This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/d09e34-cc11-4394-904d-840ccb34b3f5/1/BvusQ7m5Gd85FbE0UgtInYnVcn4.roa File: BvusQ7m5Gd85FbE0UgtInYnVcn4.roa (raw, json) Hash identifier: Yn9PHGdu9Tcdgh7Fe+cf2+vspMOJboE+b5bi5KZdy/k= Subject key identifier: 06:FB:AC:43:B9:B9:19:DF:39:15:B1:34:52:0B:48:9D:89:D5:72:7E Certificate issuer: /CN=fe8199e8345567d8516b788fe2e1d397e27c73a4 Certificate serial: 019B7E37D2188AC0268D9F732AE975BEDA7E Authority key identifier: FE:81:99:E8:34:55:67:D8:51:6B:78:8F:E2:E1:D3:97:E2:7C:73:A4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/d09e34-cc11-4394-904d-840ccb34b3f5/1/BvusQ7m5Gd85FbE0UgtInYnVcn4.roa Signing time: Fri 02 Jan 2026 10:19:06 +0000 ROA not before: Fri 02 Jan 2026 10:19:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62240 IP address blocks: 176.67.80.0/23 maxlen: 23 185.91.122.0/23 maxlen: 23 2a05:e9c0:5600::/40 maxlen: 40 2a05:e9c0:6200::/40 maxlen: 40 2a05:e9c0:6220::/43 maxlen: 43 2a05:e9c0:6240::/43 maxlen: 43 2a05:e9c0:6260::/43 maxlen: 43 2a05:e9c0:6280::/43 maxlen: 43 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/d09e34-cc11-4394-904d-840ccb34b3f5/1/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.crl rsync://rpki.ripe.net/repository/DEFAULT/db/d09e34-cc11-4394-904d-840ccb34b3f5/1/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.mft rsync://rpki.ripe.net/repository/DEFAULT/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:d2:18:8a:c0:26:8d:9f:73:2a:e9:75:be:da:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fe8199e8345567d8516b788fe2e1d397e27c73a4 Validity Not Before: Jan 2 10:19:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=06fbac43b9b919df3915b134520b489d89d5727e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:d4:cb:eb:e2:d2:bd:d4:8c:c4:f0:37:d4:d0: 91:ae:73:0b:02:bd:45:2a:e3:e0:53:16:92:f0:6e: 98:3b:81:88:14:84:0e:95:3e:da:38:4f:26:88:da: 27:f8:3f:da:72:ab:fd:1d:97:a2:27:3e:7f:2e:4e: 0f:11:7f:6a:e9:64:4a:4f:84:18:9b:fd:98:3c:40: fd:66:16:63:6d:60:a9:22:bd:79:5e:a4:5f:ce:06: e4:f5:84:b5:63:e7:e2:e0:58:ee:0b:d7:9f:96:9c: 96:a7:6f:24:a3:da:bc:b1:fc:26:8d:df:76:76:fc: 3a:30:77:af:bd:37:bb:96:2a:29:2c:29:aa:2a:98: 0c:49:f4:01:d8:3f:b2:4c:a5:01:c4:88:2c:99:32: 50:22:6f:61:e1:71:de:75:2a:75:d8:5b:90:e0:c4: 35:fe:4f:fd:e9:b7:1a:fe:13:aa:00:f3:57:88:fa: 59:2c:5f:cf:5d:08:33:77:bd:72:9f:a0:f3:8a:6b: 88:da:45:13:7e:79:09:52:2a:28:47:31:28:a6:cc: 90:ae:57:10:84:03:4c:ba:d6:33:98:88:59:b9:cf: fd:61:fd:17:85:40:a6:c9:c6:91:54:40:8c:11:98: a9:e8:74:c4:bc:ca:ac:89:be:4a:55:13:c0:ce:43: de:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:FB:AC:43:B9:B9:19:DF:39:15:B1:34:52:0B:48:9D:89:D5:72:7E X509v3 Authority Key Identifier: keyid:FE:81:99:E8:34:55:67:D8:51:6B:78:8F:E2:E1:D3:97:E2:7C:73:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/d09e34-cc11-4394-904d-840ccb34b3f5/1/BvusQ7m5Gd85FbE0UgtInYnVcn4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/d09e34-cc11-4394-904d-840ccb34b3f5/1/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.67.80.0/23 185.91.122.0/23 IPv6: 2a05:e9c0:5600::/40 2a05:e9c0:6200::/40 Signature Algorithm: sha256WithRSAEncryption 12:bb:2a:d2:f6:5a:33:ce:8d:a5:d2:ad:72:55:a0:90:be:41: a3:3a:fa:a1:27:e7:12:5f:11:c0:8d:78:89:b5:ed:93:21:30: 4b:78:64:2a:e7:c4:fd:5b:8d:65:93:ee:15:cc:8c:1e:b9:f6: 33:ef:24:9d:00:d0:d9:25:aa:63:0a:58:2a:f0:b8:da:6a:bd: 38:56:9b:94:27:c1:64:98:10:65:d2:07:7e:41:99:f6:67:a7: e3:ed:dc:65:75:55:90:47:62:52:28:54:36:88:eb:34:ea:a5: 03:0c:07:72:7c:e9:ca:09:31:7e:ed:f0:aa:f9:69:23:b4:49: 67:ca:17:2d:aa:5b:43:05:ee:79:84:eb:53:4e:99:e0:1c:46: b4:fa:40:aa:39:0a:ab:8f:a6:aa:03:55:55:ef:a6:3c:af:23: 6b:82:bd:e3:7e:9a:25:16:41:9d:b1:83:cc:75:a5:d0:7c:ed: c3:1f:29:e4:5d:c1:78:fe:6c:d6:fe:c7:e9:9d:50:cf:78:69: 70:7e:57:14:30:39:fd:e9:e5:11:56:d0:a9:85:40:55:20:22: dc:95:a3:c9:9d:d2:88:fb:b4:57:aa:55:8d:7b:2f:01:21:fd: a3:6f:37:75:1e:f5:fa:56:2e:b2:7d:e3:c4:a2:8c:b2:a8:75: d9:17:d0:d8 -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgISAZt+N9IYisAmjZ9zKul1vtp+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZlODE5OWU4MzQ1NTY3ZDg1MTZiNzg4ZmUyZTFkMzk3ZTI3 YzczYTQwHhcNMjYwMTAyMTAxOTA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNmZiYWM0M2I5YjkxOWRmMzkxNWIxMzQ1MjBiNDg5ZDg5ZDU3MjdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8NTL6+LSvdSMxPA31NCRrnMLAr1F KuPgUxaS8G6YO4GIFIQOlT7aOE8miNon+D/acqv9HZeiJz5/Lk4PEX9q6WRKT4QY m/2YPED9ZhZjbWCpIr15XqRfzgbk9YS1Y+fi4FjuC9eflpyWp28ko9q8sfwmjd92 dvw6MHevvTe7liopLCmqKpgMSfQB2D+yTKUBxIgsmTJQIm9h4XHedSp12FuQ4MQ1 /k/96bca/hOqAPNXiPpZLF/PXQgzd71yn6DzimuI2kUTfnkJUiooRzEopsyQrlcQ hANMutYzmIhZuc/9Yf0XhUCmycaRVECMEZip6HTEvMqsib5KVRPAzkPevQIDAQAB o4ICJzCCAiMwHQYDVR0OBBYEFAb7rEO5uRnfORWxNFILSJ2J1XJ+MB8GA1UdIwQY MBaAFP6Bmeg0VWfYUWt4j+Lh05fifHOkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX29HWjZEUlZaOWhSYTNpUDR1SFRsLUo4YzZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9kMDllMzQtY2MxMS00Mzk0LTkwNGQt ODQwY2NiMzRiM2Y1LzEvQnZ1c1E3bTVHZDg1RmJFMFVndEluWW5WY240LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi9kMDllMzQtY2MxMS00Mzk0LTkwNGQtODQwY2NiMzRiM2Y1 LzEvX29HWjZEUlZaOWhSYTNpUDR1SFRsLUo4YzZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDASBAIAATAMAwQBsENQAwQB uVt6MBYEAgACMBADBgAqBenAVgMGACoF6cBiMA0GCSqGSIb3DQEBCwUAA4IBAQAS uyrS9lozzo2l0q1yVaCQvkGjOvqhJ+cSXxHAjXiJte2TITBLeGQq58T9W41lk+4V zIweufYz7ySdANDZJapjClgq8Ljaar04VpuUJ8FkmBBl0gd+QZn2Z6fj7dxldVWQ R2JSKFQ2iOs06qUDDAdyfOnKCTF+7fCq+WkjtElnyhctqltDBe55hOtTTpngHEa0 +kCqOQqrj6aqA1VV76Y8ryNrgr3jfpolFkGdsYPMdaXQfO3DHynkXcF4/mzW/sfp nVDPeGlwflcUMDn96eURVtCphUBVICLclaPJndKI+7RXqlWNey8BIf2jbzd1HvX6 Vi6yfePEooyyqHXZF9DY -----END CERTIFICATE-----Generated at Sun Jan 25 13:00:57 2026 by rpki-client