This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/8631f5-54a2-486f-b9a5-081a1ae6ebd6/1/bxb4jsQXnflWYRNxaHtGts6L3fo.roa File: bxb4jsQXnflWYRNxaHtGts6L3fo.roa (raw, json) Hash identifier: hSfRMw5uEppXFydIGGQoR0g6l6WPyrzH4kiqrfSt7O4= Subject key identifier: 6F:16:F8:8E:C4:17:9D:F9:56:61:13:71:68:7B:46:B6:CE:8B:DD:FA Certificate issuer: /CN=b6fbc63ef5614a7ef95a106188e3d78755c687b9 Certificate serial: 019B79EC217FD7B00A5A91D7C32BEB62609D Authority key identifier: B6:FB:C6:3E:F5:61:4A:7E:F9:5A:10:61:88:E3:D7:87:55:C6:87:B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tvvGPvVhSn75WhBhiOPXh1XGh7k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/8631f5-54a2-486f-b9a5-081a1ae6ebd6/1/bxb4jsQXnflWYRNxaHtGts6L3fo.roa Signing time: Thu 01 Jan 2026 14:17:56 +0000 ROA not before: Thu 01 Jan 2026 14:17:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204488 IP address blocks: 185.175.60.0/22 maxlen: 24 185.175.60.0/24 maxlen: 24 185.175.61.0/24 maxlen: 24 185.175.62.0/24 maxlen: 24 185.247.168.0/24 maxlen: 24 185.247.169.0/24 maxlen: 24 185.247.170.0/24 maxlen: 24 185.247.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/8631f5-54a2-486f-b9a5-081a1ae6ebd6/1/tvvGPvVhSn75WhBhiOPXh1XGh7k.crl rsync://rpki.ripe.net/repository/DEFAULT/39/8631f5-54a2-486f-b9a5-081a1ae6ebd6/1/tvvGPvVhSn75WhBhiOPXh1XGh7k.mft rsync://rpki.ripe.net/repository/DEFAULT/tvvGPvVhSn75WhBhiOPXh1XGh7k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:21:7f:d7:b0:0a:5a:91:d7:c3:2b:eb:62:60:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b6fbc63ef5614a7ef95a106188e3d78755c687b9 Validity Not Before: Jan 1 14:17:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6f16f88ec4179df956611371687b46b6ce8bddfa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:7e:91:79:60:01:9a:0f:6a:f7:da:51:60:1b: 8d:3c:e4:45:48:a2:e5:30:1d:ed:14:36:50:53:be: 36:9e:34:b6:42:57:c2:e5:64:4e:db:5b:fe:b9:f8: b2:fc:e4:b0:1d:91:ff:35:9a:e1:82:ee:ae:c5:13: e6:53:0e:d1:e6:e7:7b:35:06:51:d7:4f:e0:11:bb: 0c:3c:5f:61:c9:64:f5:97:30:02:92:3c:ce:c1:f8: 31:6b:db:be:0a:db:93:23:63:6b:e1:f4:b2:d9:ff: 28:a5:ff:ee:cd:70:a9:7a:3e:b2:3d:17:8f:8b:30: 3a:80:3c:b6:eb:a0:60:37:01:45:52:e1:3a:e4:06: 8e:19:0e:d0:7a:b6:c8:b8:b4:3c:36:a1:1e:b3:e6: a8:62:bd:2b:5a:f5:41:68:62:1b:e7:ed:ae:c0:f0: 8f:7f:0f:50:f2:80:1d:fd:24:43:d2:51:e8:b6:15: f8:fb:fe:bd:2c:c8:9d:ca:d4:77:25:b8:61:57:23: 9f:be:aa:19:fa:80:a3:b6:1b:23:fe:f6:67:35:26: 83:cb:91:38:66:2b:3f:05:88:79:13:9c:97:a1:cb: 80:76:6c:14:66:99:5e:16:c6:7a:de:36:f0:2e:56: d3:4b:ef:d7:93:12:ce:16:db:c1:33:4d:a7:06:f7: 5b:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:16:F8:8E:C4:17:9D:F9:56:61:13:71:68:7B:46:B6:CE:8B:DD:FA X509v3 Authority Key Identifier: keyid:B6:FB:C6:3E:F5:61:4A:7E:F9:5A:10:61:88:E3:D7:87:55:C6:87:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tvvGPvVhSn75WhBhiOPXh1XGh7k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/8631f5-54a2-486f-b9a5-081a1ae6ebd6/1/bxb4jsQXnflWYRNxaHtGts6L3fo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/8631f5-54a2-486f-b9a5-081a1ae6ebd6/1/tvvGPvVhSn75WhBhiOPXh1XGh7k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.175.60.0/22 185.247.168.0/22 Signature Algorithm: sha256WithRSAEncryption 1b:51:de:fc:2b:11:b1:7b:c7:32:a3:f3:55:20:56:54:84:c0: 3a:72:b5:4f:1c:d3:1b:cd:6d:54:89:a6:e0:9a:e3:c6:4f:c9: e1:32:bd:f4:dc:67:83:b4:82:4e:57:8d:79:50:76:1f:5d:92: eb:6f:eb:f7:4a:d2:cd:e3:f4:32:f7:eb:b0:11:cc:bf:64:e6: 37:7d:a8:be:74:85:f6:1e:96:5b:43:6e:91:d7:86:3d:a3:71: 14:1a:2b:be:fd:d5:c8:17:cd:ce:db:dc:6f:d7:0a:1a:ed:e1: 81:35:62:97:b2:34:ea:00:83:a0:0e:9a:14:48:b9:69:85:ea: 2a:20:3b:f6:cf:b5:37:ea:29:81:77:ce:e4:1f:db:3b:ef:bc: f1:00:f7:3a:2b:81:cc:56:8f:36:e3:60:6b:45:83:e8:c5:17: 62:80:30:b6:74:83:ed:7c:72:1b:0f:8a:ec:d1:95:d6:50:69: 18:16:f8:cb:87:6d:8d:f8:36:99:17:fa:2f:74:1e:62:63:23: 66:11:37:a7:09:39:e8:b8:94:57:02:23:f5:a8:83:0b:f1:18: 5a:2c:d4:06:d8:c9:13:58:10:0a:a5:12:ed:ac:f8:df:00:48: 26:36:46:65:05:01:4e:d9:e6:18:45:41:3b:64:5d:1c:94:db: 7e:40:19:ba -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt57CF/17AKWpHXwyvrYmCdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2ZmJjNjNlZjU2MTRhN2VmOTVhMTA2MTg4ZTNkNzg3NTVj Njg3YjkwHhcNMjYwMTAxMTQxNzU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZjE2Zjg4ZWM0MTc5ZGY5NTY2MTEzNzE2ODdiNDZiNmNlOGJkZGZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz36ReWABmg9q99pRYBuNPORFSKLl MB3tFDZQU742njS2QlfC5WRO21v+ufiy/OSwHZH/NZrhgu6uxRPmUw7R5ud7NQZR 10/gEbsMPF9hyWT1lzACkjzOwfgxa9u+CtuTI2Nr4fSy2f8opf/uzXCpej6yPReP izA6gDy266BgNwFFUuE65AaOGQ7QerbIuLQ8NqEes+aoYr0rWvVBaGIb5+2uwPCP fw9Q8oAd/SRD0lHothX4+/69LMidytR3JbhhVyOfvqoZ+oCjthsj/vZnNSaDy5E4 Zis/BYh5E5yXocuAdmwUZpleFsZ63jbwLlbTS+/XkxLOFtvBM02nBvdb1QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFG8W+I7EF535VmETcWh7RrbOi936MB8GA1UdIwQY MBaAFLb7xj71YUp++VoQYYjj14dVxoe5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdHZ2R1B2VmhTbjc1V2hCaGlPUFhoMVhHaDdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS84NjMxZjUtNTRhMi00ODZmLWI5YTUt MDgxYTFhZTZlYmQ2LzEvYnhiNGpzUVhuZmxXWVJOeGFIdEd0czZMM2ZvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS84NjMxZjUtNTRhMi00ODZmLWI5YTUtMDgxYTFhZTZlYmQ2 LzEvdHZ2R1B2VmhTbjc1V2hCaGlPUFhoMVhHaDdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCua88AwQC ufeoMA0GCSqGSIb3DQEBCwUAA4IBAQAbUd78KxGxe8cyo/NVIFZUhMA6crVPHNMb zW1UiabgmuPGT8nhMr303GeDtIJOV415UHYfXZLrb+v3StLN4/Qy9+uwEcy/ZOY3 fai+dIX2HpZbQ26R14Y9o3EUGiu+/dXIF83O29xv1woa7eGBNWKXsjTqAIOgDpoU SLlpheoqIDv2z7U36imBd87kH9s777zxAPc6K4HMVo8242BrRYPoxRdigDC2dIPt fHIbD4rs0ZXWUGkYFvjLh22N+DaZF/ovdB5iYyNmETenCTnouJRXAiP1qIML8Rha LNQG2MkTWBAKpRLtrPjfAEgmNkZlBQFO2eYYRUE7ZF0clNt+QBm6 -----END CERTIFICATE-----Generated at Mon Feb 9 22:31:51 2026 by rpki-client