This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/8d58e4-88f6-4aed-ba43-7ae6359d3110/1/bqp9PP7kmz97WUPiQSPXh32quMA.roa File: bqp9PP7kmz97WUPiQSPXh32quMA.roa (raw, json) Hash identifier: dz84t52ULIjxXY05zRubavqL0AcIH8CcS2AgnON+qD0= Subject key identifier: 6E:AA:7D:3C:FE:E4:9B:3F:7B:59:43:E2:41:23:D7:87:7D:AA:B8:C0 Certificate issuer: /CN=53129d048deb2e0bf62271399a090b9010160b39 Certificate serial: 019A7973B6415977F09FCEF32306C6995768 Authority key identifier: 53:12:9D:04:8D:EB:2E:0B:F6:22:71:39:9A:09:0B:90:10:16:0B:39 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UxKdBI3rLgv2InE5mgkLkBAWCzk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/8d58e4-88f6-4aed-ba43-7ae6359d3110/1/bqp9PP7kmz97WUPiQSPXh32quMA.roa Signing time: Wed 12 Nov 2025 19:03:37 +0000 ROA not before: Wed 12 Nov 2025 19:03:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 400529 IP address blocks: 62.233.51.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/8d58e4-88f6-4aed-ba43-7ae6359d3110/1/UxKdBI3rLgv2InE5mgkLkBAWCzk.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/8d58e4-88f6-4aed-ba43-7ae6359d3110/1/UxKdBI3rLgv2InE5mgkLkBAWCzk.mft rsync://rpki.ripe.net/repository/DEFAULT/UxKdBI3rLgv2InE5mgkLkBAWCzk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:79:73:b6:41:59:77:f0:9f:ce:f3:23:06:c6:99:57:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53129d048deb2e0bf62271399a090b9010160b39 Validity Not Before: Nov 12 19:03:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=6eaa7d3cfee49b3f7b5943e24123d7877daab8c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:9b:a1:b6:e9:ad:99:83:3d:33:89:f0:2f:c4: 51:ad:83:96:7d:ab:32:8e:a8:6d:f7:13:db:f0:df: 51:8d:c5:95:02:3e:de:0a:82:39:10:87:9e:7f:da: ae:db:55:6c:09:02:11:09:4a:17:f0:69:b0:06:9c: 20:5e:a5:ac:95:b5:31:eb:cc:18:31:31:0a:70:d7: 2a:07:5c:07:d4:1d:35:33:e3:e2:e6:59:b0:22:80: 8c:8b:c4:c6:76:6d:28:31:e1:e6:93:6b:a8:3c:c8: 9f:6a:25:d3:fa:41:14:e6:b6:df:ca:d2:c7:e8:61: 34:5d:70:6b:72:83:9b:c8:26:8f:62:4a:ca:a3:fc: 1e:63:8e:b8:1b:4c:a3:4e:7e:eb:24:39:0f:31:68: 94:05:67:ab:b6:a6:a9:11:36:22:88:4b:d6:c7:9d: b7:78:b2:04:53:3b:6f:ab:2e:a2:8e:fa:ce:31:41: 2a:bc:c9:62:1f:f5:80:ce:ca:7b:a7:b2:37:54:a9: 22:1c:25:d3:1a:28:f8:ec:58:8a:fd:78:cc:ae:4d: 4c:b3:02:a3:ea:b4:f0:16:79:e9:f1:99:ee:41:3e: 39:c3:9c:f3:f5:e5:9d:c5:11:72:8a:48:20:9e:18: 44:f2:20:eb:5a:9f:57:02:9f:3c:c6:19:17:a3:5d: 24:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:AA:7D:3C:FE:E4:9B:3F:7B:59:43:E2:41:23:D7:87:7D:AA:B8:C0 X509v3 Authority Key Identifier: keyid:53:12:9D:04:8D:EB:2E:0B:F6:22:71:39:9A:09:0B:90:10:16:0B:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UxKdBI3rLgv2InE5mgkLkBAWCzk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/8d58e4-88f6-4aed-ba43-7ae6359d3110/1/bqp9PP7kmz97WUPiQSPXh32quMA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/8d58e4-88f6-4aed-ba43-7ae6359d3110/1/UxKdBI3rLgv2InE5mgkLkBAWCzk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.233.51.0/24 Signature Algorithm: sha256WithRSAEncryption 9b:9d:c3:9b:cb:31:ba:fc:88:a1:f4:c3:14:06:32:73:9a:2d: 8b:f7:fb:88:e5:49:b7:69:e2:bf:6a:e9:63:64:22:38:7a:6b: 09:92:2c:e8:39:59:69:e2:84:6a:71:fa:cb:e6:a3:b7:02:c6: c0:6d:2b:3a:c2:95:2e:b5:1f:66:56:d5:67:6a:1a:d0:b7:05: 2a:81:e8:60:48:68:65:85:3f:42:f8:95:75:f7:b0:8a:b3:28: b5:e8:33:38:04:61:6c:de:38:6f:6a:14:bb:01:1e:f8:ae:8a: ad:0f:26:91:44:c4:39:d1:30:ae:fa:84:d5:9d:38:fb:1f:32: f4:75:47:2d:b4:39:01:3d:f8:aa:01:48:8c:63:ef:2f:8c:3b: c7:7d:a9:9b:ac:df:4c:c5:75:17:51:67:b7:2b:48:59:cc:8a: 08:3e:46:95:1d:e6:cc:21:d2:9b:8b:9e:3e:12:1d:29:82:af: 81:ee:fa:c5:31:9c:53:27:3b:c6:f9:41:bb:e8:5e:7d:9c:44: 97:c3:2c:05:6e:0f:42:6b:13:1d:7a:1c:b7:42:b6:bf:13:e5: 03:30:e4:dd:ad:f9:a9:b0:f7:56:a4:d4:a6:9d:0e:fd:59:ad: 3f:0f:1a:13:7e:5c:7e:62:40:75:b3:dd:44:75:b2:16:28:5b: 33:d1:6c:af -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZp5c7ZBWXfwn87zIwbGmVdoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzMTI5ZDA0OGRlYjJlMGJmNjIyNzEzOTlhMDkwYjkwMTAx NjBiMzkwHhcNMjUxMTEyMTkwMzM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZWFhN2QzY2ZlZTQ5YjNmN2I1OTQzZTI0MTIzZDc4NzdkYWFiOGMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuJuhtumtmYM9M4nwL8RRrYOWfasy jqht9xPb8N9RjcWVAj7eCoI5EIeef9qu21VsCQIRCUoX8GmwBpwgXqWslbUx68wY MTEKcNcqB1wH1B01M+Pi5lmwIoCMi8TGdm0oMeHmk2uoPMifaiXT+kEU5rbfytLH 6GE0XXBrcoObyCaPYkrKo/weY464G0yjTn7rJDkPMWiUBWertqapETYiiEvWx523 eLIEUztvqy6ijvrOMUEqvMliH/WAzsp7p7I3VKkiHCXTGij47FiK/XjMrk1MswKj 6rTwFnnp8ZnuQT45w5zz9eWdxRFyikggnhhE8iDrWp9XAp88xhkXo10klQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFG6qfTz+5Js/e1lD4kEj14d9qrjAMB8GA1UdIwQY MBaAFFMSnQSN6y4L9iJxOZoJC5AQFgs5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVXhLZEJJM3JMZ3YySW5FNW1na0xrQkFXQ3prLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS84ZDU4ZTQtODhmNi00YWVkLWJhNDMt N2FlNjM1OWQzMTEwLzEvYnFwOVBQN2ttejk3V1VQaVFTUFhoMzJxdU1BLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS84ZDU4ZTQtODhmNi00YWVkLWJhNDMtN2FlNjM1OWQzMTEw LzEvVXhLZEJJM3JMZ3YySW5FNW1na0xrQkFXQ3prLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPukzMA0G CSqGSIb3DQEBCwUAA4IBAQCbncObyzG6/Iih9MMUBjJzmi2L9/uI5Um3aeK/aulj ZCI4emsJkizoOVlp4oRqcfrL5qO3AsbAbSs6wpUutR9mVtVnahrQtwUqgehgSGhl hT9C+JV197CKsyi16DM4BGFs3jhvahS7AR74roqtDyaRRMQ50TCu+oTVnTj7HzL0 dUcttDkBPfiqAUiMY+8vjDvHfambrN9MxXUXUWe3K0hZzIoIPkaVHebMIdKbi54+ Eh0pgq+B7vrFMZxTJzvG+UG76F59nESXwywFbg9CaxMdehy3Qra/E+UDMOTdrfmp sPdWpNSmnQ79Wa0/DxoTflx+YkB1s91EdbIWKFsz0Wyv -----END CERTIFICATE-----Generated at Sun Dec 14 08:36:37 2025 by rpki-client