This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/ed5c1e-2d5f-4222-bdc7-63b95240d745/1/bxelCDFcvnlj3q_RHWvXRa9LBvo.roa File: bxelCDFcvnlj3q_RHWvXRa9LBvo.roa (raw, json) Hash identifier: 3ikPYI75wofgR7u+U2mor2EPydTGzEdXUY4L1ZgdpHY= Subject key identifier: 6F:17:A5:08:31:5C:BE:79:63:DE:AF:D1:1D:6B:D7:45:AF:4B:06:FA Certificate issuer: /CN=d74ce9d9e18a2a8a06cb4d9b08b59cd76b221184 Certificate serial: 019B78351847FB719FE300DC0BBDFED0A9D9 Authority key identifier: D7:4C:E9:D9:E1:8A:2A:8A:06:CB:4D:9B:08:B5:9C:D7:6B:22:11:84 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10zp2eGKKooGy02bCLWc12siEYQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/ed5c1e-2d5f-4222-bdc7-63b95240d745/1/bxelCDFcvnlj3q_RHWvXRa9LBvo.roa Signing time: Thu 01 Jan 2026 06:18:24 +0000 ROA not before: Thu 01 Jan 2026 06:18:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25376 IP address blocks: 185.108.44.0/22 maxlen: 24 2a01:8560::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/ed5c1e-2d5f-4222-bdc7-63b95240d745/1/10zp2eGKKooGy02bCLWc12siEYQ.crl rsync://rpki.ripe.net/repository/DEFAULT/51/ed5c1e-2d5f-4222-bdc7-63b95240d745/1/10zp2eGKKooGy02bCLWc12siEYQ.mft rsync://rpki.ripe.net/repository/DEFAULT/10zp2eGKKooGy02bCLWc12siEYQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:18:47:fb:71:9f:e3:00:dc:0b:bd:fe:d0:a9:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d74ce9d9e18a2a8a06cb4d9b08b59cd76b221184 Validity Not Before: Jan 1 06:18:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6f17a508315cbe7963deafd11d6bd745af4b06fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:5a:e9:3e:7d:90:cf:32:ac:28:3d:e7:37:e7: 39:46:bf:c7:87:ab:95:73:ba:5d:ea:d2:be:62:d0: ad:46:56:e7:0f:19:d8:41:0e:b0:2a:90:65:bf:86: 19:ae:e3:98:59:45:6a:f7:ae:1d:c9:fc:5c:e9:6c: 5e:57:44:27:1d:5f:8b:a1:e9:51:e0:6d:d9:a9:ee: 25:8f:7d:97:6b:a5:d3:31:06:f2:f4:35:9f:d1:50: 67:62:1b:18:7c:d5:7f:34:2d:21:ca:2c:09:c8:39: 56:ea:37:e2:ad:76:ba:b6:b5:43:fb:be:7f:c3:9b: 32:bf:32:5f:81:3d:b6:a9:93:9a:08:2f:bc:1f:b9: 5f:db:91:f0:95:3d:87:e4:d6:18:79:35:16:66:74: 63:01:a4:5d:5b:d3:a8:e0:7d:41:95:90:1b:b0:8e: 5b:50:b2:0e:20:26:95:a8:12:7b:d0:b8:2f:09:1d: 4f:8d:f9:a7:37:3a:06:6e:c3:7c:b4:91:d4:28:87: 3f:39:df:27:8d:bf:9e:35:aa:92:8e:b1:12:71:78: 73:85:4d:1f:cc:db:d1:e6:15:70:79:dc:ea:36:be: f8:f2:fb:23:97:70:23:19:cf:80:ad:43:e1:d8:79: cb:e4:4c:16:56:d3:e2:0d:b0:7b:bd:4b:dd:e7:dd: c1:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:17:A5:08:31:5C:BE:79:63:DE:AF:D1:1D:6B:D7:45:AF:4B:06:FA X509v3 Authority Key Identifier: keyid:D7:4C:E9:D9:E1:8A:2A:8A:06:CB:4D:9B:08:B5:9C:D7:6B:22:11:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10zp2eGKKooGy02bCLWc12siEYQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/ed5c1e-2d5f-4222-bdc7-63b95240d745/1/bxelCDFcvnlj3q_RHWvXRa9LBvo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/ed5c1e-2d5f-4222-bdc7-63b95240d745/1/10zp2eGKKooGy02bCLWc12siEYQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.108.44.0/22 IPv6: 2a01:8560::/32 Signature Algorithm: sha256WithRSAEncryption 53:9b:ff:0c:a5:e7:a1:95:51:e0:27:2b:8b:86:df:e2:f8:b1: 24:0e:83:9f:e3:8f:6d:5d:7f:dd:50:57:1e:fa:a8:f4:8b:a3: 3e:e6:f0:17:dc:33:7a:bb:e5:9d:ec:8b:a8:bf:dc:32:11:50: 22:6a:34:9f:e7:66:8a:1d:6c:83:98:5a:7b:55:da:02:29:36: 76:63:4d:3e:fd:91:64:11:b8:76:59:ab:cc:ba:1d:41:ef:6f: 59:88:a5:1c:13:b1:b6:30:3a:d5:ed:eb:56:56:ed:8d:5a:85: ea:c8:de:3e:00:75:bc:1b:d8:20:e8:7e:58:3d:8d:78:9b:19: 76:a0:7b:0f:b9:f9:6f:48:97:aa:1d:dd:af:d1:b1:6b:be:d4: b2:24:8b:b0:34:01:a8:ac:e2:4b:93:1e:74:0b:01:9d:11:e0: cf:f7:c8:db:13:7e:f8:73:b8:46:c9:a0:19:1b:f1:bf:d3:18: e5:b1:b0:86:c6:62:0c:20:2b:24:00:ab:09:3c:66:1b:16:41: 96:da:45:04:88:75:87:d7:8e:2c:e2:6f:c9:3c:14:d9:69:89: 48:de:3e:23:d7:c7:ab:30:3c:ba:1f:37:b8:62:d6:2b:26:7f: 99:22:2b:eb:d4:6d:a9:54:10:d5:11:3e:0d:f0:af:b0:07:6f: d6:b1:0f:a5 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt4NRhH+3Gf4wDcC73+0KnZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3NGNlOWQ5ZTE4YTJhOGEwNmNiNGQ5YjA4YjU5Y2Q3NmIy MjExODQwHhcNMjYwMTAxMDYxODI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZjE3YTUwODMxNWNiZTc5NjNkZWFmZDExZDZiZDc0NWFmNGIwNmZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtVrpPn2QzzKsKD3nN+c5Rr/Hh6uV c7pd6tK+YtCtRlbnDxnYQQ6wKpBlv4YZruOYWUVq964dyfxc6WxeV0QnHV+LoelR 4G3Zqe4lj32Xa6XTMQby9DWf0VBnYhsYfNV/NC0hyiwJyDlW6jfirXa6trVD+75/ w5syvzJfgT22qZOaCC+8H7lf25HwlT2H5NYYeTUWZnRjAaRdW9Oo4H1BlZAbsI5b ULIOICaVqBJ70LgvCR1PjfmnNzoGbsN8tJHUKIc/Od8njb+eNaqSjrEScXhzhU0f zNvR5hVwedzqNr748vsjl3AjGc+ArUPh2HnL5EwWVtPiDbB7vUvd593B7QIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFG8XpQgxXL55Y96v0R1r10WvSwb6MB8GA1UdIwQY MBaAFNdM6dnhiiqKBstNmwi1nNdrIhGEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMTB6cDJlR0tLb29HeTAyYkNMV2MxMnNpRVlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS9lZDVjMWUtMmQ1Zi00MjIyLWJkYzct NjNiOTUyNDBkNzQ1LzEvYnhlbENERmN2bmxqM3FfUkhXdlhSYTlMQnZvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS9lZDVjMWUtMmQ1Zi00MjIyLWJkYzctNjNiOTUyNDBkNzQ1 LzEvMTB6cDJlR0tLb29HeTAyYkNMV2MxMnNpRVlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuWwsMA0E AgACMAcDBQAqAYVgMA0GCSqGSIb3DQEBCwUAA4IBAQBTm/8MpeehlVHgJyuLht/i +LEkDoOf449tXX/dUFce+qj0i6M+5vAX3DN6u+Wd7Iuov9wyEVAiajSf52aKHWyD mFp7VdoCKTZ2Y00+/ZFkEbh2WavMuh1B729ZiKUcE7G2MDrV7etWVu2NWoXqyN4+ AHW8G9gg6H5YPY14mxl2oHsPuflvSJeqHd2v0bFrvtSyJIuwNAGorOJLkx50CwGd EeDP98jbE374c7hGyaAZG/G/0xjlsbCGxmIMICskAKsJPGYbFkGW2kUEiHWH144s 4m/JPBTZaYlI3j4j18erMDy6Hze4YtYrJn+ZIivr1G2pVBDVET4N8K+wB2/WsQ+l -----END CERTIFICATE-----Generated at Tue Feb 10 00:13:24 2026 by rpki-client