This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/buqYzFTyi7wPpzd9BAt1N0qAHXU.roa File: buqYzFTyi7wPpzd9BAt1N0qAHXU.roa (raw, json) Hash identifier: 7fssqNhBi5yImjk1Vr2WL9ol/xv6RFd9KhgAwqTB6Mg= Subject key identifier: 6E:EA:98:CC:54:F2:8B:BC:0F:A7:37:7D:04:0B:75:37:4A:80:1D:75 Certificate issuer: /CN=ab54fe831b6a719f42e6c8486fd03b550be761fb Certificate serial: 019BB8080E84069CD46E97FDACA0C45E5CE4 Authority key identifier: AB:54:FE:83:1B:6A:71:9F:42:E6:C8:48:6F:D0:3B:55:0B:E7:61:FB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q1T-gxtqcZ9C5shIb9A7VQvnYfs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/buqYzFTyi7wPpzd9BAt1N0qAHXU.roa Signing time: Tue 13 Jan 2026 15:44:54 +0000 ROA not before: Tue 13 Jan 2026 15:44:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57542 IP address blocks: 185.1.237.0/24 maxlen: 24 2001:7f8:127::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/q1T-gxtqcZ9C5shIb9A7VQvnYfs.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/q1T-gxtqcZ9C5shIb9A7VQvnYfs.mft rsync://rpki.ripe.net/repository/DEFAULT/q1T-gxtqcZ9C5shIb9A7VQvnYfs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b8:08:0e:84:06:9c:d4:6e:97:fd:ac:a0:c4:5e:5c:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab54fe831b6a719f42e6c8486fd03b550be761fb Validity Not Before: Jan 13 15:44:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6eea98cc54f28bbc0fa7377d040b75374a801d75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:ce:09:16:6f:11:7a:cb:a2:a2:68:a8:23:3d: 1b:a1:60:f0:41:33:4e:1b:45:dd:14:ec:f1:be:47: 0c:3c:77:9d:5a:5f:eb:03:dd:1a:0b:2b:f7:ba:76: c2:dd:94:4b:dc:c2:bf:fe:de:c7:5c:19:3a:7a:65: 64:ad:24:9a:3b:2b:d6:5e:54:98:58:5d:2c:9d:f1: 76:ec:1b:be:02:1f:ad:02:ac:f1:7c:4f:e6:d1:a6: ce:b8:45:b4:98:85:dc:46:6c:b2:27:18:d7:a1:00: 12:af:83:2b:e2:ec:af:62:bc:7a:db:6e:16:5d:aa: 59:9f:4c:4a:4b:41:1a:65:4b:f2:e2:95:8e:3a:cf: e3:90:a9:c8:b1:b1:05:42:9a:64:b1:aa:04:83:c7: 98:b8:6a:44:ba:37:35:f0:06:e7:0a:34:51:51:62: 47:da:24:a3:2b:32:a4:dc:49:93:7c:25:63:8e:43: cf:d9:51:ea:14:84:d3:74:ad:9c:c1:e7:fa:fa:ae: 15:a9:18:9a:cc:4b:43:8f:40:98:5e:69:90:89:36: 63:4b:bf:2f:5e:0e:97:18:1d:e2:59:d2:fc:6a:0d: 81:62:af:dc:0d:ce:7c:91:f8:72:6f:8f:1c:43:5a: f2:df:4c:a2:c2:19:be:7b:62:36:48:a7:bb:af:36: 37:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:EA:98:CC:54:F2:8B:BC:0F:A7:37:7D:04:0B:75:37:4A:80:1D:75 X509v3 Authority Key Identifier: keyid:AB:54:FE:83:1B:6A:71:9F:42:E6:C8:48:6F:D0:3B:55:0B:E7:61:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q1T-gxtqcZ9C5shIb9A7VQvnYfs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/buqYzFTyi7wPpzd9BAt1N0qAHXU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/q1T-gxtqcZ9C5shIb9A7VQvnYfs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.1.237.0/24 IPv6: 2001:7f8:127::/48 Signature Algorithm: sha256WithRSAEncryption 8c:c7:4f:44:9a:31:d3:99:b0:dc:dd:b1:c2:36:2d:88:04:8d: 62:08:54:72:e0:28:74:6f:43:33:8b:bb:df:8d:71:72:39:4f: bc:78:5a:a6:28:77:7c:99:24:ee:13:cb:09:f7:07:eb:68:77: ce:cb:8c:76:c2:84:6b:b5:3b:3b:21:83:fa:a6:91:05:ae:4f: 8d:b8:53:33:69:59:b3:91:26:ee:e3:3e:82:b2:1b:0f:55:1c: 2a:18:8c:d7:bd:db:f3:a1:30:da:7d:a1:ec:d0:bf:17:c0:29: 75:16:78:ab:c8:0e:16:ec:a2:c1:08:c9:aa:40:88:f7:0f:e1: c1:26:72:a0:53:da:a0:b2:e0:fa:74:5c:b2:4d:95:8c:1c:83: 96:60:8c:0e:ac:35:3b:ec:82:d2:53:da:df:1a:77:0b:f1:cf: 68:47:ba:75:b9:58:8f:10:38:be:2f:50:65:4a:ca:a7:13:7c: 9a:0c:ad:a6:0c:02:db:9e:b2:6b:c3:e3:45:ef:b1:86:bd:82: 18:7a:fa:b5:3e:c6:27:8c:f9:ec:04:a3:f3:40:c9:d8:9d:01: a4:0e:84:c5:84:21:9f:e5:38:03:a8:40:9a:03:ee:29:c0:88: 63:9a:2c:c3:c7:0f:3d:0e:e1:f3:2e:4f:aa:1c:48:1c:ba:b5: 3b:01:6c:0a -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZu4CA6EBpzUbpf9rKDEXlzkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiNTRmZTgzMWI2YTcxOWY0MmU2Yzg0ODZmZDAzYjU1MGJl NzYxZmIwHhcNMjYwMTEzMTU0NDU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZWVhOThjYzU0ZjI4YmJjMGZhNzM3N2QwNDBiNzUzNzRhODAxZDc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsM4JFm8ResuiomioIz0boWDwQTNO G0XdFOzxvkcMPHedWl/rA90aCyv3unbC3ZRL3MK//t7HXBk6emVkrSSaOyvWXlSY WF0snfF27Bu+Ah+tAqzxfE/m0abOuEW0mIXcRmyyJxjXoQASr4Mr4uyvYrx6224W XapZn0xKS0EaZUvy4pWOOs/jkKnIsbEFQppksaoEg8eYuGpEujc18AbnCjRRUWJH 2iSjKzKk3EmTfCVjjkPP2VHqFITTdK2cwef6+q4VqRiazEtDj0CYXmmQiTZjS78v Xg6XGB3iWdL8ag2BYq/cDc58kfhyb48cQ1ry30yiwhm+e2I2SKe7rzY3lQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFG7qmMxU8ou8D6c3fQQLdTdKgB11MB8GA1UdIwQY MBaAFKtU/oMbanGfQubISG/QO1UL52H7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcTFULWd4dHFjWjlDNXNoSWI5QTdWUXZuWWZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS81ZWFhYTctMzEwNy00MjY4LWFhZDYt NmZkOTc4OTIwNWJhLzEvYnVxWXpGVHlpN3dQcHpkOUJBdDFOMHFBSFhVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS81ZWFhYTctMzEwNy00MjY4LWFhZDYtNmZkOTc4OTIwNWJh LzEvcTFULWd4dHFjWjlDNXNoSWI5QTdWUXZuWWZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAuQHtMA8E AgACMAkDBwAgAQf4AScwDQYJKoZIhvcNAQELBQADggEBAIzHT0SaMdOZsNzdscI2 LYgEjWIIVHLgKHRvQzOLu9+NcXI5T7x4WqYod3yZJO4Tywn3B+tod87LjHbChGu1 Ozshg/qmkQWuT424UzNpWbORJu7jPoKyGw9VHCoYjNe92/OhMNp9oezQvxfAKXUW eKvIDhbsosEIyapAiPcP4cEmcqBT2qCy4Pp0XLJNlYwcg5ZgjA6sNTvsgtJT2t8a dwvxz2hHunW5WI8QOL4vUGVKyqcTfJoMraYMAtuesmvD40XvsYa9ghh6+rU+xieM +ewEo/NAydidAaQOhMWEIZ/lOAOoQJoD7inAiGOaLMPHDz0O4fMuT6ocSBy6tTsB bAo= -----END CERTIFICATE-----Generated at Mon Jan 26 11:05:58 2026 by rpki-client