This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/0dda42-53a5-4aba-86ae-639e14d04de6/1/BfT142IZrG6w9x_sdv9NlYOwnjk.roa File: BfT142IZrG6w9x_sdv9NlYOwnjk.roa (raw, json) Hash identifier: nMyUMScF9ierHQNaWf4H2FAJS6EPcrZmAIOFL2K/38E= Subject key identifier: 05:F4:F5:E3:62:19:AC:6E:B0:F7:1F:EC:76:FF:4D:95:83:B0:9E:39 Certificate issuer: /CN=8267fb4a0b677b8377907b82fb1fb8810a2fef08 Certificate serial: 019B7BA54366A97F8067A2BF196BF4C9FF63 Authority key identifier: 82:67:FB:4A:0B:67:7B:83:77:90:7B:82:FB:1F:B8:81:0A:2F:EF:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gmf7Sgtne4N3kHuC-x-4gQov7wg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/0dda42-53a5-4aba-86ae-639e14d04de6/1/BfT142IZrG6w9x_sdv9NlYOwnjk.roa Signing time: Thu 01 Jan 2026 22:19:46 +0000 ROA not before: Thu 01 Jan 2026 22:19:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50290 IP address blocks: 31.15.124.0/22 maxlen: 22 46.30.130.0/23 maxlen: 23 46.30.132.0/22 maxlen: 22 109.69.32.0/22 maxlen: 22 185.74.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/0dda42-53a5-4aba-86ae-639e14d04de6/1/gmf7Sgtne4N3kHuC-x-4gQov7wg.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/0dda42-53a5-4aba-86ae-639e14d04de6/1/gmf7Sgtne4N3kHuC-x-4gQov7wg.mft rsync://rpki.ripe.net/repository/DEFAULT/gmf7Sgtne4N3kHuC-x-4gQov7wg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 21:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:43:66:a9:7f:80:67:a2:bf:19:6b:f4:c9:ff:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8267fb4a0b677b8377907b82fb1fb8810a2fef08 Validity Not Before: Jan 1 22:19:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=05f4f5e36219ac6eb0f71fec76ff4d9583b09e39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:47:25:a6:a0:60:2a:51:a4:9f:01:b4:73:90: 07:36:2c:c3:27:aa:c8:94:b1:7d:03:9e:11:87:4e: 87:a3:5d:e7:60:f3:bb:d3:d1:53:b1:ad:ff:d4:50: a0:f7:95:29:dd:14:57:2d:2c:87:f2:1b:2d:6e:1a: 84:df:4d:fb:d5:4c:5b:9e:87:32:b2:b5:82:91:bd: 7e:ca:10:75:4c:10:8d:a2:73:5f:39:38:53:0f:bd: 37:60:6b:03:34:7c:f1:19:5b:8c:f5:bd:30:64:27: 6e:61:a6:ae:bb:8b:a5:47:6e:89:e7:56:c9:c8:c8: f2:9e:67:f5:5a:a5:3f:f6:da:1a:5d:74:97:22:aa: 48:02:dc:91:60:47:42:99:49:0f:9e:43:4c:3b:95: 98:ce:b9:91:29:41:04:88:08:e3:b8:9d:b6:72:f8: 82:5e:2a:2e:65:b7:03:49:1c:a7:ac:7a:c7:00:ad: db:82:5f:7e:53:0b:95:43:26:27:98:af:ec:7e:88: 96:f6:7c:c6:6c:6c:e0:19:a9:31:6f:37:85:79:ca: 14:ac:85:9d:72:3a:33:b4:22:22:3e:39:40:ac:46: 72:28:2e:cc:2f:8d:20:3c:06:9a:8d:f4:df:5d:94: e6:52:c6:af:fe:65:0c:bf:a3:db:d2:53:d9:6a:5f: 9e:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:F4:F5:E3:62:19:AC:6E:B0:F7:1F:EC:76:FF:4D:95:83:B0:9E:39 X509v3 Authority Key Identifier: keyid:82:67:FB:4A:0B:67:7B:83:77:90:7B:82:FB:1F:B8:81:0A:2F:EF:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gmf7Sgtne4N3kHuC-x-4gQov7wg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/0dda42-53a5-4aba-86ae-639e14d04de6/1/BfT142IZrG6w9x_sdv9NlYOwnjk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/0dda42-53a5-4aba-86ae-639e14d04de6/1/gmf7Sgtne4N3kHuC-x-4gQov7wg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.15.124.0/22 46.30.130.0-46.30.135.255 109.69.32.0/22 185.74.174.0/24 Signature Algorithm: sha256WithRSAEncryption 50:6f:e6:a1:0b:65:eb:3a:23:5a:8b:da:9c:2e:2f:56:7f:ee: b5:6b:b8:f3:4e:d5:c7:eb:02:da:5d:80:36:d7:be:9e:80:54: cc:95:37:aa:99:7b:14:b6:50:2a:99:08:aa:85:29:b7:65:65: 9a:e8:e0:6a:fd:19:94:84:7d:f0:ff:19:98:c6:aa:d5:f5:ed: 28:5a:7b:3d:f2:16:a3:86:7d:e7:46:5a:8d:76:3c:66:ab:8a: ee:0e:ca:a9:af:86:f3:3d:69:61:6c:9c:6e:d3:f2:13:4d:7d: c9:6e:8c:da:92:60:b5:1f:5a:fc:03:26:c5:e9:5e:a8:87:91: 81:13:9e:c6:d2:79:92:b9:6f:46:a1:2e:16:7e:91:a9:8b:b2: 06:8a:0e:4f:58:8b:8e:a2:e6:ff:a9:61:86:06:1f:16:c3:e1: f5:cb:b5:6f:ba:f3:20:2e:48:c5:1f:00:2d:44:72:2e:cb:fc: 4d:0f:bf:4a:0d:11:27:f6:46:d4:61:23:1a:33:ca:86:b4:3a: 5e:a0:c3:25:ff:a4:d4:bb:9c:0d:d0:93:7d:b3:55:1d:e4:7b: 7a:2e:13:60:f0:5d:66:ff:fb:71:82:e9:ec:bd:27:a3:fa:bc: 43:e2:c5:12:fe:38:51:d5:02:63:f3:ee:94:49:5b:4a:93:1d: 89:f4:76:17 -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgISAZt7pUNmqX+AZ6K/GWv0yf9jMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyNjdmYjRhMGI2NzdiODM3NzkwN2I4MmZiMWZiODgxMGEy ZmVmMDgwHhcNMjYwMTAxMjIxOTQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNWY0ZjVlMzYyMTlhYzZlYjBmNzFmZWM3NmZmNGQ5NTgzYjA5ZTM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyEclpqBgKlGknwG0c5AHNizDJ6rI lLF9A54Rh06Ho13nYPO709FTsa3/1FCg95Up3RRXLSyH8hstbhqE30371Uxbnocy srWCkb1+yhB1TBCNonNfOThTD703YGsDNHzxGVuM9b0wZCduYaauu4ulR26J51bJ yMjynmf1WqU/9toaXXSXIqpIAtyRYEdCmUkPnkNMO5WYzrmRKUEEiAjjuJ22cviC XiouZbcDSRynrHrHAK3bgl9+UwuVQyYnmK/sfoiW9nzGbGzgGakxbzeFecoUrIWd cjoztCIiPjlArEZyKC7ML40gPAaajfTfXZTmUsav/mUMv6Pb0lPZal+eHwIDAQAB o4ICIzCCAh8wHQYDVR0OBBYEFAX09eNiGaxusPcf7Hb/TZWDsJ45MB8GA1UdIwQY MBaAFIJn+0oLZ3uDd5B7gvsfuIEKL+8IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ21mN1NndG5lNE4za0h1Qy14LTRnUW92N3dnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi8wZGRhNDItNTNhNS00YWJhLTg2YWUt NjM5ZTE0ZDA0ZGU2LzEvQmZUMTQySVpyRzZ3OXhfc2R2OU5sWU93bmprLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi8wZGRhNDItNTNhNS00YWJhLTg2YWUtNjM5ZTE0ZDA0ZGU2 LzEvZ21mN1NndG5lNE4za0h1Qy14LTRnUW92N3dnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgAwQCHw98MAwD BAEuHoIDBAMuHoADBAJtRSADBAC5Sq4wDQYJKoZIhvcNAQELBQADggEBAFBv5qEL Zes6I1qL2pwuL1Z/7rVruPNO1cfrAtpdgDbXvp6AVMyVN6qZexS2UCqZCKqFKbdl ZZro4Gr9GZSEffD/GZjGqtX17Shaez3yFqOGfedGWo12PGariu4OyqmvhvM9aWFs nG7T8hNNfclujNqSYLUfWvwDJsXpXqiHkYETnsbSeZK5b0ahLhZ+kamLsgaKDk9Y i46i5v+pYYYGHxbD4fXLtW+68yAuSMUfAC1Eci7L/E0Pv0oNESf2RtRhIxozyoa0 Ol6gwyX/pNS7nA3Qk32zVR3ke3ouE2DwXWb/+3GC6ey9J6P6vEPixRL+OFHVAmPz 7pRJW0qTHYn0dhc= -----END CERTIFICATE-----Generated at Sat Jan 10 06:59:43 2026 by rpki-client