This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/bIbo_daevEia3FzSMEis2R2yTQE.roa
File: bIbo_daevEia3FzSMEis2R2yTQE.roa (raw, json)
Hash identifier: 2f8dvTsv4PE91HZTf97I67YVmPlzEU+5RlZeN9O2YSM=
Subject key identifier: 6C:86:E8:FD:D6:9E:BC:48:9A:DC:5C:D2:30:48:AC:D9:1D:B2:4D:01
Certificate issuer: /CN=922208b47b6a864d9d1ff33e06aa81d13819a74e
Certificate serial: 019B7C7FC3A859CE75C290A6FD63AF6CBBB4
Authority key identifier: 92:22:08:B4:7B:6A:86:4D:9D:1F:F3:3E:06:AA:81:D1:38:19:A7:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/bIbo_daevEia3FzSMEis2R2yTQE.roa
Signing time: Fri 02 Jan 2026 02:18:26 +0000
ROA not before: Fri 02 Jan 2026 02:18:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203999
IP address blocks: 185.188.63.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.mft
rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 07:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:7f:c3:a8:59:ce:75:c2:90:a6:fd:63:af:6c:bb:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=922208b47b6a864d9d1ff33e06aa81d13819a74e
Validity
Not Before: Jan 2 02:18:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6c86e8fdd69ebc489adc5cd23048acd91db24d01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:88:03:9c:a9:3c:4d:6d:1e:3a:10:ee:bc:00:
eb:6e:ae:4e:cc:34:41:38:97:13:a1:20:d4:f1:85:
94:b7:0c:40:d0:93:02:ba:e8:57:eb:b7:09:e1:60:
93:d5:b5:03:e2:58:38:ec:d7:5d:dc:63:72:06:9c:
52:36:07:dc:a1:7e:48:a4:e9:01:ea:9d:31:c1:9e:
de:82:06:78:14:1d:b8:dd:9f:8a:dc:eb:0d:65:ab:
2d:e0:92:ea:31:f2:8d:c7:45:40:ad:a6:11:03:c4:
a4:3d:0e:06:2e:04:b0:47:fb:1b:7e:5d:a6:93:4e:
20:a9:14:c2:8c:86:74:25:a8:f3:35:8f:ca:70:c3:
99:e2:62:e0:2e:05:38:6c:36:13:f8:57:da:fe:b4:
a4:09:cf:26:37:c6:80:6d:fc:b8:eb:41:8f:ce:32:
df:de:e6:1a:6b:26:ea:4f:b4:08:0c:18:25:c8:81:
0a:19:18:78:3c:87:6c:e4:e8:19:a6:b8:d1:77:cd:
5e:e6:8b:fa:8a:cc:5a:9a:d6:3e:63:0b:80:a9:e3:
9a:03:15:ac:27:3c:97:0c:5b:3a:7c:53:b3:68:b7:
61:a4:ab:2b:a0:b3:1e:88:cb:ad:c5:97:bd:59:2a:
da:1b:d2:fc:4f:6b:4a:74:f2:9b:80:6e:00:82:c0:
e8:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:86:E8:FD:D6:9E:BC:48:9A:DC:5C:D2:30:48:AC:D9:1D:B2:4D:01
X509v3 Authority Key Identifier:
keyid:92:22:08:B4:7B:6A:86:4D:9D:1F:F3:3E:06:AA:81:D1:38:19:A7:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/bIbo_daevEia3FzSMEis2R2yTQE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.188.63.0/24
Signature Algorithm: sha256WithRSAEncryption
06:c8:4e:31:18:48:1f:b2:1f:34:f9:c8:d3:a8:55:41:fc:82:
12:2c:6f:8d:87:0f:4d:80:1e:93:13:59:2a:27:b3:89:c6:55:
9e:ce:8a:75:f5:51:a9:06:ec:b8:1b:dc:96:77:41:0b:63:95:
d3:4c:32:f9:39:82:94:d5:f0:54:11:46:7d:3c:d9:6d:74:b8:
ee:66:da:e5:26:e8:d6:db:7b:f6:f5:13:93:a8:64:7f:53:33:
5e:f7:21:de:f7:4a:ac:d9:14:b9:e8:c4:cf:58:99:0e:c5:1d:
5b:3c:95:1e:16:6c:df:40:58:96:3d:64:b2:7a:3e:f4:e3:31:
d6:d5:9d:98:9d:65:cc:66:06:d1:2f:72:bc:66:2e:22:7c:4c:
ee:71:e7:c2:1b:8a:13:71:6b:c5:e9:66:87:cb:1f:cb:c2:88:
16:ec:04:b5:7a:90:e6:f0:a9:2d:fd:dc:be:75:2c:d2:dd:94:
72:db:d8:8b:1b:5b:82:2c:58:19:2b:80:70:6e:65:e6:12:fe:
4c:60:cd:a8:5a:91:46:bc:24:9b:49:25:84:61:71:b0:d4:81:
aa:e7:01:3b:39:a6:ba:b6:f6:15:8f:15:bb:0a:12:f5:13:be:
18:eb:ce:85:79:04:71:4f:02:c3:b1:0d:df:50:75:c8:93:e2:
8c:b3:24:de
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt8f8OoWc51wpCm/WOvbLu0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyMjIwOGI0N2I2YTg2NGQ5ZDFmZjMzZTA2YWE4MWQxMzgx
OWE3NGUwHhcNMjYwMTAyMDIxODI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2Yzg2ZThmZGQ2OWViYzQ4OWFkYzVjZDIzMDQ4YWNkOTFkYjI0ZDAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwogDnKk8TW0eOhDuvADrbq5OzDRB
OJcToSDU8YWUtwxA0JMCuuhX67cJ4WCT1bUD4lg47Ndd3GNyBpxSNgfcoX5IpOkB
6p0xwZ7eggZ4FB243Z+K3OsNZast4JLqMfKNx0VAraYRA8SkPQ4GLgSwR/sbfl2m
k04gqRTCjIZ0JajzNY/KcMOZ4mLgLgU4bDYT+Ffa/rSkCc8mN8aAbfy460GPzjLf
3uYaaybqT7QIDBglyIEKGRh4PIds5OgZprjRd81e5ov6isxamtY+YwuAqeOaAxWs
JzyXDFs6fFOzaLdhpKsroLMeiMutxZe9WSraG9L8T2tKdPKbgG4AgsDoswIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGyG6P3WnrxImtxc0jBIrNkdsk0BMB8GA1UdIwQY
MBaAFJIiCLR7aoZNnR/zPgaqgdE4GadOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva2lJSXRIdHFoazJkSF9NLUJxcUIwVGdacDA0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS82OTkwZTktYzNjMC00NzhhLTk5OTct
OTViMDhlMzY2MGNmLzEvYklib19kYWV2RWlhM0Z6U01FaXMyUjJ5VFFFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS82OTkwZTktYzNjMC00NzhhLTk5OTctOTViMDhlMzY2MGNm
LzEva2lJSXRIdHFoazJkSF9NLUJxcUIwVGdacDA0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAubw/MA0G
CSqGSIb3DQEBCwUAA4IBAQAGyE4xGEgfsh80+cjTqFVB/IISLG+Nhw9NgB6TE1kq
J7OJxlWezop19VGpBuy4G9yWd0ELY5XTTDL5OYKU1fBUEUZ9PNltdLjuZtrlJujW
23v29ROTqGR/UzNe9yHe90qs2RS56MTPWJkOxR1bPJUeFmzfQFiWPWSyej704zHW
1Z2YnWXMZgbRL3K8Zi4ifEzucefCG4oTcWvF6WaHyx/LwogW7AS1epDm8Kkt/dy+
dSzS3ZRy29iLG1uCLFgZK4BwbmXmEv5MYM2oWpFGvCSbSSWEYXGw1IGq5wE7Oaa6
tvYVjxW7ChL1E74Y686FeQRxTwLDsQ3fUHXIk+KMsyTe
-----END CERTIFICATE-----
Generated at Sun Jan 25 16:35:07 2026 by rpki-client