This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/bBojKVehlumh6Ast16SxahZ3K0s.roa File: bBojKVehlumh6Ast16SxahZ3K0s.roa (raw, json) Hash identifier: 1tb0mGMov/yRUa9MAYEK5/9XOpWqU57O4jNArw90xkI= Subject key identifier: 6C:1A:23:29:57:A1:96:E9:A1:E8:0B:2D:D7:A4:B1:6A:16:77:2B:4B Certificate issuer: /CN=aa1dc50a4b526df18e8b0a6565d7b9d58a75d315 Certificate serial: 019B7D5D188A04B540E9610A5EC5C66D48F5 Authority key identifier: AA:1D:C5:0A:4B:52:6D:F1:8E:8B:0A:65:65:D7:B9:D5:8A:75:D3:15 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh3FCktSbfGOiwplZde51Yp10xU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/bBojKVehlumh6Ast16SxahZ3K0s.roa Signing time: Fri 02 Jan 2026 06:20:11 +0000 ROA not before: Fri 02 Jan 2026 06:20:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44066 IP address blocks: 31.172.80.0/20 maxlen: 32 37.114.96.0/19 maxlen: 32 79.133.32.0/19 maxlen: 32 82.211.0.0/18 maxlen: 32 82.211.17.0/24 maxlen: 32 84.200.0.0/16 maxlen: 32 84.200.39.0/24 maxlen: 32 84.200.205.0/24 maxlen: 32 84.201.0.0/18 maxlen: 32 84.201.17.0/24 maxlen: 32 84.201.18.0/24 maxlen: 32 159.100.0.0/19 maxlen: 32 185.26.96.0/22 maxlen: 32 185.171.204.0/22 maxlen: 32 194.143.134.0/23 maxlen: 32 194.187.164.0/22 maxlen: 32 212.224.64.0/18 maxlen: 32 2001:1608::/32 maxlen: 48 2001:1638::/32 maxlen: 48 2a01:7e0::/29 maxlen: 48 2a01:7e0::/32 maxlen: 32 2a01:7e0:2f::/48 maxlen: 48 2a01:7e0:1fc::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.mft rsync://rpki.ripe.net/repository/DEFAULT/qh3FCktSbfGOiwplZde51Yp10xU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:18:8a:04:b5:40:e9:61:0a:5e:c5:c6:6d:48:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa1dc50a4b526df18e8b0a6565d7b9d58a75d315 Validity Not Before: Jan 2 06:20:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6c1a232957a196e9a1e80b2dd7a4b16a16772b4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:09:46:72:f2:60:28:4d:e9:8e:28:80:f1:fb: 78:2f:84:38:45:99:67:e4:5c:21:f2:6e:5d:b0:ea: 8c:4c:b1:b4:66:4f:1b:4b:03:74:35:f6:2c:5f:cf: 01:6c:86:04:4c:e2:ce:c4:4b:c6:11:16:15:ad:80: 91:87:0f:1d:17:ba:53:33:32:22:dd:46:15:db:60: 61:1a:ea:5c:be:76:9e:c4:c4:ae:a6:a1:58:d4:60: 3a:5e:d9:83:d9:73:15:12:9b:c1:4f:7c:93:c6:bf: bf:21:c1:b3:53:a9:32:da:5a:97:ba:92:95:f2:67: ca:a2:05:26:b7:fa:c3:93:b5:22:46:2e:cc:60:7e: 12:c1:9c:77:10:5a:51:1a:1b:76:66:19:e9:a7:91: 50:41:30:e3:87:e8:34:ae:35:df:ca:ef:c7:d1:fa: 67:2a:eb:e0:2d:df:f1:fb:d8:e6:f2:3f:df:53:c7: 58:fa:1f:77:86:15:86:d9:bc:3d:f8:eb:fb:91:99: 9a:3f:5b:9a:80:3b:87:a9:08:b3:a8:70:3e:d8:b1: dc:cc:08:a1:97:c1:78:1a:77:e1:d2:fd:98:ee:a0: 0e:a4:66:48:7b:e8:2f:a2:7a:8b:e0:53:fb:12:f4: 20:3b:7d:9f:5b:e2:98:5a:c6:5d:cc:89:bb:af:8e: 11:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:1A:23:29:57:A1:96:E9:A1:E8:0B:2D:D7:A4:B1:6A:16:77:2B:4B X509v3 Authority Key Identifier: keyid:AA:1D:C5:0A:4B:52:6D:F1:8E:8B:0A:65:65:D7:B9:D5:8A:75:D3:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh3FCktSbfGOiwplZde51Yp10xU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/bBojKVehlumh6Ast16SxahZ3K0s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.172.80.0/20 37.114.96.0/19 79.133.32.0/19 82.211.0.0/18 84.200.0.0-84.201.63.255 159.100.0.0/19 185.26.96.0/22 185.171.204.0/22 194.143.134.0/23 194.187.164.0/22 212.224.64.0/18 IPv6: 2001:1608::/32 2001:1638::/32 2a01:7e0::/29 Signature Algorithm: sha256WithRSAEncryption 8a:3b:45:53:ea:65:09:6c:ee:db:5f:a4:e2:c3:6e:39:d4:cb: bb:b4:aa:78:4b:2f:db:e9:37:a7:3b:32:4b:f3:62:75:0f:28: 12:10:81:ec:aa:87:07:62:8b:00:1b:1c:f9:9e:4e:fc:fc:7b: 03:d6:c1:2a:29:1c:ec:c5:d6:df:c0:17:b9:7c:7e:75:a0:5c: e6:bc:ff:b1:1c:c4:47:d0:7a:5c:bc:a6:c1:f4:39:74:39:ec: 4a:ee:65:75:ed:c0:39:32:3d:b6:60:f9:b9:5f:2b:83:18:71: 2e:90:27:f6:2f:0c:15:1c:e9:5a:fd:03:fd:50:39:ea:44:7b: 08:34:fd:b6:9b:57:4c:df:c1:4b:33:11:62:27:cd:6b:93:ad: d1:65:89:82:44:1a:36:ab:a7:ba:97:29:4b:cd:07:9c:85:d5: d1:a3:f2:ea:d2:84:cf:d1:60:02:f2:69:83:b2:85:d4:ec:fd: 1e:d6:8c:b9:1d:11:5c:f6:a8:e1:f7:04:af:ef:90:8e:f5:3a: 82:da:49:98:d1:1f:a9:b2:17:cb:eb:3f:6f:fb:5b:c6:c8:06: 02:29:36:16:79:1d:5d:ad:78:7a:0a:7b:fe:cf:8c:c7:16:65: 99:fa:3b:c0:f2:23:ab:d4:79:47:28:48:5e:c0:81:34:04:95: 3e:7b:49:6d -----BEGIN CERTIFICATE----- MIIFXTCCBEWgAwIBAgISAZt9XRiKBLVA6WEKXsXGbUj1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFhMWRjNTBhNGI1MjZkZjE4ZThiMGE2NTY1ZDdiOWQ1OGE3 NWQzMTUwHhcNMjYwMTAyMDYyMDExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YzFhMjMyOTU3YTE5NmU5YTFlODBiMmRkN2E0YjE2YTE2NzcyYjRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtAlGcvJgKE3pjiiA8ft4L4Q4RZln 5Fwh8m5dsOqMTLG0Zk8bSwN0NfYsX88BbIYETOLOxEvGERYVrYCRhw8dF7pTMzIi 3UYV22BhGupcvnaexMSupqFY1GA6XtmD2XMVEpvBT3yTxr+/IcGzU6ky2lqXupKV 8mfKogUmt/rDk7UiRi7MYH4SwZx3EFpRGht2Zhnpp5FQQTDjh+g0rjXfyu/H0fpn KuvgLd/x+9jm8j/fU8dY+h93hhWG2bw9+Ov7kZmaP1uagDuHqQizqHA+2LHczAih l8F4Gnfh0v2Y7qAOpGZIe+gvonqL4FP7EvQgO32fW+KYWsZdzIm7r44RDQIDAQAB o4ICaTCCAmUwHQYDVR0OBBYEFGwaIylXoZbpoegLLdeksWoWdytLMB8GA1UdIwQY MBaAFKodxQpLUm3xjosKZWXXudWKddMVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcWgzRkNrdFNiZkdPaXdwbFpkZTUxWXAxMHhVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy9mMjM5MjktNzM3NS00MWM4LTk5NzMt MzNkNzI4NDMzYzExLzEvYkJvaktWZWhsdW1oNkFzdDE2U3hhaFozSzBzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy9mMjM5MjktNzM3NS00MWM4LTk5NzMtMzNkNzI4NDMzYzEx LzEvcWgzRkNrdFNiZkdPaXdwbFpkZTUxWXAxMHhVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMH8GCCsGAQUFBwEHAQH/BHAwbjBPBAIAATBJAwQEH6xQAwQF JXJgAwQFT4UgAwQGUtMAMAsDAwNUyAMEBlTJAAMEBZ9kAAMEArkaYAMEArmrzAME AcKPhgMEAsK7pAMEBtTgQDAbBAIAAjAVAwUAIAEWCAMFACABFjgDBQMqAQfgMA0G CSqGSIb3DQEBCwUAA4IBAQCKO0VT6mUJbO7bX6Tiw2451Mu7tKp4Sy/b6TenOzJL 82J1DygSEIHsqocHYosAGxz5nk78/HsD1sEqKRzsxdbfwBe5fH51oFzmvP+xHMRH 0HpcvKbB9Dl0OexK7mV17cA5Mj22YPm5XyuDGHEukCf2LwwVHOla/QP9UDnqRHsI NP22m1dM38FLMxFiJ81rk63RZYmCRBo2q6e6lylLzQechdXRo/Lq0oTP0WAC8mmD soXU7P0e1oy5HRFc9qjh9wSv75CO9TqC2kmY0R+pshfL6z9v+1vGyAYCKTYWeR1d rXh6Cnv+z4zHFmWZ+jvA8iOr1HlHKEhewIE0BJU+e0lt -----END CERTIFICATE-----Generated at Sun Jan 25 09:19:29 2026 by rpki-client