This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c54f42-912f-4b81-8b00-5c00fcd73619/1/bHxNQUrJC8Eh62QodMXQrjbnmgg.roa File: bHxNQUrJC8Eh62QodMXQrjbnmgg.roa (raw, json) Hash identifier: 1d3ZqMZQAbRLtC6TZNo/vpwZQcPk90gTwtcmQgBCgII= Subject key identifier: 6C:7C:4D:41:4A:C9:0B:C1:21:EB:64:28:74:C5:D0:AE:36:E7:9A:08 Certificate issuer: /CN=2b3f6fa9f037765e74bdf2ac82ccbabc7e4fc8ed Certificate serial: 019B77C6E3DDFBE3A042A2B5A98D6294BF68 Authority key identifier: 2B:3F:6F:A9:F0:37:76:5E:74:BD:F2:AC:82:CC:BA:BC:7E:4F:C8:ED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kz9vqfA3dl50vfKsgsy6vH5PyO0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c54f42-912f-4b81-8b00-5c00fcd73619/1/bHxNQUrJC8Eh62QodMXQrjbnmgg.roa Signing time: Thu 01 Jan 2026 04:18:01 +0000 ROA not before: Thu 01 Jan 2026 04:18:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213655 IP address blocks: 2001:67c:ffc::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/c54f42-912f-4b81-8b00-5c00fcd73619/1/Kz9vqfA3dl50vfKsgsy6vH5PyO0.crl rsync://rpki.ripe.net/repository/DEFAULT/29/c54f42-912f-4b81-8b00-5c00fcd73619/1/Kz9vqfA3dl50vfKsgsy6vH5PyO0.mft rsync://rpki.ripe.net/repository/DEFAULT/Kz9vqfA3dl50vfKsgsy6vH5PyO0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:e3:dd:fb:e3:a0:42:a2:b5:a9:8d:62:94:bf:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b3f6fa9f037765e74bdf2ac82ccbabc7e4fc8ed Validity Not Before: Jan 1 04:18:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6c7c4d414ac90bc121eb642874c5d0ae36e79a08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:86:55:df:2d:9e:cc:e3:54:e1:29:94:85:b4: 4b:2f:15:d8:c6:66:a0:79:dc:ea:cf:69:98:99:6b: 47:50:f4:b7:37:a6:a8:96:dd:f9:55:e1:bc:81:c9: 49:66:af:a8:42:dc:a4:f7:5e:e0:d3:9b:8f:84:11: 21:d7:3a:dc:e6:52:cd:c0:e6:50:a5:42:a2:76:75: 2c:17:b4:e6:73:1d:bc:d3:69:42:30:5b:9e:89:0f: 5f:1a:a2:05:66:38:e8:f7:4c:0f:19:37:1f:dd:0d: 3f:2c:0e:0f:83:fe:f7:e3:03:c8:9d:33:d1:03:7f: 2a:c4:13:ff:95:02:91:11:c0:db:88:53:00:c6:64: 98:f9:b4:aa:c0:2e:0d:78:45:71:6e:b5:df:b8:a8: be:b0:dd:88:cf:5e:08:65:04:1e:7e:5c:72:17:f2: 53:0f:e3:c9:f7:a1:12:0e:83:0a:4d:69:37:60:b0: 37:a0:b3:76:a0:1c:00:f5:fc:a6:72:a3:c6:71:9a: 57:39:f3:c2:69:3b:44:12:37:9e:e0:2d:e7:2b:71: d0:38:32:f7:c5:9f:00:cc:72:6a:5f:3a:02:8a:de: c7:f5:7d:ed:e3:8a:7d:2a:b4:34:f0:06:e8:56:fa: f1:05:e5:3d:68:ee:2c:e9:90:cf:a4:15:f0:e8:38: 60:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:7C:4D:41:4A:C9:0B:C1:21:EB:64:28:74:C5:D0:AE:36:E7:9A:08 X509v3 Authority Key Identifier: keyid:2B:3F:6F:A9:F0:37:76:5E:74:BD:F2:AC:82:CC:BA:BC:7E:4F:C8:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kz9vqfA3dl50vfKsgsy6vH5PyO0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c54f42-912f-4b81-8b00-5c00fcd73619/1/bHxNQUrJC8Eh62QodMXQrjbnmgg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c54f42-912f-4b81-8b00-5c00fcd73619/1/Kz9vqfA3dl50vfKsgsy6vH5PyO0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:ffc::/48 Signature Algorithm: sha256WithRSAEncryption 74:87:d6:94:0a:c9:3c:f2:6b:9b:55:90:41:a3:7f:74:bb:84: b6:61:e9:1c:b9:1d:c2:e4:df:a4:37:f0:50:71:69:35:e8:20: b5:65:32:cb:54:5a:31:0d:06:17:70:ee:62:97:d6:ef:ed:65: 60:e6:15:11:fb:5d:66:3b:6a:93:bf:96:d1:c4:c3:25:3a:be: d7:c2:9f:04:26:1c:c4:dd:7b:29:ed:49:92:74:b8:ff:cc:2e: f2:11:6f:f5:6a:74:a4:0d:ae:ad:68:cb:5a:c3:94:a3:f6:5a: 58:60:04:15:c5:a0:f4:96:2a:82:7b:9d:df:7a:7f:93:5a:3d: 8d:ba:cd:7d:06:6e:40:05:b2:bf:09:49:9a:68:22:f9:e8:40: b5:95:61:d8:4d:21:e2:91:fe:3e:8d:16:00:1d:1e:35:c2:fb: b3:5b:5c:b6:43:8d:39:26:bf:ab:16:34:ac:db:d1:d6:57:ba: 96:a3:ce:b8:f7:64:bd:8a:61:7a:0d:1d:21:4b:60:9c:20:83: f0:36:38:c8:bf:1f:41:fd:f7:ce:c7:77:83:28:c9:6b:ad:26: 9c:d2:5b:74:18:63:87:f3:70:ad:43:9b:06:52:7b:93:36:83: 4a:89:34:9a:a4:ed:91:e5:bf:fa:d3:c7:6d:15:7d:e5:43:4a: 1d:5a:da:6e -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt3xuPd++OgQqK1qY1ilL9oMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJiM2Y2ZmE5ZjAzNzc2NWU3NGJkZjJhYzgyY2NiYWJjN2U0 ZmM4ZWQwHhcNMjYwMTAxMDQxODAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YzdjNGQ0MTRhYzkwYmMxMjFlYjY0Mjg3NGM1ZDBhZTM2ZTc5YTA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmoZV3y2ezONU4SmUhbRLLxXYxmag edzqz2mYmWtHUPS3N6aolt35VeG8gclJZq+oQtyk917g05uPhBEh1zrc5lLNwOZQ pUKidnUsF7Tmcx2802lCMFueiQ9fGqIFZjjo90wPGTcf3Q0/LA4Pg/734wPInTPR A38qxBP/lQKREcDbiFMAxmSY+bSqwC4NeEVxbrXfuKi+sN2Iz14IZQQeflxyF/JT D+PJ96ESDoMKTWk3YLA3oLN2oBwA9fymcqPGcZpXOfPCaTtEEjee4C3nK3HQODL3 xZ8AzHJqXzoCit7H9X3t44p9KrQ08AboVvrxBeU9aO4s6ZDPpBXw6DhgWQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFGx8TUFKyQvBIetkKHTF0K4255oIMB8GA1UdIwQY MBaAFCs/b6nwN3ZedL3yrILMurx+T8jtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS3o5dnFmQTNkbDUwdmZLc2dzeTZ2SDVQeU8wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9jNTRmNDItOTEyZi00YjgxLThiMDAt NWMwMGZjZDczNjE5LzEvYkh4TlFVckpDOEVoNjJRb2RNWFFyamJubWdnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS9jNTRmNDItOTEyZi00YjgxLThiMDAtNWMwMGZjZDczNjE5 LzEvS3o5dnFmQTNkbDUwdmZLc2dzeTZ2SDVQeU8wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfA/8 MA0GCSqGSIb3DQEBCwUAA4IBAQB0h9aUCsk88mubVZBBo390u4S2YekcuR3C5N+k N/BQcWk16CC1ZTLLVFoxDQYXcO5il9bv7WVg5hUR+11mO2qTv5bRxMMlOr7Xwp8E JhzE3Xsp7UmSdLj/zC7yEW/1anSkDa6taMtaw5Sj9lpYYAQVxaD0liqCe53fen+T Wj2Nus19Bm5ABbK/CUmaaCL56EC1lWHYTSHikf4+jRYAHR41wvuzW1y2Q405Jr+r FjSs29HWV7qWo86492S9imF6DR0hS2CcIIPwNjjIvx9B/ffOx3eDKMlrrSac0lt0 GGOH83CtQ5sGUnuTNoNKiTSapO2R5b/608dtFX3lQ0odWtpu -----END CERTIFICATE-----Generated at Sun Jan 25 18:22:17 2026 by rpki-client