This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/772fea-4715-4010-8c1e-dee66a35506c/1/bXOv_CUuxonwS19Bf5bYfNwVcEw.roa File: bXOv_CUuxonwS19Bf5bYfNwVcEw.roa (raw, json) Hash identifier: pgxwkEVra6Le7zeKVNiooLUsbulw8SiiT7aDE/ZBWEo= Subject key identifier: 6D:73:AF:FC:25:2E:C6:89:F0:4B:5F:41:7F:96:D8:7C:DC:15:70:4C Certificate issuer: /CN=29d950bc184557bf504cf2b7c94a7dcec0876d66 Certificate serial: 019B7F84344E2B154CD167455BB8C0904959 Authority key identifier: 29:D9:50:BC:18:45:57:BF:50:4C:F2:B7:C9:4A:7D:CE:C0:87:6D:66 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KdlQvBhFV79QTPK3yUp9zsCHbWY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/772fea-4715-4010-8c1e-dee66a35506c/1/bXOv_CUuxonwS19Bf5bYfNwVcEw.roa Signing time: Fri 02 Jan 2026 16:22:09 +0000 ROA not before: Fri 02 Jan 2026 16:22:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15907 IP address blocks: 185.114.188.0/22 maxlen: 22 2a06:7140::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/772fea-4715-4010-8c1e-dee66a35506c/1/KdlQvBhFV79QTPK3yUp9zsCHbWY.crl rsync://rpki.ripe.net/repository/DEFAULT/3b/772fea-4715-4010-8c1e-dee66a35506c/1/KdlQvBhFV79QTPK3yUp9zsCHbWY.mft rsync://rpki.ripe.net/repository/DEFAULT/KdlQvBhFV79QTPK3yUp9zsCHbWY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:34:4e:2b:15:4c:d1:67:45:5b:b8:c0:90:49:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29d950bc184557bf504cf2b7c94a7dcec0876d66 Validity Not Before: Jan 2 16:22:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6d73affc252ec689f04b5f417f96d87cdc15704c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:f2:b2:fb:94:e8:83:0c:9a:3d:41:77:82:91: 98:02:37:b4:4e:5c:42:d5:42:4c:56:4f:99:90:41: 40:27:6d:d6:e6:ad:e9:4d:de:be:e6:32:02:a9:90: 64:b0:af:85:c9:b2:5a:f6:60:4b:40:f8:f2:1e:bd: 27:0c:51:11:c3:57:b2:b6:c8:a6:88:46:d5:a2:24: c2:61:e3:58:83:5f:04:37:d5:52:ed:c4:e2:08:f8: 33:b9:13:d5:b0:94:38:d8:ac:c4:b9:cb:5d:72:42: 0a:36:39:2d:ac:cc:c1:20:d0:60:03:61:a6:34:30: f1:f4:56:28:3c:98:18:a0:e3:53:b9:e4:ed:9c:20: 3d:fc:4e:ac:ce:7d:bb:e1:b0:e1:fd:8d:6e:bb:5c: ff:3c:ad:70:ee:dc:b1:ac:5a:c9:6d:36:66:16:43: 07:92:17:35:d6:86:0b:f5:16:32:69:fa:f4:7e:57: 54:ed:fe:a8:35:0a:71:0e:a5:98:09:e3:4f:0b:62: c3:cd:9f:bf:df:d0:6c:b4:4f:d4:e2:a9:6b:c2:3f: 5e:9e:18:d5:ef:fa:b4:06:c8:75:e7:20:69:fa:56: ef:80:e2:60:0d:6d:c3:2f:fb:bd:b7:10:ac:d1:87: a6:cf:6c:6d:a6:13:5d:54:76:cb:92:28:6d:0e:79: 11:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:73:AF:FC:25:2E:C6:89:F0:4B:5F:41:7F:96:D8:7C:DC:15:70:4C X509v3 Authority Key Identifier: keyid:29:D9:50:BC:18:45:57:BF:50:4C:F2:B7:C9:4A:7D:CE:C0:87:6D:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdlQvBhFV79QTPK3yUp9zsCHbWY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/772fea-4715-4010-8c1e-dee66a35506c/1/bXOv_CUuxonwS19Bf5bYfNwVcEw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/772fea-4715-4010-8c1e-dee66a35506c/1/KdlQvBhFV79QTPK3yUp9zsCHbWY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.114.188.0/22 IPv6: 2a06:7140::/29 Signature Algorithm: sha256WithRSAEncryption 7e:0a:2d:71:a5:2f:c8:ef:1e:02:3a:06:e1:24:6f:d4:12:0c: 9e:a8:a4:ef:8e:60:b4:c9:af:fc:0c:e7:d4:4b:5a:3e:b8:5f: 74:98:35:9e:a7:43:e1:0c:19:27:38:0d:82:2c:05:d6:33:24: f0:0f:3d:ae:46:1a:38:a0:57:a7:7f:4c:34:d4:b6:b2:e9:4c: d1:ea:18:6f:f9:85:bc:54:72:73:24:9a:0a:3d:f7:e0:13:f1: b8:26:93:d2:b0:74:e0:b9:83:c0:d0:7f:24:4f:61:95:63:a2: 54:79:c7:8c:7f:fe:33:d8:0d:53:f1:f4:9b:7f:8a:aa:db:02: b6:be:6e:63:34:22:d5:88:f6:33:a8:5c:63:40:e2:c6:5c:d7: 04:22:6f:17:f4:cc:dc:e4:13:ae:94:6d:eb:14:16:96:78:87: 6c:d0:21:2d:7c:ac:c3:fa:04:db:a6:45:9c:aa:76:97:8d:e2: e4:2c:ba:b9:ff:2b:8f:fa:1b:dd:5a:b5:b7:f3:b7:a0:a0:67: 1d:14:15:68:8e:9a:ca:d8:36:31:da:5c:06:5c:f1:5a:d7:c5: 15:19:e0:7d:82:b0:ee:29:68:df:ee:3d:3c:93:8d:1b:63:ec: 47:bb:8b:31:bf:a8:d7:0c:52:e4:d2:75:cb:b9:b6:cf:d7:51: fd:72:7e:4d -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt/hDROKxVM0WdFW7jAkElZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5ZDk1MGJjMTg0NTU3YmY1MDRjZjJiN2M5NGE3ZGNlYzA4 NzZkNjYwHhcNMjYwMTAyMTYyMjA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZDczYWZmYzI1MmVjNjg5ZjA0YjVmNDE3Zjk2ZDg3Y2RjMTU3MDRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuPKy+5TogwyaPUF3gpGYAje0TlxC 1UJMVk+ZkEFAJ23W5q3pTd6+5jICqZBksK+FybJa9mBLQPjyHr0nDFERw1eytsim iEbVoiTCYeNYg18EN9VS7cTiCPgzuRPVsJQ42KzEuctdckIKNjktrMzBINBgA2Gm NDDx9FYoPJgYoONTueTtnCA9/E6szn274bDh/Y1uu1z/PK1w7tyxrFrJbTZmFkMH khc11oYL9RYyafr0fldU7f6oNQpxDqWYCeNPC2LDzZ+/39BstE/U4qlrwj9enhjV 7/q0Bsh15yBp+lbvgOJgDW3DL/u9txCs0Yemz2xtphNdVHbLkihtDnkRRQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFG1zr/wlLsaJ8EtfQX+W2HzcFXBMMB8GA1UdIwQY MBaAFCnZULwYRVe/UEzyt8lKfc7Ah21mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2RsUXZCaEZWNzlRVFBLM3lVcDl6c0NIYldZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi83NzJmZWEtNDcxNS00MDEwLThjMWUt ZGVlNjZhMzU1MDZjLzEvYlhPdl9DVXV4b253UzE5QmY1YllmTndWY0V3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYi83NzJmZWEtNDcxNS00MDEwLThjMWUtZGVlNjZhMzU1MDZj LzEvS2RsUXZCaEZWNzlRVFBLM3lVcDl6c0NIYldZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuXK8MA0E AgACMAcDBQMqBnFAMA0GCSqGSIb3DQEBCwUAA4IBAQB+Ci1xpS/I7x4COgbhJG/U EgyeqKTvjmC0ya/8DOfUS1o+uF90mDWep0PhDBknOA2CLAXWMyTwDz2uRho4oFen f0w01Lay6UzR6hhv+YW8VHJzJJoKPffgE/G4JpPSsHTguYPA0H8kT2GVY6JUeceM f/4z2A1T8fSbf4qq2wK2vm5jNCLViPYzqFxjQOLGXNcEIm8X9Mzc5BOulG3rFBaW eIds0CEtfKzD+gTbpkWcqnaXjeLkLLq5/yuP+hvdWrW387egoGcdFBVojprK2DYx 2lwGXPFa18UVGeB9grDuKWjf7j08k40bY+xHu4sxv6jXDFLk0nXLubbP11H9cn5N -----END CERTIFICATE-----Generated at Mon Feb 9 22:35:30 2026 by rpki-client