This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/8c5808-3165-41dc-90a0-3ef5eb7c8598/1/BTJzW0cyJnm3gOVHNjV6jn9aIRE.roa File: BTJzW0cyJnm3gOVHNjV6jn9aIRE.roa (raw, json) Hash identifier: VWm9Zf270UZNJJ0FAQ1IEKbRWwfLrnZq1cNtrFR5b6U= Subject key identifier: 05:32:73:5B:47:32:26:79:B7:80:E5:47:36:35:7A:8E:7F:5A:21:11 Certificate issuer: /CN=f3b90781dbbebdb8ec42baf66488059ea5866aac Certificate serial: 019B7AC79000AFC4898B42CEEC7753BBEF74 Authority key identifier: F3:B9:07:81:DB:BE:BD:B8:EC:42:BA:F6:64:88:05:9E:A5:86:6A:AC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/87kHgdu-vbjsQrr2ZIgFnqWGaqw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/8c5808-3165-41dc-90a0-3ef5eb7c8598/1/BTJzW0cyJnm3gOVHNjV6jn9aIRE.roa Signing time: Thu 01 Jan 2026 18:17:37 +0000 ROA not before: Thu 01 Jan 2026 18:17:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 28952 IP address blocks: 2a03:6947:1800::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/8c5808-3165-41dc-90a0-3ef5eb7c8598/1/87kHgdu-vbjsQrr2ZIgFnqWGaqw.crl rsync://rpki.ripe.net/repository/DEFAULT/12/8c5808-3165-41dc-90a0-3ef5eb7c8598/1/87kHgdu-vbjsQrr2ZIgFnqWGaqw.mft rsync://rpki.ripe.net/repository/DEFAULT/87kHgdu-vbjsQrr2ZIgFnqWGaqw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 18:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:90:00:af:c4:89:8b:42:ce:ec:77:53:bb:ef:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3b90781dbbebdb8ec42baf66488059ea5866aac Validity Not Before: Jan 1 18:17:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0532735b47322679b780e54736357a8e7f5a2111 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:5a:bb:2a:6d:e1:49:6c:70:71:13:26:f5:57: 30:bd:89:27:89:70:f1:ff:6d:1d:37:52:03:a8:cd: e9:de:c8:87:38:7c:fb:bf:95:88:00:1b:bf:36:15: 22:70:d8:1a:01:39:16:98:9f:5e:6e:d7:cb:ef:a5: 57:0d:60:a8:6f:c9:f3:7d:b4:bf:04:90:35:94:02: e5:f3:70:87:4a:5c:5a:40:9e:16:62:6a:7c:c6:8b: 44:ce:21:c0:0d:cb:c0:84:71:1c:9c:24:a4:7b:5d: 8f:0a:4a:17:95:ce:53:b0:bd:6a:f6:e5:80:4f:2a: 0a:bb:04:88:0e:b3:dc:8c:fa:fa:21:a8:3e:4c:20: 22:ba:35:0d:4f:6a:16:05:ef:ca:84:9e:18:40:3d: ad:7e:fc:ba:23:81:17:18:c7:d8:c7:36:7f:4e:91: 9c:be:8d:44:c0:bb:c2:2b:e9:b7:e5:41:ea:53:f5: 82:b9:fa:c4:38:db:b1:44:78:c4:40:4e:8b:dd:3a: ea:8c:6e:b7:e7:2a:a8:dc:88:b7:ea:ae:fd:5c:0d: dd:da:9f:dc:11:b4:76:e6:35:4e:d7:d0:4f:fe:14: bf:53:e9:2c:21:09:c9:b0:e7:4c:3d:a3:20:89:2b: 3a:f4:bc:b6:77:4d:09:37:4d:fe:4c:37:7c:2a:5a: 82:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:32:73:5B:47:32:26:79:B7:80:E5:47:36:35:7A:8E:7F:5A:21:11 X509v3 Authority Key Identifier: keyid:F3:B9:07:81:DB:BE:BD:B8:EC:42:BA:F6:64:88:05:9E:A5:86:6A:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/87kHgdu-vbjsQrr2ZIgFnqWGaqw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/8c5808-3165-41dc-90a0-3ef5eb7c8598/1/BTJzW0cyJnm3gOVHNjV6jn9aIRE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/8c5808-3165-41dc-90a0-3ef5eb7c8598/1/87kHgdu-vbjsQrr2ZIgFnqWGaqw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a03:6947:1800::/40 Signature Algorithm: sha256WithRSAEncryption 71:1f:1e:83:4f:97:3a:c9:a3:82:5e:53:cd:db:a4:3a:7a:2c: 8c:48:c6:1a:ab:2d:dc:a4:2f:9a:15:3a:77:10:60:f7:91:db: 58:06:cd:77:b2:81:66:e5:5a:2e:33:5e:fe:e5:b9:a2:4e:e9: 79:ee:cc:28:10:7b:04:f6:3d:06:fb:a0:29:7d:8c:d4:55:b2: cb:40:5a:63:09:13:c9:b4:d0:55:ba:6c:9f:92:af:f2:be:8e: 86:7b:18:dd:c2:0d:42:ec:ca:54:a0:3b:c4:62:8a:78:3d:37: 98:59:d3:b7:8a:3a:29:1a:99:7d:46:03:fe:67:bd:a8:c9:7d: ff:56:dd:de:3b:67:ea:b7:c9:91:c7:f4:74:88:0b:f9:ed:6d: e5:64:b9:eb:ac:df:54:82:9c:d2:97:14:64:2a:86:ce:21:02: f3:2f:77:e6:e2:b5:87:b0:13:d2:bf:08:68:cf:6c:f8:eb:0a: 6c:90:22:1b:7a:05:53:83:9b:7d:ad:dc:a0:1f:60:98:72:26: 9b:5b:49:ae:6e:26:7d:55:50:70:1f:3f:71:d9:f9:9b:1d:45: 20:ac:30:38:e1:6f:66:01:5d:72:e3:fe:b4:f2:38:04:0c:7b: 04:4b:da:5d:20:3b:e6:9d:40:cb:85:9d:4a:a6:8f:a2:75:14: ff:01:9d:a9 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt6x5AAr8SJi0LO7HdTu+90MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYzYjkwNzgxZGJiZWJkYjhlYzQyYmFmNjY0ODgwNTllYTU4 NjZhYWMwHhcNMjYwMTAxMTgxNzM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNTMyNzM1YjQ3MzIyNjc5Yjc4MGU1NDczNjM1N2E4ZTdmNWEyMTExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvFq7Km3hSWxwcRMm9VcwvYkniXDx /20dN1IDqM3p3siHOHz7v5WIABu/NhUicNgaATkWmJ9ebtfL76VXDWCob8nzfbS/ BJA1lALl83CHSlxaQJ4WYmp8xotEziHADcvAhHEcnCSke12PCkoXlc5TsL1q9uWA TyoKuwSIDrPcjPr6Iag+TCAiujUNT2oWBe/KhJ4YQD2tfvy6I4EXGMfYxzZ/TpGc vo1EwLvCK+m35UHqU/WCufrEONuxRHjEQE6L3TrqjG635yqo3Ii36q79XA3d2p/c EbR25jVO19BP/hS/U+ksIQnJsOdMPaMgiSs69Ly2d00JN03+TDd8KlqCYQIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFAUyc1tHMiZ5t4DlRzY1eo5/WiERMB8GA1UdIwQY MBaAFPO5B4Hbvr247EK69mSIBZ6lhmqsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvODdrSGdkdS12YmpzUXJyMlpJZ0ZucVdHYXF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi84YzU4MDgtMzE2NS00MWRjLTkwYTAt M2VmNWViN2M4NTk4LzEvQlRKelcwY3lKbm0zZ09WSE5qVjZqbjlhSVJFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi84YzU4MDgtMzE2NS00MWRjLTkwYTAtM2VmNWViN2M4NTk4 LzEvODdrSGdkdS12YmpzUXJyMlpJZ0ZucVdHYXF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKgNpRxgw DQYJKoZIhvcNAQELBQADggEBAHEfHoNPlzrJo4JeU83bpDp6LIxIxhqrLdykL5oV OncQYPeR21gGzXeygWblWi4zXv7luaJO6XnuzCgQewT2PQb7oCl9jNRVsstAWmMJ E8m00FW6bJ+Sr/K+joZ7GN3CDULsylSgO8Riing9N5hZ07eKOikamX1GA/5nvajJ ff9W3d47Z+q3yZHH9HSIC/ntbeVkueus31SCnNKXFGQqhs4hAvMvd+bitYewE9K/ CGjPbPjrCmyQIht6BVODm32t3KAfYJhyJptbSa5uJn1VUHAfP3HZ+ZsdRSCsMDjh b2YBXXLj/rTyOAQMewRL2l0gO+adQMuFnUqmj6J1FP8Bnak= -----END CERTIFICATE-----Generated at Mon Jan 26 04:42:46 2026 by rpki-client