This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/99be4d-f8ec-4430-a9cd-7e12b87d06c2/1/bxJSZ4QkpRqkCuO8un8htf7K_EA.roa File: bxJSZ4QkpRqkCuO8un8htf7K_EA.roa (raw, json) Hash identifier: aY6Tszvn+tw4UURnCsUt8otQUMfjQJy4b3YJ7wRT6HQ= Subject key identifier: 6F:12:52:67:84:24:A5:1A:A4:0A:E3:BC:BA:7F:21:B5:FE:CA:FC:40 Certificate issuer: /CN=30f8e2c0c87e93799e23284f36b8615db78783ab Certificate serial: 019B7C1252B699520AEE7DA409F6696D9891 Authority key identifier: 30:F8:E2:C0:C8:7E:93:79:9E:23:28:4F:36:B8:61:5D:B7:87:83:AB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MPjiwMh-k3meIyhPNrhhXbeHg6s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/99be4d-f8ec-4430-a9cd-7e12b87d06c2/1/bxJSZ4QkpRqkCuO8un8htf7K_EA.roa Signing time: Fri 02 Jan 2026 00:18:54 +0000 ROA not before: Fri 02 Jan 2026 00:18:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206420 IP address blocks: 185.186.248.0/22 maxlen: 22 185.212.12.0/22 maxlen: 22 2a0b:70c0::/32 maxlen: 32 2a0b:8c80::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/99be4d-f8ec-4430-a9cd-7e12b87d06c2/1/MPjiwMh-k3meIyhPNrhhXbeHg6s.crl rsync://rpki.ripe.net/repository/DEFAULT/9b/99be4d-f8ec-4430-a9cd-7e12b87d06c2/1/MPjiwMh-k3meIyhPNrhhXbeHg6s.mft rsync://rpki.ripe.net/repository/DEFAULT/MPjiwMh-k3meIyhPNrhhXbeHg6s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 18:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:52:b6:99:52:0a:ee:7d:a4:09:f6:69:6d:98:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30f8e2c0c87e93799e23284f36b8615db78783ab Validity Not Before: Jan 2 00:18:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6f1252678424a51aa40ae3bcba7f21b5fecafc40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:30:ce:9f:d8:9e:84:fd:0d:fb:0b:6e:f9:f3: cd:2a:73:55:fe:0b:3d:aa:d8:a0:6d:9f:5e:76:08: 34:d5:88:b6:d5:71:f0:92:fc:10:ba:34:ba:d6:18: ef:96:74:bc:da:dd:c9:6c:90:67:52:cc:e7:1d:f8: 4b:e3:93:9c:ad:12:0c:11:a5:f2:20:59:e7:3f:ba: 72:e0:b5:96:a8:2f:3a:53:68:08:49:01:38:08:42: b9:70:d5:c8:a3:3d:0c:e7:76:81:6c:8b:80:9e:bf: e1:ec:15:99:33:3d:af:22:fd:0b:53:c4:b5:72:34: d9:a7:86:d9:97:ad:62:c9:fa:c4:b9:dc:45:01:ed: 0e:1e:83:b6:da:b0:2e:a5:75:ac:62:50:84:ba:c1: ca:c3:54:8b:e3:e1:b7:26:d2:7c:a2:67:5c:a5:a3: e7:83:bd:73:f9:7c:82:7a:bc:a5:6e:85:b8:c5:ed: 69:1f:be:cf:0a:f5:b4:0b:93:d9:04:a2:da:71:af: 85:a7:04:e5:22:31:ee:9e:3f:28:81:5c:71:94:ca: f1:1e:73:c4:d8:f0:1c:91:51:8e:15:2b:d3:57:ce: ad:3e:cb:19:41:4d:d8:81:d5:9f:cd:4f:39:d9:57: bc:bb:bd:60:70:23:20:30:bb:c9:89:05:d2:e5:0f: 12:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:12:52:67:84:24:A5:1A:A4:0A:E3:BC:BA:7F:21:B5:FE:CA:FC:40 X509v3 Authority Key Identifier: keyid:30:F8:E2:C0:C8:7E:93:79:9E:23:28:4F:36:B8:61:5D:B7:87:83:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MPjiwMh-k3meIyhPNrhhXbeHg6s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/99be4d-f8ec-4430-a9cd-7e12b87d06c2/1/bxJSZ4QkpRqkCuO8un8htf7K_EA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/99be4d-f8ec-4430-a9cd-7e12b87d06c2/1/MPjiwMh-k3meIyhPNrhhXbeHg6s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.186.248.0/22 185.212.12.0/22 IPv6: 2a0b:70c0::/32 2a0b:8c80::/29 Signature Algorithm: sha256WithRSAEncryption 8b:38:96:01:24:92:e1:c0:ec:9e:29:5b:da:42:5b:d5:7e:e2: b8:82:c1:2c:0c:16:8c:de:bf:09:87:90:31:73:e7:29:b5:28: f2:51:3c:9c:a8:b7:17:82:2e:71:47:8c:05:c8:cd:8c:71:32: 27:e4:75:10:c7:11:e1:c4:9c:42:da:0e:0f:5e:30:71:4f:b0: 05:d1:cb:67:0e:ed:4a:17:69:e7:9a:e7:9c:3d:d8:13:0f:3a: 9f:c2:4a:20:fb:2d:4f:c2:f2:c0:55:50:72:59:67:e4:f4:87: 69:08:67:2e:4e:6c:e3:0b:b5:92:c8:2e:44:6c:1b:a5:e8:cc: 4f:82:69:e6:05:b7:d7:b7:39:8f:c8:96:6b:49:de:f8:d8:51: 40:61:3c:ae:44:55:8b:c9:28:3b:9f:61:8e:3d:94:11:da:6e: d7:96:f9:98:14:3e:62:5c:88:99:98:45:f4:ba:2f:5d:a2:48: f1:7f:2a:fc:85:30:6e:b3:72:1b:e4:38:fc:92:ef:6e:f8:9f: 6c:dc:ac:5a:dd:ec:1a:26:b7:a7:4e:f0:09:61:4b:ec:ef:99: 80:82:d3:80:3f:91:d3:48:fd:22:10:95:78:7e:19:ab:02:2a: 58:a4:74:f0:ee:e1:13:49:53:5c:72:e7:f4:b0:8b:43:a1:85: ef:a3:f6:e6 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZt8ElK2mVIK7n2kCfZpbZiRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwZjhlMmMwYzg3ZTkzNzk5ZTIzMjg0ZjM2Yjg2MTVkYjc4 NzgzYWIwHhcNMjYwMTAyMDAxODU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZjEyNTI2Nzg0MjRhNTFhYTQwYWUzYmNiYTdmMjFiNWZlY2FmYzQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArTDOn9iehP0N+wtu+fPNKnNV/gs9 qtigbZ9edgg01Yi21XHwkvwQujS61hjvlnS82t3JbJBnUsznHfhL45OcrRIMEaXy IFnnP7py4LWWqC86U2gISQE4CEK5cNXIoz0M53aBbIuAnr/h7BWZMz2vIv0LU8S1 cjTZp4bZl61iyfrEudxFAe0OHoO22rAupXWsYlCEusHKw1SL4+G3JtJ8omdcpaPn g71z+XyCerylboW4xe1pH77PCvW0C5PZBKLaca+FpwTlIjHunj8ogVxxlMrxHnPE 2PAckVGOFSvTV86tPssZQU3YgdWfzU852Ve8u71gcCMgMLvJiQXS5Q8SYwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFG8SUmeEJKUapArjvLp/IbX+yvxAMB8GA1UdIwQY MBaAFDD44sDIfpN5niMoTza4YV23h4OrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTVBqaXdNaC1rM21lSXloUE5yaGhYYmVIZzZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi85OWJlNGQtZjhlYy00NDMwLWE5Y2Qt N2UxMmI4N2QwNmMyLzEvYnhKU1o0UWtwUnFrQ3VPOHVuOGh0ZjdLX0VBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yi85OWJlNGQtZjhlYy00NDMwLWE5Y2QtN2UxMmI4N2QwNmMy LzEvTVBqaXdNaC1rM21lSXloUE5yaGhYYmVIZzZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDsGCCsGAQUFBwEHAQH/BCwwKjASBAIAATAMAwQCubr4AwQC udQMMBQEAgACMA4DBQAqC3DAAwUDKguMgDANBgkqhkiG9w0BAQsFAAOCAQEAiziW ASSS4cDsnilb2kJb1X7iuILBLAwWjN6/CYeQMXPnKbUo8lE8nKi3F4IucUeMBcjN jHEyJ+R1EMcR4cScQtoOD14wcU+wBdHLZw7tShdp55rnnD3YEw86n8JKIPstT8Ly wFVQclln5PSHaQhnLk5s4wu1ksguRGwbpejMT4Jp5gW317c5j8iWa0ne+NhRQGE8 rkRVi8koO59hjj2UEdpu15b5mBQ+YlyImZhF9LovXaJI8X8q/IUwbrNyG+Q4/JLv bvifbNysWt3sGia3p07wCWFL7O+ZgILTgD+R00j9IhCVeH4ZqwIqWKR08O7hE0lT XHLn9LCLQ6GF76P25g== -----END CERTIFICATE-----Generated at Tue Jan 27 04:11:26 2026 by rpki-client