This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/7170e0-a043-4b78-aab1-b6488aec533b/1/BUE7EIoRZVPe0cNnXcD22KEMCwA.roa File: BUE7EIoRZVPe0cNnXcD22KEMCwA.roa (raw, json) Hash identifier: F2S7PMb1ZI5mW1mAQMP7O8Np+g1NdICYYD40JG2Q/yc= Subject key identifier: 05:41:3B:10:8A:11:65:53:DE:D1:C3:67:5D:C0:F6:D8:A1:0C:0B:00 Certificate issuer: /CN=0b2ed24703d334b11cd22ee489fc3c64bdc06f4b Certificate serial: 019B7C80B0B0ABBC6897FB98E60E04179F59 Authority key identifier: 0B:2E:D2:47:03:D3:34:B1:1C:D2:2E:E4:89:FC:3C:64:BD:C0:6F:4B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cy7SRwPTNLEc0i7kifw8ZL3Ab0s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/7170e0-a043-4b78-aab1-b6488aec533b/1/BUE7EIoRZVPe0cNnXcD22KEMCwA.roa Signing time: Fri 02 Jan 2026 02:19:27 +0000 ROA not before: Fri 02 Jan 2026 02:19:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 24940 IP address blocks: 178.212.75.0/24 maxlen: 24 2a11:e980::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/7170e0-a043-4b78-aab1-b6488aec533b/1/Cy7SRwPTNLEc0i7kifw8ZL3Ab0s.crl rsync://rpki.ripe.net/repository/DEFAULT/95/7170e0-a043-4b78-aab1-b6488aec533b/1/Cy7SRwPTNLEc0i7kifw8ZL3Ab0s.mft rsync://rpki.ripe.net/repository/DEFAULT/Cy7SRwPTNLEc0i7kifw8ZL3Ab0s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 02:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:b0:b0:ab:bc:68:97:fb:98:e6:0e:04:17:9f:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b2ed24703d334b11cd22ee489fc3c64bdc06f4b Validity Not Before: Jan 2 02:19:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=05413b108a116553ded1c3675dc0f6d8a10c0b00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:54:c6:44:4b:0b:ed:c6:85:b7:ea:28:b7:26: e8:96:28:36:f5:45:b1:9c:8c:dc:3a:e7:14:28:76: 2a:8d:d6:9a:04:8b:20:45:7a:c0:41:15:76:8a:63: 6f:70:e8:d9:7c:c0:1b:3c:53:83:02:bd:f5:5d:82: 7b:e4:5f:5a:ec:e8:5e:3e:75:46:91:7a:d0:f6:83: ca:d0:9a:e9:29:b0:7f:91:0b:e1:58:cc:97:ba:23: be:94:50:2e:61:b8:56:bc:c0:c3:6f:c6:78:64:3c: 9a:e2:6b:29:70:6f:3d:7a:d2:a5:ff:b5:92:5e:a1: 5d:59:8a:0d:bd:25:b7:a3:d8:5a:7b:a0:aa:3b:a5: 14:f4:03:a1:9f:2f:24:dd:1f:87:97:e1:8d:ff:4b: ef:3a:88:37:36:c9:56:4a:38:a6:d7:fa:51:8c:0f: 27:3b:5e:28:c1:9c:e8:d9:5e:00:ac:78:4e:a0:ea: 97:c0:da:ca:6b:31:09:72:5e:89:cc:1c:99:c6:ab: 48:29:2d:d7:6d:e8:ed:17:1d:42:61:79:00:55:ac: dd:c7:a2:29:af:3f:86:a1:68:23:f0:79:e3:94:0b: 85:fb:f9:c5:4e:b5:f3:40:e2:28:39:59:36:d1:39: f9:3c:b4:35:16:f5:a5:83:79:2e:c9:fc:4e:40:71: d0:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:41:3B:10:8A:11:65:53:DE:D1:C3:67:5D:C0:F6:D8:A1:0C:0B:00 X509v3 Authority Key Identifier: keyid:0B:2E:D2:47:03:D3:34:B1:1C:D2:2E:E4:89:FC:3C:64:BD:C0:6F:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cy7SRwPTNLEc0i7kifw8ZL3Ab0s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/7170e0-a043-4b78-aab1-b6488aec533b/1/BUE7EIoRZVPe0cNnXcD22KEMCwA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/95/7170e0-a043-4b78-aab1-b6488aec533b/1/Cy7SRwPTNLEc0i7kifw8ZL3Ab0s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.212.75.0/24 IPv6: 2a11:e980::/29 Signature Algorithm: sha256WithRSAEncryption 28:04:b3:47:4d:6f:47:1b:9a:5a:02:54:63:1d:90:b1:ce:3b: df:23:08:4c:4c:85:96:20:2f:cb:83:09:7a:50:8e:33:ff:64: fc:36:8e:d8:6a:80:40:c9:32:47:c8:cd:8c:54:6e:7d:7f:5a: 9c:ab:57:5d:d6:74:7d:45:98:68:1c:39:8f:ce:42:2c:1a:a9: dc:6c:70:89:ec:17:43:a2:1a:02:72:60:90:49:56:45:e7:55: 37:b5:5a:cf:33:0a:1b:a6:1a:3b:bf:7e:7a:ec:3c:6d:23:b6: 5c:3f:ad:1d:12:72:13:b2:5f:bc:be:00:14:35:21:b9:5e:67: 45:f2:13:c8:5a:4e:92:d3:af:4e:de:e5:17:e2:89:74:68:72: 16:c2:cd:3c:da:64:cf:ab:c1:e7:b4:42:68:7f:06:74:a8:45: e6:21:b6:81:89:ba:26:77:f3:e7:4e:19:5a:23:1d:74:4e:1f: a6:5d:4f:ed:06:0a:9a:2b:b0:0f:ae:b2:ac:68:61:87:ea:69: 0c:27:d3:8f:11:c7:89:88:2b:16:8a:41:30:55:40:92:16:17: 66:d3:e9:e3:d4:17:1c:2f:03:af:f6:91:70:cd:7e:a9:4d:c2: 20:de:6c:79:d6:76:ef:6a:0c:bb:82:08:83:9d:c8:92:9f:71: 12:9a:bb:ad -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt8gLCwq7xol/uY5g4EF59ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiMmVkMjQ3MDNkMzM0YjExY2QyMmVlNDg5ZmMzYzY0YmRj MDZmNGIwHhcNMjYwMTAyMDIxOTI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNTQxM2IxMDhhMTE2NTUzZGVkMWMzNjc1ZGMwZjZkOGExMGMwYjAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtFTGREsL7caFt+ootybolig29UWx nIzcOucUKHYqjdaaBIsgRXrAQRV2imNvcOjZfMAbPFODAr31XYJ75F9a7OhePnVG kXrQ9oPK0JrpKbB/kQvhWMyXuiO+lFAuYbhWvMDDb8Z4ZDya4mspcG89etKl/7WS XqFdWYoNvSW3o9hae6CqO6UU9AOhny8k3R+Hl+GN/0vvOog3NslWSjim1/pRjA8n O14owZzo2V4ArHhOoOqXwNrKazEJcl6JzByZxqtIKS3XbejtFx1CYXkAVazdx6Ip rz+GoWgj8HnjlAuF+/nFTrXzQOIoOVk20Tn5PLQ1FvWlg3kuyfxOQHHQbwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFAVBOxCKEWVT3tHDZ13A9tihDAsAMB8GA1UdIwQY MBaAFAsu0kcD0zSxHNIu5In8PGS9wG9LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ3k3U1J3UFROTEVjMGk3a2lmdzhaTDNBYjBzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS83MTcwZTAtYTA0My00Yjc4LWFhYjEt YjY0ODhhZWM1MzNiLzEvQlVFN0VJb1JaVlBlMGNOblhjRDIyS0VNQ3dBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NS83MTcwZTAtYTA0My00Yjc4LWFhYjEtYjY0ODhhZWM1MzNi LzEvQ3k3U1J3UFROTEVjMGk3a2lmdzhaTDNBYjBzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAstRLMA0E AgACMAcDBQMqEemAMA0GCSqGSIb3DQEBCwUAA4IBAQAoBLNHTW9HG5paAlRjHZCx zjvfIwhMTIWWIC/Lgwl6UI4z/2T8No7YaoBAyTJHyM2MVG59f1qcq1dd1nR9RZho HDmPzkIsGqncbHCJ7BdDohoCcmCQSVZF51U3tVrPMwobpho7v3567DxtI7ZcP60d EnITsl+8vgAUNSG5XmdF8hPIWk6S069O3uUX4ol0aHIWws082mTPq8HntEJofwZ0 qEXmIbaBibomd/PnThlaIx10Th+mXU/tBgqaK7APrrKsaGGH6mkMJ9OPEceJiCsW ikEwVUCSFhdm0+nj1BccLwOv9pFwzX6pTcIg3mx51nbvagy7ggiDnciSn3ESmrut -----END CERTIFICATE-----Generated at Tue Jan 20 12:27:17 2026 by rpki-client