This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/bXta14-WukP-sD3mvhrFJ-diblM.roa File: bXta14-WukP-sD3mvhrFJ-diblM.roa (raw, json) Hash identifier: mvaQ8RJneVflOpMmhLqVGEU4MjH5zJ3p7ErO9d6FawE= Subject key identifier: 6D:7B:5A:D7:8F:96:BA:43:FE:B0:3D:E6:BE:1A:C5:27:E7:62:6E:53 Certificate issuer: /CN=e0dee1b06ba24a676213f976a4b50c129dcb2b73 Certificate serial: 019B79ED36155B4B84B05149AEA037BE7639 Authority key identifier: E0:DE:E1:B0:6B:A2:4A:67:62:13:F9:76:A4:B5:0C:12:9D:CB:2B:73 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4N7hsGuiSmdiE_l2pLUMEp3LK3M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/bXta14-WukP-sD3mvhrFJ-diblM.roa Signing time: Thu 01 Jan 2026 14:19:07 +0000 ROA not before: Thu 01 Jan 2026 14:19:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 2586 IP address blocks: 109.163.248.0/21 maxlen: 21 192.175.45.0/24 maxlen: 24 2001:671::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/4N7hsGuiSmdiE_l2pLUMEp3LK3M.crl rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/4N7hsGuiSmdiE_l2pLUMEp3LK3M.mft rsync://rpki.ripe.net/repository/DEFAULT/4N7hsGuiSmdiE_l2pLUMEp3LK3M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:36:15:5b:4b:84:b0:51:49:ae:a0:37:be:76:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e0dee1b06ba24a676213f976a4b50c129dcb2b73 Validity Not Before: Jan 1 14:19:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6d7b5ad78f96ba43feb03de6be1ac527e7626e53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:dd:60:e8:64:de:9e:b1:ed:bf:42:5a:65:a3: 7a:dd:0e:62:95:67:47:e0:c9:f9:b7:7a:95:97:88: 9d:01:78:82:d5:14:23:89:df:5b:1c:f9:3c:ff:fe: 65:66:24:ff:3f:5e:94:09:fe:bf:55:6b:b6:b7:f1: bc:6d:8b:dd:52:e0:90:a1:e4:d9:6b:25:b1:38:b2: 19:fb:10:b1:ad:05:ea:21:cb:4d:61:48:bb:b7:19: 66:11:5e:06:31:2d:a7:d1:11:f3:db:f4:a2:c5:ed: d8:74:b2:8e:8d:ee:7b:20:74:43:bc:11:f2:e9:47: d2:e8:4b:9f:75:1c:47:fa:ee:16:c8:3d:1a:d8:26: b9:a4:61:ea:5e:c0:33:05:68:fc:96:02:27:c4:22: 3c:e9:c5:ef:4f:e1:0d:44:50:5a:e1:23:32:cf:91: 25:58:cc:df:98:4d:f0:88:e1:39:ef:05:6b:05:ac: 74:5b:d8:3d:d9:22:30:fc:90:e2:44:e9:2e:bf:b1: 30:43:01:9a:1a:9c:70:11:ca:c1:5d:a8:f6:78:2f: 3f:ad:d8:be:23:5f:b5:48:2c:e4:0e:9c:5a:b5:b1: d4:36:78:be:8e:26:dc:0a:ee:2c:bf:da:fd:94:18: be:8a:9a:02:a3:06:a1:89:d7:2d:4a:ef:2b:e8:54: 89:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:7B:5A:D7:8F:96:BA:43:FE:B0:3D:E6:BE:1A:C5:27:E7:62:6E:53 X509v3 Authority Key Identifier: keyid:E0:DE:E1:B0:6B:A2:4A:67:62:13:F9:76:A4:B5:0C:12:9D:CB:2B:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4N7hsGuiSmdiE_l2pLUMEp3LK3M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/bXta14-WukP-sD3mvhrFJ-diblM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/4N7hsGuiSmdiE_l2pLUMEp3LK3M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.163.248.0/21 192.175.45.0/24 IPv6: 2001:671::/48 Signature Algorithm: sha256WithRSAEncryption 40:46:44:97:c2:96:db:51:78:c3:fa:b0:18:ac:9f:0b:8d:37: 98:55:fb:98:3c:fd:db:ab:72:b4:3a:52:d8:5e:33:5c:ad:ce: 77:ba:b9:f5:35:46:1b:51:0b:9e:6f:f3:e5:c2:2f:04:a3:f2: d1:7e:22:82:da:30:13:dc:e0:f2:57:4f:9b:1c:ff:38:44:c5: dd:ed:ea:cf:bb:01:5c:83:fc:d6:ea:6c:1c:45:08:92:d9:4b: 65:77:e4:89:a9:e8:10:77:bf:a7:43:3c:fd:0c:2c:14:17:f1: 6f:0e:5a:b4:85:a8:6b:6d:40:84:5f:88:c8:83:6e:5d:94:9c: 87:36:26:13:3b:15:4d:c0:c9:61:8d:c8:12:c8:52:7a:44:b1: c8:b6:aa:c6:5d:71:75:ae:2a:d1:ce:43:1b:cf:8d:df:7a:45: a8:ac:7b:69:e8:8a:d6:79:61:20:4e:ca:cd:56:a3:e5:3f:b8: 83:9b:ea:35:0a:94:bd:c9:54:f0:93:69:fa:ed:a4:7e:ae:86: 3e:99:cb:65:3d:2f:a6:50:b1:38:ce:d3:10:14:38:97:70:ce: 10:69:09:32:4f:5c:4f:b0:7b:6f:a1:87:ab:d4:e4:c8:4a:a6: 65:d5:75:42:a4:51:2f:33:85:01:00:d0:44:c3:55:2d:57:87: 43:3d:f1:f7 -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgISAZt57TYVW0uEsFFJrqA3vnY5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwZGVlMWIwNmJhMjRhNjc2MjEzZjk3NmE0YjUwYzEyOWRj YjJiNzMwHhcNMjYwMTAxMTQxOTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZDdiNWFkNzhmOTZiYTQzZmViMDNkZTZiZTFhYzUyN2U3NjI2ZTUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoN1g6GTenrHtv0JaZaN63Q5ilWdH 4Mn5t3qVl4idAXiC1RQjid9bHPk8//5lZiT/P16UCf6/VWu2t/G8bYvdUuCQoeTZ ayWxOLIZ+xCxrQXqIctNYUi7txlmEV4GMS2n0RHz2/Sixe3YdLKOje57IHRDvBHy 6UfS6EufdRxH+u4WyD0a2Ca5pGHqXsAzBWj8lgInxCI86cXvT+ENRFBa4SMyz5El WMzfmE3wiOE57wVrBax0W9g92SIw/JDiROkuv7EwQwGaGpxwEcrBXaj2eC8/rdi+ I1+1SCzkDpxatbHUNni+jibcCu4sv9r9lBi+ipoCowahidctSu8r6FSJBwIDAQAB o4ICIDCCAhwwHQYDVR0OBBYEFG17WtePlrpD/rA95r4axSfnYm5TMB8GA1UdIwQY MBaAFODe4bBrokpnYhP5dqS1DBKdyytzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNE43aHNHdWlTbWRpRV9sMnBMVU1FcDNMSzNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9jMjJkYzktYzdiYS00MTU2LWE3OWMt MTVlOTBiZjg3ZmFiLzEvYlh0YTE0LVd1a1Atc0QzbXZockZKLWRpYmxNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC9jMjJkYzktYzdiYS00MTU2LWE3OWMtMTVlOTBiZjg3ZmFi LzEvNE43aHNHdWlTbWRpRV9sMnBMVU1FcDNMSzNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQDbaP4AwQA wK8tMA8EAgACMAkDBwAgAQZxAAAwDQYJKoZIhvcNAQELBQADggEBAEBGRJfClttR eMP6sBisnwuNN5hV+5g8/durcrQ6UtheM1ytzne6ufU1RhtRC55v8+XCLwSj8tF+ IoLaMBPc4PJXT5sc/zhExd3t6s+7AVyD/NbqbBxFCJLZS2V35Imp6BB3v6dDPP0M LBQX8W8OWrSFqGttQIRfiMiDbl2UnIc2JhM7FU3AyWGNyBLIUnpEsci2qsZdcXWu KtHOQxvPjd96Raise2noitZ5YSBOys1Wo+U/uIOb6jUKlL3JVPCTafrtpH6uhj6Z y2U9L6ZQsTjO0xAUOJdwzhBpCTJPXE+we2+hh6vU5MhKpmXVdUKkUS8zhQEA0ETD VS1Xh0M98fc= -----END CERTIFICATE-----Generated at Sun Jan 25 22:28:49 2026 by rpki-client