This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/0d2be9-da0b-4672-9b14-87314df7deb4/1/BBH0-UEj_izZzjdumwxoDh9yCBo.roa
File: BBH0-UEj_izZzjdumwxoDh9yCBo.roa (raw, json)
Hash identifier: 50KdJ5A5mJLrmaAuqmKloL7+FBLQEr6+0iywUZ44wnE=
Subject key identifier: 04:11:F4:F9:41:23:FE:2C:D9:CE:37:6E:9B:0C:68:0E:1F:72:08:1A
Certificate issuer: /CN=f6982561d2da17902f83effe132499f82d52f163
Certificate serial: 019B78353C3335BDD39497D695C5C3BFC87F
Authority key identifier: F6:98:25:61:D2:DA:17:90:2F:83:EF:FE:13:24:99:F8:2D:52:F1:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9pglYdLaF5Avg-_-EySZ-C1S8WM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/0d2be9-da0b-4672-9b14-87314df7deb4/1/BBH0-UEj_izZzjdumwxoDh9yCBo.roa
Signing time: Thu 01 Jan 2026 06:18:33 +0000
ROA not before: Thu 01 Jan 2026 06:18:33 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 13204
IP address blocks: 185.116.152.0/24 maxlen: 24
185.116.153.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/0d2be9-da0b-4672-9b14-87314df7deb4/1/9pglYdLaF5Avg-_-EySZ-C1S8WM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/0d2be9-da0b-4672-9b14-87314df7deb4/1/9pglYdLaF5Avg-_-EySZ-C1S8WM.mft
rsync://rpki.ripe.net/repository/DEFAULT/9pglYdLaF5Avg-_-EySZ-C1S8WM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 21:05:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:78:35:3c:33:35:bd:d3:94:97:d6:95:c5:c3:bf:c8:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6982561d2da17902f83effe132499f82d52f163
Validity
Not Before: Jan 1 06:18:33 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0411f4f94123fe2cd9ce376e9b0c680e1f72081a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:7f:0f:7f:3e:ca:80:a6:68:c3:d5:23:1d:14:
a7:ae:ff:fc:e5:8e:9f:10:00:5c:b4:83:ab:d9:35:
83:14:24:90:3b:33:33:b3:10:6d:a6:5a:c7:7a:30:
7b:58:d3:ba:14:86:fd:ad:34:b6:b1:1b:98:2c:82:
9e:a1:d2:6b:ff:ff:51:4c:44:c8:ad:75:5c:f3:28:
a0:24:94:52:5f:88:26:28:bb:2d:c3:b2:0f:4b:47:
30:ba:d4:28:cf:53:f1:03:32:af:3f:c0:d6:35:fa:
dc:4a:ec:57:c0:04:a3:be:a1:60:b6:6e:66:19:f3:
87:8a:e6:3c:ca:58:48:f6:39:ce:13:80:ba:03:6f:
8e:28:45:a1:96:bb:a5:fe:6c:77:43:0b:95:d4:0f:
fd:41:1c:a8:c1:ef:28:58:aa:8a:b1:bd:b1:b1:bf:
8d:7b:11:f2:ff:34:5a:23:78:27:a2:c6:c6:4e:d7:
7b:72:95:70:da:f7:19:51:e4:b4:55:23:7c:2c:3e:
fc:f7:ed:a7:e3:50:c6:d5:d6:4e:56:7f:e8:34:45:
b4:94:99:77:a9:40:44:24:8d:99:a7:c1:5a:f1:2a:
ad:da:aa:0d:8b:61:fa:be:0e:5e:ad:45:63:eb:44:
d7:1c:c0:a4:57:e9:c1:41:6f:e8:25:27:4a:88:e4:
75:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:11:F4:F9:41:23:FE:2C:D9:CE:37:6E:9B:0C:68:0E:1F:72:08:1A
X509v3 Authority Key Identifier:
keyid:F6:98:25:61:D2:DA:17:90:2F:83:EF:FE:13:24:99:F8:2D:52:F1:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9pglYdLaF5Avg-_-EySZ-C1S8WM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/0d2be9-da0b-4672-9b14-87314df7deb4/1/BBH0-UEj_izZzjdumwxoDh9yCBo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/0d2be9-da0b-4672-9b14-87314df7deb4/1/9pglYdLaF5Avg-_-EySZ-C1S8WM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.116.152.0/23
Signature Algorithm: sha256WithRSAEncryption
08:f3:02:86:96:88:b5:7c:be:7a:22:61:d3:fd:b9:8d:86:0b:
8b:02:0d:2a:82:d3:66:20:d3:26:f9:17:38:31:f0:d4:b7:a6:
d7:cd:f4:b0:7b:7a:ba:d1:c8:72:7a:8d:0d:ab:09:9a:ba:b5:
33:31:ea:6f:fd:21:b8:de:85:d4:b6:4d:7e:e6:a6:d0:8d:8e:
9f:88:8a:2f:9e:e6:b6:e4:d5:e9:c8:04:33:f2:fe:f1:a9:d2:
3f:53:4c:dd:f6:38:e2:69:39:2a:d3:8a:be:8a:50:f5:41:e1:
c1:38:00:35:24:76:a7:ce:e5:c8:60:8f:17:f7:09:17:49:cb:
4d:f6:90:7a:a4:e5:19:f9:09:c5:ab:39:da:0d:c8:d2:5e:cf:
3c:f7:86:40:02:34:01:9c:4c:eb:89:5b:03:d2:4c:a1:ea:55:
2b:81:18:d2:d1:94:4b:ad:a0:ee:f8:21:73:a5:0c:5c:c7:25:
de:c4:89:e2:a3:35:0f:50:15:38:5f:87:3f:e4:e3:8f:43:dc:
b0:e4:a6:d2:86:68:ee:c4:b3:c6:9d:1b:d6:23:51:09:88:bd:
9e:5f:36:f2:44:b7:71:df:79:f5:f1:42:85:8b:3c:3d:e8:af:
a2:52:32:74:7c:ed:cb:d6:ba:8d:b3:ee:03:ca:ea:24:d4:07:
f9:36:40:bf
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt4NTwzNb3TlJfWlcXDv8h/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2OTgyNTYxZDJkYTE3OTAyZjgzZWZmZTEzMjQ5OWY4MmQ1
MmYxNjMwHhcNMjYwMTAxMDYxODMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNDExZjRmOTQxMjNmZTJjZDljZTM3NmU5YjBjNjgwZTFmNzIwODFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyH8Pfz7KgKZow9UjHRSnrv/85Y6f
EABctIOr2TWDFCSQOzMzsxBtplrHejB7WNO6FIb9rTS2sRuYLIKeodJr//9RTETI
rXVc8yigJJRSX4gmKLstw7IPS0cwutQoz1PxAzKvP8DWNfrcSuxXwASjvqFgtm5m
GfOHiuY8ylhI9jnOE4C6A2+OKEWhlrul/mx3QwuV1A/9QRyowe8oWKqKsb2xsb+N
exHy/zRaI3gnosbGTtd7cpVw2vcZUeS0VSN8LD789+2n41DG1dZOVn/oNEW0lJl3
qUBEJI2Zp8Fa8Sqt2qoNi2H6vg5erUVj60TXHMCkV+nBQW/oJSdKiOR1zwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAQR9PlBI/4s2c43bpsMaA4fcggaMB8GA1UdIwQY
MBaAFPaYJWHS2heQL4Pv/hMkmfgtUvFjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOXBnbFlkTGFGNUF2Zy1fLUV5U1otQzFTOFdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi8wZDJiZTktZGEwYi00NjcyLTliMTQt
ODczMTRkZjdkZWI0LzEvQkJIMC1VRWpfaXpaempkdW13eG9EaDl5Q0JvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi8wZDJiZTktZGEwYi00NjcyLTliMTQtODczMTRkZjdkZWI0
LzEvOXBnbFlkTGFGNUF2Zy1fLUV5U1otQzFTOFdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuXSYMA0G
CSqGSIb3DQEBCwUAA4IBAQAI8wKGloi1fL56ImHT/bmNhguLAg0qgtNmINMm+Rc4
MfDUt6bXzfSwe3q60chyeo0NqwmaurUzMepv/SG43oXUtk1+5qbQjY6fiIovnua2
5NXpyAQz8v7xqdI/U0zd9jjiaTkq04q+ilD1QeHBOAA1JHanzuXIYI8X9wkXSctN
9pB6pOUZ+QnFqznaDcjSXs8894ZAAjQBnEzriVsD0kyh6lUrgRjS0ZRLraDu+CFz
pQxcxyXexIniozUPUBU4X4c/5OOPQ9yw5KbShmjuxLPGnRvWI1EJiL2eXzbyRLdx
33n18UKFizw96K+iUjJ0fO3L1rqNs+4Dyuok1Af5NkC/
-----END CERTIFICATE-----
Generated at Tue Feb 10 04:31:18 2026 by rpki-client