This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/5aa05a-720e-4d56-a3a8-a01c37b88728/1/bb_iJ1U1Lf6VC6Ovl038VnEkd0c.roa File: bb_iJ1U1Lf6VC6Ovl038VnEkd0c.roa (raw, json) Hash identifier: x4RJFA42s0Y6MhAsHNXRTYoSOIZLJ8yZ/qGJdWD8hcc= Subject key identifier: 6D:BF:E2:27:55:35:2D:FE:95:0B:A3:AF:97:4D:FC:56:71:24:77:47 Certificate issuer: /CN=3b3a05dbb9c77fa16ed10469747a5c6e6eab88de Certificate serial: 019B7A5AEE1C8F793809310E3E540F4BEAF8 Authority key identifier: 3B:3A:05:DB:B9:C7:7F:A1:6E:D1:04:69:74:7A:5C:6E:6E:AB:88:DE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OzoF27nHf6Fu0QRpdHpcbm6riN4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/5aa05a-720e-4d56-a3a8-a01c37b88728/1/bb_iJ1U1Lf6VC6Ovl038VnEkd0c.roa Signing time: Thu 01 Jan 2026 16:18:58 +0000 ROA not before: Thu 01 Jan 2026 16:18:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 58224 IP address blocks: 185.133.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/5aa05a-720e-4d56-a3a8-a01c37b88728/1/OzoF27nHf6Fu0QRpdHpcbm6riN4.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/5aa05a-720e-4d56-a3a8-a01c37b88728/1/OzoF27nHf6Fu0QRpdHpcbm6riN4.mft rsync://rpki.ripe.net/repository/DEFAULT/OzoF27nHf6Fu0QRpdHpcbm6riN4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:ee:1c:8f:79:38:09:31:0e:3e:54:0f:4b:ea:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b3a05dbb9c77fa16ed10469747a5c6e6eab88de Validity Not Before: Jan 1 16:18:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6dbfe22755352dfe950ba3af974dfc5671247747 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:b3:58:25:5f:76:b9:db:09:67:85:a1:c9:50: 53:65:f8:f1:6e:07:4e:01:a5:37:9b:6b:14:07:23: 5b:95:04:43:05:36:bf:3a:76:af:2d:0f:92:33:e1: 5b:d7:06:22:8d:82:fb:e3:1e:30:9a:b4:41:40:35: 19:0e:c6:f1:61:6f:69:12:b4:ce:05:c8:1a:08:4b: 32:b2:0b:39:db:57:da:51:de:36:0d:a9:6d:aa:17: 38:8d:b8:4e:5a:f7:14:3d:56:25:cc:e2:6d:f9:74: a1:16:a2:25:e2:ec:70:7a:05:33:20:be:d0:e4:27: 45:b9:f6:34:27:59:de:ce:e8:44:54:05:0a:c0:e8: 27:24:0a:7f:a2:cb:31:3a:d8:f2:2b:91:b2:81:e6: 63:6f:f2:ac:be:4a:54:cb:ac:1c:9a:75:23:41:6c: 9a:a1:9d:b5:f4:c3:3d:0b:7b:66:ef:84:a3:92:33: 70:ea:20:1a:1e:ea:8e:63:75:cb:27:50:f2:f1:63: 16:b5:83:ef:f9:8c:62:f1:75:9f:8b:c6:1e:b8:6d: 0b:30:22:58:ed:a2:47:91:74:04:40:91:37:9d:3f: 82:96:b3:6d:c5:83:07:e0:25:61:26:94:b7:4b:a8: c7:83:06:9a:75:e1:a7:61:a2:dc:cb:c6:2e:16:55: 24:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:BF:E2:27:55:35:2D:FE:95:0B:A3:AF:97:4D:FC:56:71:24:77:47 X509v3 Authority Key Identifier: keyid:3B:3A:05:DB:B9:C7:7F:A1:6E:D1:04:69:74:7A:5C:6E:6E:AB:88:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OzoF27nHf6Fu0QRpdHpcbm6riN4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/5aa05a-720e-4d56-a3a8-a01c37b88728/1/bb_iJ1U1Lf6VC6Ovl038VnEkd0c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/5aa05a-720e-4d56-a3a8-a01c37b88728/1/OzoF27nHf6Fu0QRpdHpcbm6riN4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.133.125.0/24 Signature Algorithm: sha256WithRSAEncryption 34:fd:2f:96:62:cb:01:3e:1a:bf:21:ce:52:c3:b6:b4:c7:e8: 0a:07:f8:f3:b4:44:75:bf:07:15:c5:93:27:f0:59:fd:ed:dd: 5d:74:d8:2d:0a:26:06:f6:fa:bc:1a:bd:6b:0f:e8:14:9c:75: 16:bb:02:08:36:44:0b:24:0d:2b:81:bd:87:11:3a:ec:20:4d: c1:94:51:a7:23:8a:f2:9a:db:0f:76:53:4a:77:c5:94:85:08: fa:cd:0b:f6:4c:ba:bd:0d:55:ea:8c:43:95:f2:ba:7d:e2:3b: e6:1f:77:4c:0c:3d:ff:96:7b:6f:59:f1:41:52:f4:54:38:c5: 95:63:0d:45:4b:d8:a1:3e:2e:6f:6f:17:76:33:5d:35:54:77: 5c:61:43:04:6a:d2:ec:f7:48:9a:70:8b:b4:fa:ef:21:b6:fa: 18:fd:cf:e9:14:8f:18:a6:78:7d:9a:d5:29:3f:a5:20:8c:1c: 8c:74:f8:19:d9:fe:86:9b:2c:a7:db:ec:e4:9b:21:13:72:6f: d9:83:e0:22:51:cd:65:bb:62:f0:5c:7c:eb:d1:65:13:b5:a2: 1c:a7:b1:36:6c:81:6d:51:58:89:70:df:87:ee:4e:88:23:6d: 2a:18:ff:a3:11:16:59:b3:3b:44:7b:35:b6:d5:47:77:66:ee: c8:ab:3a:38 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6Wu4cj3k4CTEOPlQPS+r4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiM2EwNWRiYjljNzdmYTE2ZWQxMDQ2OTc0N2E1YzZlNmVh Yjg4ZGUwHhcNMjYwMTAxMTYxODU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZGJmZTIyNzU1MzUyZGZlOTUwYmEzYWY5NzRkZmM1NjcxMjQ3NzQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi7NYJV92udsJZ4WhyVBTZfjxbgdO AaU3m2sUByNblQRDBTa/OnavLQ+SM+Fb1wYijYL74x4wmrRBQDUZDsbxYW9pErTO BcgaCEsysgs521faUd42Daltqhc4jbhOWvcUPVYlzOJt+XShFqIl4uxwegUzIL7Q 5CdFufY0J1nezuhEVAUKwOgnJAp/ossxOtjyK5GygeZjb/KsvkpUy6wcmnUjQWya oZ219MM9C3tm74SjkjNw6iAaHuqOY3XLJ1Dy8WMWtYPv+Yxi8XWfi8YeuG0LMCJY 7aJHkXQEQJE3nT+ClrNtxYMH4CVhJpS3S6jHgwaadeGnYaLcy8YuFlUkAwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFG2/4idVNS3+lQujr5dN/FZxJHdHMB8GA1UdIwQY MBaAFDs6Bdu5x3+hbtEEaXR6XG5uq4jeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3pvRjI3bkhmNkZ1MFFScGRIcGNibTZyaU40LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS81YWEwNWEtNzIwZS00ZDU2LWEzYTgt YTAxYzM3Yjg4NzI4LzEvYmJfaUoxVTFMZjZWQzZPdmwwMzhWbkVrZDBjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS81YWEwNWEtNzIwZS00ZDU2LWEzYTgtYTAxYzM3Yjg4NzI4 LzEvT3pvRjI3bkhmNkZ1MFFScGRIcGNibTZyaU40LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuYV9MA0G CSqGSIb3DQEBCwUAA4IBAQA0/S+WYssBPhq/Ic5Sw7a0x+gKB/jztER1vwcVxZMn 8Fn97d1ddNgtCiYG9vq8Gr1rD+gUnHUWuwIINkQLJA0rgb2HETrsIE3BlFGnI4ry mtsPdlNKd8WUhQj6zQv2TLq9DVXqjEOV8rp94jvmH3dMDD3/lntvWfFBUvRUOMWV Yw1FS9ihPi5vbxd2M101VHdcYUMEatLs90iacIu0+u8htvoY/c/pFI8Ypnh9mtUp P6UgjByMdPgZ2f6Gmyyn2+zkmyETcm/Zg+AiUc1lu2LwXHzr0WUTtaIcp7E2bIFt UViJcN+H7k6II20qGP+jERZZsztEezW21Ud3Zu7Iqzo4 -----END CERTIFICATE-----Generated at Mon Jan 26 01:15:12 2026 by rpki-client