This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/bXvBo_CQO1mQ2Jmfwik38TsSdgs.roa File: bXvBo_CQO1mQ2Jmfwik38TsSdgs.roa (raw, json) Hash identifier: v3xzvBX/k+ZUQX7D1tuVRaHRVvVvUQdIj7NXDvVhP5I= Subject key identifier: 6D:7B:C1:A3:F0:90:3B:59:90:D8:99:9F:C2:29:37:F1:3B:12:76:0B Certificate issuer: /CN=9a1e69368abd34538fe77ddaabcdc835af595eba Certificate serial: 019B7AC798C4AFD954B05DCDDCB86AC9A9D6 Authority key identifier: 9A:1E:69:36:8A:BD:34:53:8F:E7:7D:DA:AB:CD:C8:35:AF:59:5E:BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/bXvBo_CQO1mQ2Jmfwik38TsSdgs.roa Signing time: Thu 01 Jan 2026 18:17:39 +0000 ROA not before: Thu 01 Jan 2026 18:17:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204834 IP address blocks: 5.202.106.0/23 maxlen: 23 5.202.106.0/24 maxlen: 24 5.202.107.0/24 maxlen: 24 185.177.232.0/23 maxlen: 23 185.177.232.0/24 maxlen: 24 185.177.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.crl rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.mft rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:98:c4:af:d9:54:b0:5d:cd:dc:b8:6a:c9:a9:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a1e69368abd34538fe77ddaabcdc835af595eba Validity Not Before: Jan 1 18:17:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6d7bc1a3f0903b5990d8999fc22937f13b12760b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:27:50:09:ea:76:64:eb:08:ef:ba:a2:78:47: 04:23:5a:29:fa:fe:b3:d6:a2:fb:7b:44:56:3a:67: e3:44:fb:e9:27:29:03:15:f7:db:1f:83:d7:9f:c0: 9c:28:d0:4e:10:60:5c:de:e0:38:ee:66:2d:de:24: 39:72:60:bd:ca:96:43:61:e3:77:b3:15:77:14:5e: cd:78:4c:c9:d5:21:fa:d7:d0:23:c9:28:bf:55:37: 14:50:7a:8b:7c:a3:7b:0e:fe:21:c1:1d:21:52:ea: 02:1c:d2:ce:82:f0:45:a3:8e:7f:48:29:7a:0f:0c: 59:b5:2a:f8:6f:d8:a9:12:66:4d:36:d1:4f:13:1b: 24:50:43:ee:05:06:a4:ef:ea:ad:a9:27:fd:c5:9d: c3:12:72:87:34:c1:25:38:80:05:27:18:3a:f7:ae: 81:af:83:9d:4d:42:d5:4e:67:00:7e:f4:42:e6:4a: 45:e3:f7:a9:0c:df:5d:27:91:cc:84:ea:65:7a:1b: 0f:16:b5:8c:3c:e2:20:7c:9e:85:80:41:11:78:65: 37:b7:87:be:6c:24:80:d6:7b:e6:21:f7:88:28:df: 88:a8:7b:2f:f2:ce:b7:86:ec:44:e4:a2:8a:37:1b: 09:44:d9:80:7a:7c:a0:b9:58:d3:18:3c:5b:5c:05: 0e:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:7B:C1:A3:F0:90:3B:59:90:D8:99:9F:C2:29:37:F1:3B:12:76:0B X509v3 Authority Key Identifier: keyid:9A:1E:69:36:8A:BD:34:53:8F:E7:7D:DA:AB:CD:C8:35:AF:59:5E:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/bXvBo_CQO1mQ2Jmfwik38TsSdgs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.202.106.0/23 185.177.232.0/23 Signature Algorithm: sha256WithRSAEncryption c9:74:f7:fa:01:4c:85:82:a8:45:13:59:5e:ea:c5:0d:37:5d: d9:52:ae:9a:54:de:a9:7f:5e:ae:9f:73:f5:4b:1b:c8:36:80: ab:a7:2c:c1:b4:d8:e4:c9:7f:9f:42:15:77:c8:2b:3f:d2:b2: 8c:88:90:b8:26:47:2b:24:cb:9b:67:05:d1:de:6b:13:99:1b: 38:8e:2b:36:af:42:c9:df:a7:98:dc:bf:26:87:18:f3:be:ed: 85:44:54:7c:2b:b9:19:17:e3:7d:54:1d:18:d5:f4:dc:ec:35: d9:1f:06:75:f7:37:93:93:2d:5b:77:a6:c5:32:03:a2:71:b4: 97:65:b9:2e:7a:b9:bc:0a:ee:98:92:4e:e1:aa:e2:36:c1:79: 66:84:58:07:b4:53:f3:04:01:0c:64:a9:45:1f:23:9b:71:44: 1d:f1:1c:f9:e6:19:31:49:f6:c1:bc:09:b8:f7:2c:43:16:b6: cc:18:0d:9c:00:04:b5:83:8a:ed:93:da:fb:6c:80:1a:fd:61: 57:a4:cd:62:c6:e7:a9:69:10:3c:05:42:ed:59:7f:7b:b2:51: dc:ff:10:99:9b:ab:99:b3:ce:51:79:e9:29:d1:31:51:1e:b0: d0:55:99:9d:9a:00:75:46:fc:11:4c:5f:d2:9d:70:cd:f7:c8: 17:bb:2d:1c -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt6x5jEr9lUsF3N3LhqyanWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhMWU2OTM2OGFiZDM0NTM4ZmU3N2RkYWFiY2RjODM1YWY1 OTVlYmEwHhcNMjYwMTAxMTgxNzM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZDdiYzFhM2YwOTAzYjU5OTBkODk5OWZjMjI5MzdmMTNiMTI3NjBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxSdQCep2ZOsI77qieEcEI1op+v6z 1qL7e0RWOmfjRPvpJykDFffbH4PXn8CcKNBOEGBc3uA47mYt3iQ5cmC9ypZDYeN3 sxV3FF7NeEzJ1SH619AjySi/VTcUUHqLfKN7Dv4hwR0hUuoCHNLOgvBFo45/SCl6 DwxZtSr4b9ipEmZNNtFPExskUEPuBQak7+qtqSf9xZ3DEnKHNMElOIAFJxg6966B r4OdTULVTmcAfvRC5kpF4/epDN9dJ5HMhOplehsPFrWMPOIgfJ6FgEEReGU3t4e+ bCSA1nvmIfeIKN+IqHsv8s63huxE5KKKNxsJRNmAenyguVjTGDxbXAUOsQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFG17waPwkDtZkNiZn8IpN/E7EnYLMB8GA1UdIwQY MBaAFJoeaTaKvTRTj+d92qvNyDWvWV66MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbWg1cE5vcTlORk9QNTMzYXE4M0lOYTlaWHJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi83ODg2ZjQtNWZjYy00ZDQ0LWJkNjIt MTA5ODJlMDQwZDUzLzEvYlh2Qm9fQ1FPMW1RMkptZndpazM4VHNTZGdzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi83ODg2ZjQtNWZjYy00ZDQ0LWJkNjItMTA5ODJlMDQwZDUz LzEvbWg1cE5vcTlORk9QNTMzYXE4M0lOYTlaWHJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBBcpqAwQB ubHoMA0GCSqGSIb3DQEBCwUAA4IBAQDJdPf6AUyFgqhFE1le6sUNN13ZUq6aVN6p f16un3P1SxvINoCrpyzBtNjkyX+fQhV3yCs/0rKMiJC4JkcrJMubZwXR3msTmRs4 jis2r0LJ36eY3L8mhxjzvu2FRFR8K7kZF+N9VB0Y1fTc7DXZHwZ19zeTky1bd6bF MgOicbSXZbkuerm8Cu6Ykk7hquI2wXlmhFgHtFPzBAEMZKlFHyObcUQd8Rz55hkx SfbBvAm49yxDFrbMGA2cAAS1g4rtk9r7bIAa/WFXpM1ixuepaRA8BULtWX97slHc /xCZm6uZs85Reekp0TFRHrDQVZmdmgB1RvwRTF/SnXDN98gXuy0c -----END CERTIFICATE-----Generated at Sun Jan 11 23:53:57 2026 by rpki-client