This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/bb6f38-2369-446f-88f2-0b4575b69c57/1/bcjpN0aNygbCKNdyNd9ChWjBpco.roa File: bcjpN0aNygbCKNdyNd9ChWjBpco.roa (raw, json) Hash identifier: ytkWRcO7/lHF5yygZpsyJR3V6A07JM0wAYNub17fGn8= Subject key identifier: 6D:C8:E9:37:46:8D:CA:06:C2:28:D7:72:35:DF:42:85:68:C1:A5:CA Certificate issuer: /CN=614c9585889f98e0c77f9b6cd80361aa02bdd68e Certificate serial: 019B2BD184EB0F159392F34F71CD0935F243 Authority key identifier: 61:4C:95:85:88:9F:98:E0:C7:7F:9B:6C:D8:03:61:AA:02:BD:D6:8E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YUyVhYifmODHf5ts2ANhqgK91o4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/bb6f38-2369-446f-88f2-0b4575b69c57/1/bcjpN0aNygbCKNdyNd9ChWjBpco.roa Signing time: Wed 17 Dec 2025 10:18:29 +0000 ROA not before: Wed 17 Dec 2025 10:18:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 51790 IP address blocks: 45.136.188.0/23 maxlen: 23 45.136.190.0/23 maxlen: 23 46.19.8.0/23 maxlen: 24 46.19.10.0/23 maxlen: 24 46.19.12.0/23 maxlen: 24 46.19.14.0/23 maxlen: 24 185.57.144.0/23 maxlen: 23 185.57.145.0/24 maxlen: 24 185.57.146.0/24 maxlen: 24 185.92.228.0/24 maxlen: 24 185.97.52.0/22 maxlen: 24 185.185.88.0/22 maxlen: 24 193.3.59.0/24 maxlen: 24 209.16.152.0/22 maxlen: 23 209.16.152.0/23 maxlen: 23 209.16.154.0/23 maxlen: 23 217.61.252.0/24 maxlen: 24 2a02:28b0::/32 maxlen: 32 2a02:28b1::/32 maxlen: 32 2a02:28b2::/32 maxlen: 32 2a02:28b7::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/bb6f38-2369-446f-88f2-0b4575b69c57/1/YUyVhYifmODHf5ts2ANhqgK91o4.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/bb6f38-2369-446f-88f2-0b4575b69c57/1/YUyVhYifmODHf5ts2ANhqgK91o4.mft rsync://rpki.ripe.net/repository/DEFAULT/YUyVhYifmODHf5ts2ANhqgK91o4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:d1:84:eb:0f:15:93:92:f3:4f:71:cd:09:35:f2:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=614c9585889f98e0c77f9b6cd80361aa02bdd68e Validity Not Before: Dec 17 10:18:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=6dc8e937468dca06c228d77235df428568c1a5ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:67:38:60:ae:78:76:f1:5b:75:8f:ca:6c:08: 0d:78:94:46:31:64:8f:4d:7d:9a:a0:76:36:40:7e: 47:ee:f5:3b:11:91:6b:a2:34:8c:76:d8:8d:e7:b3: 6a:cd:0d:39:10:95:16:9b:e1:20:15:eb:cf:71:12: 6b:41:2d:0b:e4:0e:30:68:90:46:89:29:79:0f:2d: 67:8a:41:49:ac:38:c2:9f:37:a1:4b:c3:37:eb:e1: c6:49:0f:35:c9:68:69:91:84:71:fb:fd:c4:26:7f: 4d:f6:f5:03:1d:44:87:44:03:00:96:d8:27:3e:ff: 87:19:fa:61:61:d7:8c:23:a6:d1:6d:e0:43:6c:ba: a7:df:a4:b0:d6:66:63:e3:0d:67:b6:1c:51:24:4c: 11:52:b5:67:26:60:3e:b1:34:b2:ac:dc:9d:b3:e2: 16:03:6a:2d:55:02:6e:7a:c9:e9:c2:18:3c:46:e3: 21:da:b7:2f:de:99:11:4c:70:da:85:97:7a:c6:bd: 2d:cb:4b:00:e1:01:f9:9d:f0:d0:d5:92:84:f8:6c: 61:98:dd:15:0c:12:0e:97:ef:17:3f:21:17:4b:29: 7c:6d:14:84:b6:a8:7b:69:46:dc:7e:39:f0:40:ce: a3:97:37:81:ad:e1:6b:89:38:f4:88:b5:a8:96:92: a6:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:C8:E9:37:46:8D:CA:06:C2:28:D7:72:35:DF:42:85:68:C1:A5:CA X509v3 Authority Key Identifier: keyid:61:4C:95:85:88:9F:98:E0:C7:7F:9B:6C:D8:03:61:AA:02:BD:D6:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YUyVhYifmODHf5ts2ANhqgK91o4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/bb6f38-2369-446f-88f2-0b4575b69c57/1/bcjpN0aNygbCKNdyNd9ChWjBpco.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/bb6f38-2369-446f-88f2-0b4575b69c57/1/YUyVhYifmODHf5ts2ANhqgK91o4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.136.188.0/22 46.19.8.0/21 185.57.144.0-185.57.146.255 185.92.228.0/24 185.97.52.0/22 185.185.88.0/22 193.3.59.0/24 209.16.152.0/22 217.61.252.0/24 IPv6: 2a02:28b0::-2a02:28b2:ffff:ffff:ffff:ffff:ffff:ffff 2a02:28b7::/32 Signature Algorithm: sha256WithRSAEncryption 4d:f6:74:8b:2a:8e:b6:fc:1b:ff:bd:5a:52:a6:05:08:7c:1c: f4:e1:46:05:19:5b:0c:43:d9:1d:a8:f0:6f:95:14:18:bc:ec: 69:9d:a8:97:14:a8:20:2f:13:29:e8:6b:86:29:2a:57:6a:e0: b1:20:4a:63:43:01:a1:62:65:07:db:1d:de:15:91:76:ca:39: 6a:ac:75:14:72:85:92:17:e5:2c:b9:38:6b:95:b6:0a:4d:4a: c5:6a:2f:22:95:5e:f0:6e:27:3f:92:65:5b:0f:56:bc:7e:92: b8:25:7b:cf:b4:4e:83:14:5f:4d:1f:c3:4c:f6:7f:b1:ac:c7: b5:a2:d4:76:00:e3:e2:87:af:fb:27:89:2c:7e:04:81:af:53: 4e:4a:28:bb:46:c5:4a:90:b7:f4:51:20:3a:b5:f6:37:91:38: 06:a9:eb:15:ba:c2:fe:eb:a0:9a:f9:d8:e9:2e:61:12:f9:1f: 06:f6:c9:6b:ae:a0:b1:9e:10:eb:ec:82:71:f8:be:81:46:3d: 2b:f4:77:d6:79:5b:48:9c:09:21:62:d5:f6:11:ba:63:74:17: e0:b9:db:1c:e6:b8:be:1b:f7:c9:2f:9e:b0:fe:03:9b:29:06: f9:6b:5b:f5:a1:54:81:08:3c:49:8f:e7:f1:88:af:b7:be:2a: 7a:78:1e:1a -----BEGIN CERTIFICATE----- MIIFVDCCBDygAwIBAgISAZsr0YTrDxWTkvNPcc0JNfJDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxNGM5NTg1ODg5Zjk4ZTBjNzdmOWI2Y2Q4MDM2MWFhMDJi ZGQ2OGUwHhcNMjUxMjE3MTAxODI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZGM4ZTkzNzQ2OGRjYTA2YzIyOGQ3NzIzNWRmNDI4NTY4YzFhNWNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApWc4YK54dvFbdY/KbAgNeJRGMWSP TX2aoHY2QH5H7vU7EZFrojSMdtiN57NqzQ05EJUWm+EgFevPcRJrQS0L5A4waJBG iSl5Dy1nikFJrDjCnzehS8M36+HGSQ81yWhpkYRx+/3EJn9N9vUDHUSHRAMAltgn Pv+HGfphYdeMI6bRbeBDbLqn36Sw1mZj4w1nthxRJEwRUrVnJmA+sTSyrNyds+IW A2otVQJuesnpwhg8RuMh2rcv3pkRTHDahZd6xr0ty0sA4QH5nfDQ1ZKE+GxhmN0V DBIOl+8XPyEXSyl8bRSEtqh7aUbcfjnwQM6jlzeBreFriTj0iLWolpKmewIDAQAB o4ICYDCCAlwwHQYDVR0OBBYEFG3I6TdGjcoGwijXcjXfQoVowaXKMB8GA1UdIwQY MBaAFGFMlYWIn5jgx3+bbNgDYaoCvdaOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWVV5VmhZaWZtT0RIZjV0czJBTmhxZ0s5MW80LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS9iYjZmMzgtMjM2OS00NDZmLTg4ZjIt MGI0NTc1YjY5YzU3LzEvYmNqcE4wYU55Z2JDS05keU5kOUNoV2pCcGNvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS9iYjZmMzgtMjM2OS00NDZmLTg4ZjItMGI0NTc1YjY5YzU3 LzEvWVV5VmhZaWZtT0RIZjV0czJBTmhxZ0s5MW80LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMHYGCCsGAQUFBwEHAQH/BGcwZTBEBAIAATA+AwQCLYi8AwQD LhMIMAwDBAS5OZADBAC5OZIDBAC5XOQDBAK5YTQDBAK5uVgDBADBAzsDBALREJgD BADZPfwwHQQCAAIwFzAOAwUEKgIosAMFACoCKLIDBQAqAii3MA0GCSqGSIb3DQEB CwUAA4IBAQBN9nSLKo62/Bv/vVpSpgUIfBz04UYFGVsMQ9kdqPBvlRQYvOxpnaiX FKggLxMp6GuGKSpXauCxIEpjQwGhYmUH2x3eFZF2yjlqrHUUcoWSF+UsuThrlbYK TUrFai8ilV7wbic/kmVbD1a8fpK4JXvPtE6DFF9NH8NM9n+xrMe1otR2AOPih6/7 J4ksfgSBr1NOSii7RsVKkLf0USA6tfY3kTgGqesVusL+66Ca+djpLmES+R8G9slr rqCxnhDr7IJx+L6BRj0r9HfWeVtInAkhYtX2EbpjdBfgudsc5ri+G/fJL56w/gOb KQb5a1v1oVSBCDxJj+fxiK+3vip6eB4a -----END CERTIFICATE-----Generated at Fri Dec 19 11:50:21 2025 by rpki-client