This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/1b35c5-7ac6-4253-86ea-7744ef3c0b99/1/BU53BjTSRZfkrJudCLpcUCdSrRY.roa File: BU53BjTSRZfkrJudCLpcUCdSrRY.roa (raw, json) Hash identifier: T6U3AiyLiPFKo2ciL2yLgXG936+t2tdrzVieAM/VsqM= Subject key identifier: 05:4E:77:06:34:D2:45:97:E4:AC:9B:9D:08:BA:5C:50:27:52:AD:16 Certificate issuer: /CN=7e4b54dfd41610774fe7f242d7dd3873a658473b Certificate serial: 019B7F15EC84176A7EDB945C4845DD1B601C Authority key identifier: 7E:4B:54:DF:D4:16:10:77:4F:E7:F2:42:D7:DD:38:73:A6:58:47:3B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fktU39QWEHdP5_JC1904c6ZYRzs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/1b35c5-7ac6-4253-86ea-7744ef3c0b99/1/BU53BjTSRZfkrJudCLpcUCdSrRY.roa Signing time: Fri 02 Jan 2026 14:21:41 +0000 ROA not before: Fri 02 Jan 2026 14:21:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41232 IP address blocks: 185.207.140.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/1b35c5-7ac6-4253-86ea-7744ef3c0b99/1/fktU39QWEHdP5_JC1904c6ZYRzs.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/1b35c5-7ac6-4253-86ea-7744ef3c0b99/1/fktU39QWEHdP5_JC1904c6ZYRzs.mft rsync://rpki.ripe.net/repository/DEFAULT/fktU39QWEHdP5_JC1904c6ZYRzs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:ec:84:17:6a:7e:db:94:5c:48:45:dd:1b:60:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e4b54dfd41610774fe7f242d7dd3873a658473b Validity Not Before: Jan 2 14:21:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=054e770634d24597e4ac9b9d08ba5c502752ad16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:28:66:8a:ac:67:09:bc:a6:a2:53:5d:e1:ae: 31:53:8c:f6:32:45:e6:b4:63:cc:ab:29:13:db:cd: 36:6a:e6:e2:b7:df:27:54:0e:9a:fd:cc:b4:c4:13: b9:fb:b9:5c:27:b0:1d:c1:10:a0:bc:79:cc:cc:1a: 72:30:5d:fb:cf:8a:d2:76:2f:d7:20:3f:d9:b5:e6: c3:2f:9f:62:0e:4c:9d:ce:eb:18:96:2d:1a:0a:13: d8:f7:11:19:06:00:38:f0:7b:15:45:4c:5e:65:de: e1:c8:01:f1:4e:56:07:de:4e:ae:16:6b:ca:da:cd: 11:dc:f2:43:38:b5:d3:23:f3:7e:b2:6d:aa:b7:d9: 5c:67:8b:27:c9:6f:a8:86:62:8f:0a:d2:13:96:80: 2f:85:c7:51:d0:53:4f:56:2b:8f:88:a1:2a:a4:61: 9e:47:e4:9b:56:74:ad:77:0c:a0:3e:30:55:27:84: ff:1c:ad:21:2b:53:59:7c:16:77:46:05:a4:91:9c: dd:e0:46:71:fc:a8:5b:e9:15:46:40:ea:a0:a1:86: 69:ec:d5:c6:f9:57:62:4d:52:2b:d0:91:42:3a:71: 29:61:d4:6b:76:42:71:f4:4f:cf:a4:ed:68:55:21: e2:cd:bd:1b:4f:20:80:92:8e:4f:11:c0:86:56:ad: 6b:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:4E:77:06:34:D2:45:97:E4:AC:9B:9D:08:BA:5C:50:27:52:AD:16 X509v3 Authority Key Identifier: keyid:7E:4B:54:DF:D4:16:10:77:4F:E7:F2:42:D7:DD:38:73:A6:58:47:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fktU39QWEHdP5_JC1904c6ZYRzs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/1b35c5-7ac6-4253-86ea-7744ef3c0b99/1/BU53BjTSRZfkrJudCLpcUCdSrRY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/1b35c5-7ac6-4253-86ea-7744ef3c0b99/1/fktU39QWEHdP5_JC1904c6ZYRzs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.207.140.0/22 Signature Algorithm: sha256WithRSAEncryption 44:be:56:3c:58:51:01:e1:58:cf:c0:66:eb:a8:56:01:06:57: 7b:5e:0c:96:57:33:b3:6b:79:96:19:13:a5:27:88:2a:fd:8c: ce:6f:10:79:a3:41:63:6a:4d:a3:fc:ee:0d:5b:e5:80:e9:6d: 74:aa:e8:eb:be:be:ff:75:e0:31:47:7e:14:36:4d:3a:81:ca: cb:11:71:61:cf:57:43:52:50:fb:6d:b7:36:38:8b:91:43:0c: b6:25:c7:d5:98:a8:46:db:e5:b3:69:7b:fb:94:66:95:03:be: 7f:73:c5:4d:a5:18:d5:a3:dd:3a:95:14:d8:4c:12:0a:7b:e2: 28:c1:90:cb:29:fd:a4:49:64:7b:e9:16:b5:52:26:b9:c7:3a: e0:44:07:bf:51:b3:38:21:60:3c:96:bd:90:ca:e3:e7:3c:9c: ad:89:bd:16:99:fa:de:e2:1e:83:9f:ef:f8:c8:76:0d:5d:26: 34:7b:0e:44:26:79:1e:51:ff:05:ef:af:3e:4b:49:d7:68:00: bc:0d:32:9f:02:55:4b:8a:2b:4e:86:cb:53:64:ac:ae:bb:e0: df:84:b8:0c:0a:a6:9f:e7:20:66:03:f7:2c:4c:95:32:4a:68: 43:1a:81:7d:62:bc:27:0c:45:81:05:c7:dd:f2:ca:59:89:09: 1f:27:03:5e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FeyEF2p+25RcSEXdG2AcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlNGI1NGRmZDQxNjEwNzc0ZmU3ZjI0MmQ3ZGQzODczYTY1 ODQ3M2IwHhcNMjYwMTAyMTQyMTQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNTRlNzcwNjM0ZDI0NTk3ZTRhYzliOWQwOGJhNWM1MDI3NTJhZDE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApChmiqxnCbymolNd4a4xU4z2MkXm tGPMqykT2802aubit98nVA6a/cy0xBO5+7lcJ7AdwRCgvHnMzBpyMF37z4rSdi/X ID/ZtebDL59iDkydzusYli0aChPY9xEZBgA48HsVRUxeZd7hyAHxTlYH3k6uFmvK 2s0R3PJDOLXTI/N+sm2qt9lcZ4snyW+ohmKPCtITloAvhcdR0FNPViuPiKEqpGGe R+SbVnStdwygPjBVJ4T/HK0hK1NZfBZ3RgWkkZzd4EZx/Khb6RVGQOqgoYZp7NXG +VdiTVIr0JFCOnEpYdRrdkJx9E/PpO1oVSHizb0bTyCAko5PEcCGVq1rLwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAVOdwY00kWX5KybnQi6XFAnUq0WMB8GA1UdIwQY MBaAFH5LVN/UFhB3T+fyQtfdOHOmWEc7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmt0VTM5UVdFSGRQNV9KQzE5MDRjNlpZUnpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS8xYjM1YzUtN2FjNi00MjUzLTg2ZWEt Nzc0NGVmM2MwYjk5LzEvQlU1M0JqVFNSWmZrckp1ZENMcGNVQ2RTclJZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS8xYjM1YzUtN2FjNi00MjUzLTg2ZWEtNzc0NGVmM2MwYjk5 LzEvZmt0VTM5UVdFSGRQNV9KQzE5MDRjNlpZUnpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuc+MMA0G CSqGSIb3DQEBCwUAA4IBAQBEvlY8WFEB4VjPwGbrqFYBBld7XgyWVzOza3mWGROl J4gq/YzObxB5o0Fjak2j/O4NW+WA6W10qujrvr7/deAxR34UNk06gcrLEXFhz1dD UlD7bbc2OIuRQwy2JcfVmKhG2+WzaXv7lGaVA75/c8VNpRjVo906lRTYTBIKe+Io wZDLKf2kSWR76Ra1Uia5xzrgRAe/UbM4IWA8lr2QyuPnPJytib0Wmfre4h6Dn+/4 yHYNXSY0ew5EJnkeUf8F768+S0nXaAC8DTKfAlVLiitOhstTZKyuu+DfhLgMCqaf 5yBmA/csTJUySmhDGoF9YrwnDEWBBcfd8spZiQkfJwNe -----END CERTIFICATE-----Generated at Tue Feb 10 04:14:12 2026 by rpki-client