This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/bHsFJaLyCQLt5X5fjeTKRh55ODY.roa File: bHsFJaLyCQLt5X5fjeTKRh55ODY.roa (raw, json) Hash identifier: DVWoYx/VlrYQI2tOsueyBqYwG1Fx4jRd1Wy2fvfG26I= Subject key identifier: 6C:7B:05:25:A2:F2:09:02:ED:E5:7E:5F:8D:E4:CA:46:1E:79:38:36 Certificate issuer: /CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75 Certificate serial: 019B76EB1AF4573EC07B5106066D7F71B163 Authority key identifier: D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/bHsFJaLyCQLt5X5fjeTKRh55ODY.roa Signing time: Thu 01 Jan 2026 00:17:57 +0000 ROA not before: Thu 01 Jan 2026 00:17:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212941 IP address blocks: 185.67.96.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.mft rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:1a:f4:57:3e:c0:7b:51:06:06:6d:7f:71:b1:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75 Validity Not Before: Jan 1 00:17:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6c7b0525a2f20902ede57e5f8de4ca461e793836 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:f5:d3:e4:bb:df:a2:03:01:ac:70:62:94:eb: 7d:12:a3:cd:d7:d5:b6:aa:21:6a:ba:0d:33:86:09: 84:96:70:2f:92:bb:c9:66:8f:f9:55:39:29:39:28: 34:91:ba:d0:0b:97:86:bb:a5:38:42:39:17:12:38: 76:ad:c6:1b:8c:82:e8:8d:ba:04:6c:69:e9:1d:f9: 6b:16:06:28:73:25:c2:18:24:31:ba:12:34:3d:34: f1:04:78:f4:96:85:11:9d:b8:10:41:9d:a4:7f:c8: cc:43:7d:77:de:70:82:10:aa:0e:21:48:53:72:af: db:0e:34:64:53:92:da:7c:f3:19:38:25:68:ce:d9: 59:9a:83:c6:3e:07:c2:1e:c3:86:80:48:eb:77:ac: 03:3e:42:60:f3:ca:a1:34:db:a8:00:cc:a5:22:da: 2a:f2:c1:b7:74:cf:49:a3:db:e9:4b:d9:9b:c4:e7: c4:df:4d:38:06:f9:6d:00:22:4e:a1:11:3f:bf:54: 47:67:0b:15:50:a7:95:ed:49:f9:46:97:78:12:21: 85:13:3c:29:fe:04:07:8c:b9:89:fe:39:fe:71:a2: 33:fe:9e:a5:9c:81:28:c9:a8:13:b3:62:20:88:0f: e8:4b:0f:f4:fd:61:c4:9f:ac:1c:2d:c7:0b:36:da: 72:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:7B:05:25:A2:F2:09:02:ED:E5:7E:5F:8D:E4:CA:46:1E:79:38:36 X509v3 Authority Key Identifier: keyid:D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/bHsFJaLyCQLt5X5fjeTKRh55ODY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.67.96.0/22 Signature Algorithm: sha256WithRSAEncryption 59:be:f2:87:f7:6b:73:6b:96:1e:9d:bc:1d:c0:8e:32:4d:e9: 5b:f4:c9:01:b8:c6:52:91:bb:b6:b2:89:3c:32:81:74:bd:84: 92:4d:e4:6f:4e:4a:fc:db:f0:c4:f5:02:11:4f:9a:d3:19:61: 70:40:c0:48:6d:bc:1e:8b:ea:97:20:1d:d8:b0:c2:f3:99:2f: 9c:32:13:63:0b:1c:6e:41:14:c7:7d:45:90:61:98:9a:55:2e: c2:1f:b9:65:5a:87:ca:2f:2b:8d:92:57:2a:01:07:55:e1:2e: aa:d3:93:cc:83:48:71:57:52:f4:cb:94:92:66:27:1c:69:7c: a0:a4:41:db:58:42:c4:c5:ca:9f:eb:76:88:da:96:d4:15:77: 61:ca:06:72:e5:6c:f0:09:8d:20:16:16:0f:a5:6c:c2:ad:b8: 13:b2:37:f3:a9:b4:2e:6f:55:d0:2a:73:98:a9:e5:8a:12:7a: e8:3d:82:2b:a5:be:24:34:6d:40:d9:d4:6f:f5:e4:c6:7c:2a: 2d:f0:c5:37:c3:33:4b:fb:1e:db:c9:12:c1:4c:11:6f:a8:21: c8:5c:9c:8d:c4:64:0a:7f:ea:69:83:a1:0c:1a:cb:3d:66:eb: ad:b4:d1:77:ac:21:f5:dc:75:f9:0f:c2:38:cd:77:7e:ed:e1: 06:ff:1b:82 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt26xr0Vz7Ae1EGBm1/cbFjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0NzVmYjA5MzRjZjZhNThkY2NlZjExMDg3NWRiZTVlM2U4 YjZiNzUwHhcNMjYwMTAxMDAxNzU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YzdiMDUyNWEyZjIwOTAyZWRlNTdlNWY4ZGU0Y2E0NjFlNzkzODM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnPXT5LvfogMBrHBilOt9EqPN19W2 qiFqug0zhgmElnAvkrvJZo/5VTkpOSg0kbrQC5eGu6U4QjkXEjh2rcYbjILojboE bGnpHflrFgYocyXCGCQxuhI0PTTxBHj0loURnbgQQZ2kf8jMQ3133nCCEKoOIUhT cq/bDjRkU5LafPMZOCVoztlZmoPGPgfCHsOGgEjrd6wDPkJg88qhNNuoAMylItoq 8sG3dM9Jo9vpS9mbxOfE3004BvltACJOoRE/v1RHZwsVUKeV7Un5Rpd4EiGFEzwp /gQHjLmJ/jn+caIz/p6lnIEoyagTs2IgiA/oSw/0/WHEn6wcLccLNtpyJwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGx7BSWi8gkC7eV+X43kykYeeTg2MB8GA1UdIwQY MBaAFNR1+wk0z2pY3M7xEIddvl4+i2t1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUhYN0NUVFBhbGpjenZFUWgxMi1YajZMYTNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9iZmY0YWEtNGYwNy00MTI5LThhZDYt Yzc5MTRhYjY0MjczLzEvYkhzRkphTHlDUUx0NVg1ZmplVEtSaDU1T0RZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9iZmY0YWEtNGYwNy00MTI5LThhZDYtYzc5MTRhYjY0Mjcz LzEvMUhYN0NUVFBhbGpjenZFUWgxMi1YajZMYTNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuUNgMA0G CSqGSIb3DQEBCwUAA4IBAQBZvvKH92tza5YenbwdwI4yTelb9MkBuMZSkbu2sok8 MoF0vYSSTeRvTkr82/DE9QIRT5rTGWFwQMBIbbwei+qXIB3YsMLzmS+cMhNjCxxu QRTHfUWQYZiaVS7CH7llWofKLyuNklcqAQdV4S6q05PMg0hxV1L0y5SSZiccaXyg pEHbWELExcqf63aI2pbUFXdhygZy5WzwCY0gFhYPpWzCrbgTsjfzqbQub1XQKnOY qeWKEnroPYIrpb4kNG1A2dRv9eTGfCot8MU3wzNL+x7byRLBTBFvqCHIXJyNxGQK f+ppg6EMGss9ZuuttNF3rCH13HX5D8I4zXd+7eEG/xuC -----END CERTIFICATE-----Generated at Sun Jan 25 17:44:47 2026 by rpki-client