fc0a725/1/BSURPBQvXpuCpbYMk4EscNV2NGg.roa Signing time: Thu 01 Jan 2026 08:17:28 +0000 ROA not before: Thu 01 Jan 2026 08:17:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61310 IP address blocks: 5.63.176.0/21 maxlen: 21 5.63.176.0/22 maxlen: 22 5.63.176.0/23 maxlen: 23 5.63.176.0/24 maxlen: 24 5.63.177.0/24 maxlen: 24 5.63.178.0/24 maxlen: 24 5.63.179.0/24 maxlen: 24 5.63.180.0/22 maxlen: 22 5.63.180.0/23 maxlen: 23 5.63.180.0/24 maxlen: 24 5.63.181.0/24 maxlen: 24 5.63.182.0/23 maxlen: 23 5.63.182.0/24 maxlen: 24 5.63.183.0/24 maxlen: 24 2a04:5d80::/30 maxlen: 30 2a04:5d80::/31 maxlen: 31 2a04:5d84::/30 maxlen: 30 2a04:5d84::/31 maxlen: 31 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/bb3b62-3302-45aa-968a-ecbb3fc0a725/1/sXLI1PyYbeufzrHw0MrifBwxNcM.crl rsync://rpki.ripe.net/repository/DEFAULT/8b/bb3b62-3302-45aa-968a-ecbb3fc0a725/1/sXLI1PyYbeufzrHw0MrifBwxNcM.mft rsync://rpki.ripe.net/repository/DEFAULT/sXLI1PyYbeufzrHw0MrifBwxNcM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:1a:de:f2:28:87:75:48:8b:d5:b4:28:78:23:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b172c8d4fc986deb9fceb1f0d0cae27c1c3135c3 Validity Not Before: Jan 1 08:17:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0525113c142f5e9b82a5b60c93812c70d5763468 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:e3:22:51:db:6b:4d:9a:ca:13:f3:01:82:bf: e5:5e:24:43:ae:b9:45:56:8e:29:57:64:5c:e8:db: 01:8e:ac:77:73:9a:14:16:a7:65:ce:5f:42:52:39: ff:77:f7:64:ad:52:63:27:54:17:e1:e1:1e:75:57: 1c:66:c3:f8:c0:9c:4e:32:03:20:7b:9a:1c:a7:22: fc:1f:2e:d9:ce:22:99:f8:59:da:97:a3:88:48:32: 17:6d:14:d8:7f:7f:51:f3:cf:bf:99:62:40:55:6d: 1e:60:3e:b0:45:84:8d:49:72:cf:4a:0d:b0:50:2d: 5e:fa:70:6c:b6:a6:28:8a:af:e3:2a:b6:af:72:70: 1d:9a:e6:82:4a:0f:c3:3e:9f:60:93:c8:5f:c8:fb: 21:f7:8f:f3:2a:a2:fb:83:f2:59:f3:45:dd:fb:2c: cc:1c:26:39:d9:d7:f0:c5:f8:e6:50:7b:72:4d:db: 29:e5:fc:e0:c7:4d:6a:c1:cd:2e:d9:bd:71:4c:9f: b9:bc:e9:a5:9f:69:5f:17:d0:5b:85:6e:85:91:9d: ed:ae:87:ef:d0:2a:6a:95:d0:23:b6:e6:86:3d:2f: 7a:05:58:8d:e1:d1:1a:be:ec:c3:64:2d:ec:db:1d: c2:d2:5b:c3:3f:c5:4a:ef:47:4c:02:9b:7c:6a:58: 75:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:25:11:3C:14:2F:5E:9B:82:A5:B6:0C:93:81:2C:70:D5:76:34:68 X509v3 Authority Key Identifier: keyid:B1:72:C8:D4:FC:98:6D:EB:9F:CE:B1:F0:D0:CA:E2:7C:1C:31:35:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sXLI1PyYbeufzrHw0MrifBwxNcM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/bb3b62-3302-45aa-968a-ecbb3fc0a725/1/BSURPBQvXpuCpbYMk4EscNV2NGg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/bb3b62-3302-45aa-968a-ecbb3fc0a725/1/sXLI1PyYbeufzrHw0MrifBwxNcM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.63.176.0/21 IPv6: 2a04:5d80::/29 Signature Algorithm: sha256WithRSAEncryption 7b:32:93:df:d4:3f:46:f6:ad:f6:e1:ee:55:ff:6c:4a:d4:e4: 14:87:85:0e:d2:95:e5:82:62:f8:46:48:1c:ee:f6:91:f4:e8: 91:b7:ec:58:aa:1b:4c:fa:06:4f:5e:a5:f6:a0:a3:79:43:d1: 1c:d4:b3:44:38:26:23:da:62:8d:4d:6f:ee:68:aa:7b:a1:3c: 7f:52:f9:fd:32:e9:7d:e7:d1:8a:62:aa:53:0d:b6:b1:7a:fc: f7:87:60:e6:68:09:26:17:63:63:83:02:5b:47:b4:b2:47:fd: 3e:3d:50:93:43:07:be:b3:b3:18:bb:78:4f:4f:5a:8e:9f:a8: e2:89:0e:bb:8c:6e:11:ce:fb:2f:c1:b6:da:24:46:4c:27:9e: ae:0d:39:bf:97:95:1d:69:b9:96:89:a0:c6:6f:f1:6b:95:cf: fb:9b:ec:5f:95:6c:10:c9:09:b6:73:35:99:69:33:4a:34:3b: a0:73:24:25:76:3e:d7:d1:84:29:6a:4f:d6:27:62:5f:07:b0: 2e:27:ce:e9:a7:c0:bf:d9:5f:51:9d:3c:57:28:85:21:a0:9c: de:2f:f2:aa:e4:68:6a:f2:75:c5:9e:2f:a0:d3:4c:ce:07:6b: 13:38:b8:36:ca:4c:0a:99:ba:6e:4d:fb:47:05:7d:52:e2:63: e6:e4:fa:43 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt4ohre8iiHdUiL1bQoeCPRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxNzJjOGQ0ZmM5ODZkZWI5ZmNlYjFmMGQwY2FlMjdjMWMz MTM1YzMwHhcNMjYwMTAxMDgxNzI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNTI1MTEzYzE0MmY1ZTliODJhNWI2MGM5MzgxMmM3MGQ1NzYzNDY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmuMiUdtrTZrKE/MBgr/lXiRDrrlF Vo4pV2Rc6NsBjqx3c5oUFqdlzl9CUjn/d/dkrVJjJ1QX4eEedVccZsP4wJxOMgMg e5ocpyL8Hy7ZziKZ+Fnal6OISDIXbRTYf39R88+/mWJAVW0eYD6wRYSNSXLPSg2w UC1e+nBstqYoiq/jKravcnAdmuaCSg/DPp9gk8hfyPsh94/zKqL7g/JZ80Xd+yzM HCY52dfwxfjmUHtyTdsp5fzgx01qwc0u2b1xTJ+5vOmln2lfF9BbhW6FkZ3trofv 0CpqldAjtuaGPS96BViN4dEavuzDZC3s2x3C0lvDP8VK70dMApt8alh1FQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFAUlETwUL16bgqW2DJOBLHDVdjRoMB8GA1UdIwQY MBaAFLFyyNT8mG3rn86x8NDK4nwcMTXDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc1hMSTFQeVliZXVmenJIdzBNcmlmQnd4TmNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9iYjNiNjItMzMwMi00NWFhLTk2OGEt ZWNiYjNmYzBhNzI1LzEvQlNVUlBCUXZYcHVDcGJZTWs0RXNjTlYyTkdnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yi9iYjNiNjItMzMwMi00NWFhLTk2OGEtZWNiYjNmYzBhNzI1 LzEvc1hMSTFQeVliZXVmenJIdzBNcmlmQnd4TmNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQDBT+wMA0E AgACMAcDBQMqBF2AMA0GCSqGSIb3DQEBCwUAA4IBAQB7MpPf1D9G9q324e5V/2xK 1OQUh4UO0pXlgmL4Rkgc7vaR9OiRt+xYqhtM+gZPXqX2oKN5Q9Ec1LNEOCYj2mKN TW/uaKp7oTx/Uvn9Mul959GKYqpTDbaxevz3h2DmaAkmF2NjgwJbR7SyR/0+PVCT Qwe+s7MYu3hPT1qOn6jiiQ67jG4RzvsvwbbaJEZMJ56uDTm/l5UdabmWiaDGb/Fr lc/7m+xflWwQyQm2czWZaTNKNDugcyQldj7X0YQpak/WJ2JfB7AuJ87pp8C/2V9R nTxXKIUhoJzeL/Kq5Ghq8nXFni+g00zOB2sTOLg2ykwKmbpuTftHBX1S4mPm5PpD -----END CERTIFICATE-----Generated at Tue Feb 10 06:06:20 2026 by rpki-client