This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/60e63c-e63b-4e16-a5eb-79a5b3978ff2/1/bruVcNNMC7Mp6aE6rGzw_JEfi0E.roa File: bruVcNNMC7Mp6aE6rGzw_JEfi0E.roa (raw, json) Hash identifier: ejjZC1z5chW7R3pjzGKPMBf9E9b1c0msIw7AVev8LY8= Subject key identifier: 6E:BB:95:70:D3:4C:0B:B3:29:E9:A1:3A:AC:6C:F0:FC:91:1F:8B:41 Certificate issuer: /CN=f8ad110d39e95b542df8d2071d9245469a1b9f42 Certificate serial: 019B7C123C7E2FEBEE7B77680294B5B6C8FB Authority key identifier: F8:AD:11:0D:39:E9:5B:54:2D:F8:D2:07:1D:92:45:46:9A:1B:9F:42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-K0RDTnpW1Qt-NIHHZJFRpobn0I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/60e63c-e63b-4e16-a5eb-79a5b3978ff2/1/bruVcNNMC7Mp6aE6rGzw_JEfi0E.roa Signing time: Fri 02 Jan 2026 00:18:48 +0000 ROA not before: Fri 02 Jan 2026 00:18:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208920 IP address blocks: 45.130.108.0/22 maxlen: 22 85.116.136.0/22 maxlen: 22 185.126.204.0/22 maxlen: 22 2a06:c100::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/60e63c-e63b-4e16-a5eb-79a5b3978ff2/1/1-K0RDTnpW1Qt-NIHHZJFRpobn0I.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/60e63c-e63b-4e16-a5eb-79a5b3978ff2/1/1-K0RDTnpW1Qt-NIHHZJFRpobn0I.mft rsync://rpki.ripe.net/repository/DEFAULT/1-K0RDTnpW1Qt-NIHHZJFRpobn0I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:3c:7e:2f:eb:ee:7b:77:68:02:94:b5:b6:c8:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8ad110d39e95b542df8d2071d9245469a1b9f42 Validity Not Before: Jan 2 00:18:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6ebb9570d34c0bb329e9a13aac6cf0fc911f8b41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:b4:17:96:a9:6d:b6:f9:85:0f:e6:68:72:38: 7b:bb:71:6f:c9:2f:d2:41:64:78:44:6a:26:14:c5: 98:72:c6:91:e1:4e:ad:63:70:f5:a3:2b:1d:a9:6e: df:d3:71:bf:52:8c:c3:15:0b:71:34:17:f6:a8:69: 14:6e:c2:fc:ad:8e:f5:ee:e7:cb:59:ee:84:a1:a7: 87:3f:93:60:17:da:35:e3:a3:16:59:37:c4:b1:99: 5a:65:8f:d5:79:a0:8f:95:21:4a:45:26:7f:09:7b: 87:49:5f:5a:78:81:64:dd:42:42:c8:4b:0b:7c:fa: 3a:ee:3c:c7:99:21:7f:e3:0b:7e:84:76:1a:05:42: ad:f2:59:76:e3:98:cb:bf:ec:81:c3:38:98:91:14: 79:87:61:15:6a:b0:08:39:39:55:32:46:db:dd:76: 81:0e:21:00:bc:01:da:41:82:28:12:06:ce:62:7e: fb:8d:33:77:59:df:2a:8b:12:da:8d:f3:38:e7:d3: f2:b1:69:42:4e:42:2f:aa:25:82:da:f1:6d:44:26: 37:9f:9f:c8:f7:80:f9:f1:52:4b:9d:7a:4e:2a:b5: df:3f:23:e7:3a:ef:0e:dd:d6:cc:71:67:f1:b9:a1: 51:a9:36:3f:6d:da:f9:a2:9c:14:66:bf:9a:ab:d6: 17:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:BB:95:70:D3:4C:0B:B3:29:E9:A1:3A:AC:6C:F0:FC:91:1F:8B:41 X509v3 Authority Key Identifier: keyid:F8:AD:11:0D:39:E9:5B:54:2D:F8:D2:07:1D:92:45:46:9A:1B:9F:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-K0RDTnpW1Qt-NIHHZJFRpobn0I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/60e63c-e63b-4e16-a5eb-79a5b3978ff2/1/bruVcNNMC7Mp6aE6rGzw_JEfi0E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/60e63c-e63b-4e16-a5eb-79a5b3978ff2/1/1-K0RDTnpW1Qt-NIHHZJFRpobn0I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.130.108.0/22 85.116.136.0/22 185.126.204.0/22 IPv6: 2a06:c100::/29 Signature Algorithm: sha256WithRSAEncryption 8b:18:f7:30:b2:c3:e9:c0:da:0d:7d:cf:b2:d2:a8:90:7e:ae: ea:35:47:aa:13:91:e8:2a:7b:c7:11:ba:81:89:5f:08:51:db: da:61:08:ce:4a:ce:4d:18:31:f7:50:a7:08:9c:22:87:9c:3a: 0c:fb:bd:2f:ec:b8:3e:63:35:c5:46:9f:d8:5b:ce:10:7f:02: b6:c8:eb:26:9e:8c:4b:ff:52:4d:20:e8:a4:89:9a:e8:24:28: 83:01:bd:0f:e9:b8:ce:7c:e8:66:22:8b:30:f1:87:2c:2c:4d: 4d:d6:e0:08:c5:6b:e8:fa:b6:80:2d:c5:01:ad:d3:f8:b9:58: 9b:b6:f7:9c:73:df:18:c0:cb:c4:73:9d:81:58:45:ed:f6:9b: 07:03:4b:a1:4c:e0:a1:3e:68:2f:7e:e8:76:57:09:fa:ea:bd: ab:6e:92:ca:78:e3:02:d6:97:ca:53:e0:e0:7a:04:05:46:b9: 0b:21:07:8b:b6:52:9a:ef:5d:70:e9:82:57:f7:b2:81:d8:8b: b2:1c:25:89:bf:17:60:16:b0:a5:a8:7e:ab:09:76:77:24:a7: 61:9d:62:33:38:33:49:da:cf:c3:38:1a:1b:a7:30:52:86:22: c0:4f:03:11:bf:7b:81:54:48:35:c0:28:c2:6a:1c:37:ac:8c: 89:a9:6b:9e -----BEGIN CERTIFICATE----- MIIFGjCCBAKgAwIBAgISAZt8Ejx+L+vue3doApS1tsj7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4YWQxMTBkMzllOTViNTQyZGY4ZDIwNzFkOTI0NTQ2OWEx YjlmNDIwHhcNMjYwMTAyMDAxODQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZWJiOTU3MGQzNGMwYmIzMjllOWExM2FhYzZjZjBmYzkxMWY4YjQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnbQXlqlttvmFD+Zocjh7u3FvyS/S QWR4RGomFMWYcsaR4U6tY3D1oysdqW7f03G/UozDFQtxNBf2qGkUbsL8rY717ufL We6EoaeHP5NgF9o146MWWTfEsZlaZY/VeaCPlSFKRSZ/CXuHSV9aeIFk3UJCyEsL fPo67jzHmSF/4wt+hHYaBUKt8ll245jLv+yBwziYkRR5h2EVarAIOTlVMkbb3XaB DiEAvAHaQYIoEgbOYn77jTN3Wd8qixLajfM459PysWlCTkIvqiWC2vFtRCY3n5/I 94D58VJLnXpOKrXfPyPnOu8O3dbMcWfxuaFRqTY/bdr5opwUZr+aq9YXiwIDAQAB o4ICJjCCAiIwHQYDVR0OBBYEFG67lXDTTAuzKemhOqxs8PyRH4tBMB8GA1UdIwQY MBaAFPitEQ056VtULfjSBx2SRUaaG59CMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1LMFJEVG5wVzFRdC1OSUhIWkpGUnBvYm4wSS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2IvNjBlNjNjLWU2M2ItNGUxNi1hNWVi LTc5YTViMzk3OGZmMi8xL2JydVZjTk5NQzdNcDZhRTZyR3p3X0pFZmkwRS5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvN2IvNjBlNjNjLWU2M2ItNGUxNi1hNWViLTc5YTViMzk3OGZm Mi8xLzEtSzBSRFRucFcxUXQtTklISFpKRlJwb2JuMEkuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwOgYIKwYBBQUHAQcBAf8EKzApMBgEAgABMBIDBAItgmwD BAJVdIgDBAK5fswwDQQCAAIwBwMFAyoGwQAwDQYJKoZIhvcNAQELBQADggEBAIsY 9zCyw+nA2g19z7LSqJB+ruo1R6oTkegqe8cRuoGJXwhR29phCM5Kzk0YMfdQpwic IoecOgz7vS/suD5jNcVGn9hbzhB/ArbI6yaejEv/Uk0g6KSJmugkKIMBvQ/puM58 6GYiizDxhywsTU3W4AjFa+j6toAtxQGt0/i5WJu295xz3xjAy8RznYFYRe32mwcD S6FM4KE+aC9+6HZXCfrqvatuksp44wLWl8pT4OB6BAVGuQshB4u2UprvXXDpglf3 soHYi7IcJYm/F2AWsKWofqsJdnckp2GdYjM4M0naz8M4GhunMFKGIsBPAxG/e4FU SDXAKMJqHDesjImpa54= -----END CERTIFICATE-----Generated at Tue Feb 10 04:14:10 2026 by rpki-client