This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/39a5fc-d26e-4d53-91e3-493d774aa1ff/1/buVJFABq-VX2RQkDd31Tz6ZBBxg.roa File: buVJFABq-VX2RQkDd31Tz6ZBBxg.roa (raw, json) Hash identifier: 8On1Egu0eUygZ7HokkyA20vdkdxcvN29qQbkjTPI5rE= Subject key identifier: 6E:E5:49:14:00:6A:F9:55:F6:45:09:03:77:7D:53:CF:A6:41:07:18 Certificate issuer: /CN=3e24c7ecfa37d2487152fb9bbbab50be79de2619 Certificate serial: 019B7834EA5FCC452106BA985D02BD0DA8A8 Authority key identifier: 3E:24:C7:EC:FA:37:D2:48:71:52:FB:9B:BB:AB:50:BE:79:DE:26:19 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PiTH7Po30khxUvubu6tQvnneJhk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/39a5fc-d26e-4d53-91e3-493d774aa1ff/1/buVJFABq-VX2RQkDd31Tz6ZBBxg.roa Signing time: Thu 01 Jan 2026 06:18:12 +0000 ROA not before: Thu 01 Jan 2026 06:18:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 185.71.228.0/24 maxlen: 24 185.71.229.0/24 maxlen: 24 185.125.84.0/24 maxlen: 24 193.0.181.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/39a5fc-d26e-4d53-91e3-493d774aa1ff/1/PiTH7Po30khxUvubu6tQvnneJhk.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/39a5fc-d26e-4d53-91e3-493d774aa1ff/1/PiTH7Po30khxUvubu6tQvnneJhk.mft rsync://rpki.ripe.net/repository/DEFAULT/PiTH7Po30khxUvubu6tQvnneJhk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 00:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:ea:5f:cc:45:21:06:ba:98:5d:02:bd:0d:a8:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e24c7ecfa37d2487152fb9bbbab50be79de2619 Validity Not Before: Jan 1 06:18:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6ee54914006af955f6450903777d53cfa6410718 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:7e:29:50:0f:08:d5:20:02:67:57:47:fd:b4: 14:4e:73:8c:a3:7f:e1:0c:01:0e:36:7c:df:62:eb: 62:73:c7:4d:cf:49:66:9e:bd:54:4e:b1:e3:cb:02: 04:3a:35:e2:a0:6f:a1:7b:c0:2f:2a:22:ac:b5:de: 7a:6a:89:2d:63:bc:00:0a:46:be:96:29:d8:c2:2b: f2:79:83:3d:92:09:b3:d1:da:7c:8f:57:bb:19:47: c1:d8:9b:6b:69:59:3c:91:92:fc:74:b4:32:1a:d8: 41:2b:8d:5e:2e:9a:fe:d8:39:b9:a5:bc:1e:db:71: 28:cb:de:2d:56:4f:7a:9f:e4:ea:63:a8:81:7a:f8: df:30:be:ba:69:b5:68:46:9c:83:36:3e:10:48:1a: ee:34:b7:34:b4:26:a3:b3:8b:70:cb:0a:9b:d9:ac: 37:da:74:78:55:64:49:ad:64:f7:3e:7a:a2:46:23: 6d:bd:15:ac:7d:17:97:d7:75:2a:78:99:af:62:d0: ef:88:3e:a5:df:e0:31:46:5b:22:e1:ea:c8:4b:d0: 45:93:db:de:07:e1:6d:7e:f5:47:c7:13:5b:7c:00: 32:e8:33:1d:c8:e1:61:2a:78:51:2d:52:a4:0b:ef: 2e:0a:3b:22:21:00:0c:af:76:80:0d:9b:18:14:c4: 2f:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:E5:49:14:00:6A:F9:55:F6:45:09:03:77:7D:53:CF:A6:41:07:18 X509v3 Authority Key Identifier: keyid:3E:24:C7:EC:FA:37:D2:48:71:52:FB:9B:BB:AB:50:BE:79:DE:26:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PiTH7Po30khxUvubu6tQvnneJhk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/39a5fc-d26e-4d53-91e3-493d774aa1ff/1/buVJFABq-VX2RQkDd31Tz6ZBBxg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/39a5fc-d26e-4d53-91e3-493d774aa1ff/1/PiTH7Po30khxUvubu6tQvnneJhk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.71.228.0/23 185.125.84.0/24 193.0.181.0/24 Signature Algorithm: sha256WithRSAEncryption 28:f5:f2:9c:6a:8e:f3:21:10:5b:22:f9:bc:25:c0:fe:fc:59: ca:1f:3f:d5:4e:bb:d3:8c:86:17:e7:a9:63:7d:51:98:3c:a2: f6:d9:75:8d:6d:21:74:21:7f:11:86:e2:04:13:1a:2b:0a:7c: aa:2b:88:e9:12:3f:f7:f8:e8:43:0e:25:99:87:c0:19:a8:e1: 77:31:d5:b0:c0:f3:42:6b:18:cc:1c:90:6c:d8:2a:80:2b:0d: 7c:fe:51:16:62:7f:c4:b6:64:ba:2b:e5:fc:f5:3a:c6:e3:8e: 55:fe:7c:a0:8e:39:15:b0:b3:34:2b:d2:5c:a7:09:02:55:9b: 40:c9:8e:43:9d:63:5e:c1:da:5f:20:50:b7:5b:11:0f:56:bc: 78:cd:5c:a9:d3:35:56:f6:0a:07:56:3c:de:53:59:e4:38:83: 73:63:d2:1f:78:12:85:f0:38:8c:0a:cf:2a:c3:ba:3e:f0:e7: c0:88:ab:bd:7e:61:1b:fa:0d:28:ae:a2:4f:70:2a:f9:b2:67: 0d:2b:33:c0:21:e1:06:c7:56:02:ce:0c:88:37:50:55:b0:dd: c9:e8:ae:2b:af:53:21:83:c9:f5:d5:f8:84:72:ca:e1:9b:9f: 4b:f2:cd:e6:be:78:ab:79:6a:96:8e:7b:d3:95:6c:69:bf:35: ef:72:c0:36 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt4NOpfzEUhBrqYXQK9DaioMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlMjRjN2VjZmEzN2QyNDg3MTUyZmI5YmJiYWI1MGJlNzlk ZTI2MTkwHhcNMjYwMTAxMDYxODEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZWU1NDkxNDAwNmFmOTU1ZjY0NTA5MDM3NzdkNTNjZmE2NDEwNzE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0n4pUA8I1SACZ1dH/bQUTnOMo3/h DAEONnzfYutic8dNz0lmnr1UTrHjywIEOjXioG+he8AvKiKstd56aoktY7wACka+ linYwivyeYM9kgmz0dp8j1e7GUfB2JtraVk8kZL8dLQyGthBK41eLpr+2Dm5pbwe 23Eoy94tVk96n+TqY6iBevjfML66abVoRpyDNj4QSBruNLc0tCajs4twywqb2aw3 2nR4VWRJrWT3PnqiRiNtvRWsfReX13UqeJmvYtDviD6l3+AxRlsi4erIS9BFk9ve B+FtfvVHxxNbfAAy6DMdyOFhKnhRLVKkC+8uCjsiIQAMr3aADZsYFMQvFQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFG7lSRQAavlV9kUJA3d9U8+mQQcYMB8GA1UdIwQY MBaAFD4kx+z6N9JIcVL7m7urUL553iYZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUGlUSDdQbzMwa2h4VXZ1YnU2dFF2bm5lSmhrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS8zOWE1ZmMtZDI2ZS00ZDUzLTkxZTMt NDkzZDc3NGFhMWZmLzEvYnVWSkZBQnEtVlgyUlFrRGQzMVR6NlpCQnhnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS8zOWE1ZmMtZDI2ZS00ZDUzLTkxZTMtNDkzZDc3NGFhMWZm LzEvUGlUSDdQbzMwa2h4VXZ1YnU2dFF2bm5lSmhrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBuUfkAwQA uX1UAwQAwQC1MA0GCSqGSIb3DQEBCwUAA4IBAQAo9fKcao7zIRBbIvm8JcD+/FnK Hz/VTrvTjIYX56ljfVGYPKL22XWNbSF0IX8RhuIEExorCnyqK4jpEj/3+OhDDiWZ h8AZqOF3MdWwwPNCaxjMHJBs2CqAKw18/lEWYn/EtmS6K+X89TrG445V/nygjjkV sLM0K9JcpwkCVZtAyY5DnWNewdpfIFC3WxEPVrx4zVyp0zVW9goHVjzeU1nkOINz Y9IfeBKF8DiMCs8qw7o+8OfAiKu9fmEb+g0orqJPcCr5smcNKzPAIeEGx1YCzgyI N1BVsN3J6K4rr1Mhg8n11fiEcsrhm59L8s3mvnireWqWjnvTlWxpvzXvcsA2 -----END CERTIFICATE-----Generated at Fri Jan 2 09:27:15 2026 by rpki-client