This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/78ebcb-dca8-42d6-af82-3ad6e5dc07d7/1/bbIN0Dzg266kgD3gaOLxYwDdIGk.roa File: bbIN0Dzg266kgD3gaOLxYwDdIGk.roa (raw, json) Hash identifier: UrKnfGvjgujZo+TnNEkx5AvYr9F7seRK/OurdxNlQvY= Subject key identifier: 6D:B2:0D:D0:3C:E0:DB:AE:A4:80:3D:E0:68:E2:F1:63:00:DD:20:69 Certificate issuer: /CN=23042278a7c6bc6ca56ee7afa24a2c81f3dcbefb Certificate serial: 019B7B366B5CDE127F631D3C4152A61ABD3D Authority key identifier: 23:04:22:78:A7:C6:BC:6C:A5:6E:E7:AF:A2:4A:2C:81:F3:DC:BE:FB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IwQieKfGvGylbuevokosgfPcvvs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/78ebcb-dca8-42d6-af82-3ad6e5dc07d7/1/bbIN0Dzg266kgD3gaOLxYwDdIGk.roa Signing time: Thu 01 Jan 2026 20:18:42 +0000 ROA not before: Thu 01 Jan 2026 20:18:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202569 IP address blocks: 185.160.124.0/24 maxlen: 24 185.160.125.0/24 maxlen: 24 185.160.126.0/23 maxlen: 23 185.160.126.0/24 maxlen: 24 185.160.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/78ebcb-dca8-42d6-af82-3ad6e5dc07d7/1/IwQieKfGvGylbuevokosgfPcvvs.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/78ebcb-dca8-42d6-af82-3ad6e5dc07d7/1/IwQieKfGvGylbuevokosgfPcvvs.mft rsync://rpki.ripe.net/repository/DEFAULT/IwQieKfGvGylbuevokosgfPcvvs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:6b:5c:de:12:7f:63:1d:3c:41:52:a6:1a:bd:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23042278a7c6bc6ca56ee7afa24a2c81f3dcbefb Validity Not Before: Jan 1 20:18:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6db20dd03ce0dbaea4803de068e2f16300dd2069 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:2f:2a:11:9c:51:4c:b3:50:cc:37:90:a6:fa: 12:b6:cb:71:53:7e:cc:14:aa:c7:ec:2d:9b:b5:83: 65:4f:5c:fc:dd:44:a5:32:10:43:20:55:1f:41:1e: eb:87:8c:89:10:a4:42:56:ab:52:e1:c1:91:2c:58: 91:67:cb:bd:eb:58:be:84:5f:6a:39:23:ad:99:7d: 2a:31:81:12:40:01:e8:32:04:14:65:1a:bb:00:66: 1d:bb:00:59:20:4e:91:59:5c:92:ae:7e:0f:d8:20: b7:f8:c2:50:d7:a8:67:f7:37:ad:e0:e0:55:c5:e4: ae:a5:7f:6d:dc:d4:9a:e6:6e:34:48:01:ad:9c:8f: d3:98:f0:a8:0f:d7:03:55:c9:c7:25:82:ac:55:95: a3:9b:8f:fa:d9:50:f8:24:e9:35:53:fe:20:ff:d2: 29:e9:2b:48:8b:cf:18:16:e9:83:f8:93:76:30:bc: 1c:1f:d8:d1:de:ce:bf:c2:7d:2d:28:e1:4f:4e:2f: 35:97:93:21:43:25:05:ee:7a:84:42:28:11:1f:f9: 61:82:b7:ea:02:36:43:d9:1c:b5:91:7c:9a:75:17: ac:be:13:be:5a:47:49:22:95:f5:ae:a3:0d:2c:fb: 6c:5b:d3:16:3a:ae:bd:55:e0:fb:bd:31:33:18:59: 78:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:B2:0D:D0:3C:E0:DB:AE:A4:80:3D:E0:68:E2:F1:63:00:DD:20:69 X509v3 Authority Key Identifier: keyid:23:04:22:78:A7:C6:BC:6C:A5:6E:E7:AF:A2:4A:2C:81:F3:DC:BE:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IwQieKfGvGylbuevokosgfPcvvs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/78ebcb-dca8-42d6-af82-3ad6e5dc07d7/1/bbIN0Dzg266kgD3gaOLxYwDdIGk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/78ebcb-dca8-42d6-af82-3ad6e5dc07d7/1/IwQieKfGvGylbuevokosgfPcvvs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.160.124.0/22 Signature Algorithm: sha256WithRSAEncryption 5d:90:11:69:0e:8c:b8:d9:bc:29:cb:6a:94:37:08:07:13:87: c7:87:76:d3:2d:6d:79:d1:3a:c3:2b:f7:3d:bf:3c:af:97:c5: 9d:99:eb:6b:5d:86:ab:07:ed:7b:6e:e7:e1:1c:46:b9:88:32: e2:d1:00:ab:cd:9d:9e:a4:d6:a3:ea:c8:35:ee:44:52:04:3f: 02:31:b1:4c:56:ec:de:64:ca:bc:09:5b:ae:44:56:2f:a3:20: 10:bc:b8:be:80:67:77:e7:5a:61:6a:ef:b8:90:43:ce:d5:62: eb:ce:8f:ea:6b:10:24:e2:aa:0c:8f:2e:d6:a3:3c:5f:98:c6: 2a:64:20:1f:f3:cb:23:21:cf:cf:91:e9:69:4d:56:da:f8:c1: 4e:61:2b:0b:dc:3e:11:21:8e:8f:ed:01:b3:2b:3d:59:30:39: ec:0b:fc:09:d4:cd:1d:5d:c5:fd:fe:0a:08:c6:1d:cb:f5:6c: 5d:70:e9:46:c4:44:30:68:e0:e7:46:4f:8e:3d:74:bc:f8:88: c2:6b:f2:22:0b:4d:48:d5:31:fc:bc:32:98:d2:5d:6b:6c:5d: b5:e6:8c:8e:ee:93:f7:84:7c:83:58:9f:4c:ff:98:c2:5b:b8: b2:9b:04:84:4d:b4:70:a9:6b:e8:6d:6e:9b:55:04:f5:5e:cd: 9f:fd:8f:f9 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7Nmtc3hJ/Yx08QVKmGr09MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzMDQyMjc4YTdjNmJjNmNhNTZlZTdhZmEyNGEyYzgxZjNk Y2JlZmIwHhcNMjYwMTAxMjAxODQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZGIyMGRkMDNjZTBkYmFlYTQ4MDNkZTA2OGUyZjE2MzAwZGQyMDY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsC8qEZxRTLNQzDeQpvoStstxU37M FKrH7C2btYNlT1z83USlMhBDIFUfQR7rh4yJEKRCVqtS4cGRLFiRZ8u961i+hF9q OSOtmX0qMYESQAHoMgQUZRq7AGYduwBZIE6RWVySrn4P2CC3+MJQ16hn9zet4OBV xeSupX9t3NSa5m40SAGtnI/TmPCoD9cDVcnHJYKsVZWjm4/62VD4JOk1U/4g/9Ip 6StIi88YFumD+JN2MLwcH9jR3s6/wn0tKOFPTi81l5MhQyUF7nqEQigRH/lhgrfq AjZD2Ry1kXyadResvhO+WkdJIpX1rqMNLPtsW9MWOq69VeD7vTEzGFl42wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFG2yDdA84NuupIA94Gji8WMA3SBpMB8GA1UdIwQY MBaAFCMEIninxrxspW7nr6JKLIHz3L77MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXdRaWVLZkd2R3lsYnVldm9rb3NnZlBjdnZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS83OGViY2ItZGNhOC00MmQ2LWFmODIt M2FkNmU1ZGMwN2Q3LzEvYmJJTjBEemcyNjZrZ0QzZ2FPTHhZd0RkSUdrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS83OGViY2ItZGNhOC00MmQ2LWFmODItM2FkNmU1ZGMwN2Q3 LzEvSXdRaWVLZkd2R3lsYnVldm9rb3NnZlBjdnZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuaB8MA0G CSqGSIb3DQEBCwUAA4IBAQBdkBFpDoy42bwpy2qUNwgHE4fHh3bTLW150TrDK/c9 vzyvl8WdmetrXYarB+17bufhHEa5iDLi0QCrzZ2epNaj6sg17kRSBD8CMbFMVuze ZMq8CVuuRFYvoyAQvLi+gGd351phau+4kEPO1WLrzo/qaxAk4qoMjy7WozxfmMYq ZCAf88sjIc/PkelpTVba+MFOYSsL3D4RIY6P7QGzKz1ZMDnsC/wJ1M0dXcX9/goI xh3L9WxdcOlGxEQwaODnRk+OPXS8+IjCa/IiC01I1TH8vDKY0l1rbF215oyO7pP3 hHyDWJ9M/5jCW7iymwSETbRwqWvobW6bVQT1Xs2f/Y/5 -----END CERTIFICATE-----Generated at Tue Feb 10 00:13:29 2026 by rpki-client