This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/BX7_3d5UeWE0oIiffjjRnwASb1k.roa File: BX7_3d5UeWE0oIiffjjRnwASb1k.roa (raw, json) Hash identifier: vWpPJZCKkuCO4E4r8L7ZBh0u1KnXSXx5jqvPME+cUAk= Subject key identifier: 05:7E:FF:DD:DE:54:79:61:34:A0:88:9F:7E:38:D1:9F:00:12:6F:59 Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019ABF1775B3F16DF4661B65CA09AFF7D609 Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/BX7_3d5UeWE0oIiffjjRnwASb1k.roa Signing time: Wed 26 Nov 2025 07:36:17 +0000 ROA not before: Wed 26 Nov 2025 07:36:17 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 41717 IP address blocks: 151.243.80.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 04 Dec 2025 05:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:bf:17:75:b3:f1:6d:f4:66:1b:65:ca:09:af:f7:d6:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Nov 26 07:36:17 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=057effddde54796134a0889f7e38d19f00126f59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:56:44:f7:9c:e3:1e:07:3c:a5:8e:95:be:2f: 50:09:f2:11:62:91:8c:17:0f:b3:db:81:b5:ef:45: c9:09:73:11:2a:62:46:89:3b:62:bd:a4:17:ac:1f: f5:51:23:56:27:01:bf:d1:12:27:68:b8:ea:8b:e2: 66:78:55:aa:2b:b8:95:7e:30:31:4d:e4:8b:ee:79: 9e:53:3a:22:d7:69:b9:b7:2a:a9:80:7c:44:0c:a0: 99:80:1c:a9:dd:1e:43:94:3d:7f:27:be:42:10:a4: fb:e2:76:a8:ff:63:56:09:e8:52:5c:f4:09:a9:89: 69:7d:c1:cd:c8:dc:b9:b5:a0:5d:d9:b0:78:4e:31: 3a:85:b4:73:70:1b:58:f1:76:9d:87:e2:ca:c4:fc: 2f:10:6b:a7:e0:eb:6a:a9:76:49:6b:bd:a7:69:dd: e5:ea:fc:34:d5:4f:d3:a0:ff:df:90:9c:47:26:4e: e3:ff:24:e4:2e:da:6b:1a:aa:40:61:5f:56:aa:79: f4:d6:41:d5:53:b6:5f:9a:36:da:47:ce:8a:a1:50: 20:52:f1:b5:4d:04:17:3c:39:11:e0:ce:ca:5f:23: bb:17:77:a2:66:69:eb:83:ff:1e:e3:31:68:e2:5b: cd:ce:b1:49:27:0f:07:f0:7e:1c:06:33:a6:4b:bc: 70:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:7E:FF:DD:DE:54:79:61:34:A0:88:9F:7E:38:D1:9F:00:12:6F:59 X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/BX7_3d5UeWE0oIiffjjRnwASb1k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.243.80.0/24 Signature Algorithm: sha256WithRSAEncryption b0:a1:32:bf:88:88:2d:2d:8f:21:28:bd:21:81:b7:e9:04:c9: 6e:8f:64:cb:ce:a3:da:bc:5f:8c:24:47:21:9f:b6:83:53:c9: 6f:ef:10:86:fd:fb:b8:58:d9:09:c7:66:96:b8:ff:8a:07:b4: b8:39:00:3a:24:a9:6e:b3:3c:36:fc:77:0b:da:a2:72:ad:c5: 26:3e:71:aa:f3:cb:92:24:0e:40:f0:a2:a0:ea:05:c9:f6:3c: 6e:7e:9b:cd:ac:ad:23:45:be:40:99:fd:60:b5:2a:a6:ce:31: 50:0b:fb:a5:b6:eb:1f:f5:ff:e7:9f:9a:31:e3:4e:d2:f2:ca: b1:5a:98:15:b3:5e:cc:be:e5:12:0f:e6:ac:4b:b8:00:c0:a9: e7:f5:79:c6:c6:39:8d:6e:35:8f:cc:18:2b:28:41:e1:64:43: 90:76:ab:28:e4:cb:58:e1:10:21:5d:5e:f8:3d:91:4b:a0:2e: 05:f2:32:ca:9f:22:5b:29:ce:60:be:40:86:0e:95:9a:f2:6d: 01:38:58:67:12:3f:79:00:8a:e5:38:f2:8f:3e:f9:96:6b:78: ce:d1:93:8c:77:d3:35:08:c5:f9:7d:8d:20:10:02:ac:3f:46: e9:2f:2f:4e:a7:e1:95:bb:4f:40:21:18:21:f6:90:ee:97:76: 16:79:78:0b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZq/F3Wz8W30Zhtlygmv99YJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjUxMTI2MDczNjE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNTdlZmZkZGRlNTQ3OTYxMzRhMDg4OWY3ZTM4ZDE5ZjAwMTI2ZjU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3FZE95zjHgc8pY6Vvi9QCfIRYpGM Fw+z24G170XJCXMRKmJGiTtivaQXrB/1USNWJwG/0RInaLjqi+JmeFWqK7iVfjAx TeSL7nmeUzoi12m5tyqpgHxEDKCZgByp3R5DlD1/J75CEKT74nao/2NWCehSXPQJ qYlpfcHNyNy5taBd2bB4TjE6hbRzcBtY8Xadh+LKxPwvEGun4OtqqXZJa72nad3l 6vw01U/ToP/fkJxHJk7j/yTkLtprGqpAYV9Wqnn01kHVU7ZfmjbaR86KoVAgUvG1 TQQXPDkR4M7KXyO7F3eiZmnrg/8e4zFo4lvNzrFJJw8H8H4cBjOmS7xwYQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAV+/93eVHlhNKCIn3440Z8AEm9ZMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvQlg3XzNkNVVlV0Uwb0lpZmZqalJud0FTYjFrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl/NQMA0G CSqGSIb3DQEBCwUAA4IBAQCwoTK/iIgtLY8hKL0hgbfpBMluj2TLzqPavF+MJEch n7aDU8lv7xCG/fu4WNkJx2aWuP+KB7S4OQA6JKluszw2/HcL2qJyrcUmPnGq88uS JA5A8KKg6gXJ9jxufpvNrK0jRb5Amf1gtSqmzjFQC/ultusf9f/nn5ox407S8sqx WpgVs17MvuUSD+asS7gAwKnn9XnGxjmNbjWPzBgrKEHhZEOQdqso5MtY4RAhXV74 PZFLoC4F8jLKnyJbKc5gvkCGDpWa8m0BOFhnEj95AIrlOPKPPvmWa3jO0ZOMd9M1 CMX5fY0gEAKsP0bpLy9Op+GVu09AIRgh9pDul3YWeXgL -----END CERTIFICATE-----Generated at Wed Dec 3 09:41:36 2025 by rpki-client