This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/0ba7e2-63a2-4c41-86b5-a370f4ba2d2b/1/PxrCkHJ_k_33hfogxkRSAVqPYQQ.roa File: PxrCkHJ_k_33hfogxkRSAVqPYQQ.roa (raw, json) Hash identifier: wpOWEIMCvDhewq930cqw1uLxdJHQYLRvRL/l1AnE7cA= Subject key identifier: 3F:1A:C2:90:72:7F:93:FD:F7:85:FA:20:C6:44:52:01:5A:8F:61:04 Certificate issuer: /CN=6ecb3fb3bea8cc8e36e3da7d9c47049bfc6ffb14 Certificate serial: 019B7C12E15D7DA03A9DCFCD021AC7E1A70C Authority key identifier: 6E:CB:3F:B3:BE:A8:CC:8E:36:E3:DA:7D:9C:47:04:9B:FC:6F:FB:14 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bss_s76ozI4249p9nEcEm_xv-xQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/0ba7e2-63a2-4c41-86b5-a370f4ba2d2b/1/PxrCkHJ_k_33hfogxkRSAVqPYQQ.roa Signing time: Fri 02 Jan 2026 00:19:30 +0000 ROA not before: Fri 02 Jan 2026 00:19:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197296 IP address blocks: 45.139.88.0/22 maxlen: 22 46.23.48.0/20 maxlen: 32 185.17.100.0/22 maxlen: 32 185.74.62.0/23 maxlen: 32 2a02:d280::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/0ba7e2-63a2-4c41-86b5-a370f4ba2d2b/1/bss_s76ozI4249p9nEcEm_xv-xQ.crl rsync://rpki.ripe.net/repository/DEFAULT/85/0ba7e2-63a2-4c41-86b5-a370f4ba2d2b/1/bss_s76ozI4249p9nEcEm_xv-xQ.mft rsync://rpki.ripe.net/repository/DEFAULT/bss_s76ozI4249p9nEcEm_xv-xQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:e1:5d:7d:a0:3a:9d:cf:cd:02:1a:c7:e1:a7:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ecb3fb3bea8cc8e36e3da7d9c47049bfc6ffb14 Validity Not Before: Jan 2 00:19:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3f1ac290727f93fdf785fa20c64452015a8f6104 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:01:c4:0e:f4:f4:8e:58:2d:1f:69:1c:23:51: 52:a6:f8:67:d9:c8:e3:a8:de:0e:cf:38:a3:e9:9f: bf:22:3d:ba:e2:e1:92:a5:9a:06:6f:16:44:23:f7: 95:c8:6e:b0:30:a5:20:51:20:2c:69:7a:dd:27:d1: d5:97:25:84:83:49:47:a1:65:f7:68:42:d3:f3:4e: 67:71:01:43:b2:d6:ec:42:1c:cc:a5:30:60:f6:42: b0:11:42:14:63:ea:8d:b3:46:82:bc:e4:fc:9c:01: f2:5c:91:dc:a1:5e:b4:74:d8:10:c9:67:a1:94:73: 06:43:16:f2:5e:1a:7f:b7:8c:f3:39:78:f2:73:4e: d7:17:1e:f9:72:1e:43:86:32:b7:5d:ca:90:fd:42: c2:e7:aa:a3:a5:2e:65:3f:a6:3e:29:49:4a:00:fd: f5:5b:f5:7d:ea:85:d2:c4:c3:05:49:da:9d:b9:de: a1:62:00:ec:9c:dc:d5:e0:fb:0e:30:28:95:36:e2: 0e:96:59:c1:2d:cb:05:c1:f4:83:ec:de:23:b3:f4: fa:2a:28:6e:56:49:94:9a:66:89:8e:e1:1c:79:f0: 88:df:8c:1c:c9:aa:c2:02:b9:10:5b:3b:c5:8e:63: 8a:4b:72:80:2d:e8:f3:c5:b7:22:d5:de:bc:39:45: bf:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:1A:C2:90:72:7F:93:FD:F7:85:FA:20:C6:44:52:01:5A:8F:61:04 X509v3 Authority Key Identifier: keyid:6E:CB:3F:B3:BE:A8:CC:8E:36:E3:DA:7D:9C:47:04:9B:FC:6F:FB:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bss_s76ozI4249p9nEcEm_xv-xQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/0ba7e2-63a2-4c41-86b5-a370f4ba2d2b/1/PxrCkHJ_k_33hfogxkRSAVqPYQQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/85/0ba7e2-63a2-4c41-86b5-a370f4ba2d2b/1/bss_s76ozI4249p9nEcEm_xv-xQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.139.88.0/22 46.23.48.0/20 185.17.100.0/22 185.74.62.0/23 IPv6: 2a02:d280::/29 Signature Algorithm: sha256WithRSAEncryption 2e:68:31:44:68:9a:45:b1:e7:8f:d1:0b:64:11:dd:5c:59:ac: fe:82:25:19:ee:7a:0e:ea:e6:2c:ec:aa:30:84:a3:1b:07:a0: c1:d8:51:72:fd:f4:1f:f1:3a:65:f3:3a:60:50:de:86:8b:bf: 89:d2:38:14:86:16:95:4a:2c:de:14:f1:42:5e:9f:1b:dd:f3: 40:5c:9d:79:ab:2d:26:45:57:5c:10:ce:90:9d:5c:68:3c:41: 03:e0:b2:f5:d8:f6:6e:85:ef:63:17:ac:9a:94:88:fe:3f:a2: 9a:e2:23:58:2a:9b:e9:8b:50:8f:6b:2a:76:c2:e4:be:63:f5: e1:65:64:d6:d6:31:d4:aa:16:80:59:b7:a6:f6:d6:61:c7:e6: b8:a6:93:15:94:64:4a:ac:f3:d2:9d:a9:44:5e:6c:d4:35:82: 03:82:a5:19:18:91:73:bc:bd:69:05:79:33:57:c0:4e:f8:5c: ba:a7:71:e1:5a:d0:72:28:85:0f:86:cc:29:00:78:2e:95:22: 36:9f:4d:35:75:0f:4e:ac:b4:32:93:0d:da:fb:0b:53:50:38: f6:c7:dd:93:d2:d9:5e:16:c6:2d:c8:3b:89:db:cf:88:0a:7b: 20:6d:40:8e:46:4f:fb:a5:6f:97:98:c8:49:08:bf:d4:b7:a8: 5d:e9:50:4c -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgISAZt8EuFdfaA6nc/NAhrH4acMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlY2IzZmIzYmVhOGNjOGUzNmUzZGE3ZDljNDcwNDliZmM2 ZmZiMTQwHhcNMjYwMTAyMDAxOTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZjFhYzI5MDcyN2Y5M2ZkZjc4NWZhMjBjNjQ0NTIwMTVhOGY2MTA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQHEDvT0jlgtH2kcI1FSpvhn2cjj qN4Ozzij6Z+/Ij264uGSpZoGbxZEI/eVyG6wMKUgUSAsaXrdJ9HVlyWEg0lHoWX3 aELT805ncQFDstbsQhzMpTBg9kKwEUIUY+qNs0aCvOT8nAHyXJHcoV60dNgQyWeh lHMGQxbyXhp/t4zzOXjyc07XFx75ch5DhjK3XcqQ/ULC56qjpS5lP6Y+KUlKAP31 W/V96oXSxMMFSdqdud6hYgDsnNzV4PsOMCiVNuIOllnBLcsFwfSD7N4js/T6Kihu VkmUmmaJjuEcefCI34wcyarCArkQWzvFjmOKS3KALejzxbci1d68OUW/AwIDAQAB o4ICKjCCAiYwHQYDVR0OBBYEFD8awpByf5P994X6IMZEUgFaj2EEMB8GA1UdIwQY MBaAFG7LP7O+qMyONuPafZxHBJv8b/sUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYnNzX3M3Nm96STQyNDlwOW5FY0VtX3h2LXhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS8wYmE3ZTItNjNhMi00YzQxLTg2YjUt YTM3MGY0YmEyZDJiLzEvUHhyQ2tISl9rXzMzaGZvZ3hrUlNBVnFQWVFRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NS8wYmE3ZTItNjNhMi00YzQxLTg2YjUtYTM3MGY0YmEyZDJi LzEvYnNzX3M3Nm96STQyNDlwOW5FY0VtX3h2LXhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQCLYtYAwQE LhcwAwQCuRFkAwQBuUo+MA0EAgACMAcDBQMqAtKAMA0GCSqGSIb3DQEBCwUAA4IB AQAuaDFEaJpFseeP0QtkEd1cWaz+giUZ7noO6uYs7KowhKMbB6DB2FFy/fQf8Tpl 8zpgUN6Gi7+J0jgUhhaVSizeFPFCXp8b3fNAXJ15qy0mRVdcEM6QnVxoPEED4LL1 2PZuhe9jF6yalIj+P6Ka4iNYKpvpi1CPayp2wuS+Y/XhZWTW1jHUqhaAWbem9tZh x+a4ppMVlGRKrPPSnalEXmzUNYIDgqUZGJFzvL1pBXkzV8BO+Fy6p3HhWtByKIUP hswpAHgulSI2n001dQ9OrLQykw3a+wtTUDj2x92T0tleFsYtyDuJ28+ICnsgbUCO Rk/7pW+XmMhJCL/Ut6hd6VBM -----END CERTIFICATE-----Generated at Tue Feb 10 04:48:53 2026 by rpki-client