This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/84a5dd-5cf2-4857-bd93-3c711a15fa5c/1/BnG9xCYyBYlPUND8AWN9uHS5IZo.roa File: BnG9xCYyBYlPUND8AWN9uHS5IZo.roa (raw, json) Hash identifier: qw7izOSv6K3vaghtKBPoCLVyOeT33jc/k8obXSbsCcU= Subject key identifier: 06:71:BD:C4:26:32:05:89:4F:50:D0:FC:01:63:7D:B8:74:B9:21:9A Certificate issuer: /CN=b6d68436a76339f671441cfbd50ad401d3c00fff Certificate serial: 019B7C12BFED44AEAF2A332E6EAC4DD30D38 Authority key identifier: B6:D6:84:36:A7:63:39:F6:71:44:1C:FB:D5:0A:D4:01:D3:C0:0F:FF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ttaENqdjOfZxRBz71QrUAdPAD_8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/84a5dd-5cf2-4857-bd93-3c711a15fa5c/1/BnG9xCYyBYlPUND8AWN9uHS5IZo.roa Signing time: Fri 02 Jan 2026 00:19:22 +0000 ROA not before: Fri 02 Jan 2026 00:19:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204411 IP address blocks: 185.235.160.0/22 maxlen: 22 185.235.160.0/24 maxlen: 24 185.235.161.0/24 maxlen: 24 185.235.162.0/24 maxlen: 24 185.235.163.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/84a5dd-5cf2-4857-bd93-3c711a15fa5c/1/ttaENqdjOfZxRBz71QrUAdPAD_8.crl rsync://rpki.ripe.net/repository/DEFAULT/41/84a5dd-5cf2-4857-bd93-3c711a15fa5c/1/ttaENqdjOfZxRBz71QrUAdPAD_8.mft rsync://rpki.ripe.net/repository/DEFAULT/ttaENqdjOfZxRBz71QrUAdPAD_8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 18:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:bf:ed:44:ae:af:2a:33:2e:6e:ac:4d:d3:0d:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b6d68436a76339f671441cfbd50ad401d3c00fff Validity Not Before: Jan 2 00:19:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0671bdc4263205894f50d0fc01637db874b9219a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:b3:fc:f6:58:76:7f:89:ab:27:91:c5:f1:f0: 8c:06:46:f0:04:4a:44:29:a5:4c:4c:b7:8e:7a:7e: d5:2d:61:96:4e:0f:db:9e:08:ae:84:7d:6b:f8:7e: 6d:67:1e:a6:fa:92:fe:96:65:27:6c:f0:f3:ed:4d: 45:4b:a4:37:67:e4:e7:9e:b4:8a:ba:a1:a7:2e:23: fa:85:91:99:58:35:4a:fa:f1:ef:a4:73:67:aa:10: a0:68:49:9d:c4:67:ec:5f:28:08:91:a7:ca:59:d2: 79:e3:4e:a6:6d:fe:00:f3:d4:91:28:60:58:73:f8: 48:66:3d:81:c3:f0:7b:59:b3:5f:27:33:25:a5:f8: a6:8e:71:0b:cb:15:d5:3b:3f:de:20:ff:6d:4b:6c: 52:5b:43:19:ba:3f:9b:33:ef:c2:7b:d4:45:9b:f2: 7c:cb:0d:ca:a3:0d:08:e0:d6:47:33:d8:13:45:1a: 1f:40:20:d3:d1:2d:32:b6:41:bd:0a:6d:d6:0c:49: e0:c4:a1:03:a6:c2:22:90:e5:68:02:18:2b:f1:51: d5:54:2d:f5:7d:0f:af:b2:c2:0c:9a:51:2e:72:70: 8d:35:24:a5:03:fc:87:4e:2d:d3:b0:f1:b8:74:4b: 32:ba:a1:1b:1b:8d:6b:75:47:95:fb:eb:d6:79:eb: fa:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:71:BD:C4:26:32:05:89:4F:50:D0:FC:01:63:7D:B8:74:B9:21:9A X509v3 Authority Key Identifier: keyid:B6:D6:84:36:A7:63:39:F6:71:44:1C:FB:D5:0A:D4:01:D3:C0:0F:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ttaENqdjOfZxRBz71QrUAdPAD_8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/84a5dd-5cf2-4857-bd93-3c711a15fa5c/1/BnG9xCYyBYlPUND8AWN9uHS5IZo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/84a5dd-5cf2-4857-bd93-3c711a15fa5c/1/ttaENqdjOfZxRBz71QrUAdPAD_8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.235.160.0/22 Signature Algorithm: sha256WithRSAEncryption 04:eb:af:f8:7d:05:41:03:1e:06:e2:86:37:fa:93:03:08:37: dd:de:fb:76:9d:79:93:af:af:d4:ca:bd:1b:0a:3b:10:29:4e: da:c7:06:8b:77:55:10:b1:2b:45:66:ba:98:fa:45:00:ef:2b: 1b:75:52:13:cb:5f:1e:df:38:17:74:cb:d7:2a:ef:7e:c4:57: eb:c8:03:59:34:af:cf:18:a8:05:97:15:7d:fa:a9:3a:e3:9e: 3e:d7:53:07:0e:fc:5f:e5:fb:ee:4e:32:b0:6d:df:2f:31:0b: db:04:52:91:d1:be:c2:01:cf:45:59:f0:c4:10:62:32:d2:4b: 8d:dd:05:2d:bb:31:c8:cd:06:90:1a:a0:3d:22:e2:16:2f:d3: 11:6d:8e:35:f6:93:b8:69:fe:13:94:28:35:de:a5:8a:95:a3: b0:c8:6f:c2:0e:69:e1:9d:58:bb:74:3b:3b:a8:5c:65:df:7e: ca:ad:fb:77:b3:eb:9b:55:5c:72:4f:dc:07:ce:6a:56:f4:26: ac:33:bc:b2:f5:ab:9c:a9:d3:69:53:41:03:f0:3a:b7:03:07: 50:0c:30:d7:1d:74:c0:c9:d5:d3:02:ae:12:58:5c:56:1a:21: 5a:bf:ee:c5:e7:57:74:76:77:a9:dc:85:53:37:40:18:f1:25: 69:d1:08:fd -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8Er/tRK6vKjMubqxN0w04MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2ZDY4NDM2YTc2MzM5ZjY3MTQ0MWNmYmQ1MGFkNDAxZDNj MDBmZmYwHhcNMjYwMTAyMDAxOTIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNjcxYmRjNDI2MzIwNTg5NGY1MGQwZmMwMTYzN2RiODc0YjkyMTlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0LP89lh2f4mrJ5HF8fCMBkbwBEpE KaVMTLeOen7VLWGWTg/bngiuhH1r+H5tZx6m+pL+lmUnbPDz7U1FS6Q3Z+TnnrSK uqGnLiP6hZGZWDVK+vHvpHNnqhCgaEmdxGfsXygIkafKWdJ5406mbf4A89SRKGBY c/hIZj2Bw/B7WbNfJzMlpfimjnELyxXVOz/eIP9tS2xSW0MZuj+bM+/Ce9RFm/J8 yw3Kow0I4NZHM9gTRRofQCDT0S0ytkG9Cm3WDEngxKEDpsIikOVoAhgr8VHVVC31 fQ+vssIMmlEucnCNNSSlA/yHTi3TsPG4dEsyuqEbG41rdUeV++vWeev6BwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAZxvcQmMgWJT1DQ/AFjfbh0uSGaMB8GA1UdIwQY MBaAFLbWhDanYzn2cUQc+9UK1AHTwA//MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdHRhRU5xZGpPZlp4UkJ6NzFRclVBZFBBRF84LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS84NGE1ZGQtNWNmMi00ODU3LWJkOTMt M2M3MTFhMTVmYTVjLzEvQm5HOXhDWXlCWWxQVU5EOEFXTjl1SFM1SVpvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS84NGE1ZGQtNWNmMi00ODU3LWJkOTMtM2M3MTFhMTVmYTVj LzEvdHRhRU5xZGpPZlp4UkJ6NzFRclVBZFBBRF84LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCueugMA0G CSqGSIb3DQEBCwUAA4IBAQAE66/4fQVBAx4G4oY3+pMDCDfd3vt2nXmTr6/Uyr0b CjsQKU7axwaLd1UQsStFZrqY+kUA7ysbdVITy18e3zgXdMvXKu9+xFfryANZNK/P GKgFlxV9+qk6454+11MHDvxf5fvuTjKwbd8vMQvbBFKR0b7CAc9FWfDEEGIy0kuN 3QUtuzHIzQaQGqA9IuIWL9MRbY419pO4af4TlCg13qWKlaOwyG/CDmnhnVi7dDs7 qFxl337Krft3s+ubVVxyT9wHzmpW9CasM7yy9aucqdNpU0ED8Dq3AwdQDDDXHXTA ydXTAq4SWFxWGiFav+7F51d0dnep3IVTN0AY8SVp0Qj9 -----END CERTIFICATE-----Generated at Sat Jan 3 02:49:13 2026 by rpki-client