This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/88301c-ac79-4083-928f-5b49db65c545/1/BXXFULcigDb5p-TWyxWoIQ6jZxg.roa File: BXXFULcigDb5p-TWyxWoIQ6jZxg.roa (raw, json) Hash identifier: +TJHe9rjVEZ47iPSt4ggCrDY9EnLTa/nFFdzzuzo8HA= Subject key identifier: 05:75:C5:50:B7:22:80:36:F9:A7:E4:D6:CB:15:A8:21:0E:A3:67:18 Certificate issuer: /CN=aaac6197799fd68b6e5bbe0b57e652fd80dd3621 Certificate serial: 019B78352E2B4E81CA8F95B53667A366CC4E Authority key identifier: AA:AC:61:97:79:9F:D6:8B:6E:5B:BE:0B:57:E6:52:FD:80:DD:36:21 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qqxhl3mf1otuW74LV-ZS_YDdNiE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/88301c-ac79-4083-928f-5b49db65c545/1/BXXFULcigDb5p-TWyxWoIQ6jZxg.roa Signing time: Thu 01 Jan 2026 06:18:29 +0000 ROA not before: Thu 01 Jan 2026 06:18:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213601 IP address blocks: 203.8.165.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/88301c-ac79-4083-928f-5b49db65c545/1/qqxhl3mf1otuW74LV-ZS_YDdNiE.crl rsync://rpki.ripe.net/repository/DEFAULT/70/88301c-ac79-4083-928f-5b49db65c545/1/qqxhl3mf1otuW74LV-ZS_YDdNiE.mft rsync://rpki.ripe.net/repository/DEFAULT/qqxhl3mf1otuW74LV-ZS_YDdNiE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:2e:2b:4e:81:ca:8f:95:b5:36:67:a3:66:cc:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aaac6197799fd68b6e5bbe0b57e652fd80dd3621 Validity Not Before: Jan 1 06:18:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0575c550b7228036f9a7e4d6cb15a8210ea36718 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:9c:d6:0e:d0:9a:e0:c1:6a:2a:4a:21:85:a5: 5c:ac:45:53:5b:4a:da:d7:ee:34:57:01:fb:7a:bd: 6e:aa:4a:51:f2:24:bb:35:ce:7e:6e:2a:a3:a5:80: b8:2e:48:74:15:4b:1f:78:5a:41:1e:03:28:e7:3d: 2a:5a:e4:4a:8c:1b:6f:c1:da:7e:88:87:19:31:ce: 50:8d:d1:52:23:5f:71:8b:22:1d:11:e6:b2:89:94: d5:bd:26:0d:ff:99:6f:16:0c:39:d9:1e:69:5e:dd: 2d:46:3b:a7:eb:68:b4:3c:d3:29:78:bf:cb:68:67: c5:75:b4:21:26:70:47:3d:7d:4c:c5:ad:40:e5:4f: f2:9a:12:9d:8b:c7:da:5d:9f:7a:74:a8:e3:68:92: bc:47:f1:17:ec:ba:8a:3e:83:fe:1a:27:3f:6e:93: a2:52:e5:15:b4:df:a1:5a:29:32:6b:19:7b:a1:57: b1:b0:1c:09:97:78:5d:a1:85:a5:bc:e6:41:52:88: e4:8a:3a:3d:84:e1:a4:d4:7b:a4:15:15:db:38:2f: ed:49:36:8f:2f:04:05:23:fe:3f:70:86:94:d1:d0: 87:a7:47:d4:2e:e3:b3:94:ce:2c:b5:5e:05:b0:3e: 45:b1:e2:a6:e5:2c:64:78:3c:2d:59:39:2f:91:94: 0c:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:75:C5:50:B7:22:80:36:F9:A7:E4:D6:CB:15:A8:21:0E:A3:67:18 X509v3 Authority Key Identifier: keyid:AA:AC:61:97:79:9F:D6:8B:6E:5B:BE:0B:57:E6:52:FD:80:DD:36:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qqxhl3mf1otuW74LV-ZS_YDdNiE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/88301c-ac79-4083-928f-5b49db65c545/1/BXXFULcigDb5p-TWyxWoIQ6jZxg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/88301c-ac79-4083-928f-5b49db65c545/1/qqxhl3mf1otuW74LV-ZS_YDdNiE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.8.165.0/24 Signature Algorithm: sha256WithRSAEncryption 34:5d:6d:57:fc:8f:9f:39:7a:79:68:48:d4:0e:8a:90:76:f6: 23:d2:c3:da:a3:62:79:73:f1:cc:4c:97:92:46:de:fc:73:ad: 66:d4:67:31:13:e4:be:f5:9d:f8:4c:8d:eb:e8:c3:e9:a3:ad: 9f:fc:78:ba:39:24:a2:34:72:0f:e6:54:d7:ea:02:5c:79:73: d8:1b:15:62:de:21:65:cb:7f:f4:cb:3b:f7:a6:98:66:a3:0b: 65:35:80:99:2c:93:68:3d:da:52:29:c4:86:6e:a2:aa:28:a0: 7a:b2:32:78:b7:c0:65:77:8c:a7:ea:a8:76:c4:5b:c8:20:82: 13:ee:e0:da:4f:4a:c3:39:c4:4a:74:52:70:4f:c0:70:8f:34: 3a:91:0f:33:2e:92:eb:eb:27:47:42:9d:ec:66:cb:bf:28:7f: f7:38:a7:74:2c:dc:d9:b7:1b:e0:99:75:3e:e3:e6:60:82:3f: 3f:96:a0:0a:cf:f2:ab:54:b4:2b:f2:52:64:b6:ae:3c:35:8c: c0:2c:5a:9d:1d:ec:c3:9f:cb:db:74:35:b6:26:2f:d9:b9:0e: b4:c2:9c:6d:5a:fc:98:a6:f7:73:21:7c:e5:b0:3a:d2:c0:d5: e1:8f:cd:e2:d7:ea:cc:9b:87:47:51:e3:7b:7a:0d:84:9d:23: d2:c7:cb:02 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NS4rToHKj5W1NmejZsxOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFhYWM2MTk3Nzk5ZmQ2OGI2ZTViYmUwYjU3ZTY1MmZkODBk ZDM2MjEwHhcNMjYwMTAxMDYxODI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNTc1YzU1MGI3MjI4MDM2ZjlhN2U0ZDZjYjE1YTgyMTBlYTM2NzE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqpzWDtCa4MFqKkohhaVcrEVTW0ra 1+40VwH7er1uqkpR8iS7Nc5+biqjpYC4Lkh0FUsfeFpBHgMo5z0qWuRKjBtvwdp+ iIcZMc5QjdFSI19xiyIdEeayiZTVvSYN/5lvFgw52R5pXt0tRjun62i0PNMpeL/L aGfFdbQhJnBHPX1Mxa1A5U/ymhKdi8faXZ96dKjjaJK8R/EX7LqKPoP+Gic/bpOi UuUVtN+hWikyaxl7oVexsBwJl3hdoYWlvOZBUojkijo9hOGk1HukFRXbOC/tSTaP LwQFI/4/cIaU0dCHp0fULuOzlM4stV4FsD5FseKm5SxkeDwtWTkvkZQMnwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAV1xVC3IoA2+afk1ssVqCEOo2cYMB8GA1UdIwQY MBaAFKqsYZd5n9aLblu+C1fmUv2A3TYhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcXF4aGwzbWYxb3R1Vzc0TFYtWlNfWURkTmlFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC84ODMwMWMtYWM3OS00MDgzLTkyOGYt NWI0OWRiNjVjNTQ1LzEvQlhYRlVMY2lnRGI1cC1UV3l4V29JUTZqWnhnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC84ODMwMWMtYWM3OS00MDgzLTkyOGYtNWI0OWRiNjVjNTQ1 LzEvcXF4aGwzbWYxb3R1Vzc0TFYtWlNfWURkTmlFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAywilMA0G CSqGSIb3DQEBCwUAA4IBAQA0XW1X/I+fOXp5aEjUDoqQdvYj0sPao2J5c/HMTJeS Rt78c61m1GcxE+S+9Z34TI3r6MPpo62f/Hi6OSSiNHIP5lTX6gJceXPYGxVi3iFl y3/0yzv3pphmowtlNYCZLJNoPdpSKcSGbqKqKKB6sjJ4t8Bld4yn6qh2xFvIIIIT 7uDaT0rDOcRKdFJwT8BwjzQ6kQ8zLpLr6ydHQp3sZsu/KH/3OKd0LNzZtxvgmXU+ 4+Zggj8/lqAKz/KrVLQr8lJktq48NYzALFqdHezDn8vbdDW2Ji/ZuQ60wpxtWvyY pvdzIXzlsDrSwNXhj83i1+rMm4dHUeN7eg2EnSPSx8sC -----END CERTIFICATE-----Generated at Mon Feb 9 21:01:21 2026 by rpki-client