This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/1d9b05-ec61-4c33-a097-36ae76ee983e/1/bspFglFUNNfB3BfctmrtidkBJJ0.roa File: bspFglFUNNfB3BfctmrtidkBJJ0.roa (raw, json) Hash identifier: b4qzed65X33LBM+fRSUuJ6eNd3msfTHJCKt5GOuVSMY= Subject key identifier: 6E:CA:45:82:51:54:34:D7:C1:DC:17:DC:B6:6A:ED:89:D9:01:24:9D Certificate issuer: /CN=4b529a4d22faef23135d6eff8912266623c49255 Certificate serial: 019B7EA6BDA41D07E1BAE47B29841CAA3973 Authority key identifier: 4B:52:9A:4D:22:FA:EF:23:13:5D:6E:FF:89:12:26:66:23:C4:92:55 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S1KaTSL67yMTXW7_iRImZiPEklU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/1d9b05-ec61-4c33-a097-36ae76ee983e/1/bspFglFUNNfB3BfctmrtidkBJJ0.roa Signing time: Fri 02 Jan 2026 12:20:15 +0000 ROA not before: Fri 02 Jan 2026 12:20:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 19905 IP address blocks: 5.11.16.0/22 maxlen: 22 5.11.16.0/23 maxlen: 23 5.11.16.0/24 maxlen: 24 5.11.17.0/24 maxlen: 24 5.11.18.0/23 maxlen: 23 5.11.18.0/24 maxlen: 24 5.11.19.0/24 maxlen: 24 5.11.21.0/24 maxlen: 24 5.11.22.0/24 maxlen: 24 5.11.24.0/22 maxlen: 22 5.11.24.0/23 maxlen: 23 5.11.24.0/24 maxlen: 24 5.11.25.0/24 maxlen: 24 5.11.26.0/23 maxlen: 23 5.11.26.0/24 maxlen: 24 5.11.27.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/1d9b05-ec61-4c33-a097-36ae76ee983e/1/S1KaTSL67yMTXW7_iRImZiPEklU.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/1d9b05-ec61-4c33-a097-36ae76ee983e/1/S1KaTSL67yMTXW7_iRImZiPEklU.mft rsync://rpki.ripe.net/repository/DEFAULT/S1KaTSL67yMTXW7_iRImZiPEklU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:bd:a4:1d:07:e1:ba:e4:7b:29:84:1c:aa:39:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b529a4d22faef23135d6eff8912266623c49255 Validity Not Before: Jan 2 12:20:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6eca4582515434d7c1dc17dcb66aed89d901249d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:4c:21:08:94:9a:7f:09:7f:2a:20:b0:8b:82: 44:ed:47:41:ce:13:95:9c:11:de:c1:50:a3:e5:74: 20:cd:ef:a1:4a:78:3b:c0:99:7d:f3:af:98:f6:51: e6:b2:4d:7d:80:98:3d:56:f3:5b:7c:e5:7f:06:4f: 7f:93:36:7d:f3:b0:cc:28:f1:05:1a:6a:fc:bf:67: c8:e2:92:b7:d2:68:b3:08:b4:d3:44:f4:49:2e:7e: ca:45:a9:1f:09:b4:aa:6c:27:47:15:ea:ac:e3:c1: 7d:2a:bb:3d:70:b1:5e:5e:4c:90:98:f3:1b:23:29: 93:22:7c:23:f3:08:1e:07:8d:e4:75:28:85:23:c2: 2c:f2:59:88:2e:77:0d:14:1b:d7:fe:6b:5f:64:aa: ed:55:90:41:eb:32:34:95:ce:ce:23:a9:9a:37:74: e4:ae:0e:6a:f4:8c:dc:df:1e:5c:45:25:1b:bc:53: e9:03:28:20:c2:ee:65:4e:ee:b6:0d:72:0a:35:d8: ea:ca:91:09:e0:be:d2:66:ac:04:50:55:ba:f2:e1: b4:db:12:79:a2:35:3e:f3:42:c8:ea:ef:96:34:c4: 09:b6:92:be:6b:2a:96:66:83:36:d4:b4:c2:d0:49: 3e:a3:b7:b9:2f:d4:36:e4:7d:92:f7:23:10:43:2b: 28:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:CA:45:82:51:54:34:D7:C1:DC:17:DC:B6:6A:ED:89:D9:01:24:9D X509v3 Authority Key Identifier: keyid:4B:52:9A:4D:22:FA:EF:23:13:5D:6E:FF:89:12:26:66:23:C4:92:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S1KaTSL67yMTXW7_iRImZiPEklU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/1d9b05-ec61-4c33-a097-36ae76ee983e/1/bspFglFUNNfB3BfctmrtidkBJJ0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/1d9b05-ec61-4c33-a097-36ae76ee983e/1/S1KaTSL67yMTXW7_iRImZiPEklU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.11.16.0/22 5.11.21.0-5.11.22.255 5.11.24.0/22 Signature Algorithm: sha256WithRSAEncryption 5f:d5:cf:ff:ca:16:45:2e:b6:ec:b1:8e:9c:57:15:9b:88:33: 90:3d:d8:a8:6f:a5:75:8d:a1:ad:28:0b:75:48:d9:84:fa:91: b5:bb:06:f4:64:01:2f:ef:e5:e3:ff:07:e9:dc:7e:55:57:0c: ae:db:85:40:a8:ab:56:04:6b:19:17:92:bd:73:1f:a8:61:2a: 26:36:55:46:90:4b:a5:18:18:06:59:c8:5b:80:c7:ba:57:c5: 27:5b:de:f6:db:97:a1:5b:d8:13:cd:af:48:78:40:21:37:b4: 55:87:df:ac:af:e8:d3:86:67:de:3c:b0:63:f8:e4:20:76:fe: d8:93:0d:7f:88:31:aa:65:84:a0:41:11:cc:7a:86:b7:1f:5d: b2:ef:c7:2b:f8:27:80:0b:8f:bb:e7:38:37:94:c0:b6:ae:15: 17:d4:a0:b0:75:b0:69:fc:10:74:44:61:33:b6:8e:62:f2:68: 25:e6:f2:4a:c7:84:78:29:a1:ad:8b:06:4d:47:37:0a:c8:37: af:e5:f9:aa:4a:c9:c3:85:42:07:2c:b6:51:f0:64:50:e0:fe: 3b:51:b5:9a:85:4d:e0:0a:d5:be:6b:21:ab:a2:fb:9b:23:78: 9f:25:d6:ff:03:75:10:a5:9e:51:68:1c:25:b7:82:78:79:c1: 8f:1c:73:52 -----BEGIN CERTIFICATE----- MIIFETCCA/mgAwIBAgISAZt+pr2kHQfhuuR7KYQcqjlzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiNTI5YTRkMjJmYWVmMjMxMzVkNmVmZjg5MTIyNjY2MjNj NDkyNTUwHhcNMjYwMTAyMTIyMDE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZWNhNDU4MjUxNTQzNGQ3YzFkYzE3ZGNiNjZhZWQ4OWQ5MDEyNDlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn0whCJSafwl/KiCwi4JE7UdBzhOV nBHewVCj5XQgze+hSng7wJl986+Y9lHmsk19gJg9VvNbfOV/Bk9/kzZ987DMKPEF Gmr8v2fI4pK30mizCLTTRPRJLn7KRakfCbSqbCdHFeqs48F9Krs9cLFeXkyQmPMb IymTInwj8wgeB43kdSiFI8Is8lmILncNFBvX/mtfZKrtVZBB6zI0lc7OI6maN3Tk rg5q9Izc3x5cRSUbvFPpAyggwu5lTu62DXIKNdjqypEJ4L7SZqwEUFW68uG02xJ5 ojU+80LI6u+WNMQJtpK+ayqWZoM21LTC0Ek+o7e5L9Q25H2S9yMQQyso4wIDAQAB o4ICHTCCAhkwHQYDVR0OBBYEFG7KRYJRVDTXwdwX3LZq7YnZASSdMB8GA1UdIwQY MBaAFEtSmk0i+u8jE11u/4kSJmYjxJJVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUzFLYVRTTDY3eU1UWFc3X2lSSW1aaVBFa2xVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy8xZDliMDUtZWM2MS00YzMzLWEwOTct MzZhZTc2ZWU5ODNlLzEvYnNwRmdsRlVOTmZCM0JmY3RtcnRpZGtCSkowLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy8xZDliMDUtZWM2MS00YzMzLWEwOTctMzZhZTc2ZWU5ODNl LzEvUzFLYVRTTDY3eU1UWFc3X2lSSW1aaVBFa2xVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQCBQsQMAwD BAAFCxUDBAAFCxYDBAIFCxgwDQYJKoZIhvcNAQELBQADggEBAF/Vz//KFkUutuyx jpxXFZuIM5A92KhvpXWNoa0oC3VI2YT6kbW7BvRkAS/v5eP/B+ncflVXDK7bhUCo q1YEaxkXkr1zH6hhKiY2VUaQS6UYGAZZyFuAx7pXxSdb3vbbl6Fb2BPNr0h4QCE3 tFWH36yv6NOGZ948sGP45CB2/tiTDX+IMaplhKBBEcx6hrcfXbLvxyv4J4ALj7vn ODeUwLauFRfUoLB1sGn8EHREYTO2jmLyaCXm8krHhHgpoa2LBk1HNwrIN6/l+apK ycOFQgcstlHwZFDg/jtRtZqFTeAK1b5rIaui+5sjeJ8l1v8DdRClnlFoHCW3gnh5 wY8cc1I= -----END CERTIFICATE-----Generated at Tue Jan 20 01:19:53 2026 by rpki-client