This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/BuBIsW377edbkmu5ptF81PLF5Q0.roa File: BuBIsW377edbkmu5ptF81PLF5Q0.roa (raw, json) Hash identifier: 7usajOpcONduahe3A78W+zcY0T4iqrBLIw2pvsiXVhE= Subject key identifier: 06:E0:48:B1:6D:FB:ED:E7:5B:92:6B:B9:A6:D1:7C:D4:F2:C5:E5:0D Certificate issuer: /CN=3ee770f47fd903925d80ac58e05e076f3baa110b Certificate serial: 019B79106128762F32629533638998DF73F2 Authority key identifier: 3E:E7:70:F4:7F:D9:03:92:5D:80:AC:58:E0:5E:07:6F:3B:AA:11:0B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/BuBIsW377edbkmu5ptF81PLF5Q0.roa Signing time: Thu 01 Jan 2026 10:17:55 +0000 ROA not before: Thu 01 Jan 2026 10:17:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16276 IP address blocks: 194.31.164.0/24 maxlen: 24 194.31.166.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.crl rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.mft rsync://rpki.ripe.net/repository/DEFAULT/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 04:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:61:28:76:2f:32:62:95:33:63:89:98:df:73:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ee770f47fd903925d80ac58e05e076f3baa110b Validity Not Before: Jan 1 10:17:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=06e048b16dfbede75b926bb9a6d17cd4f2c5e50d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:91:8c:24:0e:79:42:da:72:26:f2:11:d7:4f: b0:4f:8c:cb:4f:7c:22:90:73:0f:4b:ea:c4:ee:b6: 61:e1:dc:65:94:93:06:fe:1a:8c:e0:fb:69:5e:20: bb:c0:fa:b3:08:31:fb:29:d6:88:55:00:e1:8f:6d: 36:f8:00:af:69:bb:b3:27:96:30:a9:10:59:99:02: 45:06:ab:60:96:ef:c2:f1:f0:0e:00:8e:46:48:82: e6:84:0e:47:cc:cc:6f:9b:92:2d:87:5b:02:2f:07: 41:52:bf:0c:b7:a9:05:b7:f0:3c:f3:1f:68:a8:0d: 3a:6d:49:7b:97:ee:2d:4b:19:90:88:19:16:52:b6: 9d:b4:db:29:9a:43:d4:2c:3d:ac:92:b6:b6:98:e2: cf:ef:e6:24:38:23:ee:c0:2f:04:93:10:a6:c4:e5: 3a:a4:d5:1b:2c:ee:bc:ca:dd:e8:3c:20:b3:9a:79: c2:bf:4a:44:b6:31:94:dd:d6:75:04:9a:3a:05:2c: 73:10:5d:6e:66:68:af:5c:93:ec:f2:32:3c:bd:3e: 8a:e6:f5:16:8c:fe:58:cb:8b:4b:15:a5:88:31:e2: 21:72:84:76:c6:11:d4:98:63:69:1d:70:b4:ed:f2: 58:90:e6:8b:cf:39:da:cc:6e:f1:90:50:5f:05:79: b5:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:E0:48:B1:6D:FB:ED:E7:5B:92:6B:B9:A6:D1:7C:D4:F2:C5:E5:0D X509v3 Authority Key Identifier: keyid:3E:E7:70:F4:7F:D9:03:92:5D:80:AC:58:E0:5E:07:6F:3B:AA:11:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/BuBIsW377edbkmu5ptF81PLF5Q0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.31.164.0/24 194.31.166.0/24 Signature Algorithm: sha256WithRSAEncryption 16:9f:48:67:85:97:a7:a0:9e:f8:7b:94:71:a5:94:74:39:73: 33:d4:a0:3a:2f:eb:db:d0:cd:84:81:93:3f:98:0d:6b:80:d8: 76:f7:e6:43:dc:f5:d5:87:3b:fd:44:78:ac:7f:5f:04:6d:3b: aa:a9:67:18:7e:f8:93:5d:51:3c:fe:1c:45:42:d0:41:ce:e1: 25:d1:30:d0:87:56:29:9d:af:ab:6c:36:0f:ce:d6:c1:42:cb: fd:df:24:31:1f:86:f9:50:3e:7f:2e:75:1c:9d:fa:46:93:5f: 2f:96:f9:a7:08:0d:a5:94:e2:b6:19:82:5e:21:0c:58:d0:b9: bd:77:80:cd:da:b4:04:13:ef:04:20:2e:4d:cc:bf:df:76:4d: f6:00:18:13:c6:20:7d:3c:43:40:91:24:fa:5d:6a:80:56:93: fa:dc:29:62:f3:a2:3c:80:26:69:79:9f:1c:68:d7:c9:07:65: cf:63:ca:d4:a0:8a:fa:f1:48:af:4b:1d:d2:93:07:18:27:5b: 05:e5:48:fe:a3:14:78:1a:51:73:89:cb:53:a9:ca:15:9d:59: 58:3d:d5:29:e5:16:4c:69:a1:e3:cc:fc:2f:81:38:9c:f5:63: 83:51:06:2d:58:f4:2e:ab:e0:6a:95:2c:7c:d0:88:56:30:4c: d1:b3:24:0a -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt5EGEodi8yYpUzY4mY33PyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlZTc3MGY0N2ZkOTAzOTI1ZDgwYWM1OGUwNWUwNzZmM2Jh YTExMGIwHhcNMjYwMTAxMTAxNzU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNmUwNDhiMTZkZmJlZGU3NWI5MjZiYjlhNmQxN2NkNGYyYzVlNTBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJGMJA55QtpyJvIR10+wT4zLT3wi kHMPS+rE7rZh4dxllJMG/hqM4PtpXiC7wPqzCDH7KdaIVQDhj202+ACvabuzJ5Yw qRBZmQJFBqtglu/C8fAOAI5GSILmhA5HzMxvm5Ith1sCLwdBUr8Mt6kFt/A88x9o qA06bUl7l+4tSxmQiBkWUradtNspmkPULD2skra2mOLP7+YkOCPuwC8EkxCmxOU6 pNUbLO68yt3oPCCzmnnCv0pEtjGU3dZ1BJo6BSxzEF1uZmivXJPs8jI8vT6K5vUW jP5Yy4tLFaWIMeIhcoR2xhHUmGNpHXC07fJYkOaLzznazG7xkFBfBXm1MQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFAbgSLFt++3nW5JruabRfNTyxeUNMB8GA1UdIwQY MBaAFD7ncPR/2QOSXYCsWOBeB287qhELMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUHVkdzlIX1pBNUpkZ0t4WTRGNEhienVxRVFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi80MzQzNDQtMzIzZS00OGY4LWFkZTIt NjI0ZjgzNjgyMTY5LzEvQnVCSXNXMzc3ZWRia211NXB0RjgxUExGNVEwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi80MzQzNDQtMzIzZS00OGY4LWFkZTItNjI0ZjgzNjgyMTY5 LzEvUHVkdzlIX1pBNUpkZ0t4WTRGNEhienVxRVFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwh+kAwQA wh+mMA0GCSqGSIb3DQEBCwUAA4IBAQAWn0hnhZenoJ74e5RxpZR0OXMz1KA6L+vb 0M2EgZM/mA1rgNh29+ZD3PXVhzv9RHisf18EbTuqqWcYfviTXVE8/hxFQtBBzuEl 0TDQh1Ypna+rbDYPztbBQsv93yQxH4b5UD5/LnUcnfpGk18vlvmnCA2llOK2GYJe IQxY0Lm9d4DN2rQEE+8EIC5NzL/fdk32ABgTxiB9PENAkST6XWqAVpP63Cli86I8 gCZpeZ8caNfJB2XPY8rUoIr68UivSx3SkwcYJ1sF5Uj+oxR4GlFzictTqcoVnVlY PdUp5RZMaaHjzPwvgTic9WODUQYtWPQuq+BqlSx80IhWMEzRsyQK -----END CERTIFICATE-----Generated at Sun Jan 25 12:03:18 2026 by rpki-client