This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/bX-KLNVGnIlEI3qztkYKH2DlBnU.roa File: bX-KLNVGnIlEI3qztkYKH2DlBnU.roa (raw, json) Hash identifier: nWXxPMTuu3G4lm6Ie7J6tzfQCQ7eCYCMCWJl9L5pH0w= Subject key identifier: 6D:7F:8A:2C:D5:46:9C:89:44:23:7A:B3:B6:46:0A:1F:60:E5:06:75 Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478 Certificate serial: 019B76EAEF4D125AFEA71F9BF51F56BB1A01 Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/bX-KLNVGnIlEI3qztkYKH2DlBnU.roa Signing time: Thu 01 Jan 2026 00:17:46 +0000 ROA not before: Thu 01 Jan 2026 00:17:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51089 IP address blocks: 31.25.88.0/24 maxlen: 24 185.218.4.0/22 maxlen: 24 185.218.6.0/23 maxlen: 23 185.218.6.0/24 maxlen: 24 185.218.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.mft rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:ef:4d:12:5a:fe:a7:1f:9b:f5:1f:56:bb:1a:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478 Validity Not Before: Jan 1 00:17:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6d7f8a2cd5469c8944237ab3b6460a1f60e50675 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:19:a2:a5:57:71:f6:b0:40:e1:bd:12:b7:83: b6:e0:77:b3:5a:63:65:3e:e8:a3:ac:cb:53:44:cb: e3:4f:0d:c8:aa:13:b1:7c:dd:1a:9c:ec:03:53:10: 0a:3c:01:09:f0:59:3a:62:f3:b5:e6:12:bc:d8:cb: 76:bb:78:0a:18:c5:48:dd:33:03:2c:d0:fd:df:a3: d5:f4:41:ab:84:04:1f:5e:4a:b5:11:98:be:2c:f7: 8e:7d:19:de:df:64:60:d5:07:71:55:85:7c:a6:3b: 66:31:ac:9d:97:31:e7:07:d6:0c:0a:dc:2b:29:6d: b5:b5:1e:28:f2:26:88:b1:dd:65:83:e8:6a:5a:7d: db:79:c5:56:b2:78:13:82:14:24:73:ee:d3:63:72: f3:c8:24:d2:aa:81:c7:ff:93:6c:83:fd:12:0b:ab: 19:0e:13:9f:3a:64:0f:39:87:4a:33:b5:00:c8:70: a9:a8:8b:dd:22:77:9c:37:f0:02:59:59:22:65:08: 96:34:a2:1b:89:83:91:d3:88:2f:8b:a8:fd:23:b9: e6:80:47:27:34:4f:db:87:20:5a:a3:b4:e6:72:32: 0c:12:11:6c:de:ef:c7:e4:5d:c5:b4:fc:f5:ee:e5: 8a:e5:f2:c7:40:ba:33:6c:b2:e5:9f:3f:3a:3a:28: b8:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:7F:8A:2C:D5:46:9C:89:44:23:7A:B3:B6:46:0A:1F:60:E5:06:75 X509v3 Authority Key Identifier: keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/bX-KLNVGnIlEI3qztkYKH2DlBnU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.25.88.0/24 185.218.4.0/22 Signature Algorithm: sha256WithRSAEncryption 2c:bb:5d:5c:7c:87:ff:38:66:b6:7f:5b:a2:f9:ab:55:d9:0f: f6:8f:62:55:ee:87:12:ba:40:36:8d:52:3f:6d:7a:cd:8e:d8: 08:ff:d8:09:b6:44:4a:9a:9b:29:d1:5a:8f:d1:94:ab:3b:9d: bb:fc:e5:ec:c3:a0:89:42:d3:65:39:a9:11:aa:c3:c5:4f:4d: 00:ad:24:5e:7c:15:e8:a7:25:c7:fc:c1:0e:89:0b:a9:aa:70: bd:53:05:c9:d8:7d:6f:2d:fd:d5:83:f2:c4:13:fb:56:9d:18: f9:ff:99:71:2c:9c:8e:72:de:25:91:ae:07:01:6d:20:11:b9: 6f:cb:f7:d9:a9:9a:82:aa:eb:ca:fc:0c:0d:07:92:8b:51:ea: b3:ae:7c:7c:f2:fe:65:19:40:da:a4:9f:b3:6a:d6:9c:43:4a: c5:3d:6b:c4:e0:8c:d4:d7:d2:e4:18:86:6b:40:ab:46:96:27: 08:5b:0d:c9:28:cf:4f:6c:35:9f:0a:5c:e8:57:80:89:90:5f: b9:8e:ab:78:bf:85:e8:0e:29:60:4c:ae:77:8d:5d:6d:dd:1a: 4e:28:e9:c9:6f:4d:f5:a4:c9:e0:23:8f:8a:65:f9:4f:1c:d7: 61:f7:5c:01:81:3a:5a:bd:7d:50:57:42:69:ec:10:2d:fe:dd: 38:34:0c:d4 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt26u9NElr+px+b9R9WuxoBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhYzNkYWExYjE0ODUwZjJlNjFjNTkyYjIxOTE5MTVhNWU2 NWE0NzgwHhcNMjYwMTAxMDAxNzQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZDdmOGEyY2Q1NDY5Yzg5NDQyMzdhYjNiNjQ2MGExZjYwZTUwNjc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAshmipVdx9rBA4b0St4O24HezWmNl PuijrMtTRMvjTw3IqhOxfN0anOwDUxAKPAEJ8Fk6YvO15hK82Mt2u3gKGMVI3TMD LND936PV9EGrhAQfXkq1EZi+LPeOfRne32Rg1QdxVYV8pjtmMaydlzHnB9YMCtwr KW21tR4o8iaIsd1lg+hqWn3becVWsngTghQkc+7TY3LzyCTSqoHH/5Nsg/0SC6sZ DhOfOmQPOYdKM7UAyHCpqIvdInecN/ACWVkiZQiWNKIbiYOR04gvi6j9I7nmgEcn NE/bhyBao7TmcjIMEhFs3u/H5F3FtPz17uWK5fLHQLozbLLlnz86Oii4dQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFG1/iizVRpyJRCN6s7ZGCh9g5QZ1MB8GA1UdIwQY MBaAFCrD2qGxSFDy5hxZKyGRkVpeZaR4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS3NQYW9iRklVUExtSEZrcklaR1JXbDVscEhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC80MDViYmQtNTkxMy00ZTk1LThlNzUt ZmUwNjU5MTc2YTU2LzEvYlgtS0xOVkduSWxFSTNxenRrWUtIMkRsQm5VLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC80MDViYmQtNTkxMy00ZTk1LThlNzUtZmUwNjU5MTc2YTU2 LzEvS3NQYW9iRklVUExtSEZrcklaR1JXbDVscEhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAHxlYAwQC udoEMA0GCSqGSIb3DQEBCwUAA4IBAQAsu11cfIf/OGa2f1ui+atV2Q/2j2JV7ocS ukA2jVI/bXrNjtgI/9gJtkRKmpsp0VqP0ZSrO527/OXsw6CJQtNlOakRqsPFT00A rSRefBXopyXH/MEOiQupqnC9UwXJ2H1vLf3Vg/LEE/tWnRj5/5lxLJyOct4lka4H AW0gEblvy/fZqZqCquvK/AwNB5KLUeqzrnx88v5lGUDapJ+zatacQ0rFPWvE4IzU 19LkGIZrQKtGlicIWw3JKM9PbDWfClzoV4CJkF+5jqt4v4XoDilgTK53jV1t3RpO KOnJb031pMngI4+KZflPHNdh91wBgTpavX1QV0Jp7BAt/t04NAzU -----END CERTIFICATE-----Generated at Sun Jan 25 12:02:37 2026 by rpki-client