This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/6e4544-e65f-4bf0-94c8-3fc96594b4c5/1/bu3GjlAHqZGZd-3BPhXHMjgIpEs.roa File: bu3GjlAHqZGZd-3BPhXHMjgIpEs.roa (raw, json) Hash identifier: 6kJDyG+HOxoCKQIkV5vpdJcFhE6os3v3cOBxJZ2yDRI= Subject key identifier: 6E:ED:C6:8E:50:07:A9:91:99:77:ED:C1:3E:15:C7:32:38:08:A4:4B Certificate issuer: /CN=2b7ab6569de78d3c4a082fde6dd1d6a3f0d509c2 Certificate serial: 019B775921E8A15293F673E00CB57BF179BB Authority key identifier: 2B:7A:B6:56:9D:E7:8D:3C:4A:08:2F:DE:6D:D1:D6:A3:F0:D5:09:C2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K3q2Vp3njTxKCC_ebdHWo_DVCcI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/6e4544-e65f-4bf0-94c8-3fc96594b4c5/1/bu3GjlAHqZGZd-3BPhXHMjgIpEs.roa Signing time: Thu 01 Jan 2026 02:18:08 +0000 ROA not before: Thu 01 Jan 2026 02:18:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201015 IP address blocks: 185.111.66.0/23 maxlen: 23 185.111.66.0/24 maxlen: 24 185.111.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/6e4544-e65f-4bf0-94c8-3fc96594b4c5/1/K3q2Vp3njTxKCC_ebdHWo_DVCcI.crl rsync://rpki.ripe.net/repository/DEFAULT/74/6e4544-e65f-4bf0-94c8-3fc96594b4c5/1/K3q2Vp3njTxKCC_ebdHWo_DVCcI.mft rsync://rpki.ripe.net/repository/DEFAULT/K3q2Vp3njTxKCC_ebdHWo_DVCcI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:21:e8:a1:52:93:f6:73:e0:0c:b5:7b:f1:79:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b7ab6569de78d3c4a082fde6dd1d6a3f0d509c2 Validity Not Before: Jan 1 02:18:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6eedc68e5007a9919977edc13e15c7323808a44b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:61:4d:06:42:2d:0c:18:cb:ad:20:b0:f9:53: 50:81:31:97:ed:74:0a:83:a3:ca:8e:90:a2:e0:36: c6:92:f0:7b:e8:07:23:f8:c2:67:6d:ad:fa:08:01: 44:89:c4:1f:17:5a:7b:57:27:96:de:2e:fb:4f:0c: 22:41:27:db:19:78:65:6f:41:e4:b1:df:62:a4:9b: bb:34:53:e5:ae:48:77:06:ae:eb:86:be:f5:ab:fe: 23:69:e6:63:35:9b:19:5a:ee:b9:52:68:05:71:86: 7c:76:81:89:f2:bd:28:74:63:68:5b:a0:67:89:bf: 76:7d:93:e0:49:06:dd:2c:7a:a4:c0:3c:2f:02:b0: 70:89:8d:9e:0b:16:b5:8b:91:1a:c0:34:8c:71:c0: 23:db:53:28:36:01:16:28:5f:c2:48:d1:07:4f:bd: 5f:10:b2:89:22:0f:98:5e:b7:10:36:ba:74:f8:ec: 1f:9a:1e:5b:2c:a8:7c:45:e5:50:7e:20:92:0b:dc: c8:cc:b7:ec:58:e3:4b:d4:d4:6d:67:be:04:fc:59: 38:c0:0e:c7:68:2c:39:be:64:35:bc:c6:09:39:f9: f7:62:dd:b7:5c:9d:c2:f1:2e:51:fe:7b:46:5b:4f: 19:e0:34:3d:40:98:13:c8:4e:b7:f7:a6:0f:e3:a5: e3:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:ED:C6:8E:50:07:A9:91:99:77:ED:C1:3E:15:C7:32:38:08:A4:4B X509v3 Authority Key Identifier: keyid:2B:7A:B6:56:9D:E7:8D:3C:4A:08:2F:DE:6D:D1:D6:A3:F0:D5:09:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K3q2Vp3njTxKCC_ebdHWo_DVCcI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/6e4544-e65f-4bf0-94c8-3fc96594b4c5/1/bu3GjlAHqZGZd-3BPhXHMjgIpEs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/74/6e4544-e65f-4bf0-94c8-3fc96594b4c5/1/K3q2Vp3njTxKCC_ebdHWo_DVCcI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.111.66.0/23 Signature Algorithm: sha256WithRSAEncryption 7f:8e:8a:4c:63:94:8e:26:73:bf:35:70:6b:fb:89:60:8c:43: d2:0d:35:d4:17:70:ad:cd:2b:08:e5:3c:cb:d3:6d:94:b0:9a: 94:8c:b7:1a:2b:f7:bd:8d:14:9c:aa:ff:6a:ec:e1:b4:72:c3: e2:ac:80:17:e0:ea:9d:fc:ee:1a:6d:8c:97:f7:1f:fd:ca:14: df:70:b7:9c:4f:06:ae:91:80:da:2f:e5:59:74:de:03:6e:fe: 91:20:98:c5:86:95:1e:c9:cb:14:6b:86:26:4e:ae:16:c5:5f: 00:20:8f:69:cf:52:53:0c:a8:90:ba:10:81:37:79:8e:c4:41: cd:0d:15:f2:80:bc:76:bf:26:96:c5:a8:28:1e:98:f8:3c:97: 1b:b0:ea:f5:6f:3f:9d:2f:18:17:d1:dc:f5:98:20:bd:87:65: 8b:5b:78:8c:f2:42:4c:31:13:6c:73:70:2d:40:9e:3f:52:28: a1:f0:d0:fc:53:31:91:82:1a:8f:c8:ed:b2:83:50:1b:81:75: 9d:22:39:1e:fd:3c:48:ba:79:c4:01:cf:d2:bf:25:97:f3:21: 22:1a:d4:5a:72:61:eb:5f:59:ac:0a:99:ba:02:ac:27:bc:58: d0:b5:a8:8b:8a:7f:72:85:78:71:5b:1c:03:a2:fb:3f:68:e5: 6d:be:56:da -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WSHooVKT9nPgDLV78Xm7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJiN2FiNjU2OWRlNzhkM2M0YTA4MmZkZTZkZDFkNmEzZjBk NTA5YzIwHhcNMjYwMTAxMDIxODA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZWVkYzY4ZTUwMDdhOTkxOTk3N2VkYzEzZTE1YzczMjM4MDhhNDRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0GFNBkItDBjLrSCw+VNQgTGX7XQK g6PKjpCi4DbGkvB76Acj+MJnba36CAFEicQfF1p7VyeW3i77TwwiQSfbGXhlb0Hk sd9ipJu7NFPlrkh3Bq7rhr71q/4jaeZjNZsZWu65UmgFcYZ8doGJ8r0odGNoW6Bn ib92fZPgSQbdLHqkwDwvArBwiY2eCxa1i5EawDSMccAj21MoNgEWKF/CSNEHT71f ELKJIg+YXrcQNrp0+Owfmh5bLKh8ReVQfiCSC9zIzLfsWONL1NRtZ74E/Fk4wA7H aCw5vmQ1vMYJOfn3Yt23XJ3C8S5R/ntGW08Z4DQ9QJgTyE6396YP46XjhQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFG7txo5QB6mRmXftwT4VxzI4CKRLMB8GA1UdIwQY MBaAFCt6tlad5408Sggv3m3R1qPw1QnCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSzNxMlZwM25qVHhLQ0NfZWJkSFdvX0RWQ2NJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC82ZTQ1NDQtZTY1Zi00YmYwLTk0Yzgt M2ZjOTY1OTRiNGM1LzEvYnUzR2psQUhxWkdaZC0zQlBoWEhNamdJcEVzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NC82ZTQ1NDQtZTY1Zi00YmYwLTk0YzgtM2ZjOTY1OTRiNGM1 LzEvSzNxMlZwM25qVHhLQ0NfZWJkSFdvX0RWQ2NJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuW9CMA0G CSqGSIb3DQEBCwUAA4IBAQB/jopMY5SOJnO/NXBr+4lgjEPSDTXUF3CtzSsI5TzL 022UsJqUjLcaK/e9jRScqv9q7OG0csPirIAX4Oqd/O4abYyX9x/9yhTfcLecTwau kYDaL+VZdN4Dbv6RIJjFhpUeycsUa4YmTq4WxV8AII9pz1JTDKiQuhCBN3mOxEHN DRXygLx2vyaWxagoHpj4PJcbsOr1bz+dLxgX0dz1mCC9h2WLW3iM8kJMMRNsc3At QJ4/Uiih8ND8UzGRghqPyO2yg1AbgXWdIjke/TxIunnEAc/SvyWX8yEiGtRacmHr X1msCpm6AqwnvFjQtaiLin9yhXhxWxwDovs/aOVtvlba -----END CERTIFICATE-----Generated at Mon Feb 9 22:17:17 2026 by rpki-client