This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/71d667-11f8-4a6d-849d-897a4cc92922/1/BtoXyxMSDIQKMTy6jmmOzPMifBs.roa File: BtoXyxMSDIQKMTy6jmmOzPMifBs.roa (raw, json) Hash identifier: 8KwO1lQ/lrfb32wFNdnAhNa5nkjafPNwoIk1Z923QrM= Subject key identifier: 06:DA:17:CB:13:12:0C:84:0A:31:3C:BA:8E:69:8E:CC:F3:22:7C:1B Certificate issuer: /CN=cab038e592fa52c1e463384ff932fbe5b0cc70a9 Certificate serial: 019B7834704EF3F17300F9A8355C67DB552F Authority key identifier: CA:B0:38:E5:92:FA:52:C1:E4:63:38:4F:F9:32:FB:E5:B0:CC:70:A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yrA45ZL6UsHkYzhP-TL75bDMcKk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/71d667-11f8-4a6d-849d-897a4cc92922/1/BtoXyxMSDIQKMTy6jmmOzPMifBs.roa Signing time: Thu 01 Jan 2026 06:17:41 +0000 ROA not before: Thu 01 Jan 2026 06:17:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209263 IP address blocks: 2a02:ef40::/29 maxlen: 29 2a02:ef40:1::/64 maxlen: 64 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/71d667-11f8-4a6d-849d-897a4cc92922/1/yrA45ZL6UsHkYzhP-TL75bDMcKk.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/71d667-11f8-4a6d-849d-897a4cc92922/1/yrA45ZL6UsHkYzhP-TL75bDMcKk.mft rsync://rpki.ripe.net/repository/DEFAULT/yrA45ZL6UsHkYzhP-TL75bDMcKk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:70:4e:f3:f1:73:00:f9:a8:35:5c:67:db:55:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cab038e592fa52c1e463384ff932fbe5b0cc70a9 Validity Not Before: Jan 1 06:17:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=06da17cb13120c840a313cba8e698eccf3227c1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:82:71:01:90:9f:47:fe:97:3b:9b:1d:41:30: d4:95:e7:2f:1a:72:1d:95:27:8c:8c:5c:7b:74:67: dd:15:08:de:d5:ee:59:97:7b:4d:e1:23:23:7f:b7: f2:77:17:38:e4:96:d7:ae:d7:e0:fa:42:13:a8:36: 31:c5:ff:f1:02:21:e0:8e:5d:3f:69:6c:c9:88:53: 5d:cd:f2:15:24:4b:9b:64:7e:dc:f1:3e:6f:1b:50: d4:7c:51:1e:aa:24:9a:f7:97:4e:49:c9:ad:de:1f: ba:6c:2c:c6:4c:e1:3c:ef:05:e4:2f:2c:59:05:57: 85:43:2d:82:39:a2:62:e7:7d:f2:b6:ce:ce:e0:f6: fa:e6:53:77:a3:87:cf:2a:18:21:a7:7d:37:8f:01: d1:0b:77:ef:f9:ab:2c:62:14:24:52:4c:a9:db:b6: b7:55:3f:67:cd:6d:cd:1a:68:fe:d9:51:d6:7c:65: d9:03:ed:d3:7c:1e:e3:10:71:a2:7d:b8:3d:76:be: 46:ac:54:c9:49:c8:90:16:ab:92:2c:24:16:8c:0d: 8c:82:e3:bd:ba:3b:2a:68:4b:2a:2a:57:ec:ea:7d: 96:eb:15:89:12:30:1a:82:27:fb:32:e2:8d:9a:29: 23:d7:e1:94:2f:33:45:d0:50:c1:a2:78:0f:aa:ff: d9:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:DA:17:CB:13:12:0C:84:0A:31:3C:BA:8E:69:8E:CC:F3:22:7C:1B X509v3 Authority Key Identifier: keyid:CA:B0:38:E5:92:FA:52:C1:E4:63:38:4F:F9:32:FB:E5:B0:CC:70:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yrA45ZL6UsHkYzhP-TL75bDMcKk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/71d667-11f8-4a6d-849d-897a4cc92922/1/BtoXyxMSDIQKMTy6jmmOzPMifBs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/71d667-11f8-4a6d-849d-897a4cc92922/1/yrA45ZL6UsHkYzhP-TL75bDMcKk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a02:ef40::/29 Signature Algorithm: sha256WithRSAEncryption 18:2b:c0:46:eb:bc:20:b7:48:b4:5d:49:08:18:ca:30:2f:26: bf:e1:0d:8b:10:a7:c4:4d:9c:5e:39:25:0f:f2:d6:58:3e:a3: a6:96:91:8b:c0:ba:b1:ee:d4:7b:95:ca:2d:d2:01:21:8e:5a: f9:4d:7b:10:21:fa:a4:7e:da:a6:b9:dd:9a:a0:6a:33:fa:ac: 11:a9:5d:88:fe:b0:7f:33:ff:e3:99:57:3c:08:ad:ba:98:79: 64:21:fa:f2:2a:3e:86:4f:6d:81:fb:4b:33:c3:79:31:dd:6f: 9f:e3:de:44:da:3c:0c:cd:10:17:08:72:d4:7e:14:8c:b7:bf: f0:eb:31:e9:8b:34:39:fc:79:64:59:d6:fb:15:ff:5b:80:c8: 3a:c9:30:77:be:b5:da:f2:28:a1:bb:19:51:79:52:41:82:c5: 6e:b7:27:75:23:92:50:fe:ab:b4:16:9d:ed:47:1c:f5:92:75: 42:0a:90:f9:cc:70:8c:4b:8b:d6:c7:59:ac:28:12:61:21:dd: ca:17:e1:4b:56:83:07:2b:db:b6:b2:13:1c:39:44:f8:f9:c2: 43:73:fb:97:96:e5:eb:b7:68:2a:6b:0a:72:8c:c4:5a:3b:17: 1b:5b:64:aa:64:dd:ee:e7:d2:ce:f9:af:28:89:ee:94:30:aa: 03:ec:47:d0 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt4NHBO8/FzAPmoNVxn21UvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhYjAzOGU1OTJmYTUyYzFlNDYzMzg0ZmY5MzJmYmU1YjBj YzcwYTkwHhcNMjYwMTAxMDYxNzQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNmRhMTdjYjEzMTIwYzg0MGEzMTNjYmE4ZTY5OGVjY2YzMjI3YzFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuoJxAZCfR/6XO5sdQTDUlecvGnId lSeMjFx7dGfdFQje1e5Zl3tN4SMjf7fydxc45JbXrtfg+kITqDYxxf/xAiHgjl0/ aWzJiFNdzfIVJEubZH7c8T5vG1DUfFEeqiSa95dOScmt3h+6bCzGTOE87wXkLyxZ BVeFQy2COaJi533yts7O4Pb65lN3o4fPKhghp303jwHRC3fv+assYhQkUkyp27a3 VT9nzW3NGmj+2VHWfGXZA+3TfB7jEHGifbg9dr5GrFTJSciQFquSLCQWjA2MguO9 ujsqaEsqKlfs6n2W6xWJEjAagif7MuKNmikj1+GULzNF0FDBongPqv/ZtwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFAbaF8sTEgyECjE8uo5pjszzInwbMB8GA1UdIwQY MBaAFMqwOOWS+lLB5GM4T/ky++WwzHCpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveXJBNDVaTDZVc0hrWXpoUC1UTDc1YkRNY0trLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS83MWQ2NjctMTFmOC00YTZkLTg0OWQt ODk3YTRjYzkyOTIyLzEvQnRvWHl4TVNESVFLTVR5NmptbU96UE1pZkJzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS83MWQ2NjctMTFmOC00YTZkLTg0OWQtODk3YTRjYzkyOTIy LzEveXJBNDVaTDZVc0hrWXpoUC1UTDc1YkRNY0trLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKgLvQDAN BgkqhkiG9w0BAQsFAAOCAQEAGCvARuu8ILdItF1JCBjKMC8mv+ENixCnxE2cXjkl D/LWWD6jppaRi8C6se7Ue5XKLdIBIY5a+U17ECH6pH7aprndmqBqM/qsEaldiP6w fzP/45lXPAituph5ZCH68io+hk9tgftLM8N5Md1vn+PeRNo8DM0QFwhy1H4UjLe/ 8Osx6Ys0Ofx5ZFnW+xX/W4DIOskwd7612vIoobsZUXlSQYLFbrcndSOSUP6rtBad 7Ucc9ZJ1QgqQ+cxwjEuL1sdZrCgSYSHdyhfhS1aDByvbtrITHDlE+PnCQ3P7l5bl 67doKmsKcozEWjsXG1tkqmTd7ufSzvmvKInulDCqA+xH0A== -----END CERTIFICATE-----Generated at Sun Jan 25 15:14:34 2026 by rpki-client