This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/c6756a-1bc0-4938-8015-dce3fa3fbae9/1/Bh71MIA76HLsWqh-KULy4KIN5yE.roa File: Bh71MIA76HLsWqh-KULy4KIN5yE.roa (raw, json) Hash identifier: 2dPXwrTJcmE8t9PcfYM/2V6FylW3n+nURaEmxVQppFI= Subject key identifier: 06:1E:F5:30:80:3B:E8:72:EC:5A:A8:7E:29:42:F2:E0:A2:0D:E7:21 Certificate issuer: /CN=e3c85c37ad25274c712c24473e078adce732c1dd Certificate serial: 019B7C12778C17F322C6244D2D216249D5CD Authority key identifier: E3:C8:5C:37:AD:25:27:4C:71:2C:24:47:3E:07:8A:DC:E7:32:C1:DD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/48hcN60lJ0xxLCRHPgeK3Ocywd0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/c6756a-1bc0-4938-8015-dce3fa3fbae9/1/Bh71MIA76HLsWqh-KULy4KIN5yE.roa Signing time: Fri 02 Jan 2026 00:19:03 +0000 ROA not before: Fri 02 Jan 2026 00:19:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 21277 IP address blocks: 185.34.16.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/c6756a-1bc0-4938-8015-dce3fa3fbae9/1/48hcN60lJ0xxLCRHPgeK3Ocywd0.crl rsync://rpki.ripe.net/repository/DEFAULT/c9/c6756a-1bc0-4938-8015-dce3fa3fbae9/1/48hcN60lJ0xxLCRHPgeK3Ocywd0.mft rsync://rpki.ripe.net/repository/DEFAULT/48hcN60lJ0xxLCRHPgeK3Ocywd0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:77:8c:17:f3:22:c6:24:4d:2d:21:62:49:d5:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e3c85c37ad25274c712c24473e078adce732c1dd Validity Not Before: Jan 2 00:19:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=061ef530803be872ec5aa87e2942f2e0a20de721 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:28:b0:a2:00:57:f6:fa:9a:5a:47:b7:8b:b2: 65:3c:71:ab:0f:a7:f8:30:a5:e2:8e:ad:db:b2:04: d6:5d:bc:e9:73:ee:95:97:f3:30:0a:bc:33:6b:8a: fd:67:68:88:ac:3b:ab:ec:a3:96:bf:ae:2f:68:82: 5a:74:20:ab:a3:43:fe:09:1b:24:ab:a4:e1:1a:db: f2:7c:28:86:65:80:bf:07:bf:02:dd:e3:87:03:fa: 91:3e:0b:ab:57:c5:88:97:98:76:48:37:0a:ea:d1: 67:74:05:f3:04:91:f0:dc:7b:bd:c0:9f:6f:69:96: bc:4b:39:0f:d2:7b:f3:98:6b:b9:0f:86:e3:ad:e1: ef:f1:b7:bd:ae:7b:eb:e1:24:46:bb:72:33:2a:6d: e4:c6:be:66:c2:e3:88:4e:10:8e:b6:43:40:5f:1f: 1d:7d:4e:3b:99:47:e3:56:b9:ed:a0:92:e5:1d:5d: d5:b3:ed:c3:1c:7d:14:a1:a6:9c:b9:cc:43:1b:dd: 3f:13:be:78:32:e4:17:5b:67:21:13:f0:10:88:3c: c1:40:4b:00:1e:8f:57:2d:8c:c5:fd:03:07:f0:01: d3:01:15:4d:a1:91:15:9c:85:8f:cc:00:38:2a:1d: a5:77:5c:ce:ad:fb:06:fb:aa:8d:48:38:56:c4:ad: b8:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:1E:F5:30:80:3B:E8:72:EC:5A:A8:7E:29:42:F2:E0:A2:0D:E7:21 X509v3 Authority Key Identifier: keyid:E3:C8:5C:37:AD:25:27:4C:71:2C:24:47:3E:07:8A:DC:E7:32:C1:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/48hcN60lJ0xxLCRHPgeK3Ocywd0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c6756a-1bc0-4938-8015-dce3fa3fbae9/1/Bh71MIA76HLsWqh-KULy4KIN5yE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c6756a-1bc0-4938-8015-dce3fa3fbae9/1/48hcN60lJ0xxLCRHPgeK3Ocywd0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.34.16.0/22 Signature Algorithm: sha256WithRSAEncryption 1e:67:e7:79:4f:24:8d:f1:5a:e8:77:42:31:b5:42:81:bd:af: 4c:7c:5e:fb:b5:44:2b:b9:57:55:ef:a4:fd:8c:04:59:6a:e4: fd:c1:1c:75:97:c7:16:92:fa:92:26:d8:7e:9f:1e:65:81:57: 04:a8:5e:13:68:ec:c4:01:3e:64:fa:6b:45:6d:d5:24:70:2f: 3b:91:31:2e:e8:a2:da:97:4c:15:f3:84:7c:f2:95:ab:36:b6: 5d:e9:33:e4:52:10:14:ca:d9:d7:0f:3e:31:8a:e7:d9:b1:4d: 3c:4b:ed:79:1f:a1:03:ea:f5:e4:30:a5:f1:72:03:56:1b:99: bc:11:60:e1:f7:4a:74:9b:30:7a:3d:f9:44:18:f3:6e:74:59: d2:3f:30:6e:37:c7:b9:a2:33:5d:b9:5b:21:63:c7:be:46:f0: d7:12:81:b5:f5:fe:2f:7b:81:e8:85:73:c9:73:80:0d:1a:03: 11:7f:b8:50:7b:a2:82:b4:10:da:da:38:16:14:63:49:5a:f9: a8:0b:93:2c:97:e7:da:ea:3e:31:ff:2d:20:83:77:02:68:79: 84:b8:06:53:75:2b:20:d2:8a:bb:19:ff:19:ed:04:92:7e:5e: 0c:38:fd:57:c0:35:4c:4e:d0:4b:ba:6f:cd:4f:32:e0:ad:fd: 4d:4a:57:16 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8EneMF/MixiRNLSFiSdXNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzYzg1YzM3YWQyNTI3NGM3MTJjMjQ0NzNlMDc4YWRjZTcz MmMxZGQwHhcNMjYwMTAyMDAxOTAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNjFlZjUzMDgwM2JlODcyZWM1YWE4N2UyOTQyZjJlMGEyMGRlNzIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5yiwogBX9vqaWke3i7JlPHGrD6f4 MKXijq3bsgTWXbzpc+6Vl/MwCrwza4r9Z2iIrDur7KOWv64vaIJadCCro0P+CRsk q6ThGtvyfCiGZYC/B78C3eOHA/qRPgurV8WIl5h2SDcK6tFndAXzBJHw3Hu9wJ9v aZa8SzkP0nvzmGu5D4bjreHv8be9rnvr4SRGu3IzKm3kxr5mwuOIThCOtkNAXx8d fU47mUfjVrntoJLlHV3Vs+3DHH0UoaacucxDG90/E754MuQXW2chE/AQiDzBQEsA Ho9XLYzF/QMH8AHTARVNoZEVnIWPzAA4Kh2ld1zOrfsG+6qNSDhWxK24TwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAYe9TCAO+hy7FqofilC8uCiDechMB8GA1UdIwQY MBaAFOPIXDetJSdMcSwkRz4HitznMsHdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNDhoY042MGxKMHh4TENSSFBnZUszT2N5d2QwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS9jNjc1NmEtMWJjMC00OTM4LTgwMTUt ZGNlM2ZhM2ZiYWU5LzEvQmg3MU1JQTc2SExzV3FoLUtVTHk0S0lONXlFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOS9jNjc1NmEtMWJjMC00OTM4LTgwMTUtZGNlM2ZhM2ZiYWU5 LzEvNDhoY042MGxKMHh4TENSSFBnZUszT2N5d2QwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuSIQMA0G CSqGSIb3DQEBCwUAA4IBAQAeZ+d5TySN8Vrod0IxtUKBva9MfF77tUQruVdV76T9 jARZauT9wRx1l8cWkvqSJth+nx5lgVcEqF4TaOzEAT5k+mtFbdUkcC87kTEu6KLa l0wV84R88pWrNrZd6TPkUhAUytnXDz4xiufZsU08S+15H6ED6vXkMKXxcgNWG5m8 EWDh90p0mzB6PflEGPNudFnSPzBuN8e5ojNduVshY8e+RvDXEoG19f4ve4HohXPJ c4ANGgMRf7hQe6KCtBDa2jgWFGNJWvmoC5Msl+fa6j4x/y0gg3cCaHmEuAZTdSsg 0oq7Gf8Z7QSSfl4MOP1XwDVMTtBLum/NTzLgrf1NSlcW -----END CERTIFICATE-----Generated at Sun Jan 25 19:37:37 2026 by rpki-client