This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/bxNBlAIvzk_SF6ousanXCbANVpw.roa File: bxNBlAIvzk_SF6ousanXCbANVpw.roa (raw, json) Hash identifier: sT0TW9MJeQmOwJN59HN/7UMdZQOgq90ndExP5oEy1to= Subject key identifier: 6F:13:41:94:02:2F:CE:4F:D2:17:AA:2E:B1:A9:D7:09:B0:0D:56:9C Certificate issuer: /CN=0f17bf2498f3682d7183e47f75b28af41c2815b9 Certificate serial: 019B77C6F1B79A6133B7F4847C0DD279EEFB Authority key identifier: 0F:17:BF:24:98:F3:68:2D:71:83:E4:7F:75:B2:8A:F4:1C:28:15:B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/bxNBlAIvzk_SF6ousanXCbANVpw.roa Signing time: Thu 01 Jan 2026 04:18:05 +0000 ROA not before: Thu 01 Jan 2026 04:18:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3258 IP address blocks: 45.142.166.0/24 maxlen: 24 45.142.167.0/24 maxlen: 24 192.109.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.crl rsync://rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.mft rsync://rpki.ripe.net/repository/DEFAULT/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 21:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:f1:b7:9a:61:33:b7:f4:84:7c:0d:d2:79:ee:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f17bf2498f3682d7183e47f75b28af41c2815b9 Validity Not Before: Jan 1 04:18:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6f134194022fce4fd217aa2eb1a9d709b00d569c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:fe:8b:8b:19:c3:f3:41:f8:b6:eb:89:f3:34: d6:15:e6:da:51:a1:4e:a4:25:8a:6f:aa:d1:ee:76: 27:9b:ea:80:fb:bc:f4:6b:c2:bb:05:96:b4:8e:44: 11:e2:5b:43:d9:0f:02:91:20:b9:58:3b:11:ca:00: 19:e8:96:11:11:aa:0b:d1:45:7e:47:14:4b:ff:7c: 57:1c:3b:88:63:ab:a7:9b:31:29:46:ae:2c:51:43: 46:eb:6f:60:f1:a5:b2:00:a0:65:e9:aa:9a:bf:3b: 99:d3:ff:dc:0b:db:c5:99:d0:a6:80:51:45:b9:5e: 44:f7:6c:8b:d7:9b:a2:86:49:47:aa:30:56:0e:9c: db:dc:7c:9f:d1:21:41:a6:5e:5d:e2:ef:e7:71:54: 6c:f1:af:65:18:bb:d7:74:5e:89:76:1d:c5:b1:5c: 02:48:f3:80:74:52:b1:c7:f7:a2:38:60:13:ed:e5: 15:94:c0:70:87:d5:9b:2e:57:af:0b:f0:0b:43:15: 69:5b:13:12:1b:9e:92:07:89:05:dd:12:c5:8e:f1: 9d:19:8f:89:d6:35:d5:9f:2e:66:24:5a:29:f3:6f: 39:98:4a:06:84:47:af:0e:50:08:98:b0:0b:1c:e2: 80:06:aa:d9:e4:8a:e8:cd:cc:72:e3:b3:a1:83:c9: af:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:13:41:94:02:2F:CE:4F:D2:17:AA:2E:B1:A9:D7:09:B0:0D:56:9C X509v3 Authority Key Identifier: keyid:0F:17:BF:24:98:F3:68:2D:71:83:E4:7F:75:B2:8A:F4:1C:28:15:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/bxNBlAIvzk_SF6ousanXCbANVpw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.142.166.0/23 192.109.233.0/24 Signature Algorithm: sha256WithRSAEncryption 7d:f1:c4:71:ff:a8:c5:a3:3c:25:4d:bb:16:c5:fb:c0:e2:d1: c4:02:92:cb:63:40:2f:50:78:6c:cb:e5:42:f0:f3:7e:4d:39: 86:20:b1:51:5f:7d:5d:ab:cc:fa:9c:39:4d:27:ae:74:da:e7: c3:b2:b4:9a:3d:93:7c:a8:7e:f2:ea:33:fe:b3:c8:2a:b2:98: d7:60:47:1d:53:ec:dd:5c:d0:15:f0:30:6b:cd:0b:dc:fe:dd: 8d:88:a4:2e:83:f5:b8:b2:45:7c:80:25:4b:4b:57:42:cd:14: 37:5e:aa:25:f5:0b:1c:8e:fc:c7:45:75:f8:f1:38:1e:ad:a3: 34:4d:bd:28:84:bd:c3:1f:ac:50:6b:f4:37:b2:4e:2e:e9:cc: 1e:0a:ef:af:2c:2f:49:57:6b:86:54:9c:1c:f6:2a:f8:b0:ce: 7d:aa:ff:ff:0e:d5:9e:71:31:01:6f:96:e4:53:e2:f3:64:0a: be:d6:dd:76:a3:f8:ca:f7:84:56:d2:a4:49:d8:86:44:29:b6: 47:99:83:98:6c:7d:f1:e2:30:5d:b8:42:a1:13:86:e3:7f:dc: 6a:02:ea:d9:b0:53:b1:0a:7f:2f:cc:de:ec:79:a0:48:b9:ef: b3:de:24:47:12:ab:55:63:5d:c4:cb:ff:26:de:50:72:ea:bb: 93:aa:cd:cb -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt3xvG3mmEzt/SEfA3See77MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmMTdiZjI0OThmMzY4MmQ3MTgzZTQ3Zjc1YjI4YWY0MWMy ODE1YjkwHhcNMjYwMTAxMDQxODA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZjEzNDE5NDAyMmZjZTRmZDIxN2FhMmViMWE5ZDcwOWIwMGQ1NjljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgv6LixnD80H4tuuJ8zTWFebaUaFO pCWKb6rR7nYnm+qA+7z0a8K7BZa0jkQR4ltD2Q8CkSC5WDsRygAZ6JYREaoL0UV+ RxRL/3xXHDuIY6unmzEpRq4sUUNG629g8aWyAKBl6aqavzuZ0//cC9vFmdCmgFFF uV5E92yL15uihklHqjBWDpzb3Hyf0SFBpl5d4u/ncVRs8a9lGLvXdF6Jdh3FsVwC SPOAdFKxx/eiOGAT7eUVlMBwh9WbLlevC/ALQxVpWxMSG56SB4kF3RLFjvGdGY+J 1jXVny5mJFop8285mEoGhEevDlAImLALHOKABqrZ5Irozcxy47Ohg8mvewIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFG8TQZQCL85P0heqLrGp1wmwDVacMB8GA1UdIwQY MBaAFA8XvySY82gtcYPkf3WyivQcKBW5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRHhlX0pKanphQzF4Zy1SX2RiS0s5QndvRmJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC83YmU2MTQtMWU2ZS00YjQwLWI2ZGMt YTQ5Y2JiODRmOTgyLzEvYnhOQmxBSXZ6a19TRjZvdXNhblhDYkFOVnB3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC83YmU2MTQtMWU2ZS00YjQwLWI2ZGMtYTQ5Y2JiODRmOTgy LzEvRHhlX0pKanphQzF4Zy1SX2RiS0s5QndvRmJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBLY6mAwQA wG3pMA0GCSqGSIb3DQEBCwUAA4IBAQB98cRx/6jFozwlTbsWxfvA4tHEApLLY0Av UHhsy+VC8PN+TTmGILFRX31dq8z6nDlNJ6502ufDsrSaPZN8qH7y6jP+s8gqspjX YEcdU+zdXNAV8DBrzQvc/t2NiKQug/W4skV8gCVLS1dCzRQ3Xqol9QscjvzHRXX4 8TgeraM0Tb0ohL3DH6xQa/Q3sk4u6cweCu+vLC9JV2uGVJwc9ir4sM59qv//DtWe cTEBb5bkU+LzZAq+1t12o/jK94RW0qRJ2IZEKbZHmYOYbH3x4jBduEKhE4bjf9xq AurZsFOxCn8vzN7seaBIue+z3iRHEqtVY13Ey/8m3lBy6ruTqs3L -----END CERTIFICATE-----Generated at Sun Jan 18 06:33:46 2026 by rpki-client