This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/edad2d-95cc-49d0-86f4-3ce3cf8b1c49/1/BSTG1ttnOn5TiV5vto-5DGzkv5E.roa File: BSTG1ttnOn5TiV5vto-5DGzkv5E.roa (raw, json) Hash identifier: 9vJ/dkO9dcx6CPua0P9hZtcRYppMY64t3Y1Q4CY2UxQ= Subject key identifier: 05:24:C6:D6:DB:67:3A:7E:53:89:5E:6F:B6:8F:B9:0C:6C:E4:BF:91 Certificate issuer: /CN=259490c5dbcfbf590da33bfbd37970a0763469c9 Certificate serial: 019B7C110CCADD104C760E1AF684394A2176 Authority key identifier: 25:94:90:C5:DB:CF:BF:59:0D:A3:3B:FB:D3:79:70:A0:76:34:69:C9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JZSQxdvPv1kNozv703lwoHY0ack.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/edad2d-95cc-49d0-86f4-3ce3cf8b1c49/1/BSTG1ttnOn5TiV5vto-5DGzkv5E.roa Signing time: Fri 02 Jan 2026 00:17:30 +0000 ROA not before: Fri 02 Jan 2026 00:17:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56849 IP address blocks: 2a09:be41::/32 maxlen: 48 2a09:be42::/31 maxlen: 48 2a09:be44::/30 maxlen: 48 2a0e:ec00::/30 maxlen: 48 2a0e:ec04::/31 maxlen: 48 2a12:49c0::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/edad2d-95cc-49d0-86f4-3ce3cf8b1c49/1/JZSQxdvPv1kNozv703lwoHY0ack.crl rsync://rpki.ripe.net/repository/DEFAULT/59/edad2d-95cc-49d0-86f4-3ce3cf8b1c49/1/JZSQxdvPv1kNozv703lwoHY0ack.mft rsync://rpki.ripe.net/repository/DEFAULT/JZSQxdvPv1kNozv703lwoHY0ack.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:0c:ca:dd:10:4c:76:0e:1a:f6:84:39:4a:21:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=259490c5dbcfbf590da33bfbd37970a0763469c9 Validity Not Before: Jan 2 00:17:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0524c6d6db673a7e53895e6fb68fb90c6ce4bf91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:d0:62:a3:1f:f1:03:28:38:a8:d9:47:9f:2f: a6:b2:42:91:f8:11:a0:7b:b6:89:86:45:2a:3e:6f: 85:0d:7b:f1:5b:b7:60:76:f5:64:8e:2b:4d:7f:9d: ec:98:4f:16:12:d8:db:23:79:90:3c:be:b4:9c:76: 8e:f4:53:a1:2c:c6:3a:57:e3:93:47:91:90:08:9c: b4:13:68:e6:0b:1f:11:ff:5c:90:6e:ea:2b:2c:7b: e6:21:88:54:c4:16:1e:83:08:91:db:03:45:56:a1: f0:ba:35:2b:6d:cd:b9:80:3c:8c:9c:3b:f1:8c:92: 85:ec:9d:d4:fa:a6:06:eb:f4:f3:e3:1e:6c:b7:16: b3:ca:c7:d8:93:f4:51:68:5b:a3:5c:9a:f1:77:92: 72:87:b1:a0:53:e2:bf:5f:03:bc:f1:be:41:3d:ec: f2:2e:ac:06:05:7b:73:5e:02:7e:39:b4:1d:a5:ea: c7:db:dd:90:1c:12:65:7a:a2:f2:64:b9:d3:68:37: 3f:56:88:f4:5c:f5:53:c7:52:a4:48:e1:42:f5:07: db:19:9c:da:92:55:b0:25:b6:21:91:ac:7c:82:a7: b3:b0:f1:ea:88:1b:a1:ef:12:b0:df:43:75:c3:41: 77:1c:bf:ca:87:99:a1:f9:d9:1c:dd:fc:66:28:fa: 75:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:24:C6:D6:DB:67:3A:7E:53:89:5E:6F:B6:8F:B9:0C:6C:E4:BF:91 X509v3 Authority Key Identifier: keyid:25:94:90:C5:DB:CF:BF:59:0D:A3:3B:FB:D3:79:70:A0:76:34:69:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JZSQxdvPv1kNozv703lwoHY0ack.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/edad2d-95cc-49d0-86f4-3ce3cf8b1c49/1/BSTG1ttnOn5TiV5vto-5DGzkv5E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/edad2d-95cc-49d0-86f4-3ce3cf8b1c49/1/JZSQxdvPv1kNozv703lwoHY0ack.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a09:be41::-2a09:be47:ffff:ffff:ffff:ffff:ffff:ffff 2a0e:ec00::-2a0e:ec05:ffff:ffff:ffff:ffff:ffff:ffff 2a12:49c0::/29 Signature Algorithm: sha256WithRSAEncryption 63:9a:79:0b:f6:bb:a7:37:79:aa:b5:1d:9f:ef:c8:4c:c3:9e: 44:f0:b7:20:91:98:f7:38:75:25:6c:3b:32:26:a6:44:31:6a: 03:c5:0f:96:23:a7:f8:56:2b:11:b4:38:58:f2:90:3c:3a:a3: 46:cc:16:0e:7f:a0:49:bc:e6:16:7b:f9:cb:89:09:a9:cc:af: 61:9d:6b:14:5c:ee:92:bc:9b:c9:da:fa:de:9d:e2:ed:e9:54: d5:d6:2c:0c:a7:d9:65:68:08:0a:2b:87:78:e8:3d:14:b4:9d: 1b:e6:d2:6d:e5:53:c7:ea:c2:f2:b4:b4:04:d7:69:d8:c6:ae: b8:72:52:53:cf:e0:40:47:fe:b8:ad:91:ee:54:d9:dd:35:46: 53:97:ae:ce:ba:ea:82:56:81:05:2e:3f:93:3f:41:7c:30:75: 39:28:a9:4e:44:01:92:1c:ce:be:4f:bb:a6:37:a0:37:81:ae: 54:92:14:16:a3:57:ff:66:12:6c:59:65:b6:43:04:0b:5b:6d: 13:86:9c:6f:68:b0:20:80:dc:39:52:3a:d8:a5:54:35:fe:ca: 19:39:95:b0:d1:b2:a1:0a:86:b4:5e:bc:76:f0:87:75:49:3f: 00:cd:a6:d3:7d:a1:70:55:bd:52:bd:75:fb:e5:75:d5:5e:7d: 87:c5:d2:2d -----BEGIN CERTIFICATE----- MIIFHTCCBAWgAwIBAgISAZt8EQzK3RBMdg4a9oQ5SiF2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1OTQ5MGM1ZGJjZmJmNTkwZGEzM2JmYmQzNzk3MGEwNzYz NDY5YzkwHhcNMjYwMTAyMDAxNzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNTI0YzZkNmRiNjczYTdlNTM4OTVlNmZiNjhmYjkwYzZjZTRiZjkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj9Biox/xAyg4qNlHny+mskKR+BGg e7aJhkUqPm+FDXvxW7dgdvVkjitNf53smE8WEtjbI3mQPL60nHaO9FOhLMY6V+OT R5GQCJy0E2jmCx8R/1yQbuorLHvmIYhUxBYegwiR2wNFVqHwujUrbc25gDyMnDvx jJKF7J3U+qYG6/Tz4x5stxazysfYk/RRaFujXJrxd5Jyh7GgU+K/XwO88b5BPezy LqwGBXtzXgJ+ObQdperH292QHBJleqLyZLnTaDc/Voj0XPVTx1KkSOFC9QfbGZza klWwJbYhkax8gqezsPHqiBuh7xKw30N1w0F3HL/Kh5mh+dkc3fxmKPp1MwIDAQAB o4ICKTCCAiUwHQYDVR0OBBYEFAUkxtbbZzp+U4leb7aPuQxs5L+RMB8GA1UdIwQY MBaAFCWUkMXbz79ZDaM7+9N5cKB2NGnJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSlpTUXhkdlB2MWtOb3p2NzAzbHdvSFkwYWNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS9lZGFkMmQtOTVjYy00OWQwLTg2ZjQt M2NlM2NmOGIxYzQ5LzEvQlNURzF0dG5PbjVUaVY1dnRvLTVER3prdjVFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS9lZGFkMmQtOTVjYy00OWQwLTg2ZjQtM2NlM2NmOGIxYzQ5 LzEvSlpTUXhkdlB2MWtOb3p2NzAzbHdvSFkwYWNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjAsBAIAAjAmMA4DBQAqCb5B AwUDKgm+QDANAwQCKg7sAwUBKg7sBAMFAyoSScAwDQYJKoZIhvcNAQELBQADggEB AGOaeQv2u6c3eaq1HZ/vyEzDnkTwtyCRmPc4dSVsOzImpkQxagPFD5Yjp/hWKxG0 OFjykDw6o0bMFg5/oEm85hZ7+cuJCanMr2GdaxRc7pK8m8na+t6d4u3pVNXWLAyn 2WVoCAorh3joPRS0nRvm0m3lU8fqwvK0tATXadjGrrhyUlPP4EBH/ritke5U2d01 RlOXrs666oJWgQUuP5M/QXwwdTkoqU5EAZIczr5Pu6Y3oDeBrlSSFBajV/9mEmxZ ZbZDBAtbbROGnG9osCCA3DlSOtilVDX+yhk5lbDRsqEKhrRevHbwh3VJPwDNptN9 oXBVvVK9dfvlddVefYfF0i0= -----END CERTIFICATE-----Generated at Sun Jan 25 20:46:30 2026 by rpki-client