This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/BBMoUd-HTvkSUTLDt3IMTdft9bs.roa File: BBMoUd-HTvkSUTLDt3IMTdft9bs.roa (raw, json) Hash identifier: MD7mwBiyRjt3J8fjYngx0VlDR8uuEUsAK05X/N74Xso= Subject key identifier: 04:13:28:51:DF:87:4E:F9:12:51:32:C3:B7:72:0C:4D:D7:ED:F5:BB Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019ADD75B33E612C88568094AA9D205C3834 Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/BBMoUd-HTvkSUTLDt3IMTdft9bs.roa Signing time: Tue 02 Dec 2025 05:07:49 +0000 ROA not before: Tue 02 Dec 2025 05:07:49 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 214140 IP address blocks: 151.242.19.0/24 maxlen: 24 151.242.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 04 Dec 2025 05:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:dd:75:b3:3e:61:2c:88:56:80:94:aa:9d:20:5c:38:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Dec 2 05:07:49 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=04132851df874ef9125132c3b7720c4dd7edf5bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:bb:0c:b8:1a:53:93:53:7b:58:3b:19:21:28: 19:ff:41:46:de:a0:8b:f4:84:ba:23:69:b5:32:e5: a0:8d:a1:66:63:e1:6b:47:93:02:6d:2a:96:cb:3c: 2e:75:5b:8b:ab:14:bc:ab:25:f8:63:9e:a7:18:83: 43:ce:18:e9:b4:fc:98:b6:f4:23:09:66:b8:99:aa: b9:ea:9c:ef:0e:47:fd:7d:0f:ab:d4:82:3c:fe:4f: 60:3e:87:a0:f0:a1:ea:54:f1:07:9d:5d:ca:d6:94: a2:7c:32:8b:46:b6:8c:f3:d7:53:28:05:0a:e4:e3: 6b:e2:98:c0:26:bb:62:08:5e:89:41:8e:74:2c:cd: 71:63:9f:98:fe:85:92:7e:72:1d:50:1b:0f:83:c8: 82:24:08:1e:ed:94:0d:c4:45:8c:22:0b:25:0c:d0: e6:af:80:72:7b:c2:80:79:a3:9f:c7:bd:3b:4c:13: f3:6b:49:64:d8:a6:22:67:23:78:26:27:6a:7d:ff: 8e:7d:8c:07:4a:47:b1:96:33:aa:c7:e1:c4:ff:24: 15:00:79:02:27:e9:0e:bb:9b:78:b4:16:85:10:d4: b2:a3:90:03:27:a3:3a:98:1c:42:91:28:ab:63:be: a1:dd:2f:0d:07:b0:87:09:e4:3b:33:84:64:7e:29: 55:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:13:28:51:DF:87:4E:F9:12:51:32:C3:B7:72:0C:4D:D7:ED:F5:BB X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/BBMoUd-HTvkSUTLDt3IMTdft9bs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.242.19.0/24 151.242.38.0/24 Signature Algorithm: sha256WithRSAEncryption 54:97:54:4b:b9:c8:e6:d3:8f:47:66:82:a7:0c:30:e9:39:6b: db:6f:cd:ba:67:7a:6f:c3:94:ff:98:6e:a2:c4:ab:cc:fe:03: 3f:10:56:3d:e9:c5:f0:66:19:23:08:de:66:96:9b:77:05:0e: 56:52:43:10:7d:af:4f:19:0e:41:09:89:58:63:9c:bc:1c:81: a5:08:67:64:86:38:c1:04:db:46:84:d4:36:62:ba:90:95:fe: 01:37:9f:03:14:5c:6d:43:20:bb:98:80:40:5c:f4:f4:72:e2: c5:c8:73:04:4d:c4:f5:12:53:d8:6c:c6:e5:71:90:98:f8:f1: e8:b7:61:56:cb:a0:a2:94:a1:96:e0:6c:4d:2c:b3:42:b8:e1: b7:3f:31:56:ff:41:ba:45:cd:98:61:95:66:b2:ef:5a:d3:1f: 42:72:fa:9a:5e:0b:7a:7e:3e:fd:9a:38:97:bf:be:ee:d3:f6: dd:ef:85:a7:f0:0e:04:47:59:a6:a4:a7:6b:63:9a:3e:c8:c0: dc:d6:55:d0:27:51:be:77:6e:c9:9d:1a:a1:48:ad:9d:1a:ef: 7b:d4:3e:e6:b4:6e:7d:48:37:bb:11:85:85:c2:19:93:55:c2: 0f:8f:de:97:c5:45:3a:e4:26:a9:02:c3:76:48:85:5e:f1:87: 09:9a:9b:df -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZrddbM+YSyIVoCUqp0gXDg0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjUxMjAyMDUwNzQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNDEzMjg1MWRmODc0ZWY5MTI1MTMyYzNiNzcyMGM0ZGQ3ZWRmNWJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmbsMuBpTk1N7WDsZISgZ/0FG3qCL 9IS6I2m1MuWgjaFmY+FrR5MCbSqWyzwudVuLqxS8qyX4Y56nGINDzhjptPyYtvQj CWa4maq56pzvDkf9fQ+r1II8/k9gPoeg8KHqVPEHnV3K1pSifDKLRraM89dTKAUK 5ONr4pjAJrtiCF6JQY50LM1xY5+Y/oWSfnIdUBsPg8iCJAge7ZQNxEWMIgslDNDm r4Bye8KAeaOfx707TBPza0lk2KYiZyN4Jidqff+OfYwHSkexljOqx+HE/yQVAHkC J+kOu5t4tBaFENSyo5ADJ6M6mBxCkSirY76h3S8NB7CHCeQ7M4RkfilVHQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFAQTKFHfh075ElEyw7dyDE3X7fW7MB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvQkJNb1VkLUhUdmtTVVRMRHQzSU1UZGZ0OWJzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAl/ITAwQA l/ImMA0GCSqGSIb3DQEBCwUAA4IBAQBUl1RLucjm049HZoKnDDDpOWvbb826Z3pv w5T/mG6ixKvM/gM/EFY96cXwZhkjCN5mlpt3BQ5WUkMQfa9PGQ5BCYlYY5y8HIGl CGdkhjjBBNtGhNQ2YrqQlf4BN58DFFxtQyC7mIBAXPT0cuLFyHMETcT1ElPYbMbl cZCY+PHot2FWy6CilKGW4GxNLLNCuOG3PzFW/0G6Rc2YYZVmsu9a0x9CcvqaXgt6 fj79mjiXv77u0/bd74Wn8A4ER1mmpKdrY5o+yMDc1lXQJ1G+d27JnRqhSK2dGu97 1D7mtG59SDe7EYWFwhmTVcIPj96XxUU65CapAsN2SIVe8YcJmpvf -----END CERTIFICATE-----Generated at Wed Dec 3 09:41:08 2025 by rpki-client