This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/BKH5wzEiywB_EY1ZTaZrkrclA_Q.roa File: BKH5wzEiywB_EY1ZTaZrkrclA_Q.roa (raw, json) Hash identifier: ygP7+MTRLBnfempTqTLSXe4zkankZjQWW1YcQejM7po= Subject key identifier: 04:A1:F9:C3:31:22:CB:00:7F:11:8D:59:4D:A6:6B:92:B7:25:03:F4 Certificate issuer: /CN=57c670c8db32dd748df797c5c93013d8c91fa839 Certificate serial: 019B7C8087DDB637902971418D9CE32DB64B Authority key identifier: 57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/BKH5wzEiywB_EY1ZTaZrkrclA_Q.roa Signing time: Fri 02 Jan 2026 02:19:16 +0000 ROA not before: Fri 02 Jan 2026 02:19:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207569 IP address blocks: 46.243.1.0/24 maxlen: 24 46.243.4.0/24 maxlen: 24 46.243.6.0/24 maxlen: 24 89.44.86.0/24 maxlen: 24 95.81.79.0/24 maxlen: 24 95.81.113.0/24 maxlen: 24 95.81.126.0/24 maxlen: 24 95.81.127.0/24 maxlen: 24 103.71.22.0/24 maxlen: 24 103.71.23.0/24 maxlen: 24 103.85.114.0/24 maxlen: 24 103.85.115.0/24 maxlen: 24 104.128.128.0/24 maxlen: 24 104.128.129.0/24 maxlen: 24 104.128.130.0/24 maxlen: 24 104.128.131.0/24 maxlen: 24 104.128.132.0/24 maxlen: 24 104.128.133.0/24 maxlen: 24 104.128.134.0/24 maxlen: 24 104.128.135.0/24 maxlen: 24 104.128.136.0/24 maxlen: 24 104.128.137.0/24 maxlen: 24 104.128.138.0/24 maxlen: 24 104.128.139.0/24 maxlen: 24 104.128.140.0/24 maxlen: 24 104.128.141.0/24 maxlen: 24 104.128.142.0/24 maxlen: 24 104.128.143.0/24 maxlen: 24 2a0c:5d00:1002::/48 maxlen: 48 2a0c:5d00:2002::/48 maxlen: 48 2a0c:5d06:2002::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.mft rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:87:dd:b6:37:90:29:71:41:8d:9c:e3:2d:b6:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57c670c8db32dd748df797c5c93013d8c91fa839 Validity Not Before: Jan 2 02:19:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=04a1f9c33122cb007f118d594da66b92b72503f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:9c:ee:e4:3c:c1:22:ae:dd:49:b8:38:0b:9e: c2:aa:47:80:fd:f4:39:23:d8:7d:6b:25:d6:41:7f: 58:e9:d3:09:5c:2e:95:eb:bc:3f:37:cb:09:19:2c: 45:93:74:d9:b4:9e:f7:e0:25:6c:1e:0f:cd:cd:30: b5:ab:1b:fe:d5:2f:78:de:32:cc:42:35:84:55:30: 20:3b:0d:d2:95:3d:b7:5d:95:46:60:f0:55:46:f3: c4:2f:0f:02:7a:32:fe:51:67:a7:71:ef:91:bd:78: 41:79:4f:70:44:3e:1d:c4:cc:f1:dc:1e:69:eb:35: cf:d3:d3:0f:47:3c:12:6f:45:33:09:b4:c3:f7:cd: 0f:d4:99:cc:17:25:d2:39:c8:75:f9:2c:f5:ec:3a: 11:8f:8e:d1:03:19:01:bf:b1:f7:93:f2:1c:62:cf: 4f:68:7b:55:2f:76:dd:f9:e4:38:36:4e:05:14:52: 7b:2b:0b:4b:29:f6:d2:2c:ed:86:7f:18:73:dd:ba: 8e:36:a4:d4:b9:b5:e2:48:0a:b6:90:00:49:a4:7c: 08:b6:f2:c8:71:14:d7:b7:61:4f:69:08:f8:2d:ee: 2c:e1:13:06:cf:b4:40:41:1b:9d:38:21:9e:52:37: 59:53:f9:f7:07:96:a0:72:90:15:06:3f:80:cd:d5: 79:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:A1:F9:C3:31:22:CB:00:7F:11:8D:59:4D:A6:6B:92:B7:25:03:F4 X509v3 Authority Key Identifier: keyid:57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/BKH5wzEiywB_EY1ZTaZrkrclA_Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.243.1.0/24 46.243.4.0/24 46.243.6.0/24 89.44.86.0/24 95.81.79.0/24 95.81.113.0/24 95.81.126.0/23 103.71.22.0/23 103.85.114.0/23 104.128.128.0/20 IPv6: 2a0c:5d00:1002::/48 2a0c:5d00:2002::/48 2a0c:5d06:2002::/48 Signature Algorithm: sha256WithRSAEncryption 88:3c:b5:65:0a:fb:61:4a:9b:0c:f0:de:fe:3a:4c:57:01:54: af:be:93:26:bb:f6:8b:01:12:c9:fa:33:ab:54:f5:4a:bb:fb: 8e:05:6f:f9:ba:3f:d8:87:52:cb:9b:f6:c0:38:ad:f8:85:51: da:d8:17:7b:19:2c:35:d5:a3:a9:31:29:a3:11:93:aa:b4:20: 45:30:9f:ab:c9:c1:8f:5a:57:f3:9b:ba:12:28:6b:6f:3c:e7: 5a:11:71:89:9c:14:18:11:3c:36:75:63:44:b3:15:34:b4:a7: 9c:db:33:23:18:87:40:ff:dd:ad:24:db:06:d1:31:c2:01:c9: 57:90:2b:23:c3:7f:d8:a8:e9:6f:98:1c:25:8b:c3:6b:eb:73: 5a:8f:fb:90:a0:59:6b:9c:cb:0a:02:49:2c:a7:be:06:2c:e1: bd:07:15:fe:0f:36:5c:5b:f5:ba:23:eb:59:89:ac:31:99:df: af:1e:34:6d:39:e8:4c:c1:88:00:ec:0a:fb:8f:ef:9d:27:81: 6d:4f:f7:1e:b0:1a:c2:92:7c:25:81:a3:e0:d4:8b:6b:a7:84: 02:f7:ef:10:66:7b:2b:31:d5:87:f9:49:2d:2e:07:f5:20:ce: 65:a8:6e:cc:0e:8f:5a:56:35:4f:d7:01:32:74:db:7d:dd:68: 1e:a7:c4:de -----BEGIN CERTIFICATE----- MIIFVjCCBD6gAwIBAgISAZt8gIfdtjeQKXFBjZzjLbZLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3YzY3MGM4ZGIzMmRkNzQ4ZGY3OTdjNWM5MzAxM2Q4Yzkx ZmE4MzkwHhcNMjYwMTAyMDIxOTE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNGExZjljMzMxMjJjYjAwN2YxMThkNTk0ZGE2NmI5MmI3MjUwM2Y0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiZzu5DzBIq7dSbg4C57CqkeA/fQ5 I9h9ayXWQX9Y6dMJXC6V67w/N8sJGSxFk3TZtJ734CVsHg/NzTC1qxv+1S943jLM QjWEVTAgOw3SlT23XZVGYPBVRvPELw8CejL+UWence+RvXhBeU9wRD4dxMzx3B5p 6zXP09MPRzwSb0UzCbTD980P1JnMFyXSOch1+Sz17DoRj47RAxkBv7H3k/IcYs9P aHtVL3bd+eQ4Nk4FFFJ7KwtLKfbSLO2Gfxhz3bqONqTUubXiSAq2kABJpHwItvLI cRTXt2FPaQj4Le4s4RMGz7RAQRudOCGeUjdZU/n3B5agcpAVBj+AzdV5wwIDAQAB o4ICYjCCAl4wHQYDVR0OBBYEFASh+cMxIssAfxGNWU2ma5K3JQP0MB8GA1UdIwQY MBaAFFfGcMjbMt10jfeXxckwE9jJH6g5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVjhad3lOc3kzWFNOOTVmRnlUQVQyTWtmcURrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC81YTZmZGEtNzg5Ni00YzUwLWFmZmQt MzA0OTVmNDAzNzg0LzEvQktINXd6RWl5d0JfRVkxWlRhWnJrcmNsQV9RLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC81YTZmZGEtNzg5Ni00YzUwLWFmZmQtMzA0OTVmNDAzNzg0 LzEvVjhad3lOc3kzWFNOOTVmRnlUQVQyTWtmcURrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMHgGCCsGAQUFBwEHAQH/BGkwZzBCBAIAATA8AwQALvMBAwQA LvMEAwQALvMGAwQAWSxWAwQAX1FPAwQAX1FxAwQBX1F+AwQBZ0cWAwQBZ1VyAwQE aICAMCEEAgACMBsDBwAqDF0AEAIDBwAqDF0AIAIDBwAqDF0GIAIwDQYJKoZIhvcN AQELBQADggEBAIg8tWUK+2FKmwzw3v46TFcBVK++kya79osBEsn6M6tU9Uq7+44F b/m6P9iHUsub9sA4rfiFUdrYF3sZLDXVo6kxKaMRk6q0IEUwn6vJwY9aV/ObuhIo a28851oRcYmcFBgRPDZ1Y0SzFTS0p5zbMyMYh0D/3a0k2wbRMcIByVeQKyPDf9io 6W+YHCWLw2vrc1qP+5CgWWucywoCSSynvgYs4b0HFf4PNlxb9boj61mJrDGZ368e NG056EzBiADsCvuP750ngW1P9x6wGsKSfCWBo+DUi2unhAL37xBmeysx1Yf5SS0u B/UgzmWobswOj1pWNU/XATJ0233daB6nxN4= -----END CERTIFICATE-----Generated at Wed Jan 21 08:07:56 2026 by rpki-client