This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/65a71d-0236-44d5-8ce9-229b4ae742de/1/BxF8HMXQBXxPeu6jPcu-0Sirs0A.roa File: BxF8HMXQBXxPeu6jPcu-0Sirs0A.roa (raw, json) Hash identifier: PQjNFAf7Xm48R/Vs0yAXVjhN/qJRsvV6yxIaJlLeL4g= Subject key identifier: 07:11:7C:1C:C5:D0:05:7C:4F:7A:EE:A3:3D:CB:BE:D1:28:AB:B3:40 Certificate issuer: /CN=115dbc00433e29f2adeb038fea2fbd7048fb632f Certificate serial: 019B7B35B79C437B26C861FA3145F20A3BBB Authority key identifier: 11:5D:BC:00:43:3E:29:F2:AD:EB:03:8F:EA:2F:BD:70:48:FB:63:2F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EV28AEM-KfKt6wOP6i-9cEj7Yy8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/65a71d-0236-44d5-8ce9-229b4ae742de/1/BxF8HMXQBXxPeu6jPcu-0Sirs0A.roa Signing time: Thu 01 Jan 2026 20:17:56 +0000 ROA not before: Thu 01 Jan 2026 20:17:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42168 IP address blocks: 194.230.110.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/65a71d-0236-44d5-8ce9-229b4ae742de/1/EV28AEM-KfKt6wOP6i-9cEj7Yy8.crl rsync://rpki.ripe.net/repository/DEFAULT/10/65a71d-0236-44d5-8ce9-229b4ae742de/1/EV28AEM-KfKt6wOP6i-9cEj7Yy8.mft rsync://rpki.ripe.net/repository/DEFAULT/EV28AEM-KfKt6wOP6i-9cEj7Yy8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 21:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:b7:9c:43:7b:26:c8:61:fa:31:45:f2:0a:3b:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=115dbc00433e29f2adeb038fea2fbd7048fb632f Validity Not Before: Jan 1 20:17:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=07117c1cc5d0057c4f7aeea33dcbbed128abb340 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:24:1d:8b:2f:89:21:a0:45:64:e1:7c:e1:5d: a3:cb:02:1c:40:58:43:e4:dd:3b:8b:c8:f1:4d:92: 99:5b:6e:d7:13:a4:de:9f:bf:9c:f6:16:05:78:f4: 6b:28:f4:72:3c:d9:9d:b1:bf:75:6a:8b:21:19:cb: 01:a3:d6:23:7d:86:bd:f3:2c:38:0b:78:8f:3e:f2: 74:d4:31:25:6b:3b:47:8e:ee:5d:ce:d3:a7:85:95: cd:6c:60:04:b7:eb:1c:ad:cc:31:e7:68:28:bc:ce: b1:ef:c2:60:ff:01:84:6b:3a:fe:3a:1a:1c:84:3b: f9:1e:c2:81:c8:13:de:c2:29:69:3d:4a:26:40:51: 07:74:f6:a5:ba:4f:57:d7:6e:6f:51:b2:ff:85:27: c8:36:ee:94:95:4a:6e:e6:09:a9:50:5e:b7:f1:29: 9d:d3:e3:1d:99:41:c5:a0:5a:a9:20:cf:f0:3b:b4: a5:dd:4c:e0:db:95:07:41:56:ec:7a:96:05:1d:97: ea:07:7e:68:32:24:d6:fd:d4:59:8b:63:11:a6:c7: ff:c7:cb:bf:f7:f5:e2:82:1c:94:1d:ef:27:fa:2d: e8:b5:16:ca:82:2e:03:41:98:3a:7a:a7:fd:4d:0f: 77:2e:e1:54:f8:30:59:38:e9:2b:31:83:30:28:80: 87:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:11:7C:1C:C5:D0:05:7C:4F:7A:EE:A3:3D:CB:BE:D1:28:AB:B3:40 X509v3 Authority Key Identifier: keyid:11:5D:BC:00:43:3E:29:F2:AD:EB:03:8F:EA:2F:BD:70:48:FB:63:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EV28AEM-KfKt6wOP6i-9cEj7Yy8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/65a71d-0236-44d5-8ce9-229b4ae742de/1/BxF8HMXQBXxPeu6jPcu-0Sirs0A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/65a71d-0236-44d5-8ce9-229b4ae742de/1/EV28AEM-KfKt6wOP6i-9cEj7Yy8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.230.110.0/24 Signature Algorithm: sha256WithRSAEncryption 63:37:49:e6:33:f6:55:57:48:cd:db:9b:3d:70:87:48:a6:29: 5a:2b:d1:60:4d:a6:67:5c:f1:c8:83:7e:c2:21:b6:17:98:b4: d3:5d:2c:eb:2b:08:52:2c:b4:28:a0:bb:8a:75:a2:54:d1:1f: f5:a0:8a:b9:21:9d:b9:7e:24:68:08:58:57:8b:77:93:9a:df: d8:0b:d3:79:6b:84:83:59:a9:8e:67:7a:92:97:9a:e6:bd:c2: d1:26:b9:71:d9:16:82:8b:17:8b:62:0e:03:8f:cb:5e:a8:07: 09:56:a2:3b:bd:cb:c1:91:c6:98:c0:58:8f:c8:c4:62:71:66: e9:3f:21:95:4a:0a:ea:8a:95:80:d8:01:5d:fd:63:69:90:e4: dd:e1:b4:9b:b7:c6:de:0a:3b:32:86:82:61:48:d1:e3:21:65: 2d:0e:27:51:fe:74:b0:42:3e:80:52:be:9b:16:0e:48:b2:81: eb:1b:59:79:38:8c:64:d5:54:33:1d:45:31:1f:23:b8:27:8d: 64:ad:e6:70:05:d2:aa:86:19:74:55:e1:dd:16:ac:36:87:34: eb:7c:9a:a1:a3:56:ca:93:69:e6:52:32:c0:84:a7:af:45:67: f0:83:a1:9d:b3:b5:76:40:8a:ca:d4:f8:13:50:a3:5b:6a:d1: bc:6f:be:92 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NbecQ3smyGH6MUXyCju7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExNWRiYzAwNDMzZTI5ZjJhZGViMDM4ZmVhMmZiZDcwNDhm YjYzMmYwHhcNMjYwMTAxMjAxNzU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNzExN2MxY2M1ZDAwNTdjNGY3YWVlYTMzZGNiYmVkMTI4YWJiMzQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqCQdiy+JIaBFZOF84V2jywIcQFhD 5N07i8jxTZKZW27XE6Ten7+c9hYFePRrKPRyPNmdsb91aoshGcsBo9YjfYa98yw4 C3iPPvJ01DElaztHju5dztOnhZXNbGAEt+scrcwx52govM6x78Jg/wGEazr+Ohoc hDv5HsKByBPewilpPUomQFEHdPaluk9X125vUbL/hSfINu6UlUpu5gmpUF638Smd 0+MdmUHFoFqpIM/wO7Sl3Uzg25UHQVbsepYFHZfqB35oMiTW/dRZi2MRpsf/x8u/ 9/XighyUHe8n+i3otRbKgi4DQZg6eqf9TQ93LuFU+DBZOOkrMYMwKICHPwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAcRfBzF0AV8T3ruoz3LvtEoq7NAMB8GA1UdIwQY MBaAFBFdvABDPinyresDj+ovvXBI+2MvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRVYyOEFFTS1LZkt0NndPUDZpLTljRWo3WXk4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC82NWE3MWQtMDIzNi00NGQ1LThjZTkt MjI5YjRhZTc0MmRlLzEvQnhGOEhNWFFCWHhQZXU2alBjdS0wU2lyczBBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC82NWE3MWQtMDIzNi00NGQ1LThjZTktMjI5YjRhZTc0MmRl LzEvRVYyOEFFTS1LZkt0NndPUDZpLTljRWo3WXk4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwuZuMA0G CSqGSIb3DQEBCwUAA4IBAQBjN0nmM/ZVV0jN25s9cIdIpilaK9FgTaZnXPHIg37C IbYXmLTTXSzrKwhSLLQooLuKdaJU0R/1oIq5IZ25fiRoCFhXi3eTmt/YC9N5a4SD WamOZ3qSl5rmvcLRJrlx2RaCixeLYg4Dj8teqAcJVqI7vcvBkcaYwFiPyMRicWbp PyGVSgrqipWA2AFd/WNpkOTd4bSbt8beCjsyhoJhSNHjIWUtDidR/nSwQj6AUr6b Fg5IsoHrG1l5OIxk1VQzHUUxHyO4J41kreZwBdKqhhl0VeHdFqw2hzTrfJqho1bK k2nmUjLAhKevRWfwg6Gds7V2QIrK1PgTUKNbatG8b76S -----END CERTIFICATE-----Generated at Sat Jan 3 04:13:12 2026 by rpki-client