This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/75cfaa-59dc-4821-86b5-415cb5f0ba7e/1/bxe8_OOghXeeJNBS1LJite_JTKQ.roa File: bxe8_OOghXeeJNBS1LJite_JTKQ.roa (raw, json) Hash identifier: SNnvmAY3MhgDBPaAU8BXN9WC/xup6duxDsZh0j7XDCs= Subject key identifier: 6F:17:BC:FC:E3:A0:85:77:9E:24:D0:52:D4:B2:62:B5:EF:C9:4C:A4 Certificate issuer: /CN=8d2ec5b40c7172754255d626bf6c9213a3dafe6f Certificate serial: 019B7C80992FB65DA04CF669C3699A20FA71 Authority key identifier: 8D:2E:C5:B4:0C:71:72:75:42:55:D6:26:BF:6C:92:13:A3:DA:FE:6F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jS7FtAxxcnVCVdYmv2ySE6Pa_m8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/75cfaa-59dc-4821-86b5-415cb5f0ba7e/1/bxe8_OOghXeeJNBS1LJite_JTKQ.roa Signing time: Fri 02 Jan 2026 02:19:21 +0000 ROA not before: Fri 02 Jan 2026 02:19:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 13138 IP address blocks: 213.148.64.0/19 maxlen: 19 213.148.64.0/20 maxlen: 20 213.148.64.0/21 maxlen: 21 213.148.64.0/22 maxlen: 22 213.148.64.0/23 maxlen: 23 213.148.64.0/24 maxlen: 24 213.148.65.0/24 maxlen: 24 213.148.66.0/23 maxlen: 23 213.148.66.0/24 maxlen: 24 213.148.67.0/24 maxlen: 24 213.148.68.0/22 maxlen: 22 213.148.68.0/23 maxlen: 23 213.148.68.0/24 maxlen: 24 213.148.69.0/24 maxlen: 24 213.148.70.0/23 maxlen: 23 213.148.70.0/24 maxlen: 24 213.148.71.0/24 maxlen: 24 213.148.72.0/21 maxlen: 21 213.148.72.0/22 maxlen: 22 213.148.72.0/23 maxlen: 23 213.148.72.0/24 maxlen: 24 213.148.73.0/24 maxlen: 24 213.148.74.0/23 maxlen: 23 213.148.74.0/24 maxlen: 24 213.148.75.0/24 maxlen: 24 213.148.76.0/22 maxlen: 22 213.148.76.0/23 maxlen: 23 213.148.76.0/24 maxlen: 24 213.148.77.0/24 maxlen: 24 213.148.78.0/23 maxlen: 23 213.148.78.0/24 maxlen: 24 213.148.79.0/24 maxlen: 24 213.148.80.0/20 maxlen: 20 213.148.80.0/21 maxlen: 21 213.148.80.0/22 maxlen: 22 213.148.80.0/23 maxlen: 23 213.148.80.0/24 maxlen: 24 213.148.81.0/24 maxlen: 24 213.148.82.0/23 maxlen: 23 213.148.82.0/24 maxlen: 24 213.148.83.0/24 maxlen: 24 213.148.84.0/22 maxlen: 22 213.148.84.0/23 maxlen: 23 213.148.84.0/24 maxlen: 24 213.148.85.0/24 maxlen: 24 213.148.86.0/23 maxlen: 23 213.148.86.0/24 maxlen: 24 213.148.87.0/24 maxlen: 24 213.148.88.0/21 maxlen: 21 213.148.88.0/22 maxlen: 22 213.148.88.0/23 maxlen: 23 213.148.88.0/24 maxlen: 24 213.148.89.0/24 maxlen: 24 213.148.90.0/23 maxlen: 23 213.148.90.0/24 maxlen: 24 213.148.91.0/24 maxlen: 24 213.148.92.0/22 maxlen: 22 213.148.92.0/23 maxlen: 23 213.148.92.0/24 maxlen: 24 213.148.93.0/24 maxlen: 24 213.148.94.0/23 maxlen: 23 213.148.94.0/24 maxlen: 24 213.148.95.0/24 maxlen: 24 2a0d:5580::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/75cfaa-59dc-4821-86b5-415cb5f0ba7e/1/jS7FtAxxcnVCVdYmv2ySE6Pa_m8.crl rsync://rpki.ripe.net/repository/DEFAULT/6c/75cfaa-59dc-4821-86b5-415cb5f0ba7e/1/jS7FtAxxcnVCVdYmv2ySE6Pa_m8.mft rsync://rpki.ripe.net/repository/DEFAULT/jS7FtAxxcnVCVdYmv2ySE6Pa_m8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:99:2f:b6:5d:a0:4c:f6:69:c3:69:9a:20:fa:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d2ec5b40c7172754255d626bf6c9213a3dafe6f Validity Not Before: Jan 2 02:19:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6f17bcfce3a085779e24d052d4b262b5efc94ca4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:a4:0e:40:9c:0d:9b:fa:bd:69:f3:4e:a7:dd: 63:61:b4:ce:47:6e:2a:57:7e:37:37:c3:75:e0:b9: 65:1f:36:8b:63:f4:af:ac:cf:0f:e7:c1:e6:93:e8: e6:06:38:e7:98:99:10:f3:b6:91:c7:69:0c:1a:7b: 8c:4d:9f:47:7d:87:99:59:93:0c:61:9b:b5:b7:00: ea:ab:34:ca:34:af:0b:23:0d:ae:a6:b5:41:79:b6: ad:ce:b0:52:d7:ab:a6:fe:3c:9b:87:9d:15:e5:4c: 41:46:b8:31:6b:93:1d:cf:89:42:a8:f6:c4:4d:d4: d1:95:48:97:ea:0b:41:0b:6c:2d:48:71:2e:14:4f: 32:9d:52:e7:7f:de:53:e9:3d:5a:f3:96:4e:69:ab: ad:fa:cc:32:05:eb:19:e0:67:17:fb:93:0c:32:4b: 1f:05:46:6f:d8:0a:33:40:31:c7:34:98:28:58:60: b0:dd:63:c1:8c:ae:cf:92:5a:50:f4:54:3e:8f:4c: 1e:77:57:bd:e1:69:93:ec:90:b9:19:bb:79:4d:d3: 5c:d4:c1:29:2f:01:b2:d2:b6:7f:ff:6a:24:8b:9f: 18:77:d7:61:66:ac:9c:16:df:b5:ff:23:e9:a3:63: 82:ef:0f:e6:84:78:c7:a4:0c:72:ed:e1:88:60:49: c8:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:17:BC:FC:E3:A0:85:77:9E:24:D0:52:D4:B2:62:B5:EF:C9:4C:A4 X509v3 Authority Key Identifier: keyid:8D:2E:C5:B4:0C:71:72:75:42:55:D6:26:BF:6C:92:13:A3:DA:FE:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jS7FtAxxcnVCVdYmv2ySE6Pa_m8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/75cfaa-59dc-4821-86b5-415cb5f0ba7e/1/bxe8_OOghXeeJNBS1LJite_JTKQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/75cfaa-59dc-4821-86b5-415cb5f0ba7e/1/jS7FtAxxcnVCVdYmv2ySE6Pa_m8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.148.64.0/19 IPv6: 2a0d:5580::/29 Signature Algorithm: sha256WithRSAEncryption 19:27:64:49:16:71:aa:e8:d3:1a:f0:41:d6:ec:e2:29:16:69: 60:f3:96:f6:74:d6:6f:95:f6:25:fd:7e:ef:95:83:ec:9c:44: b8:d1:16:9c:73:90:f1:3e:a6:c0:6d:19:9a:f4:e1:0e:96:f1: 5d:83:c7:94:a6:11:0d:68:23:65:5f:03:84:14:46:70:d7:7e: 24:a1:e2:15:e6:39:24:61:74:aa:54:17:5a:5b:e7:f8:8c:47: 86:3c:1b:bc:cd:e4:29:00:03:7b:ed:72:32:76:52:05:82:40: 72:ef:fe:14:f0:3f:52:16:e5:a9:48:02:9b:10:9a:6e:12:05: 67:66:f8:03:d8:51:3e:da:cb:b9:36:0a:5e:7a:5c:01:dc:f2: 67:47:16:c1:05:a8:87:f7:7d:c8:a1:b9:51:4d:95:8b:54:93: f5:85:4e:10:62:a8:cc:48:53:38:38:ed:f3:b5:69:d5:38:f4: ca:be:00:e2:81:24:fe:9b:71:72:e1:d6:01:3c:0f:37:f5:26: 0a:d6:1c:4f:80:21:22:ea:73:d0:50:8c:94:43:2b:2c:23:dc: 63:62:4c:2c:b3:34:51:c7:2e:c6:ff:70:09:f5:8b:c1:c3:c4: 3e:1d:ad:38:6c:25:a5:6d:d4:30:d8:00:58:51:54:3e:9b:93: 1a:bb:57:8a -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt8gJkvtl2gTPZpw2maIPpxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkMmVjNWI0MGM3MTcyNzU0MjU1ZDYyNmJmNmM5MjEzYTNk YWZlNmYwHhcNMjYwMTAyMDIxOTIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZjE3YmNmY2UzYTA4NTc3OWUyNGQwNTJkNGIyNjJiNWVmYzk0Y2E0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwaQOQJwNm/q9afNOp91jYbTOR24q V343N8N14LllHzaLY/SvrM8P58Hmk+jmBjjnmJkQ87aRx2kMGnuMTZ9HfYeZWZMM YZu1twDqqzTKNK8LIw2uprVBebatzrBS16um/jybh50V5UxBRrgxa5Mdz4lCqPbE TdTRlUiX6gtBC2wtSHEuFE8ynVLnf95T6T1a85ZOaaut+swyBesZ4GcX+5MMMksf BUZv2AozQDHHNJgoWGCw3WPBjK7PklpQ9FQ+j0wed1e94WmT7JC5Gbt5TdNc1MEp LwGy0rZ//2oki58Yd9dhZqycFt+1/yPpo2OC7w/mhHjHpAxy7eGIYEnIiwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFG8XvPzjoIV3niTQUtSyYrXvyUykMB8GA1UdIwQY MBaAFI0uxbQMcXJ1QlXWJr9skhOj2v5vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvalM3RnRBeHhjblZDVmRZbXYyeVNFNlBhX204LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy83NWNmYWEtNTlkYy00ODIxLTg2YjUt NDE1Y2I1ZjBiYTdlLzEvYnhlOF9PT2doWGVlSk5CUzFMSml0ZV9KVEtRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yy83NWNmYWEtNTlkYy00ODIxLTg2YjUtNDE1Y2I1ZjBiYTdl LzEvalM3RnRBeHhjblZDVmRZbXYyeVNFNlBhX204LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQF1ZRAMA0E AgACMAcDBQMqDVWAMA0GCSqGSIb3DQEBCwUAA4IBAQAZJ2RJFnGq6NMa8EHW7OIp Fmlg85b2dNZvlfYl/X7vlYPsnES40Racc5DxPqbAbRma9OEOlvFdg8eUphENaCNl XwOEFEZw134koeIV5jkkYXSqVBdaW+f4jEeGPBu8zeQpAAN77XIydlIFgkBy7/4U 8D9SFuWpSAKbEJpuEgVnZvgD2FE+2su5NgpeelwB3PJnRxbBBaiH933IoblRTZWL VJP1hU4QYqjMSFM4OO3ztWnVOPTKvgDigST+m3Fy4dYBPA839SYK1hxPgCEi6nPQ UIyUQyssI9xjYkwsszRRxy7G/3AJ9YvBw8Q+Ha04bCWlbdQw2ABYUVQ+m5Mau1eK -----END CERTIFICATE-----Generated at Mon Jan 26 01:52:43 2026 by rpki-client