This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/13b165-0986-4e93-b1b4-bbf7c70ef4b3/1/_BUMsTjl98MmLHvFrqovjD8YBPw.roa File: _BUMsTjl98MmLHvFrqovjD8YBPw.roa (raw, json) Hash identifier: ae3nr29GY4pUAfaoxVhHdX9CIL595T+FSAPmy0/E9aU= Subject key identifier: FC:15:0C:B1:38:E5:F7:C3:26:2C:7B:C5:AE:AA:2F:8C:3F:18:04:FC Certificate issuer: /CN=0d1a3131fe8bea9c8258313a0f24ba2a560b58d3 Certificate serial: 019B79EBFCEEE83ECEF324DD3B0694E25180 Authority key identifier: 0D:1A:31:31:FE:8B:EA:9C:82:58:31:3A:0F:24:BA:2A:56:0B:58:D3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DRoxMf6L6pyCWDE6DyS6KlYLWNM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/13b165-0986-4e93-b1b4-bbf7c70ef4b3/1/_BUMsTjl98MmLHvFrqovjD8YBPw.roa Signing time: Thu 01 Jan 2026 14:17:47 +0000 ROA not before: Thu 01 Jan 2026 14:17:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207056 IP address blocks: 185.167.120.0/24 maxlen: 24 185.167.121.0/24 maxlen: 24 185.167.122.0/24 maxlen: 24 185.167.123.0/24 maxlen: 24 2a0b:6a00::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/13b165-0986-4e93-b1b4-bbf7c70ef4b3/1/DRoxMf6L6pyCWDE6DyS6KlYLWNM.crl rsync://rpki.ripe.net/repository/DEFAULT/ce/13b165-0986-4e93-b1b4-bbf7c70ef4b3/1/DRoxMf6L6pyCWDE6DyS6KlYLWNM.mft rsync://rpki.ripe.net/repository/DEFAULT/DRoxMf6L6pyCWDE6DyS6KlYLWNM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:eb:fc:ee:e8:3e:ce:f3:24:dd:3b:06:94:e2:51:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d1a3131fe8bea9c8258313a0f24ba2a560b58d3 Validity Not Before: Jan 1 14:17:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fc150cb138e5f7c3262c7bc5aeaa2f8c3f1804fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:d1:92:b5:f8:19:06:11:47:bd:a2:eb:e6:8a: ab:c2:51:c8:cd:bc:37:fb:d9:37:18:18:d4:e6:0c: 8b:54:d5:6b:32:35:5f:43:c9:b4:35:63:66:de:c0: e4:cc:96:27:57:ad:96:29:17:66:b6:a3:1e:73:d3: 3e:5d:83:39:67:80:4e:6f:18:a7:0b:3a:3f:5c:2a: 8e:a0:bd:7d:84:90:f9:dd:f1:4a:77:e5:d1:67:1c: 3b:a6:63:8f:e4:44:87:a0:3f:65:15:74:b3:47:01: e9:63:f8:ed:36:f0:4e:ac:9d:82:9d:ce:9b:aa:f5: 31:c7:39:73:bb:b5:f1:41:cf:4d:bc:43:90:d8:59: 10:51:6e:93:94:b9:f6:74:57:7a:06:a2:fe:e2:7c: 7f:18:67:ce:82:82:58:64:d4:2d:7a:26:66:cc:b4: a6:f3:5a:41:ce:46:83:72:b3:a6:7d:66:84:96:86: 34:16:3b:61:c0:c9:a4:6c:8e:f4:df:74:4b:06:e4: 07:79:a4:ed:6c:0a:58:51:7c:85:01:46:0b:5b:c3: bd:31:7f:9a:39:b9:10:8c:dc:45:35:93:ac:af:0e: 4b:13:ab:62:7f:4d:de:74:2d:ab:84:85:35:5d:54: 48:4d:ea:9b:73:01:2d:8b:6c:1a:d8:df:43:ea:bd: 47:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:15:0C:B1:38:E5:F7:C3:26:2C:7B:C5:AE:AA:2F:8C:3F:18:04:FC X509v3 Authority Key Identifier: keyid:0D:1A:31:31:FE:8B:EA:9C:82:58:31:3A:0F:24:BA:2A:56:0B:58:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DRoxMf6L6pyCWDE6DyS6KlYLWNM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/13b165-0986-4e93-b1b4-bbf7c70ef4b3/1/_BUMsTjl98MmLHvFrqovjD8YBPw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/13b165-0986-4e93-b1b4-bbf7c70ef4b3/1/DRoxMf6L6pyCWDE6DyS6KlYLWNM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.167.120.0/22 IPv6: 2a0b:6a00::/29 Signature Algorithm: sha256WithRSAEncryption 34:1c:e2:fb:d8:0a:e7:d7:c1:de:4b:7f:fc:8e:f0:54:f5:bc: 53:49:ec:bb:33:9d:1d:35:9a:a0:93:12:b0:a6:c7:68:5d:93: 98:07:64:35:3f:ed:10:30:0b:58:3d:62:86:fd:64:e7:ec:e6: fb:51:76:d8:89:63:82:36:77:a7:09:c7:85:c8:c7:73:a9:62: 0a:e7:de:ee:6c:31:68:ae:bb:21:76:f9:fa:7e:35:29:0a:8c: 6d:43:fb:f3:ba:98:72:e6:13:60:67:e7:94:b9:72:dc:78:18: b6:45:b2:dd:08:21:85:a1:0a:52:ef:7e:a9:89:2e:4a:76:27: f0:7c:c5:10:b6:84:f4:a3:04:8a:4e:a6:3f:de:64:f5:eb:0e: 8f:e0:48:14:6f:59:9f:0a:fa:d6:01:e5:13:7a:86:9b:95:9f: 5d:d5:23:3b:85:ec:56:9a:b7:84:ed:86:ae:ca:df:d6:21:26: 1b:ae:46:c4:cb:64:89:50:4b:5c:a0:28:8d:e7:91:69:76:02: be:62:71:25:f9:ec:5e:1b:8e:1f:cd:0a:30:f6:31:36:2f:0f: 64:75:b6:4f:94:f3:fe:8a:7c:4c:46:5e:71:5c:f6:8c:ce:50: 44:28:93:aa:4d:f1:03:39:70:d2:6c:1b:dc:e9:80:5a:ce:e3: b5:08:66:67 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt56/zu6D7O8yTdOwaU4lGAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkMWEzMTMxZmU4YmVhOWM4MjU4MzEzYTBmMjRiYTJhNTYw YjU4ZDMwHhcNMjYwMTAxMTQxNzQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYzE1MGNiMTM4ZTVmN2MzMjYyYzdiYzVhZWFhMmY4YzNmMTgwNGZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh9GStfgZBhFHvaLr5oqrwlHIzbw3 +9k3GBjU5gyLVNVrMjVfQ8m0NWNm3sDkzJYnV62WKRdmtqMec9M+XYM5Z4BObxin Czo/XCqOoL19hJD53fFKd+XRZxw7pmOP5ESHoD9lFXSzRwHpY/jtNvBOrJ2Cnc6b qvUxxzlzu7XxQc9NvEOQ2FkQUW6TlLn2dFd6BqL+4nx/GGfOgoJYZNQteiZmzLSm 81pBzkaDcrOmfWaEloY0FjthwMmkbI7033RLBuQHeaTtbApYUXyFAUYLW8O9MX+a ObkQjNxFNZOsrw5LE6tif03edC2rhIU1XVRITeqbcwEti2wa2N9D6r1HCwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFPwVDLE45ffDJix7xa6qL4w/GAT8MB8GA1UdIwQY MBaAFA0aMTH+i+qcglgxOg8kuipWC1jTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFJveE1mNkw2cHlDV0RFNkR5UzZLbFlMV05NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS8xM2IxNjUtMDk4Ni00ZTkzLWIxYjQt YmJmN2M3MGVmNGIzLzEvX0JVTXNUamw5OE1tTEh2RnJxb3ZqRDhZQlB3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZS8xM2IxNjUtMDk4Ni00ZTkzLWIxYjQtYmJmN2M3MGVmNGIz LzEvRFJveE1mNkw2cHlDV0RFNkR5UzZLbFlMV05NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuad4MA0E AgACMAcDBQMqC2oAMA0GCSqGSIb3DQEBCwUAA4IBAQA0HOL72Arn18HeS3/8jvBU 9bxTSey7M50dNZqgkxKwpsdoXZOYB2Q1P+0QMAtYPWKG/WTn7Ob7UXbYiWOCNnen CceFyMdzqWIK597ubDForrshdvn6fjUpCoxtQ/vzuphy5hNgZ+eUuXLceBi2RbLd CCGFoQpS736piS5KdifwfMUQtoT0owSKTqY/3mT16w6P4EgUb1mfCvrWAeUTeoab lZ9d1SM7hexWmreE7Yauyt/WISYbrkbEy2SJUEtcoCiN55FpdgK+YnEl+exeG44f zQow9jE2Lw9kdbZPlPP+inxMRl5xXPaMzlBEKJOqTfEDOXDSbBvc6YBazuO1CGZn -----END CERTIFICATE-----Generated at Tue Feb 10 03:09:25 2026 by rpki-client