This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/BO7jnm4hZ2aIhx-khbNXbsOaSwQ.roa File: BO7jnm4hZ2aIhx-khbNXbsOaSwQ.roa (raw, json) Hash identifier: WMiILjjnrmajQgVmU1EugIe9vhf+6CD9w7bhvMc/t+k= Subject key identifier: 04:EE:E3:9E:6E:21:67:66:88:87:1F:A4:85:B3:57:6E:C3:9A:4B:04 Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091 Certificate serial: 019A969B8AACE628B753468228467946F44C Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/BO7jnm4hZ2aIhx-khbNXbsOaSwQ.roa Signing time: Tue 18 Nov 2025 10:56:07 +0000 ROA not before: Tue 18 Nov 2025 10:56:07 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 209641 IP address blocks: 103.82.103.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.mft rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Dec 2025 13:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:96:9b:8a:ac:e6:28:b7:53:46:82:28:46:79:46:f4:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091 Validity Not Before: Nov 18 10:56:07 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=04eee39e6e21676688871fa485b3576ec39a4b04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:bd:66:86:15:31:50:28:db:ce:08:b3:2d:33: 15:48:42:bd:0b:e5:7e:9e:73:54:d8:fb:be:6a:95: fc:a4:d3:f6:c9:8d:99:92:52:62:d6:12:b5:90:22: a5:91:c7:29:62:b0:19:4a:ba:64:51:32:e7:6a:d8: 5b:9e:8c:c1:36:6c:27:6f:29:68:ec:c5:52:bb:dc: 0d:0b:16:60:8d:95:d7:44:2d:1a:4b:0f:24:f8:00: cd:e9:aa:8a:7d:a7:ea:df:e5:17:ad:f5:f4:a9:50: ea:77:da:66:43:5d:4d:d1:5b:8e:50:36:fd:30:fd: a2:66:38:f6:b9:1c:67:f6:61:72:e9:d4:5e:6a:83: 4a:da:e7:24:c2:04:7b:f5:de:9d:75:37:fb:36:0c: cb:8e:2b:51:a0:da:b3:7f:3c:e5:35:1f:c9:4d:c3: bb:6c:02:35:4a:00:45:02:c8:56:ae:3f:6e:ba:d7: 53:36:08:0c:86:58:e8:56:cd:75:3a:ee:17:77:10: 9b:ad:ea:8a:bb:6c:77:b5:5d:c3:6f:55:17:8e:eb: d6:6d:13:75:f6:9d:fb:74:4d:9d:b4:89:f3:91:f8: 00:8c:da:5c:30:58:02:eb:ba:30:71:11:ec:ba:47: 3e:31:57:70:81:f5:5a:7d:4a:15:0c:36:89:18:35: 55:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:EE:E3:9E:6E:21:67:66:88:87:1F:A4:85:B3:57:6E:C3:9A:4B:04 X509v3 Authority Key Identifier: keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/BO7jnm4hZ2aIhx-khbNXbsOaSwQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.82.103.0/24 Signature Algorithm: sha256WithRSAEncryption 74:a0:f8:db:bf:3a:6a:2a:b4:cf:20:3a:39:1b:ff:eb:44:ce: 68:63:b8:4d:1e:c7:bd:fc:23:71:c3:4d:24:ea:f8:68:47:f6: 1d:ef:c8:b4:46:45:e0:aa:26:25:1b:83:3a:40:88:2a:4a:8b: eb:4a:54:21:ce:26:88:58:52:40:80:f5:64:92:67:56:22:8f: 28:4f:c1:b3:2d:24:f0:75:6a:96:2d:f8:7a:7b:52:47:a5:92: 42:6e:a8:cf:5e:e5:5a:6c:a6:3f:81:bd:d9:f3:74:28:f1:f4: 38:7b:d9:ec:cd:58:26:10:a8:2a:be:ae:b2:fb:be:49:11:0f: 44:48:d6:4f:28:f5:4d:d7:d2:9c:df:d8:c4:a2:ae:91:2a:f8: 2b:65:5a:84:0d:af:cf:53:0d:66:91:fc:dc:ef:75:d8:8b:17: 77:b4:9b:84:c9:92:cd:c4:64:bc:69:39:e8:f5:fc:73:56:41: 4d:cb:e9:ea:c0:ff:a6:3e:4d:02:48:fe:10:22:a9:16:b1:a7: 00:7b:68:f7:53:17:46:d8:8f:6f:04:29:a9:05:7b:02:8e:ad: 2e:66:6c:93:2b:80:05:f7:78:52:b3:58:00:52:71:b5:55:d8: 1a:a7:a6:ab:05:9a:48:ed:9f:67:d2:ae:4d:f9:fe:90:11:2c: 01:a4:79:e2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZqWm4qs5ii3U0aCKEZ5RvRMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0Zjk2MzQ1ZDNmMjJlZGIzOTVkMjQ3ZjdiODZkMmQ3M2U0 YTAwOTEwHhcNMjUxMTE4MTA1NjA3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNGVlZTM5ZTZlMjE2NzY2ODg4NzFmYTQ4NWIzNTc2ZWMzOWE0YjA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAir1mhhUxUCjbzgizLTMVSEK9C+V+ nnNU2Pu+apX8pNP2yY2ZklJi1hK1kCKlkccpYrAZSrpkUTLnathbnozBNmwnbylo 7MVSu9wNCxZgjZXXRC0aSw8k+ADN6aqKfafq3+UXrfX0qVDqd9pmQ11N0VuOUDb9 MP2iZjj2uRxn9mFy6dReaoNK2uckwgR79d6ddTf7NgzLjitRoNqzfzzlNR/JTcO7 bAI1SgBFAshWrj9uutdTNggMhljoVs11Ou4XdxCbreqKu2x3tV3Db1UXjuvWbRN1 9p37dE2dtInzkfgAjNpcMFgC67owcRHsukc+MVdwgfVafUoVDDaJGDVVEwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFATu455uIWdmiIcfpIWzV27DmksEMB8GA1UdIwQY MBaAFLT5Y0XT8i7bOV0kf3uG0tc+SgCRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFBsalJkUHlMdHM1WFNSX2U0YlMxejVLQUpFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS84ZTEyMWQtNzNiMy00MzhhLTgzYzQt NmZjMzQzZDc3Y2QyLzEvQk83am5tNGhaMmFJaHgta2hiTlhic09hU3dRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS84ZTEyMWQtNzNiMy00MzhhLTgzYzQtNmZjMzQzZDc3Y2Qy LzEvdFBsalJkUHlMdHM1WFNSX2U0YlMxejVLQUpFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ1JnMA0G CSqGSIb3DQEBCwUAA4IBAQB0oPjbvzpqKrTPIDo5G//rRM5oY7hNHse9/CNxw00k 6vhoR/Yd78i0RkXgqiYlG4M6QIgqSovrSlQhziaIWFJAgPVkkmdWIo8oT8GzLSTw dWqWLfh6e1JHpZJCbqjPXuVabKY/gb3Z83Qo8fQ4e9nszVgmEKgqvq6y+75JEQ9E SNZPKPVN19Kc39jEoq6RKvgrZVqEDa/PUw1mkfzc73XYixd3tJuEyZLNxGS8aTno 9fxzVkFNy+nqwP+mPk0CSP4QIqkWsacAe2j3UxdG2I9vBCmpBXsCjq0uZmyTK4AF 93hSs1gAUnG1Vdgap6arBZpI7Z9n0q5N+f6QESwBpHni -----END CERTIFICATE-----Generated at Sun Dec 7 18:57:17 2025 by rpki-client