This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/9952b6-336f-4668-bafb-fdc258377301/1/bPSO6MwxWbbuX5pl75RHEJata0Y.roa File: bPSO6MwxWbbuX5pl75RHEJata0Y.roa (raw, json) Hash identifier: AjyNVlFJkmNLyTmsoSE4kMhHz/W3/3nMb2xQxom7aZg= Subject key identifier: 6C:F4:8E:E8:CC:31:59:B6:EE:5F:9A:65:EF:94:47:10:96:AD:6B:46 Certificate issuer: /CN=edc260028cd2ab1d0e43774f4404decd27aef3cc Certificate serial: 019B7758F76ADC033F7A675AAC8C3FDBB26C Authority key identifier: ED:C2:60:02:8C:D2:AB:1D:0E:43:77:4F:44:04:DE:CD:27:AE:F3:CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7cJgAozSqx0OQ3dPRATezSeu88w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/9952b6-336f-4668-bafb-fdc258377301/1/bPSO6MwxWbbuX5pl75RHEJata0Y.roa Signing time: Thu 01 Jan 2026 02:17:57 +0000 ROA not before: Thu 01 Jan 2026 02:17:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 64411 IP address blocks: 185.165.164.0/22 maxlen: 22 2a0a:3e00::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/9952b6-336f-4668-bafb-fdc258377301/1/7cJgAozSqx0OQ3dPRATezSeu88w.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/9952b6-336f-4668-bafb-fdc258377301/1/7cJgAozSqx0OQ3dPRATezSeu88w.mft rsync://rpki.ripe.net/repository/DEFAULT/7cJgAozSqx0OQ3dPRATezSeu88w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 20:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:f7:6a:dc:03:3f:7a:67:5a:ac:8c:3f:db:b2:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=edc260028cd2ab1d0e43774f4404decd27aef3cc Validity Not Before: Jan 1 02:17:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6cf48ee8cc3159b6ee5f9a65ef94471096ad6b46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:03:8e:b1:f2:b1:97:5f:6f:4b:3b:22:41:88: 30:e9:3a:80:06:6a:22:f4:8e:44:f5:ce:33:58:b5: 7d:31:6c:b9:59:b4:dd:06:c2:13:1b:f3:06:fd:fc: 4a:d4:9f:f0:e0:5e:48:41:84:39:49:c1:90:c9:9b: 7b:3d:e4:f5:5f:c3:97:39:4a:eb:b2:31:32:37:b3: 44:4e:d5:25:4f:50:58:ff:3b:6d:05:bf:6e:34:98: ec:c0:82:97:5c:73:ac:31:69:84:f4:43:1c:4c:5a: c2:6c:b6:2d:ba:d7:e3:52:44:63:7c:00:4c:3b:56: 96:9c:3d:50:4f:46:2a:7e:d9:a7:77:31:53:f3:b6: 71:a7:2a:34:3a:d7:0c:b5:a8:3d:ac:82:85:55:15: 7f:0b:c0:98:9e:2f:d9:40:b9:68:cd:74:cb:26:ad: d2:e4:b1:56:b8:d4:8a:45:cc:17:0b:bb:41:bb:85: e1:78:fe:d6:7f:36:6b:45:27:0f:6a:b4:69:0f:b1: a1:f2:01:9f:95:a0:44:04:8c:4e:f6:4c:1d:04:e0: 0e:d6:f4:eb:32:42:7c:6c:6d:a8:29:7e:21:4c:e6: da:ad:ba:47:78:56:e3:88:f8:b1:c8:ee:cb:13:6c: 5c:26:73:ca:84:45:ef:67:38:f6:35:f9:ab:f7:86: 37:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:F4:8E:E8:CC:31:59:B6:EE:5F:9A:65:EF:94:47:10:96:AD:6B:46 X509v3 Authority Key Identifier: keyid:ED:C2:60:02:8C:D2:AB:1D:0E:43:77:4F:44:04:DE:CD:27:AE:F3:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7cJgAozSqx0OQ3dPRATezSeu88w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/9952b6-336f-4668-bafb-fdc258377301/1/bPSO6MwxWbbuX5pl75RHEJata0Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/9952b6-336f-4668-bafb-fdc258377301/1/7cJgAozSqx0OQ3dPRATezSeu88w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.165.164.0/22 IPv6: 2a0a:3e00::/29 Signature Algorithm: sha256WithRSAEncryption 48:b1:05:90:2b:b0:12:f4:47:d3:18:f5:4d:2d:0b:19:57:88: f0:51:7a:94:ed:19:28:07:3c:8d:20:75:8a:c5:74:d6:36:24: 3e:73:28:5e:86:a9:e1:10:73:72:2b:a0:a2:04:c2:d0:8b:da: c7:04:bf:3f:a3:93:57:ff:19:04:7f:c3:c9:4a:09:48:e6:4f: 6e:1a:c0:82:f9:d4:3d:ce:8b:1a:4f:8c:8a:d8:8a:95:bb:2e: c1:e9:98:8e:4a:7c:bc:28:ff:a7:46:de:f2:c6:ec:b9:e8:13: fd:76:63:e0:55:58:0b:7a:03:1e:c9:25:5b:17:60:e8:c8:e5: 11:d6:f6:c1:cc:5b:45:b9:35:9b:3f:82:75:84:7f:66:04:b7: 0e:99:d2:f2:29:d0:3c:21:b7:40:6c:76:a1:74:77:f1:78:9b: e6:dc:07:e5:a1:2e:43:45:c4:53:21:ec:df:b4:19:f8:9b:0f: eb:cc:cb:09:1c:a2:81:06:11:18:58:6e:44:e3:c7:b9:c7:dd: 31:08:29:09:4f:9f:d5:16:e5:e4:bb:a3:f0:eb:97:b0:e9:c7: 03:8b:67:a0:b6:7b:4a:b0:97:51:89:0c:e0:67:5a:13:05:da: 1d:5c:6a:ee:cb:d2:8f:0b:30:84:9a:ab:0e:79:9c:3a:da:82: 82:a3:dd:26 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt3WPdq3AM/emdarIw/27JsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkYzI2MDAyOGNkMmFiMWQwZTQzNzc0ZjQ0MDRkZWNkMjdh ZWYzY2MwHhcNMjYwMTAxMDIxNzU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2Y2Y0OGVlOGNjMzE1OWI2ZWU1ZjlhNjVlZjk0NDcxMDk2YWQ2YjQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1QOOsfKxl19vSzsiQYgw6TqABmoi 9I5E9c4zWLV9MWy5WbTdBsITG/MG/fxK1J/w4F5IQYQ5ScGQyZt7PeT1X8OXOUrr sjEyN7NETtUlT1BY/zttBb9uNJjswIKXXHOsMWmE9EMcTFrCbLYtutfjUkRjfABM O1aWnD1QT0YqftmndzFT87Zxpyo0OtcMtag9rIKFVRV/C8CYni/ZQLlozXTLJq3S 5LFWuNSKRcwXC7tBu4XheP7WfzZrRScParRpD7Gh8gGflaBEBIxO9kwdBOAO1vTr MkJ8bG2oKX4hTObarbpHeFbjiPixyO7LE2xcJnPKhEXvZzj2Nfmr94Y33QIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFGz0jujMMVm27l+aZe+URxCWrWtGMB8GA1UdIwQY MBaAFO3CYAKM0qsdDkN3T0QE3s0nrvPMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2NKZ0FvelNxeDBPUTNkUFJBVGV6U2V1ODh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi85OTUyYjYtMzM2Zi00NjY4LWJhZmIt ZmRjMjU4Mzc3MzAxLzEvYlBTTzZNd3hXYmJ1WDVwbDc1UkhFSmF0YTBZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi85OTUyYjYtMzM2Zi00NjY4LWJhZmItZmRjMjU4Mzc3MzAx LzEvN2NKZ0FvelNxeDBPUTNkUFJBVGV6U2V1ODh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuaWkMA0E AgACMAcDBQMqCj4AMA0GCSqGSIb3DQEBCwUAA4IBAQBIsQWQK7AS9EfTGPVNLQsZ V4jwUXqU7RkoBzyNIHWKxXTWNiQ+cyhehqnhEHNyK6CiBMLQi9rHBL8/o5NX/xkE f8PJSglI5k9uGsCC+dQ9zosaT4yK2IqVuy7B6ZiOSny8KP+nRt7yxuy56BP9dmPg VVgLegMeySVbF2DoyOUR1vbBzFtFuTWbP4J1hH9mBLcOmdLyKdA8IbdAbHahdHfx eJvm3AfloS5DRcRTIezftBn4mw/rzMsJHKKBBhEYWG5E48e5x90xCCkJT5/VFuXk u6Pw65ew6ccDi2egtntKsJdRiQzgZ1oTBdodXGruy9KPCzCEmqsOeZw62oKCo90m -----END CERTIFICATE-----Generated at Mon Jan 26 04:50:32 2026 by rpki-client