This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/Bf6zJAjVcnEbsggDOHSn-Adu8Rw.roa File: Bf6zJAjVcnEbsggDOHSn-Adu8Rw.roa (raw, json) Hash identifier: kJxtKQ0cIH7Fwj0H7soGA/9iLqSCTYHUXjbBG7ge8gY= Subject key identifier: 05:FE:B3:24:08:D5:72:71:1B:B2:08:03:38:74:A7:F8:07:6E:F1:1C Certificate issuer: /CN=746395c12672ad958921b62b9dc9b2bcd8a68a9f Certificate serial: 019B7DCB5D4190AB291AE38E1D13CCC22140 Authority key identifier: 74:63:95:C1:26:72:AD:95:89:21:B6:2B:9D:C9:B2:BC:D8:A6:8A:9F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dGOVwSZyrZWJIbYrncmyvNimip8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/Bf6zJAjVcnEbsggDOHSn-Adu8Rw.roa Signing time: Fri 02 Jan 2026 08:20:38 +0000 ROA not before: Fri 02 Jan 2026 08:20:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202559 IP address blocks: 2a12:4946:4010::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/dGOVwSZyrZWJIbYrncmyvNimip8.crl rsync://rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/dGOVwSZyrZWJIbYrncmyvNimip8.mft rsync://rpki.ripe.net/repository/DEFAULT/dGOVwSZyrZWJIbYrncmyvNimip8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:5d:41:90:ab:29:1a:e3:8e:1d:13:cc:c2:21:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=746395c12672ad958921b62b9dc9b2bcd8a68a9f Validity Not Before: Jan 2 08:20:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=05feb32408d572711bb208033874a7f8076ef11c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:7d:b0:62:95:50:67:cb:6d:49:cc:bd:09:bc: a7:1d:34:49:0a:c8:6b:78:75:60:85:a4:26:c7:d6: d8:a4:ce:8e:8e:0a:bb:14:c1:91:51:81:96:eb:11: f3:3c:0b:3c:f9:23:0b:c8:bf:02:73:ff:02:ec:b8: 2d:30:e2:09:6c:f0:62:71:16:1f:d2:8e:2a:c0:f2: 13:df:75:89:29:8f:6b:13:f4:95:18:96:8b:a8:88: da:16:fb:63:8e:30:4c:6a:d2:a0:61:22:66:4f:c2: 58:fe:bc:8a:78:8e:75:4d:ae:c7:c0:c0:37:d1:1a: ac:09:5d:4d:30:87:66:ef:a3:56:34:20:4c:25:f4: ff:4a:b6:37:89:d0:d7:0e:0d:c8:f7:b0:06:ac:d9: 90:ab:82:4a:04:2b:af:3d:27:6d:22:7f:24:aa:fc: a1:5e:8c:01:f4:2b:bf:35:1a:54:19:39:1f:26:e2: 9a:f4:8a:f3:97:25:e5:48:31:49:f7:18:11:d3:3a: 11:35:df:cb:2f:ff:8a:c5:a2:2e:60:34:d0:7f:da: f2:53:58:81:d5:1e:fc:49:58:0d:48:d7:c0:78:bc: 07:03:a7:21:95:ab:29:18:69:65:5e:ec:7e:9a:48: d2:f7:d1:e5:d1:26:30:67:fc:d0:22:b2:8a:45:73: 94:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:FE:B3:24:08:D5:72:71:1B:B2:08:03:38:74:A7:F8:07:6E:F1:1C X509v3 Authority Key Identifier: keyid:74:63:95:C1:26:72:AD:95:89:21:B6:2B:9D:C9:B2:BC:D8:A6:8A:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGOVwSZyrZWJIbYrncmyvNimip8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/Bf6zJAjVcnEbsggDOHSn-Adu8Rw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/dGOVwSZyrZWJIbYrncmyvNimip8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a12:4946:4010::/44 Signature Algorithm: sha256WithRSAEncryption 48:af:00:90:89:a2:d7:1a:89:09:a5:06:ab:77:fc:8c:99:67: e3:1d:65:c0:98:4b:16:90:81:8e:f4:84:89:76:30:33:74:65: 8c:dd:84:fe:59:40:aa:0c:cd:b8:99:2f:ac:e9:00:43:d8:32: f2:f4:a4:b2:b6:63:09:22:a2:c1:45:68:77:f1:63:c7:4b:e3: 0b:84:86:8b:f1:0f:f5:4d:d7:05:b4:83:3d:b9:52:47:44:f6: 4e:75:f7:18:3e:1f:08:43:0d:bf:42:18:97:47:00:e4:67:8c: bc:64:22:36:d6:b7:5e:95:db:da:d1:77:ba:4f:09:f8:5e:46: 6b:d2:33:4f:ed:20:6b:0e:ba:e9:c6:47:82:b0:85:bb:72:b0: d8:5e:3f:84:93:31:4b:ce:af:69:f1:fd:46:df:b9:45:4c:e5: 22:dd:14:7a:5b:57:b9:ea:5d:fc:0a:6a:2c:39:34:21:79:b6: 0e:0a:e6:b7:3a:ec:be:6e:30:f6:54:8f:e7:15:8b:46:7b:9a: 7a:7d:4f:a6:7e:7c:d5:15:1d:68:c7:59:9f:fd:9e:99:1a:8b: 8e:d9:0f:02:e7:cd:98:9f:56:26:bf:5b:53:88:31:8f:33:91: 12:06:4d:13:f7:fc:ca:da:15:0c:fd:36:86:8e:45:75:fe:54: e4:a3:0a:3b -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9y11BkKspGuOOHRPMwiFAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0NjM5NWMxMjY3MmFkOTU4OTIxYjYyYjlkYzliMmJjZDhh NjhhOWYwHhcNMjYwMTAyMDgyMDM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNWZlYjMyNDA4ZDU3MjcxMWJiMjA4MDMzODc0YTdmODA3NmVmMTFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoH2wYpVQZ8ttScy9CbynHTRJCshr eHVghaQmx9bYpM6Ojgq7FMGRUYGW6xHzPAs8+SMLyL8Cc/8C7LgtMOIJbPBicRYf 0o4qwPIT33WJKY9rE/SVGJaLqIjaFvtjjjBMatKgYSJmT8JY/ryKeI51Ta7HwMA3 0RqsCV1NMIdm76NWNCBMJfT/SrY3idDXDg3I97AGrNmQq4JKBCuvPSdtIn8kqvyh XowB9Cu/NRpUGTkfJuKa9IrzlyXlSDFJ9xgR0zoRNd/LL/+KxaIuYDTQf9ryU1iB 1R78SVgNSNfAeLwHA6chlaspGGllXux+mkjS99Hl0SYwZ/zQIrKKRXOU5QIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFAX+syQI1XJxG7IIAzh0p/gHbvEcMB8GA1UdIwQY MBaAFHRjlcEmcq2ViSG2K53JsrzYpoqfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEdPVndTWnlyWldKSWJZcm5jbXl2TmltaXA4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi85ZTIzNTEtOGRkMC00YjcwLWE1ZmMt ZmI3NzRhYmRmYWMyLzEvQmY2ekpBalZjbkVic2dnRE9IU24tQWR1OFJ3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi85ZTIzNTEtOGRkMC00YjcwLWE1ZmMtZmI3NzRhYmRmYWMy LzEvZEdPVndTWnlyWldKSWJZcm5jbXl2TmltaXA4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhJJRkAQ MA0GCSqGSIb3DQEBCwUAA4IBAQBIrwCQiaLXGokJpQard/yMmWfjHWXAmEsWkIGO 9ISJdjAzdGWM3YT+WUCqDM24mS+s6QBD2DLy9KSytmMJIqLBRWh38WPHS+MLhIaL 8Q/1TdcFtIM9uVJHRPZOdfcYPh8IQw2/QhiXRwDkZ4y8ZCI21rdeldva0Xe6Twn4 XkZr0jNP7SBrDrrpxkeCsIW7crDYXj+EkzFLzq9p8f1G37lFTOUi3RR6W1e56l38 CmosOTQhebYOCua3Ouy+bjD2VI/nFYtGe5p6fU+mfnzVFR1ox1mf/Z6ZGouO2Q8C 582Yn1Ymv1tTiDGPM5ESBk0T9/zK2hUM/TaGjkV1/lTkowo7 -----END CERTIFICATE-----Generated at Mon Jan 26 02:22:46 2026 by rpki-client