This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/561d24-e921-4ec8-a611-4dc20c5b6268/1/aBX6rgftAu1Iv0U9KrcW9CmdbUE.roa File: aBX6rgftAu1Iv0U9KrcW9CmdbUE.roa (raw, json) Hash identifier: 8g2DS5hok2boyqGwi6mRMIyZrAjJcysDPJI7SQulhxM= Subject key identifier: 68:15:FA:AE:07:ED:02:ED:48:BF:45:3D:2A:B7:16:F4:29:9D:6D:41 Certificate issuer: /CN=bbca3f25d54620b50ef8520657634d3b096bac57 Certificate serial: 019B77C67C5F1E2E527BE5D3316694D58D3C Authority key identifier: BB:CA:3F:25:D5:46:20:B5:0E:F8:52:06:57:63:4D:3B:09:6B:AC:57 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u8o_JdVGILUO-FIGV2NNOwlrrFc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/561d24-e921-4ec8-a611-4dc20c5b6268/1/aBX6rgftAu1Iv0U9KrcW9CmdbUE.roa Signing time: Thu 01 Jan 2026 04:17:35 +0000 ROA not before: Thu 01 Jan 2026 04:17:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 58212 IP address blocks: 2.59.132.0/22 maxlen: 24 45.145.40.0/22 maxlen: 24 45.157.232.0/22 maxlen: 24 62.192.153.0/24 maxlen: 24 93.123.85.0/24 maxlen: 24 94.143.231.0/24 maxlen: 24 104.167.24.0/24 maxlen: 24 176.96.136.0/22 maxlen: 24 185.94.29.0/24 maxlen: 24 185.219.84.0/24 maxlen: 24 185.254.96.0/22 maxlen: 24 193.41.226.0/24 maxlen: 24 193.41.237.0/24 maxlen: 24 193.42.11.0/24 maxlen: 24 193.42.12.0/24 maxlen: 24 193.148.253.0/24 maxlen: 24 194.48.217.0/24 maxlen: 24 194.107.126.0/24 maxlen: 24 2a0c:4ac0::/29 maxlen: 40 2a0d:1180::/29 maxlen: 29 2a0d:5940::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/561d24-e921-4ec8-a611-4dc20c5b6268/1/u8o_JdVGILUO-FIGV2NNOwlrrFc.crl rsync://rpki.ripe.net/repository/DEFAULT/8b/561d24-e921-4ec8-a611-4dc20c5b6268/1/u8o_JdVGILUO-FIGV2NNOwlrrFc.mft rsync://rpki.ripe.net/repository/DEFAULT/u8o_JdVGILUO-FIGV2NNOwlrrFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:7c:5f:1e:2e:52:7b:e5:d3:31:66:94:d5:8d:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bbca3f25d54620b50ef8520657634d3b096bac57 Validity Not Before: Jan 1 04:17:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6815faae07ed02ed48bf453d2ab716f4299d6d41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:53:4a:ab:c2:5b:f0:fa:93:68:e3:63:ab:70: da:04:41:2a:71:36:9c:d0:7d:f0:ae:9a:53:13:c4: e6:ea:42:c4:ac:ba:04:9f:2a:16:93:89:08:36:e8: 8a:31:ef:ba:40:2a:9f:4f:57:ef:a9:36:d1:fa:76: bb:de:a4:5b:65:62:93:89:33:bf:28:92:5a:bc:48: 04:1f:6e:8c:d5:de:a6:ba:af:85:15:b0:67:9a:ac: 13:42:b4:6a:a2:6d:73:62:27:9c:03:45:81:26:ad: 43:65:71:12:40:02:ca:49:1f:60:35:df:41:fc:9b: 6c:6e:ff:d5:6d:9a:5d:67:d6:3a:a7:7c:36:fe:d7: 08:cd:cb:6b:97:57:ee:b3:92:33:cd:39:45:5c:89: b6:b9:b2:10:15:b9:81:2e:41:b1:3c:74:fa:ae:72: fa:07:00:e0:d2:96:e2:cd:71:53:da:49:51:68:eb: 08:d3:e7:f2:18:ca:46:f1:6d:eb:bf:75:74:0a:9a: b6:d4:80:38:4e:93:7c:fd:70:82:68:57:f0:00:9e: c4:cf:8e:a3:e7:ae:59:86:4d:fb:0c:ca:bb:4c:72: 38:2b:95:6f:c4:7d:d9:65:b4:2b:89:51:a4:aa:14: e9:37:7b:47:3b:c8:16:fb:73:5b:08:49:84:28:71: 92:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:15:FA:AE:07:ED:02:ED:48:BF:45:3D:2A:B7:16:F4:29:9D:6D:41 X509v3 Authority Key Identifier: keyid:BB:CA:3F:25:D5:46:20:B5:0E:F8:52:06:57:63:4D:3B:09:6B:AC:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u8o_JdVGILUO-FIGV2NNOwlrrFc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/561d24-e921-4ec8-a611-4dc20c5b6268/1/aBX6rgftAu1Iv0U9KrcW9CmdbUE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/561d24-e921-4ec8-a611-4dc20c5b6268/1/u8o_JdVGILUO-FIGV2NNOwlrrFc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.59.132.0/22 45.145.40.0/22 45.157.232.0/22 62.192.153.0/24 93.123.85.0/24 94.143.231.0/24 104.167.24.0/24 176.96.136.0/22 185.94.29.0/24 185.219.84.0/24 185.254.96.0/22 193.41.226.0/24 193.41.237.0/24 193.42.11.0-193.42.12.255 193.148.253.0/24 194.48.217.0/24 194.107.126.0/24 IPv6: 2a0c:4ac0::/29 2a0d:1180::/29 2a0d:5940::/29 Signature Algorithm: sha256WithRSAEncryption 4b:66:11:9e:38:e4:8f:e8:de:0d:b3:f6:e9:e7:eb:c9:75:9a: ff:22:b7:16:8c:e7:67:9e:48:a2:01:af:d6:5e:83:81:f8:13: 14:b9:6b:a1:68:58:60:d5:be:84:c0:4c:c2:7d:e6:9e:11:92: 5d:44:c8:ed:27:99:c5:fc:bb:9b:c7:b3:68:32:68:66:48:ba: 23:f4:3c:09:e6:79:9a:5a:60:e9:45:d6:2c:39:7f:b2:fc:c8: c4:79:fc:8f:09:a6:57:10:45:33:66:a1:72:7f:de:73:0d:f3: 06:8b:ec:a5:59:f9:cc:99:e3:7b:50:cb:88:16:77:de:9e:36: 61:6e:e9:df:04:db:45:c0:c1:79:e1:55:89:c7:20:2e:85:3a: 22:d9:e9:99:af:2e:23:c3:f8:6f:36:c6:0d:0a:81:11:ef:29: 59:f2:80:85:00:16:bb:cb:be:0e:24:ba:a6:a4:af:de:99:ca: 22:be:dd:4e:6a:4d:7f:a9:25:be:d7:8a:ce:47:55:d2:4e:79: 46:db:05:59:4d:18:4b:84:46:95:cd:eb:15:6e:5c:45:d1:70: 3a:55:b4:df:fd:13:62:ff:9c:61:54:e7:59:32:78:bc:01:bd: 6a:c9:a2:03:c9:f7:25:0a:ef:c6:b8:10:08:ad:e3:00:4c:f1: a4:f4:36:07 -----BEGIN CERTIFICATE----- MIIFhTCCBG2gAwIBAgISAZt3xnxfHi5Se+XTMWaU1Y08MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiY2EzZjI1ZDU0NjIwYjUwZWY4NTIwNjU3NjM0ZDNiMDk2 YmFjNTcwHhcNMjYwMTAxMDQxNzM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ODE1ZmFhZTA3ZWQwMmVkNDhiZjQ1M2QyYWI3MTZmNDI5OWQ2ZDQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwVNKq8Jb8PqTaONjq3DaBEEqcTac 0H3wrppTE8Tm6kLErLoEnyoWk4kINuiKMe+6QCqfT1fvqTbR+na73qRbZWKTiTO/ KJJavEgEH26M1d6muq+FFbBnmqwTQrRqom1zYiecA0WBJq1DZXESQALKSR9gNd9B /Jtsbv/VbZpdZ9Y6p3w2/tcIzctrl1fus5IzzTlFXIm2ubIQFbmBLkGxPHT6rnL6 BwDg0pbizXFT2klRaOsI0+fyGMpG8W3rv3V0Cpq21IA4TpN8/XCCaFfwAJ7Ez46j 565Zhk37DMq7THI4K5VvxH3ZZbQriVGkqhTpN3tHO8gW+3NbCEmEKHGSYQIDAQAB o4ICkTCCAo0wHQYDVR0OBBYEFGgV+q4H7QLtSL9FPSq3FvQpnW1BMB8GA1UdIwQY MBaAFLvKPyXVRiC1DvhSBldjTTsJa6xXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdThvX0pkVkdJTFVPLUZJR1YyTk5Pd2xyckZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi81NjFkMjQtZTkyMS00ZWM4LWE2MTEt NGRjMjBjNWI2MjY4LzEvYUJYNnJnZnRBdTFJdjBVOUtyY1c5Q21kYlVFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yi81NjFkMjQtZTkyMS00ZWM4LWE2MTEtNGRjMjBjNWI2MjY4 LzEvdThvX0pkVkdJTFVPLUZJR1YyTk5Pd2xyckZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGmBggrBgEFBQcBBwEB/wSBljCBkzB0BAIAATBuAwQCAjuE AwQCLZEoAwQCLZ3oAwQAPsCZAwQAXXtVAwQAXo/nAwQAaKcYAwQCsGCIAwQAuV4d AwQAudtUAwQCuf5gAwQAwSniAwQAwSntMAwDBADBKgsDBADBKgwDBADBlP0DBADC MNkDBADCa34wGwQCAAIwFQMFAyoMSsADBQMqDRGAAwUDKg1ZQDANBgkqhkiG9w0B AQsFAAOCAQEAS2YRnjjkj+jeDbP26efryXWa/yK3FoznZ55IogGv1l6DgfgTFLlr oWhYYNW+hMBMwn3mnhGSXUTI7SeZxfy7m8ezaDJoZki6I/Q8CeZ5mlpg6UXWLDl/ svzIxHn8jwmmVxBFM2ahcn/ecw3zBovspVn5zJnje1DLiBZ33p42YW7p3wTbRcDB eeFViccgLoU6Itnpma8uI8P4bzbGDQqBEe8pWfKAhQAWu8u+DiS6pqSv3pnKIr7d TmpNf6klvteKzkdV0k55RtsFWU0YS4RGlc3rFW5cRdFwOlW03/0TYv+cYVTnWTJ4 vAG9asmiA8n3JQrvxrgQCK3jAEzxpPQ2Bw== -----END CERTIFICATE-----Generated at Mon Jan 19 17:31:22 2026 by rpki-client