This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/bBxPW_zCXUaubRtG39KVnEQLrDk.roa File: bBxPW_zCXUaubRtG39KVnEQLrDk.roa (raw, json) Hash identifier: 6JqVWigaUqWLIrSVZPhejuc/cdeerKyT5VxfwlA17pg= Subject key identifier: 6C:1C:4F:5B:FC:C2:5D:46:AE:6D:1B:46:DF:D2:95:9C:44:0B:AC:39 Certificate issuer: /CN=f324581e4368825d5e13f4f2a0d6ff8e484c95e6 Certificate serial: 019B78A317FB46ED5DAEBF16CE37698C53AE Authority key identifier: F3:24:58:1E:43:68:82:5D:5E:13:F4:F2:A0:D6:FF:8E:48:4C:95:E6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8yRYHkNogl1eE_TyoNb_jkhMleY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/bBxPW_zCXUaubRtG39KVnEQLrDk.roa Signing time: Thu 01 Jan 2026 08:18:33 +0000 ROA not before: Thu 01 Jan 2026 08:18:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 7720 IP address blocks: 109.205.193.0/24 maxlen: 24 2a01:fb01::/32 maxlen: 32 2a01:fb05:5000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/8yRYHkNogl1eE_TyoNb_jkhMleY.crl rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/8yRYHkNogl1eE_TyoNb_jkhMleY.mft rsync://rpki.ripe.net/repository/DEFAULT/8yRYHkNogl1eE_TyoNb_jkhMleY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 08:02:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:17:fb:46:ed:5d:ae:bf:16:ce:37:69:8c:53:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f324581e4368825d5e13f4f2a0d6ff8e484c95e6 Validity Not Before: Jan 1 08:18:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6c1c4f5bfcc25d46ae6d1b46dfd2959c440bac39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:a2:8f:f7:59:4b:88:1a:e5:02:3f:76:b1:5a: 0e:1f:07:8b:b7:e3:57:a3:7c:59:74:40:47:11:68: c8:d8:56:12:26:74:75:9a:79:f0:25:1e:9b:e3:21: 28:d6:c0:5c:f0:31:8b:c8:6c:c8:11:08:c4:f1:95: 4a:64:86:b7:f7:68:29:dc:5f:af:c4:c8:39:7f:18: 8b:c9:19:ef:4b:8d:57:d4:63:85:37:71:ba:fe:e7: 6f:80:62:4d:7c:04:a5:6e:87:79:ed:98:f4:12:e3: 7a:b0:64:fd:e9:6b:18:f6:de:9d:c1:b9:df:a4:96: 83:0f:3f:ed:32:80:78:a4:1c:88:ff:f0:dc:89:61: 1d:f7:19:c1:8b:56:e1:24:e1:44:b5:91:c3:61:6c: 86:91:d0:5d:54:ad:62:5d:d4:23:af:cf:7d:98:02: 19:73:69:ac:30:a9:c6:4b:8d:86:48:20:b7:c2:c0: 3b:75:11:28:4e:76:d8:c2:c3:5e:3a:6b:4b:11:59: db:f4:66:f4:0e:94:09:50:4d:7e:e8:48:62:d9:9a: 05:1f:53:7b:25:9f:36:bc:d9:42:6c:f0:f3:c3:da: d5:62:80:0b:32:3a:c3:b9:3c:89:12:b8:ab:6f:0f: 73:94:81:d5:7f:6c:fc:57:46:40:44:75:d3:92:4b: 59:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:1C:4F:5B:FC:C2:5D:46:AE:6D:1B:46:DF:D2:95:9C:44:0B:AC:39 X509v3 Authority Key Identifier: keyid:F3:24:58:1E:43:68:82:5D:5E:13:F4:F2:A0:D6:FF:8E:48:4C:95:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8yRYHkNogl1eE_TyoNb_jkhMleY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/bBxPW_zCXUaubRtG39KVnEQLrDk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/8yRYHkNogl1eE_TyoNb_jkhMleY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.205.193.0/24 IPv6: 2a01:fb01::/32 2a01:fb05:5000::/36 Signature Algorithm: sha256WithRSAEncryption 03:a2:6e:d9:2c:47:88:49:21:a3:76:3e:5c:fa:a3:2d:6c:5f: 41:b1:07:1e:a3:e1:74:d9:ba:12:fb:c4:09:f4:ff:64:9e:49: 74:5a:fe:d0:b7:f9:8f:4e:a8:33:a0:a7:24:a2:a0:d6:90:31: 6d:b6:73:2f:35:e6:48:5c:3c:a2:fe:01:87:f9:bc:9c:6b:1b: 9c:d6:73:e0:e3:d9:cc:97:ad:99:ea:77:cf:b8:99:9e:9e:ef: 5b:e6:69:43:93:e5:37:fe:4c:e1:a2:8b:d8:7c:6f:f5:c0:38: ce:53:2b:f2:c9:11:c4:34:f0:c6:88:28:24:f8:24:b4:81:f6: 5b:89:d6:1f:09:b3:c9:aa:ac:2b:1e:5d:58:cc:4e:dc:25:df: 94:6d:fc:e8:8e:e5:ca:4f:e9:0e:bb:43:ee:77:83:86:49:1b: b9:b6:2a:2a:7e:7a:fc:8e:44:3b:6d:70:81:be:f5:06:6e:50: f3:0e:cb:83:25:37:91:a4:29:6f:b1:b9:93:04:f2:21:d4:a6: a2:83:80:d8:23:00:0a:03:a9:c3:cb:db:a6:69:8c:9b:ca:43: b4:ff:6f:ca:67:17:b2:f3:5c:02:2c:3b:82:8d:ce:0d:90:00: 7c:be:d7:1c:14:a5:46:d1:9c:29:a7:74:87:fa:c7:e6:07:26: 4c:26:e7:cb -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgISAZt4oxf7Ru1drr8WzjdpjFOuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYzMjQ1ODFlNDM2ODgyNWQ1ZTEzZjRmMmEwZDZmZjhlNDg0 Yzk1ZTYwHhcNMjYwMTAxMDgxODMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YzFjNGY1YmZjYzI1ZDQ2YWU2ZDFiNDZkZmQyOTU5YzQ0MGJhYzM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsqKP91lLiBrlAj92sVoOHweLt+NX o3xZdEBHEWjI2FYSJnR1mnnwJR6b4yEo1sBc8DGLyGzIEQjE8ZVKZIa392gp3F+v xMg5fxiLyRnvS41X1GOFN3G6/udvgGJNfASlbod57Zj0EuN6sGT96WsY9t6dwbnf pJaDDz/tMoB4pByI//DciWEd9xnBi1bhJOFEtZHDYWyGkdBdVK1iXdQjr899mAIZ c2msMKnGS42GSCC3wsA7dREoTnbYwsNeOmtLEVnb9Gb0DpQJUE1+6Ehi2ZoFH1N7 JZ82vNlCbPDzw9rVYoALMjrDuTyJErirbw9zlIHVf2z8V0ZARHXTkktZ3wIDAQAB o4ICIDCCAhwwHQYDVR0OBBYEFGwcT1v8wl1Grm0bRt/SlZxEC6w5MB8GA1UdIwQY MBaAFPMkWB5DaIJdXhP08qDW/45ITJXmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOHlSWUhrTm9nbDFlRV9UeW9OYl9qa2hNbGVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS82YjkxYWItOTlkYi00NjQ4LWIxNTMt NmUyZDk3Y2ExNWZmLzEvYkJ4UFdfekNYVWF1YlJ0RzM5S1ZuRVFMckRrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYS82YjkxYWItOTlkYi00NjQ4LWIxNTMtNmUyZDk3Y2ExNWZm LzEvOHlSWUhrTm9nbDFlRV9UeW9OYl9qa2hNbGVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTAMBAIAATAGAwQAbc3BMBUE AgACMA8DBQAqAfsBAwYEKgH7BVAwDQYJKoZIhvcNAQELBQADggEBAAOibtksR4hJ IaN2Plz6oy1sX0GxBx6j4XTZuhL7xAn0/2SeSXRa/tC3+Y9OqDOgpySioNaQMW22 cy815khcPKL+AYf5vJxrG5zWc+Dj2cyXrZnqd8+4mZ6e71vmaUOT5Tf+TOGii9h8 b/XAOM5TK/LJEcQ08MaIKCT4JLSB9luJ1h8Js8mqrCseXVjMTtwl35Rt/OiO5cpP 6Q67Q+53g4ZJG7m2Kip+evyORDttcIG+9QZuUPMOy4MlN5GkKW+xuZME8iHUpqKD gNgjAAoDqcPL26ZpjJvKQ7T/b8pnF7LzXAIsO4KNzg2QAHy+1xwUpUbRnCmndIf6 x+YHJkwm58s= -----END CERTIFICATE-----Generated at Mon Jan 19 14:40:08 2026 by rpki-client