This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/cd504a-0189-4554-b501-639dc4d5f370/1/_buqN6yYSytWYhTqNPA1kKSIBNk.roa File: _buqN6yYSytWYhTqNPA1kKSIBNk.roa (raw, json) Hash identifier: c6bP7C3wNXIAyK047P+noenWK/m8RQLknUBgsv8PDgI= Subject key identifier: FD:BB:AA:37:AC:98:4B:2B:56:62:14:EA:34:F0:35:90:A4:88:04:D9 Certificate issuer: /CN=33339e64a58514c9b091e9b2e68e29371e43e3df Certificate serial: 019B7834DAE87A60566993739985B9BAA7F1 Authority key identifier: 33:33:9E:64:A5:85:14:C9:B0:91:E9:B2:E6:8E:29:37:1E:43:E3:DF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MzOeZKWFFMmwkemy5o4pNx5D498.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/cd504a-0189-4554-b501-639dc4d5f370/1/_buqN6yYSytWYhTqNPA1kKSIBNk.roa Signing time: Thu 01 Jan 2026 06:18:08 +0000 ROA not before: Thu 01 Jan 2026 06:18:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206077 IP address blocks: 185.196.252.0/22 maxlen: 22 185.196.252.0/23 maxlen: 23 185.196.252.0/24 maxlen: 24 185.196.253.0/24 maxlen: 24 185.196.254.0/23 maxlen: 23 185.196.254.0/24 maxlen: 24 185.196.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/cd504a-0189-4554-b501-639dc4d5f370/1/MzOeZKWFFMmwkemy5o4pNx5D498.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/cd504a-0189-4554-b501-639dc4d5f370/1/MzOeZKWFFMmwkemy5o4pNx5D498.mft rsync://rpki.ripe.net/repository/DEFAULT/MzOeZKWFFMmwkemy5o4pNx5D498.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 09:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:da:e8:7a:60:56:69:93:73:99:85:b9:ba:a7:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33339e64a58514c9b091e9b2e68e29371e43e3df Validity Not Before: Jan 1 06:18:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fdbbaa37ac984b2b566214ea34f03590a48804d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:b0:34:ed:8d:8c:68:ed:fc:43:1f:1d:cf:d4: 02:d0:fd:86:28:9f:12:9f:53:1c:d9:3b:07:dc:a8: 27:9d:9e:57:15:2c:74:06:de:7f:a7:ff:23:94:c0: 24:05:ca:5d:d8:7e:ab:08:64:65:af:87:4b:aa:6b: a1:f8:b2:42:05:f9:1a:7a:26:52:17:4f:f5:d8:93: e3:b5:16:d4:24:19:40:7f:98:cb:24:2f:97:7e:b6: 62:2f:53:b2:9b:e0:93:12:8d:14:1e:a8:2f:2a:65: eb:7a:ea:0e:ed:a7:25:16:97:99:01:ac:2f:47:00: 3a:e9:34:79:49:5e:e4:2d:1f:e0:98:db:37:66:7e: b3:e1:6f:ae:21:b3:ff:7a:d3:aa:c7:60:95:3c:18: a1:1a:86:90:ab:d5:08:e9:ea:7e:38:f3:1e:7b:6a: 3e:fd:96:2f:0a:ee:f7:8f:6e:78:08:4c:12:7c:2a: 0c:ad:7f:4a:87:3b:6c:91:74:4a:e7:b7:51:7e:20: 43:26:85:17:d2:52:16:ab:a4:c5:0d:b3:81:75:a3: 70:10:4e:70:0c:0c:75:a3:02:85:e2:86:b2:21:d4: 60:4d:2b:88:cd:a7:35:f4:4e:54:3c:bb:73:f0:aa: 56:4e:b8:3f:57:f9:07:f4:b0:6e:e7:4d:cf:65:1b: 7d:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:BB:AA:37:AC:98:4B:2B:56:62:14:EA:34:F0:35:90:A4:88:04:D9 X509v3 Authority Key Identifier: keyid:33:33:9E:64:A5:85:14:C9:B0:91:E9:B2:E6:8E:29:37:1E:43:E3:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MzOeZKWFFMmwkemy5o4pNx5D498.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/cd504a-0189-4554-b501-639dc4d5f370/1/_buqN6yYSytWYhTqNPA1kKSIBNk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/cd504a-0189-4554-b501-639dc4d5f370/1/MzOeZKWFFMmwkemy5o4pNx5D498.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.196.252.0/22 Signature Algorithm: sha256WithRSAEncryption 34:f5:e1:17:1d:66:30:af:3e:a7:55:ff:79:32:19:ba:a7:1c: 99:d9:09:e0:55:b2:bd:bc:1f:18:81:58:31:d7:3e:ec:54:5a: cc:67:96:e1:51:8b:db:bf:c3:4d:4f:f3:ef:e8:62:eb:f6:ae: aa:23:7f:72:7f:64:b3:30:c5:72:f1:78:60:48:66:e9:9a:0d: 6f:3e:9d:af:d2:ab:0e:8b:b8:73:8a:11:dd:89:91:51:42:8c: ff:92:0a:16:f0:e5:4b:c7:f5:2b:06:6c:4c:64:2a:05:10:22: e9:77:3c:37:93:03:da:84:12:c7:78:97:54:05:8e:b3:0d:28: 23:18:a3:70:b3:23:f8:d1:d3:48:6f:ec:ac:f0:b2:e7:51:68: 86:b8:69:7e:4a:2e:44:02:d1:bb:71:bd:44:d7:5a:3e:4a:71: 23:ab:d1:a8:b2:f4:9d:ee:de:fa:10:c7:60:d9:8b:49:f0:0f: 57:38:7b:f0:ee:14:e1:a8:53:12:a2:14:4c:63:b8:6f:de:6c: 1d:3e:9c:8e:e5:fd:75:cb:8e:9a:dc:9c:54:7d:b3:f5:84:bf: 8d:39:1f:f6:f3:14:f4:30:8a:1e:50:5e:32:13:6f:7c:66:e2: 1d:a5:63:59:16:62:4b:38:a2:2f:67:ec:5e:1b:db:6c:71:ec: 26:d7:96:d6 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NNroemBWaZNzmYW5uqfxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzMzM5ZTY0YTU4NTE0YzliMDkxZTliMmU2OGUyOTM3MWU0 M2UzZGYwHhcNMjYwMTAxMDYxODA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZGJiYWEzN2FjOTg0YjJiNTY2MjE0ZWEzNGYwMzU5MGE0ODgwNGQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsLA07Y2MaO38Qx8dz9QC0P2GKJ8S n1Mc2TsH3KgnnZ5XFSx0Bt5/p/8jlMAkBcpd2H6rCGRlr4dLqmuh+LJCBfkaeiZS F0/12JPjtRbUJBlAf5jLJC+XfrZiL1Oym+CTEo0UHqgvKmXreuoO7aclFpeZAawv RwA66TR5SV7kLR/gmNs3Zn6z4W+uIbP/etOqx2CVPBihGoaQq9UI6ep+OPMee2o+ /ZYvCu73j254CEwSfCoMrX9KhztskXRK57dRfiBDJoUX0lIWq6TFDbOBdaNwEE5w DAx1owKF4oayIdRgTSuIzac19E5UPLtz8KpWTrg/V/kH9LBu503PZRt9WQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFP27qjesmEsrVmIU6jTwNZCkiATZMB8GA1UdIwQY MBaAFDMznmSlhRTJsJHpsuaOKTceQ+PfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTXpPZVpLV0ZGTW13a2VteTVvNHBOeDVENDk4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS9jZDUwNGEtMDE4OS00NTU0LWI1MDEt NjM5ZGM0ZDVmMzcwLzEvX2J1cU42eVlTeXRXWWhUcU5QQTFrS1NJQk5rLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS9jZDUwNGEtMDE4OS00NTU0LWI1MDEtNjM5ZGM0ZDVmMzcw LzEvTXpPZVpLV0ZGTW13a2VteTVvNHBOeDVENDk4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCucT8MA0G CSqGSIb3DQEBCwUAA4IBAQA09eEXHWYwrz6nVf95Mhm6pxyZ2QngVbK9vB8YgVgx 1z7sVFrMZ5bhUYvbv8NNT/Pv6GLr9q6qI39yf2SzMMVy8XhgSGbpmg1vPp2v0qsO i7hzihHdiZFRQoz/kgoW8OVLx/UrBmxMZCoFECLpdzw3kwPahBLHeJdUBY6zDSgj GKNwsyP40dNIb+ys8LLnUWiGuGl+Si5EAtG7cb1E11o+SnEjq9GosvSd7t76EMdg 2YtJ8A9XOHvw7hThqFMSohRMY7hv3mwdPpyO5f11y46a3JxUfbP1hL+NOR/28xT0 MIoeUF4yE298ZuIdpWNZFmJLOKIvZ+xeG9tscewm15bW -----END CERTIFICATE-----Generated at Mon Jan 26 17:46:52 2026 by rpki-client