This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/af41cb-ff91-459c-9a64-aba113f3e3ae/1/_bc090pdV_zEssTeMpRcQFCLxsQ.roa File: _bc090pdV_zEssTeMpRcQFCLxsQ.roa (raw, json) Hash identifier: b2HUi3BWlo2KpOBVeFkvC7UurEqR/J07z81OFa/x5to= Subject key identifier: FD:B7:34:F7:4A:5D:57:FC:C4:B2:C4:DE:32:94:5C:40:50:8B:C6:C4 Certificate issuer: /CN=48abf29fdef8570502f4b51be5ffc05c4d9b3465 Certificate serial: 019B77C72D67F1A08A8EEFEED24DA496D2BF Authority key identifier: 48:AB:F2:9F:DE:F8:57:05:02:F4:B5:1B:E5:FF:C0:5C:4D:9B:34:65 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SKvyn974VwUC9LUb5f_AXE2bNGU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/af41cb-ff91-459c-9a64-aba113f3e3ae/1/_bc090pdV_zEssTeMpRcQFCLxsQ.roa Signing time: Thu 01 Jan 2026 04:18:20 +0000 ROA not before: Thu 01 Jan 2026 04:18:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203392 IP address blocks: 185.140.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/af41cb-ff91-459c-9a64-aba113f3e3ae/1/SKvyn974VwUC9LUb5f_AXE2bNGU.crl rsync://rpki.ripe.net/repository/DEFAULT/29/af41cb-ff91-459c-9a64-aba113f3e3ae/1/SKvyn974VwUC9LUb5f_AXE2bNGU.mft rsync://rpki.ripe.net/repository/DEFAULT/SKvyn974VwUC9LUb5f_AXE2bNGU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:2d:67:f1:a0:8a:8e:ef:ee:d2:4d:a4:96:d2:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=48abf29fdef8570502f4b51be5ffc05c4d9b3465 Validity Not Before: Jan 1 04:18:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fdb734f74a5d57fcc4b2c4de32945c40508bc6c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:ad:89:54:a9:ce:00:71:c9:2f:b7:45:e2:f5: 78:52:d8:a1:d2:34:f8:91:5b:06:d0:86:24:86:46: 05:39:4a:5a:8b:5a:ba:a1:89:17:64:6f:e7:bf:53: e3:22:26:12:ac:8e:82:b8:05:9b:73:58:8a:a6:0c: 25:64:9e:1a:e4:65:74:d3:db:65:5e:fe:f2:55:a3: af:95:47:97:33:50:9d:d7:26:21:68:71:1c:6c:b0: 08:e8:35:b4:6d:f4:07:66:be:c7:41:fb:d7:70:1e: b8:98:6e:b7:da:b9:c9:d4:72:df:cb:a2:d3:29:ac: 70:59:cd:18:ad:91:ad:05:eb:1e:4d:88:70:c3:61: 2c:b3:4c:8a:e7:10:f0:c8:2c:0a:a4:87:f0:69:fa: a6:ae:d0:0b:ab:a4:a2:45:db:cb:04:2b:2d:6a:c4: ff:3e:d5:0f:bf:c2:aa:fd:df:91:1e:1a:18:7d:04: 84:57:df:7a:3f:9b:4c:0b:15:53:2a:94:93:47:eb: de:e0:91:47:26:b0:f0:30:65:7c:78:d6:c6:38:c8: f8:27:66:23:3d:2e:7b:d2:15:63:63:c5:16:09:b0: e1:77:cd:29:cc:d7:bc:2b:18:5c:a8:80:c2:5e:89: 46:e1:e0:d3:64:c5:1d:d8:e1:20:a5:8a:bf:2f:cd: 11:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:B7:34:F7:4A:5D:57:FC:C4:B2:C4:DE:32:94:5C:40:50:8B:C6:C4 X509v3 Authority Key Identifier: keyid:48:AB:F2:9F:DE:F8:57:05:02:F4:B5:1B:E5:FF:C0:5C:4D:9B:34:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SKvyn974VwUC9LUb5f_AXE2bNGU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/af41cb-ff91-459c-9a64-aba113f3e3ae/1/_bc090pdV_zEssTeMpRcQFCLxsQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/af41cb-ff91-459c-9a64-aba113f3e3ae/1/SKvyn974VwUC9LUb5f_AXE2bNGU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.140.233.0/24 Signature Algorithm: sha256WithRSAEncryption 1d:df:c3:23:cc:7c:8f:13:e4:8c:5c:ea:02:cc:bb:66:49:eb: 7f:41:eb:a4:d7:1e:df:22:e4:c9:39:b5:c8:32:95:30:75:7d: 6b:1e:23:32:de:e6:1a:70:e1:7c:28:05:ab:e4:09:c9:21:de: 00:9d:51:a4:6c:69:d3:8d:b8:66:53:bb:68:eb:24:98:b7:a8: 0e:2c:da:28:b8:bb:92:90:d7:09:f9:8a:75:dd:63:c6:6f:3a: f2:fe:9a:31:7c:ba:c7:64:ad:7d:d5:0c:cc:cc:d7:23:c1:a7: 07:b2:36:83:51:72:1c:54:d8:84:04:58:90:b1:02:f4:33:b7: a6:7e:76:fc:41:9d:70:ed:39:aa:a8:db:e2:5b:f3:dd:f1:d9: b5:68:0d:cf:c4:0f:8a:a3:f3:af:e1:e2:70:65:d9:67:f8:9f: d8:c4:7b:36:26:d5:4f:08:8c:5e:5b:f8:3f:8b:5f:de:9b:b8: bc:b2:8f:79:71:9d:9d:1e:47:ee:36:03:8e:75:26:59:5e:1c: fd:de:48:e1:69:ee:05:ff:19:10:4a:b3:56:41:16:19:03:5f: 69:ea:7a:3a:29:31:1c:8c:a2:0d:45:05:30:18:15:fa:14:8a: 09:6d:7c:af:7c:32:3f:57:0b:44:60:85:de:2b:57:ad:65:4f: 5a:74:cb:3b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xy1n8aCKju/u0k2kltK/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4YWJmMjlmZGVmODU3MDUwMmY0YjUxYmU1ZmZjMDVjNGQ5 YjM0NjUwHhcNMjYwMTAxMDQxODIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZGI3MzRmNzRhNWQ1N2ZjYzRiMmM0ZGUzMjk0NWM0MDUwOGJjNmM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3K2JVKnOAHHJL7dF4vV4Utih0jT4 kVsG0IYkhkYFOUpai1q6oYkXZG/nv1PjIiYSrI6CuAWbc1iKpgwlZJ4a5GV009tl Xv7yVaOvlUeXM1Cd1yYhaHEcbLAI6DW0bfQHZr7HQfvXcB64mG632rnJ1HLfy6LT KaxwWc0YrZGtBeseTYhww2Ess0yK5xDwyCwKpIfwafqmrtALq6SiRdvLBCstasT/ PtUPv8Kq/d+RHhoYfQSEV996P5tMCxVTKpSTR+ve4JFHJrDwMGV8eNbGOMj4J2Yj PS570hVjY8UWCbDhd80pzNe8KxhcqIDCXolG4eDTZMUd2OEgpYq/L80RZwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFP23NPdKXVf8xLLE3jKUXEBQi8bEMB8GA1UdIwQY MBaAFEir8p/e+FcFAvS1G+X/wFxNmzRlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU0t2eW45NzRWd1VDOUxVYjVmX0FYRTJiTkdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9hZjQxY2ItZmY5MS00NTljLTlhNjQt YWJhMTEzZjNlM2FlLzEvX2JjMDkwcGRWX3pFc3NUZU1wUmNRRkNMeHNRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS9hZjQxY2ItZmY5MS00NTljLTlhNjQtYWJhMTEzZjNlM2Fl LzEvU0t2eW45NzRWd1VDOUxVYjVmX0FYRTJiTkdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuYzpMA0G CSqGSIb3DQEBCwUAA4IBAQAd38MjzHyPE+SMXOoCzLtmSet/Qeuk1x7fIuTJObXI MpUwdX1rHiMy3uYacOF8KAWr5AnJId4AnVGkbGnTjbhmU7to6ySYt6gOLNoouLuS kNcJ+Yp13WPGbzry/poxfLrHZK191QzMzNcjwacHsjaDUXIcVNiEBFiQsQL0M7em fnb8QZ1w7TmqqNviW/Pd8dm1aA3PxA+Ko/Ov4eJwZdln+J/YxHs2JtVPCIxeW/g/ i1/em7i8so95cZ2dHkfuNgOOdSZZXhz93kjhae4F/xkQSrNWQRYZA19p6no6KTEc jKINRQUwGBX6FIoJbXyvfDI/VwtEYIXeK1etZU9adMs7 -----END CERTIFICATE-----Generated at Mon Jan 26 05:30:36 2026 by rpki-client