This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/8c5808-3165-41dc-90a0-3ef5eb7c8598/1/bNSTLmAd_NIyCsQeeMYvIeRAEeM.roa File: bNSTLmAd_NIyCsQeeMYvIeRAEeM.roa (raw, json) Hash identifier: k+yE5PrtofGaHem4WOpHAIKjDh/WIjo33qvbhPmIE5I= Subject key identifier: 6C:D4:93:2E:60:1D:FC:D2:32:0A:C4:1E:78:C6:2F:21:E4:40:11:E3 Certificate issuer: /CN=f3b90781dbbebdb8ec42baf66488059ea5866aac Certificate serial: 019B7AC790E5B97594067FF1AF985B9D03A8 Authority key identifier: F3:B9:07:81:DB:BE:BD:B8:EC:42:BA:F6:64:88:05:9E:A5:86:6A:AC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/87kHgdu-vbjsQrr2ZIgFnqWGaqw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/8c5808-3165-41dc-90a0-3ef5eb7c8598/1/bNSTLmAd_NIyCsQeeMYvIeRAEeM.roa Signing time: Thu 01 Jan 2026 18:17:37 +0000 ROA not before: Thu 01 Jan 2026 18:17:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50973 IP address blocks: 2a03:6947:100::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/8c5808-3165-41dc-90a0-3ef5eb7c8598/1/87kHgdu-vbjsQrr2ZIgFnqWGaqw.crl rsync://rpki.ripe.net/repository/DEFAULT/12/8c5808-3165-41dc-90a0-3ef5eb7c8598/1/87kHgdu-vbjsQrr2ZIgFnqWGaqw.mft rsync://rpki.ripe.net/repository/DEFAULT/87kHgdu-vbjsQrr2ZIgFnqWGaqw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 18:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:90:e5:b9:75:94:06:7f:f1:af:98:5b:9d:03:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3b90781dbbebdb8ec42baf66488059ea5866aac Validity Not Before: Jan 1 18:17:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6cd4932e601dfcd2320ac41e78c62f21e44011e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:e5:11:a0:8f:39:a8:56:1e:99:1f:2e:a8:2a: 59:ad:5d:ca:e0:18:64:47:41:0b:df:fb:9f:0f:12: 76:99:d9:c3:98:32:35:d8:c5:69:68:b2:d7:9c:32: af:e8:ed:52:64:4f:bb:7a:10:15:2f:f3:d7:41:43: c1:60:1b:c5:07:f4:8a:7a:0e:95:f7:43:8a:e3:c3: c5:ee:f8:cd:e9:62:04:6e:86:4b:73:54:3c:07:3f: 41:19:d3:6e:30:91:f2:08:f8:c3:ba:24:9f:41:30: 72:81:7f:51:be:f1:ae:8e:4d:52:3c:bb:08:e6:74: dd:ba:f1:2e:2c:37:1d:cd:d5:86:2a:d2:2e:a4:1d: 7a:78:04:04:6d:c6:a1:3c:77:c0:88:1b:45:3f:c3: 99:9c:24:34:e9:e1:f5:25:b3:64:a6:74:84:bb:9a: b7:c6:a1:ca:a3:a3:03:c8:25:59:63:24:38:07:cf: 92:ee:f4:f6:8f:6f:11:00:cd:cd:a7:c0:fd:c2:5b: 33:e2:94:00:ae:57:cb:bc:20:e7:95:13:26:af:cc: d6:ff:05:94:f0:07:50:ba:56:03:d8:64:44:53:67: 09:9a:5f:c8:bf:18:e7:29:44:92:d2:d6:b6:20:db: 70:77:de:bf:9e:7d:2d:80:01:9f:3c:41:3c:11:1d: 1a:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:D4:93:2E:60:1D:FC:D2:32:0A:C4:1E:78:C6:2F:21:E4:40:11:E3 X509v3 Authority Key Identifier: keyid:F3:B9:07:81:DB:BE:BD:B8:EC:42:BA:F6:64:88:05:9E:A5:86:6A:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/87kHgdu-vbjsQrr2ZIgFnqWGaqw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/8c5808-3165-41dc-90a0-3ef5eb7c8598/1/bNSTLmAd_NIyCsQeeMYvIeRAEeM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/8c5808-3165-41dc-90a0-3ef5eb7c8598/1/87kHgdu-vbjsQrr2ZIgFnqWGaqw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a03:6947:100::/40 Signature Algorithm: sha256WithRSAEncryption a2:41:39:ca:ca:a0:c8:c5:6a:66:55:86:f6:11:9a:24:96:6d: 12:58:85:09:c8:fb:75:60:86:39:57:84:70:53:8d:1f:76:b3: 5a:11:46:f3:b8:80:7e:51:6d:2c:b0:c1:48:01:d6:93:15:c9: 17:5a:f2:4c:19:1b:e9:7f:0d:af:a0:6e:3e:a3:b7:bb:5b:5a: a1:09:b2:1c:89:8b:63:57:7a:3f:39:68:fd:a8:c9:c1:b6:4e: ee:66:da:06:ac:e1:51:2a:52:13:7c:b9:cd:07:88:e3:15:f2: a1:8b:95:71:c2:6b:03:9a:6f:54:e0:a3:50:91:ea:e3:fc:a4: 1e:23:52:42:ec:bc:ef:97:c2:ba:f5:14:ba:a9:cc:cb:a3:88: f7:af:38:b6:d9:b6:3f:70:e9:bc:62:93:34:c5:8c:66:ec:23: 9f:55:78:4a:c9:22:dd:23:12:24:84:22:2b:a9:e6:22:22:24: 34:6a:68:30:a2:a9:ab:63:5b:56:72:c8:15:34:99:cb:12:2c: fb:16:f6:3e:64:b7:00:db:0f:72:e2:4b:f5:3b:49:92:bc:79: 19:9b:5a:0a:4a:b6:81:a7:dc:53:a7:84:7f:51:5f:58:96:0c: ed:3a:9c:76:38:27:5f:18:c7:0b:f2:d0:33:61:5d:61:14:95: 6a:79:f9:c3 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt6x5DluXWUBn/xr5hbnQOoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYzYjkwNzgxZGJiZWJkYjhlYzQyYmFmNjY0ODgwNTllYTU4 NjZhYWMwHhcNMjYwMTAxMTgxNzM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2Y2Q0OTMyZTYwMWRmY2QyMzIwYWM0MWU3OGM2MmYyMWU0NDAxMWUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6uURoI85qFYemR8uqCpZrV3K4Bhk R0EL3/ufDxJ2mdnDmDI12MVpaLLXnDKv6O1SZE+7ehAVL/PXQUPBYBvFB/SKeg6V 90OK48PF7vjN6WIEboZLc1Q8Bz9BGdNuMJHyCPjDuiSfQTBygX9RvvGujk1SPLsI 5nTduvEuLDcdzdWGKtIupB16eAQEbcahPHfAiBtFP8OZnCQ06eH1JbNkpnSEu5q3 xqHKo6MDyCVZYyQ4B8+S7vT2j28RAM3Np8D9wlsz4pQArlfLvCDnlRMmr8zW/wWU 8AdQulYD2GREU2cJml/IvxjnKUSS0ta2INtwd96/nn0tgAGfPEE8ER0aqQIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFGzUky5gHfzSMgrEHnjGLyHkQBHjMB8GA1UdIwQY MBaAFPO5B4Hbvr247EK69mSIBZ6lhmqsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvODdrSGdkdS12YmpzUXJyMlpJZ0ZucVdHYXF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi84YzU4MDgtMzE2NS00MWRjLTkwYTAt M2VmNWViN2M4NTk4LzEvYk5TVExtQWRfTkl5Q3NRZWVNWXZJZVJBRWVNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi84YzU4MDgtMzE2NS00MWRjLTkwYTAtM2VmNWViN2M4NTk4 LzEvODdrSGdkdS12YmpzUXJyMlpJZ0ZucVdHYXF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKgNpRwEw DQYJKoZIhvcNAQELBQADggEBAKJBOcrKoMjFamZVhvYRmiSWbRJYhQnI+3VghjlX hHBTjR92s1oRRvO4gH5RbSywwUgB1pMVyRda8kwZG+l/Da+gbj6jt7tbWqEJshyJ i2NXej85aP2oycG2Tu5m2gas4VEqUhN8uc0HiOMV8qGLlXHCawOab1Tgo1CR6uP8 pB4jUkLsvO+Xwrr1FLqpzMujiPevOLbZtj9w6bxikzTFjGbsI59VeErJIt0jEiSE Iiup5iIiJDRqaDCiqatjW1ZyyBU0mcsSLPsW9j5ktwDbD3LiS/U7SZK8eRmbWgpK toGn3FOnhH9RX1iWDO06nHY4J18Yxwvy0DNhXWEUlWp5+cM= -----END CERTIFICATE-----Generated at Mon Jan 26 04:38:54 2026 by rpki-client