This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/b544d5-fefa-4240-bf40-68ef24cf5ef9/1/BsUK6q4arJHbcNcyqOOvwteXiS0.roa File: BsUK6q4arJHbcNcyqOOvwteXiS0.roa (raw, json) Hash identifier: mH5FcSTjVNeSVMSPqpSkXYdFczl7hZ5yzWhcRGubmnk= Subject key identifier: 06:C5:0A:EA:AE:1A:AC:91:DB:70:D7:32:A8:E3:AF:C2:D7:97:89:2D Certificate issuer: /CN=8685e05d80592c6cf11320eb5029cac04a4d9bb4 Certificate serial: 019B76EB96784E327CD7C2DC1985CF003EB3 Authority key identifier: 86:85:E0:5D:80:59:2C:6C:F1:13:20:EB:50:29:CA:C0:4A:4D:9B:B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hoXgXYBZLGzxEyDrUCnKwEpNm7Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/b544d5-fefa-4240-bf40-68ef24cf5ef9/1/BsUK6q4arJHbcNcyqOOvwteXiS0.roa Signing time: Thu 01 Jan 2026 00:18:29 +0000 ROA not before: Thu 01 Jan 2026 00:18:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211007 IP address blocks: 185.207.244.0/22 maxlen: 24 212.6.40.0/24 maxlen: 24 2a10:1f40::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/b544d5-fefa-4240-bf40-68ef24cf5ef9/1/hoXgXYBZLGzxEyDrUCnKwEpNm7Q.crl rsync://rpki.ripe.net/repository/DEFAULT/49/b544d5-fefa-4240-bf40-68ef24cf5ef9/1/hoXgXYBZLGzxEyDrUCnKwEpNm7Q.mft rsync://rpki.ripe.net/repository/DEFAULT/hoXgXYBZLGzxEyDrUCnKwEpNm7Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:00:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:96:78:4e:32:7c:d7:c2:dc:19:85:cf:00:3e:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8685e05d80592c6cf11320eb5029cac04a4d9bb4 Validity Not Before: Jan 1 00:18:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=06c50aeaae1aac91db70d732a8e3afc2d797892d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:2d:ee:e2:a7:fe:f4:24:25:37:e9:34:10:1c: 19:08:4d:f9:8f:ca:9d:5b:21:6f:09:36:11:e4:0e: f4:41:2c:d9:22:5c:54:9c:b2:50:6f:b6:56:f8:2b: 1d:3d:96:3f:71:f4:48:7c:25:d8:05:4c:bd:db:57: 8f:40:19:cc:c4:98:c5:8b:43:bc:d9:59:91:ca:6f: 7f:06:15:23:b5:ae:3d:1b:28:05:4b:a7:88:fe:dc: a1:2b:f9:fe:b0:58:c4:62:94:76:30:b9:bf:0c:c2: 73:53:0b:42:fc:2b:74:e7:bf:75:02:de:85:98:78: ee:e8:26:cb:6d:bf:49:1d:ad:1c:04:72:c4:ff:80: 79:11:c6:ea:3c:04:49:3f:77:df:28:4b:6a:c3:42: bd:79:7c:43:0b:3b:f3:bc:af:e6:26:bf:b3:e2:f3: 9c:1f:1c:ec:33:8e:a4:dd:07:27:55:6b:43:dd:8a: 00:78:97:08:f4:70:ba:1d:21:71:3f:ae:d4:ec:36: 0a:56:7c:25:47:65:f8:51:f8:a6:14:b9:04:65:d8: 84:f9:13:6d:e3:71:97:c8:6a:61:db:4a:3e:bf:95: fd:bc:ce:75:01:d3:e3:48:38:2d:aa:d4:b4:a8:c1: 77:7e:9b:26:cf:74:69:36:26:7a:e8:0e:81:9e:00: d8:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:C5:0A:EA:AE:1A:AC:91:DB:70:D7:32:A8:E3:AF:C2:D7:97:89:2D X509v3 Authority Key Identifier: keyid:86:85:E0:5D:80:59:2C:6C:F1:13:20:EB:50:29:CA:C0:4A:4D:9B:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hoXgXYBZLGzxEyDrUCnKwEpNm7Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/b544d5-fefa-4240-bf40-68ef24cf5ef9/1/BsUK6q4arJHbcNcyqOOvwteXiS0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/49/b544d5-fefa-4240-bf40-68ef24cf5ef9/1/hoXgXYBZLGzxEyDrUCnKwEpNm7Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.207.244.0/22 212.6.40.0/24 IPv6: 2a10:1f40::/29 Signature Algorithm: sha256WithRSAEncryption 1b:7a:4f:51:e1:b0:cd:ef:88:63:1f:10:fb:39:91:9e:8a:d0: 0f:b9:cd:25:18:d6:52:a1:8e:c7:28:96:b1:ac:81:98:da:ab: 55:32:d7:cb:7b:e8:49:06:01:e9:59:7d:ce:7c:76:09:20:92: b9:55:cb:a5:50:fa:65:a5:a1:38:6d:77:5a:6e:88:69:2c:b3: ac:f0:31:b7:32:06:28:8b:bb:c8:a2:d6:5a:4b:51:71:00:18: 02:c3:bb:e7:24:8f:53:db:7d:96:58:98:37:9a:c5:69:d0:20: b7:7b:30:2c:f4:e8:48:f4:37:4f:31:5c:40:2d:2b:20:ee:71: a4:07:23:dd:08:c9:c4:8a:c4:c4:da:4e:2c:c4:35:3f:b0:57: c2:06:e1:8b:2e:d5:65:d7:7b:61:19:1c:b1:b4:b8:e0:df:b1: 99:0b:85:4b:33:d0:93:d5:b9:ed:b4:82:01:b7:06:87:d7:69: fb:cc:67:21:5d:7c:7e:16:d0:1d:96:90:bd:48:e8:49:61:1a: 9b:df:58:2f:64:1e:b8:de:e5:32:15:40:6b:b7:7e:53:0c:1c: 2e:0a:37:a5:cc:51:f4:1c:a5:3c:18:35:f0:52:ab:21:5c:83: 64:2a:7e:53:29:ef:cf:78:db:a7:cb:6d:ce:b2:11:dd:6f:f2: dc:5e:48:7d -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt265Z4TjJ818LcGYXPAD6zMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2ODVlMDVkODA1OTJjNmNmMTEzMjBlYjUwMjljYWMwNGE0 ZDliYjQwHhcNMjYwMTAxMDAxODI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNmM1MGFlYWFlMWFhYzkxZGI3MGQ3MzJhOGUzYWZjMmQ3OTc4OTJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwi3u4qf+9CQlN+k0EBwZCE35j8qd WyFvCTYR5A70QSzZIlxUnLJQb7ZW+CsdPZY/cfRIfCXYBUy921ePQBnMxJjFi0O8 2VmRym9/BhUjta49GygFS6eI/tyhK/n+sFjEYpR2MLm/DMJzUwtC/Ct05791At6F mHju6CbLbb9JHa0cBHLE/4B5EcbqPARJP3ffKEtqw0K9eXxDCzvzvK/mJr+z4vOc HxzsM46k3QcnVWtD3YoAeJcI9HC6HSFxP67U7DYKVnwlR2X4UfimFLkEZdiE+RNt 43GXyGph20o+v5X9vM51AdPjSDgtqtS0qMF3fpsmz3RpNiZ66A6BngDYiQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFAbFCuquGqyR23DXMqjjr8LXl4ktMB8GA1UdIwQY MBaAFIaF4F2AWSxs8RMg61ApysBKTZu0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaG9YZ1hZQlpMR3p4RXlEclVDbkt3RXBObTdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS9iNTQ0ZDUtZmVmYS00MjQwLWJmNDAt NjhlZjI0Y2Y1ZWY5LzEvQnNVSzZxNGFySkhiY05jeXFPT3Z3dGVYaVMwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OS9iNTQ0ZDUtZmVmYS00MjQwLWJmNDAtNjhlZjI0Y2Y1ZWY5 LzEvaG9YZ1hZQlpMR3p4RXlEclVDbkt3RXBObTdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCuc/0AwQA 1AYoMA0EAgACMAcDBQMqEB9AMA0GCSqGSIb3DQEBCwUAA4IBAQAbek9R4bDN74hj HxD7OZGeitAPuc0lGNZSoY7HKJaxrIGY2qtVMtfLe+hJBgHpWX3OfHYJIJK5Vcul UPplpaE4bXdabohpLLOs8DG3MgYoi7vIotZaS1FxABgCw7vnJI9T232WWJg3msVp 0CC3ezAs9OhI9DdPMVxALSsg7nGkByPdCMnEisTE2k4sxDU/sFfCBuGLLtVl13th GRyxtLjg37GZC4VLM9CT1bnttIIBtwaH12n7zGchXXx+FtAdlpC9SOhJYRqb31gv ZB643uUyFUBrt35TDBwuCjelzFH0HKU8GDXwUqshXINkKn5TKe/PeNuny23OshHd b/LcXkh9 -----END CERTIFICATE-----Generated at Mon Feb 9 18:44:36 2026 by rpki-client