This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/4ae4c7-f286-4c6e-9514-88e6816271f7/1/bFe3f5dqm6CeDxF5_5dX7WBQoLU.roa File: bFe3f5dqm6CeDxF5_5dX7WBQoLU.roa (raw, json) Hash identifier: FzZuYRsHytP8CktVJKuMoVGRaDw+yRywVAIuiA5WiBU= Subject key identifier: 6C:57:B7:7F:97:6A:9B:A0:9E:0F:11:79:FF:97:57:ED:60:50:A0:B5 Certificate issuer: /CN=bc9c403ad007e2a242a6b09061a3c1a360a64d5a Certificate serial: 019B7F14F23B639FE7115F5376CAF12FCA98 Authority key identifier: BC:9C:40:3A:D0:07:E2:A2:42:A6:B0:90:61:A3:C1:A3:60:A6:4D:5A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vJxAOtAH4qJCprCQYaPBo2CmTVo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/4ae4c7-f286-4c6e-9514-88e6816271f7/1/bFe3f5dqm6CeDxF5_5dX7WBQoLU.roa Signing time: Fri 02 Jan 2026 14:20:37 +0000 ROA not before: Fri 02 Jan 2026 14:20:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203217 IP address blocks: 185.112.188.0/22 maxlen: 24 185.112.188.0/23 maxlen: 23 185.112.188.0/24 maxlen: 24 185.112.189.0/24 maxlen: 24 185.112.190.0/23 maxlen: 23 185.112.190.0/24 maxlen: 24 185.112.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/4ae4c7-f286-4c6e-9514-88e6816271f7/1/vJxAOtAH4qJCprCQYaPBo2CmTVo.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/4ae4c7-f286-4c6e-9514-88e6816271f7/1/vJxAOtAH4qJCprCQYaPBo2CmTVo.mft rsync://rpki.ripe.net/repository/DEFAULT/vJxAOtAH4qJCprCQYaPBo2CmTVo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:f2:3b:63:9f:e7:11:5f:53:76:ca:f1:2f:ca:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc9c403ad007e2a242a6b09061a3c1a360a64d5a Validity Not Before: Jan 2 14:20:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6c57b77f976a9ba09e0f1179ff9757ed6050a0b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:57:01:30:96:20:b0:c0:da:17:4d:9c:61:e9: 6d:5e:c3:3b:47:fd:65:8d:35:36:73:5b:95:a9:a4: 4e:ea:98:a7:1f:c9:e8:05:60:e4:ba:89:6d:a7:6f: 88:a9:04:0e:67:83:da:51:26:93:a3:fb:1c:f7:a4: de:1d:ce:11:d8:e6:c0:28:2f:b7:1a:4a:41:55:86: 04:2c:14:8f:b3:19:66:c7:2b:77:52:50:5d:e2:09: 24:14:b3:78:f6:2e:5d:24:ed:8d:98:4d:cd:ea:63: 87:23:81:7d:c6:e4:98:ec:b7:e1:af:57:0b:36:83: 88:ef:87:f2:e5:5c:6d:f1:74:26:e0:23:f6:70:ab: ac:3b:98:49:65:8c:8c:cb:76:b9:26:75:98:7e:e0: 95:b1:70:82:0f:a3:7a:86:4b:0d:92:0f:d5:ed:c3: ab:c2:84:30:ac:08:83:e9:a6:e9:f6:a7:4b:9c:14: 8a:69:c5:19:ac:06:38:e8:12:c5:ab:8b:0c:0b:e5: ac:33:4e:0e:fe:d5:76:c1:33:3c:11:93:cc:ff:4d: 46:db:9c:b2:c8:c7:44:e9:8d:06:b5:2d:9a:52:e4: 5f:e6:1c:30:13:44:88:5b:6c:41:d7:94:e2:25:59: 50:94:8c:8e:97:b5:8f:b2:c8:58:84:a3:3d:4a:3e: e1:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:57:B7:7F:97:6A:9B:A0:9E:0F:11:79:FF:97:57:ED:60:50:A0:B5 X509v3 Authority Key Identifier: keyid:BC:9C:40:3A:D0:07:E2:A2:42:A6:B0:90:61:A3:C1:A3:60:A6:4D:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vJxAOtAH4qJCprCQYaPBo2CmTVo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/4ae4c7-f286-4c6e-9514-88e6816271f7/1/bFe3f5dqm6CeDxF5_5dX7WBQoLU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/4ae4c7-f286-4c6e-9514-88e6816271f7/1/vJxAOtAH4qJCprCQYaPBo2CmTVo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.112.188.0/22 Signature Algorithm: sha256WithRSAEncryption 5c:b9:79:89:1b:0c:9f:dd:de:90:44:ae:27:8d:2c:02:c4:15: 6d:ee:9e:2e:68:37:f6:2c:3b:41:d0:61:11:cd:25:d8:40:33: ea:b0:74:0d:c4:ca:01:a3:3b:3f:3e:0f:da:e5:e4:e2:a8:4e: 7f:6d:45:ec:36:a8:d9:68:6b:45:d1:12:8e:fb:04:ce:0a:35: c7:02:d0:21:59:e2:05:e4:57:02:97:57:0c:e3:b5:b2:86:07: 40:4a:4e:51:76:45:b1:75:eb:7d:69:e8:6b:f9:cc:59:78:35: 32:98:69:7a:48:6f:14:4f:5e:3e:66:23:e6:77:b7:98:9c:ff: 6f:34:47:5b:51:b7:e1:b0:62:f0:6c:6f:da:cd:50:22:cc:e9: 69:37:ad:f7:08:56:37:c8:53:a4:b4:53:1f:2e:b5:44:aa:c3: ea:1e:7e:f9:d0:2c:be:e9:77:9f:9b:77:38:22:66:d8:b3:48: 3d:7d:0e:6c:b0:00:74:21:f4:1b:9f:67:60:cb:1b:e7:eb:eb: 57:b0:06:90:3c:3c:e1:2a:2a:2a:29:75:22:cc:ed:82:9b:96: 44:65:c2:76:74:43:84:35:b8:9c:9b:f4:f5:a9:1a:e1:2d:90: 3f:23:23:a6:d7:b4:96:84:97:08:94:d3:78:95:aa:d4:7b:61: 58:dc:59:93 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FPI7Y5/nEV9TdsrxL8qYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjOWM0MDNhZDAwN2UyYTI0MmE2YjA5MDYxYTNjMWEzNjBh NjRkNWEwHhcNMjYwMTAyMTQyMDM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YzU3Yjc3Zjk3NmE5YmEwOWUwZjExNzlmZjk3NTdlZDYwNTBhMGI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA11cBMJYgsMDaF02cYeltXsM7R/1l jTU2c1uVqaRO6pinH8noBWDkuoltp2+IqQQOZ4PaUSaTo/sc96TeHc4R2ObAKC+3 GkpBVYYELBSPsxlmxyt3UlBd4gkkFLN49i5dJO2NmE3N6mOHI4F9xuSY7Lfhr1cL NoOI74fy5Vxt8XQm4CP2cKusO5hJZYyMy3a5JnWYfuCVsXCCD6N6hksNkg/V7cOr woQwrAiD6abp9qdLnBSKacUZrAY46BLFq4sMC+WsM04O/tV2wTM8EZPM/01G25yy yMdE6Y0GtS2aUuRf5hwwE0SIW2xB15TiJVlQlIyOl7WPsshYhKM9Sj7hKQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGxXt3+Xapugng8Ref+XV+1gUKC1MB8GA1UdIwQY MBaAFLycQDrQB+KiQqawkGGjwaNgpk1aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdkp4QU90QUg0cUpDcHJDUVlhUEJvMkNtVFZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS80YWU0YzctZjI4Ni00YzZlLTk1MTQt ODhlNjgxNjI3MWY3LzEvYkZlM2Y1ZHFtNkNlRHhGNV81ZFg3V0JRb0xVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS80YWU0YzctZjI4Ni00YzZlLTk1MTQtODhlNjgxNjI3MWY3 LzEvdkp4QU90QUg0cUpDcHJDUVlhUEJvMkNtVFZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuXC8MA0G CSqGSIb3DQEBCwUAA4IBAQBcuXmJGwyf3d6QRK4njSwCxBVt7p4uaDf2LDtB0GER zSXYQDPqsHQNxMoBozs/Pg/a5eTiqE5/bUXsNqjZaGtF0RKO+wTOCjXHAtAhWeIF 5FcCl1cM47WyhgdASk5RdkWxdet9aehr+cxZeDUymGl6SG8UT14+ZiPmd7eYnP9v NEdbUbfhsGLwbG/azVAizOlpN633CFY3yFOktFMfLrVEqsPqHn750Cy+6Xefm3c4 ImbYs0g9fQ5ssAB0IfQbn2dgyxvn6+tXsAaQPDzhKioqKXUizO2Cm5ZEZcJ2dEOE Nbicm/T1qRrhLZA/IyOm17SWhJcIlNN4larUe2FY3FmT -----END CERTIFICATE-----Generated at Sun Jan 25 15:36:40 2026 by rpki-client