This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/bUBxT-Mpq1td4KZd0xVHvaWcgHc.roa File: bUBxT-Mpq1td4KZd0xVHvaWcgHc.roa (raw, json) Hash identifier: xvgbJ0cuK76ZIwxVi2TNXJ/kcw02zPxNLkM3VvTM+VY= Subject key identifier: 6D:40:71:4F:E3:29:AB:5B:5D:E0:A6:5D:D3:15:47:BD:A5:9C:80:77 Certificate issuer: /CN=885b857706dac54e20ca0d11bd6416cb634203b4 Certificate serial: 019BD1E631F615604149F0E5676AB0BCD600 Authority key identifier: 88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/bUBxT-Mpq1td4KZd0xVHvaWcgHc.roa Signing time: Sun 18 Jan 2026 16:18:02 +0000 ROA not before: Sun 18 Jan 2026 16:18:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51248 IP address blocks: 46.8.113.0/24 maxlen: 24 188.130.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.mft rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:d1:e6:31:f6:15:60:41:49:f0:e5:67:6a:b0:bc:d6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=885b857706dac54e20ca0d11bd6416cb634203b4 Validity Not Before: Jan 18 16:18:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6d40714fe329ab5b5de0a65dd31547bda59c8077 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ee:ef:5b:f8:87:6a:4f:50:82:38:cd:b1:b3: 41:9d:20:7d:a9:57:e4:2c:90:48:63:7f:9d:ad:51: 53:4c:43:2c:88:69:5d:2e:d4:15:e5:af:ec:99:72: d2:0d:af:11:7e:87:e4:2d:4f:d1:7d:e3:b3:e2:09: f4:0b:72:e1:06:4c:6b:4c:b4:fc:00:79:ab:d0:c1: aa:8d:50:9f:00:94:b2:69:5c:57:50:ff:c2:26:97: e8:13:47:e2:b6:e8:ea:df:23:2e:7a:aa:66:23:9c: aa:12:8d:0b:4b:b8:a2:24:72:e2:f3:df:4a:a4:51: 32:81:4d:ea:51:ac:bc:01:5b:a4:a3:1e:3e:2d:49: 80:82:dc:b8:ee:1d:e3:19:ab:42:16:ae:b3:14:ae: 52:70:c6:fc:9e:f8:e4:87:55:ec:1d:98:60:25:9a: 14:e4:76:3b:4b:1f:14:12:26:f3:80:e7:67:bc:1f: d0:a7:09:20:05:7e:a9:f3:60:0d:30:28:23:8c:1c: 09:1a:97:62:d5:25:18:d0:74:d1:27:6f:35:45:1d: 4a:b7:ef:db:83:ab:02:98:8b:ef:8c:ff:8a:44:f2: cf:7d:06:13:7e:24:d6:41:6f:4c:50:c3:dd:2f:1a: f2:63:e1:44:fc:d4:00:cc:83:ff:33:c6:f4:c0:6e: 4c:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:40:71:4F:E3:29:AB:5B:5D:E0:A6:5D:D3:15:47:BD:A5:9C:80:77 X509v3 Authority Key Identifier: keyid:88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/bUBxT-Mpq1td4KZd0xVHvaWcgHc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.8.113.0/24 188.130.208.0/24 Signature Algorithm: sha256WithRSAEncryption b6:36:cc:51:6f:5f:47:53:79:1e:87:09:a9:bd:67:a1:6d:c4: 03:e3:32:d1:67:84:b7:8d:fa:fc:a4:ee:0f:e5:8b:74:6e:7f: 59:65:88:c3:b4:48:5a:6b:fa:38:bf:36:99:66:6b:b7:91:b7: 9a:f2:83:0f:9a:70:6b:c4:c4:fa:30:cd:ce:ed:a5:6d:fc:df: c2:e2:b3:04:ae:61:b3:43:45:ee:0a:9d:18:a7:4d:ff:24:f5: 8b:2e:21:7e:65:1c:33:dd:3d:c8:cf:ac:75:f1:21:00:73:ee: f9:45:05:e1:64:f2:e7:c9:e2:98:7a:68:09:bd:ad:11:0b:6e: 4e:c1:5d:88:e9:9b:7b:5a:80:86:2d:1f:70:83:0f:c0:cd:38: 3d:b7:38:48:be:99:ce:04:28:c4:5f:79:03:88:9a:39:16:50: 3a:29:25:cf:70:f4:66:ab:3f:3d:26:c4:b8:b4:4c:eb:48:a2: 2b:82:16:83:3d:77:4c:38:2e:a3:b6:9c:d7:e4:cd:47:59:55: 68:33:85:1a:1d:d1:6d:6d:98:9e:c3:87:05:8e:e9:4a:eb:39: 67:e8:65:c4:3e:bb:c5:c7:7f:13:89:ae:67:69:8d:3e:8f:9a: 4a:b5:70:e8:3a:2c:73:db:4a:4d:a6:81:45:10:e3:09:8b:4d: 90:63:05:d7 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZvR5jH2FWBBSfDlZ2qwvNYAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4NWI4NTc3MDZkYWM1NGUyMGNhMGQxMWJkNjQxNmNiNjM0 MjAzYjQwHhcNMjYwMTE4MTYxODAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZDQwNzE0ZmUzMjlhYjViNWRlMGE2NWRkMzE1NDdiZGE1OWM4MDc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv+7vW/iHak9QgjjNsbNBnSB9qVfk LJBIY3+drVFTTEMsiGldLtQV5a/smXLSDa8RfofkLU/RfeOz4gn0C3LhBkxrTLT8 AHmr0MGqjVCfAJSyaVxXUP/CJpfoE0fitujq3yMueqpmI5yqEo0LS7iiJHLi899K pFEygU3qUay8AVukox4+LUmAgty47h3jGatCFq6zFK5ScMb8nvjkh1XsHZhgJZoU 5HY7Sx8UEibzgOdnvB/QpwkgBX6p82ANMCgjjBwJGpdi1SUY0HTRJ281RR1Kt+/b g6sCmIvvjP+KRPLPfQYTfiTWQW9MUMPdLxryY+FE/NQAzIP/M8b0wG5MtQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFG1AcU/jKatbXeCmXdMVR72lnIB3MB8GA1UdIwQY MBaAFIhbhXcG2sVOIMoNEb1kFstjQgO0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUZ1RmR3YmF4VTRneWcwUnZXUVd5Mk5DQTdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8zMjFjZGMtMjE0My00YjVjLTk3MzMt MTY2OTljOTZkZDVlLzEvYlVCeFQtTXBxMXRkNEtaZDB4Vkh2YVdjZ0hjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS8zMjFjZGMtMjE0My00YjVjLTk3MzMtMTY2OTljOTZkZDVl LzEvaUZ1RmR3YmF4VTRneWcwUnZXUVd5Mk5DQTdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALghxAwQA vILQMA0GCSqGSIb3DQEBCwUAA4IBAQC2NsxRb19HU3kehwmpvWehbcQD4zLRZ4S3 jfr8pO4P5Yt0bn9ZZYjDtEhaa/o4vzaZZmu3kbea8oMPmnBrxMT6MM3O7aVt/N/C 4rMErmGzQ0XuCp0Yp03/JPWLLiF+ZRwz3T3Iz6x18SEAc+75RQXhZPLnyeKYemgJ va0RC25OwV2I6Zt7WoCGLR9wgw/AzTg9tzhIvpnOBCjEX3kDiJo5FlA6KSXPcPRm qz89JsS4tEzrSKIrghaDPXdMOC6jtpzX5M1HWVVoM4UaHdFtbZiew4cFjulK6zln 6GXEPrvFx38Tia5naY0+j5pKtXDoOixz20pNpoFFEOMJi02QYwXX -----END CERTIFICATE-----Generated at Sun Jan 25 22:41:42 2026 by rpki-client