This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/e15cf6-6f13-4d27-9166-b064660f704f/1/Bv3dTcxKi6DR1Gu5OdJV37yth8s.roa File: Bv3dTcxKi6DR1Gu5OdJV37yth8s.roa (raw, json) Hash identifier: DKEmCC9kN5nknxLmAp5xgLUSVdPR+QR7ELMugI9SFVs= Subject key identifier: 06:FD:DD:4D:CC:4A:8B:A0:D1:D4:6B:B9:39:D2:55:DF:BC:AD:87:CB Certificate issuer: /CN=c88c53b477c3bfa70b61f427b47994c2d1783458 Certificate serial: 019B7AC8FB98B0776A042009A91453A33255 Authority key identifier: C8:8C:53:B4:77:C3:BF:A7:0B:61:F4:27:B4:79:94:C2:D1:78:34:58 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yIxTtHfDv6cLYfQntHmUwtF4NFg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/e15cf6-6f13-4d27-9166-b064660f704f/1/Bv3dTcxKi6DR1Gu5OdJV37yth8s.roa Signing time: Thu 01 Jan 2026 18:19:10 +0000 ROA not before: Thu 01 Jan 2026 18:19:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197369 IP address blocks: 46.16.40.0/21 maxlen: 21 46.16.45.0/24 maxlen: 24 46.16.47.0/24 maxlen: 24 188.240.4.0/22 maxlen: 22 188.240.4.0/24 maxlen: 24 188.240.5.0/24 maxlen: 24 188.240.6.0/24 maxlen: 24 188.240.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/e15cf6-6f13-4d27-9166-b064660f704f/1/yIxTtHfDv6cLYfQntHmUwtF4NFg.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/e15cf6-6f13-4d27-9166-b064660f704f/1/yIxTtHfDv6cLYfQntHmUwtF4NFg.mft rsync://rpki.ripe.net/repository/DEFAULT/yIxTtHfDv6cLYfQntHmUwtF4NFg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:fb:98:b0:77:6a:04:20:09:a9:14:53:a3:32:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c88c53b477c3bfa70b61f427b47994c2d1783458 Validity Not Before: Jan 1 18:19:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=06fddd4dcc4a8ba0d1d46bb939d255dfbcad87cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:5b:a4:11:5b:73:5c:3a:5e:1f:dc:bc:b2:92: 79:c3:a6:ab:95:3f:3e:13:05:fe:1d:d4:36:dc:a8: a7:f1:50:ab:34:5d:6f:d6:32:f1:49:03:a8:a1:a9: 39:c4:f2:de:a6:7d:f0:bd:ba:16:a6:aa:18:7f:1e: 56:9c:82:eb:b9:76:83:05:08:8c:bd:55:7b:2b:52: 1f:08:a4:c6:22:9d:9f:99:33:5e:aa:84:2e:a0:58: 00:87:8c:c7:20:55:ed:00:f5:38:c5:07:60:14:07: 1a:66:2c:03:82:b0:f2:a4:dc:5e:b2:6c:f9:c2:20: 7d:b7:1f:d9:b8:22:52:63:82:5d:a4:df:c5:0d:19: 7b:ff:df:41:33:aa:b2:f7:a6:13:95:c5:43:3c:09: 2a:c3:1f:9f:73:86:c5:22:1b:67:7e:b0:1d:b7:94: d6:56:ad:ac:a3:0d:96:91:ec:39:c0:14:60:33:07: e9:89:31:f6:fa:73:09:46:14:c8:a0:f8:1c:4a:22: 27:a4:8d:fb:9c:1a:cf:31:db:02:71:bd:2b:b8:fa: 7b:92:c2:d4:a3:ec:44:1b:b3:1d:d6:e0:71:db:b4: af:c1:4a:5d:39:ae:4c:a4:5d:c3:e8:26:cb:cb:0f: a4:49:4b:e7:52:b5:b5:b0:fa:0a:3e:5d:50:98:bf: 70:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:FD:DD:4D:CC:4A:8B:A0:D1:D4:6B:B9:39:D2:55:DF:BC:AD:87:CB X509v3 Authority Key Identifier: keyid:C8:8C:53:B4:77:C3:BF:A7:0B:61:F4:27:B4:79:94:C2:D1:78:34:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yIxTtHfDv6cLYfQntHmUwtF4NFg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/e15cf6-6f13-4d27-9166-b064660f704f/1/Bv3dTcxKi6DR1Gu5OdJV37yth8s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/e15cf6-6f13-4d27-9166-b064660f704f/1/yIxTtHfDv6cLYfQntHmUwtF4NFg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.16.40.0/21 188.240.4.0/22 Signature Algorithm: sha256WithRSAEncryption 4e:f2:3f:6f:dc:88:89:56:51:e6:0e:f9:7b:4b:fb:e3:35:14: 7d:35:b2:c1:f0:44:9c:1f:af:a2:5a:77:e0:c0:d5:35:2a:ee: 43:03:bc:e0:1b:d1:78:ff:84:51:57:99:12:c5:fa:10:0e:51: 84:2e:d9:3e:24:95:14:e9:96:fe:f7:eb:32:ab:a3:4b:7a:2e: 38:5e:e7:97:05:5c:7e:9e:89:67:f7:c7:c0:10:3c:ca:c2:74: fe:39:04:09:e1:01:fb:a5:c5:32:32:46:0c:3f:25:2a:24:7f: dd:66:94:1d:0e:dc:14:6e:d3:aa:e9:24:86:54:78:70:6c:00: 10:4f:d5:00:ee:63:16:a6:63:92:7a:a7:e3:1e:39:91:5b:5c: 21:b7:5c:9b:cf:1f:0c:40:b5:28:a2:24:aa:ef:63:0e:32:52: b9:81:74:39:fd:9a:3a:90:bd:9a:9d:50:5f:2e:0b:fb:ca:6d: 92:43:61:c6:77:85:d7:99:7b:de:56:61:c1:75:b8:13:d6:f9: 1b:f9:a0:89:c2:75:b8:25:71:ff:f6:72:3e:32:17:ad:21:ee: 9c:ba:7b:70:bf:9f:c1:53:2b:b5:c7:df:4e:ec:99:94:16:49: d0:a4:19:98:28:f2:1a:ba:a5:87:62:05:84:61:43:c0:59:54: e8:7b:87:1a -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt6yPuYsHdqBCAJqRRTozJVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM4OGM1M2I0NzdjM2JmYTcwYjYxZjQyN2I0Nzk5NGMyZDE3 ODM0NTgwHhcNMjYwMTAxMTgxOTEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNmZkZGQ0ZGNjNGE4YmEwZDFkNDZiYjkzOWQyNTVkZmJjYWQ4N2NiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1FukEVtzXDpeH9y8spJ5w6arlT8+ EwX+HdQ23Kin8VCrNF1v1jLxSQOooak5xPLepn3wvboWpqoYfx5WnILruXaDBQiM vVV7K1IfCKTGIp2fmTNeqoQuoFgAh4zHIFXtAPU4xQdgFAcaZiwDgrDypNxesmz5 wiB9tx/ZuCJSY4JdpN/FDRl7/99BM6qy96YTlcVDPAkqwx+fc4bFIhtnfrAdt5TW Vq2sow2Wkew5wBRgMwfpiTH2+nMJRhTIoPgcSiInpI37nBrPMdsCcb0ruPp7ksLU o+xEG7Md1uBx27SvwUpdOa5MpF3D6CbLyw+kSUvnUrW1sPoKPl1QmL9w/wIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFAb93U3MSoug0dRruTnSVd+8rYfLMB8GA1UdIwQY MBaAFMiMU7R3w7+nC2H0J7R5lMLReDRYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveUl4VHRIZkR2NmNMWWZRbnRIbVV3dEY0TkZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi9lMTVjZjYtNmYxMy00ZDI3LTkxNjYt YjA2NDY2MGY3MDRmLzEvQnYzZFRjeEtpNkRSMUd1NU9kSlYzN3l0aDhzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi9lMTVjZjYtNmYxMy00ZDI3LTkxNjYtYjA2NDY2MGY3MDRm LzEveUl4VHRIZkR2NmNMWWZRbnRIbVV3dEY0TkZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDLhAoAwQC vPAEMA0GCSqGSIb3DQEBCwUAA4IBAQBO8j9v3IiJVlHmDvl7S/vjNRR9NbLB8ESc H6+iWnfgwNU1Ku5DA7zgG9F4/4RRV5kSxfoQDlGELtk+JJUU6Zb+9+syq6NLei44 XueXBVx+noln98fAEDzKwnT+OQQJ4QH7pcUyMkYMPyUqJH/dZpQdDtwUbtOq6SSG VHhwbAAQT9UA7mMWpmOSeqfjHjmRW1wht1ybzx8MQLUooiSq72MOMlK5gXQ5/Zo6 kL2anVBfLgv7ym2SQ2HGd4XXmXveVmHBdbgT1vkb+aCJwnW4JXH/9nI+MhetIe6c untwv5/BUyu1x99O7JmUFknQpBmYKPIauqWHYgWEYUPAWVToe4ca -----END CERTIFICATE-----Generated at Tue Feb 10 01:07:28 2026 by rpki-client