This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/bUfBc9RibZbXlqe-tDfp6uO3ybY.roa File: bUfBc9RibZbXlqe-tDfp6uO3ybY.roa (raw, json) Hash identifier: AD/wZ922plfn/Nu8i6uRXC9xOV0/DcFIIJ/a5VCfL7c= Subject key identifier: 6D:47:C1:73:D4:62:6D:96:D7:96:A7:BE:B4:37:E9:EA:E3:B7:C9:B6 Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362 Certificate serial: 019BBD821EB6C506730779F3D6DB4CC66B0C Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/bUfBc9RibZbXlqe-tDfp6uO3ybY.roa Signing time: Wed 14 Jan 2026 17:16:19 +0000 ROA not before: Wed 14 Jan 2026 17:16:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207695 IP address blocks: 5.175.237.0/24 maxlen: 24 77.90.41.0/24 maxlen: 24 77.90.52.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 05:06:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:bd:82:1e:b6:c5:06:73:07:79:f3:d6:db:4c:c6:6b:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362 Validity Not Before: Jan 14 17:16:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6d47c173d4626d96d796a7beb437e9eae3b7c9b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:11:d5:04:ca:77:8d:95:4b:f1:3b:64:7d:d3: b0:8e:3d:de:1b:1d:ee:14:be:64:53:e1:5c:39:ec: 59:88:d6:6c:ae:41:23:14:73:c1:39:b8:66:78:ed: 33:6e:e3:cb:1c:c2:23:a3:ff:26:45:77:ed:f6:af: be:9a:97:f0:c5:85:ab:41:71:eb:ed:8d:17:80:44: 8e:b6:2b:67:62:8c:fb:1e:80:65:5c:91:89:d6:c4: 60:4c:64:4e:83:c9:2f:99:1e:45:89:18:93:2b:b8: b4:0f:a8:24:28:57:86:8b:2d:e5:59:4b:c2:12:09: e0:8b:3c:bd:df:b6:33:11:bb:9f:a1:b7:29:bb:be: 28:b1:12:0d:83:cb:87:f8:50:0f:b6:66:ca:1b:66: 77:b3:c4:5a:d6:2e:d1:70:ed:31:35:a8:b0:aa:61: fd:a9:f9:2e:b2:73:26:f2:89:72:2c:80:f6:27:d2: ca:9d:a4:30:b1:0d:9a:0d:81:2b:b2:6b:90:3a:dd: c5:2d:10:46:33:97:58:92:4f:dd:41:8c:c9:92:ee: cb:9e:6e:db:d6:ce:41:88:36:3a:31:2f:74:ec:d0: cd:b7:8a:14:d8:55:bf:30:14:2d:8e:1c:d9:79:41: dc:8a:67:2e:43:35:93:45:31:34:c5:43:8b:de:f6: d6:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:47:C1:73:D4:62:6D:96:D7:96:A7:BE:B4:37:E9:EA:E3:B7:C9:B6 X509v3 Authority Key Identifier: keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/bUfBc9RibZbXlqe-tDfp6uO3ybY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.175.237.0/24 77.90.41.0/24 77.90.52.0/24 Signature Algorithm: sha256WithRSAEncryption 94:97:cc:7f:c3:8f:8a:4e:f6:5d:3f:ef:aa:e9:19:62:e1:22: f8:7e:ed:75:ec:6d:e4:13:75:e6:90:80:1b:eb:3b:38:76:b2: 52:a8:72:76:ec:5a:82:f8:2f:d7:05:d6:04:04:fc:fe:7b:d3: 5b:a2:65:ec:84:8f:9f:5a:b2:e5:55:34:c7:5c:b2:0b:e4:10: 61:43:90:c8:cc:63:2e:56:45:d1:32:3d:10:19:3b:0f:15:0f: 10:47:99:e6:67:fb:8f:20:65:c4:37:aa:f2:48:b9:2a:ec:8c: 0c:c9:50:16:57:22:45:15:cc:05:54:bf:a5:c0:0c:96:83:26: cf:95:59:d0:fb:e0:d4:05:8e:9c:db:f7:da:8e:4b:98:70:3b: 76:2d:8f:c7:fa:e7:d0:d9:0c:70:15:cf:7f:44:33:be:bc:23: 1b:3e:a6:81:00:67:13:c6:ad:ea:44:57:66:59:2a:ea:fa:74: 62:39:48:cd:9b:ea:20:97:d8:9c:ef:05:c4:b7:b4:51:5e:94: 9d:8f:2d:2b:f4:51:09:f6:d4:33:56:5e:fb:6b:4e:03:83:db: 7c:8e:88:c4:60:6c:46:60:75:ba:11:6e:52:ee:b0:32:55:3b: 9b:6f:43:58:70:77:88:26:48:25:6d:79:f5:60:e0:7a:57:bd: 76:20:e5:9b -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZu9gh62xQZzB3nz1ttMxmsMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5 YjIzNjIwHhcNMjYwMTE0MTcxNjE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZDQ3YzE3M2Q0NjI2ZDk2ZDc5NmE3YmViNDM3ZTllYWUzYjdjOWI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvRHVBMp3jZVL8TtkfdOwjj3eGx3u FL5kU+FcOexZiNZsrkEjFHPBObhmeO0zbuPLHMIjo/8mRXft9q++mpfwxYWrQXHr 7Y0XgESOtitnYoz7HoBlXJGJ1sRgTGROg8kvmR5FiRiTK7i0D6gkKFeGiy3lWUvC Egngizy937YzEbufobcpu74osRINg8uH+FAPtmbKG2Z3s8Ra1i7RcO0xNaiwqmH9 qfkusnMm8olyLID2J9LKnaQwsQ2aDYErsmuQOt3FLRBGM5dYkk/dQYzJku7Lnm7b 1s5BiDY6MS907NDNt4oU2FW/MBQtjhzZeUHcimcuQzWTRTE0xUOL3vbWdwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFG1HwXPUYm2W15anvrQ36erjt8m2MB8GA1UdIwQY MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt ZTFiZDg4ZDNmZDA3LzEvYlVmQmM5UmliWmJYbHFlLXREZnA2dU8zeWJZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3 LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQABa/tAwQA TVopAwQATVo0MA0GCSqGSIb3DQEBCwUAA4IBAQCUl8x/w4+KTvZdP++q6Rli4SL4 fu117G3kE3XmkIAb6zs4drJSqHJ27FqC+C/XBdYEBPz+e9NbomXshI+fWrLlVTTH XLIL5BBhQ5DIzGMuVkXRMj0QGTsPFQ8QR5nmZ/uPIGXEN6rySLkq7IwMyVAWVyJF FcwFVL+lwAyWgybPlVnQ++DUBY6c2/fajkuYcDt2LY/H+ufQ2QxwFc9/RDO+vCMb PqaBAGcTxq3qRFdmWSrq+nRiOUjNm+ogl9ic7wXEt7RRXpSdjy0r9FEJ9tQzVl77 a04Dg9t8jojEYGxGYHW6EW5S7rAyVTubb0NYcHeIJkglbXn1YOB6V712IOWb -----END CERTIFICATE-----Generated at Sun Jan 18 12:03:54 2026 by rpki-client