This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/BOy8bjeQqnx_uV0jutEMNXR_WPo.roa File: BOy8bjeQqnx_uV0jutEMNXR_WPo.roa (raw, json) Hash identifier: 70vK5SKBAtveQ1NtI1ZYPVa3PkWIvV39eB9naTN+Scs= Subject key identifier: 04:EC:BC:6E:37:90:AA:7C:7F:B9:5D:23:BA:D1:0C:35:74:7F:58:FA Certificate issuer: /CN=73c69d04583500c5ef81136831237593e0bb86ce Certificate serial: 019B7CEDF040590BBFC7D11ACEF3C9D53065 Authority key identifier: 73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/BOy8bjeQqnx_uV0jutEMNXR_WPo.roa Signing time: Fri 02 Jan 2026 04:18:46 +0000 ROA not before: Fri 02 Jan 2026 04:18:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209300 IP address blocks: 2a05:1085::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.crl rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.mft rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 04:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:f0:40:59:0b:bf:c7:d1:1a:ce:f3:c9:d5:30:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73c69d04583500c5ef81136831237593e0bb86ce Validity Not Before: Jan 2 04:18:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=04ecbc6e3790aa7c7fb95d23bad10c35747f58fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:05:76:4a:d2:89:28:8c:6e:ed:5f:44:2a:62: 9c:50:4a:e1:3e:f2:1c:9c:d3:d3:e4:c4:3d:e1:5d: 26:18:10:58:64:d2:48:2f:32:a4:0d:8e:ff:57:f6: 6e:4b:b4:4b:31:3a:88:7d:6f:95:ec:e5:e0:15:2c: 4b:4b:6a:2d:31:41:8d:99:ba:41:ac:44:14:c2:0e: 85:67:c4:75:5e:43:eb:e7:c0:53:0a:19:d3:43:9d: d6:19:53:9e:e2:c3:03:1c:ff:4d:e7:91:b2:ee:14: 38:8e:97:1d:88:b0:b2:14:2a:77:8b:62:87:da:7c: 57:59:5b:5f:be:13:62:54:c1:00:85:45:96:a0:fe: 41:c0:ab:20:a8:47:c9:b7:79:94:e6:54:66:5e:7e: 9a:74:33:c9:b1:0e:7f:97:c2:ec:a3:82:04:e2:05: b9:80:26:2e:7a:70:1b:da:69:30:15:82:52:80:7f: 51:a6:04:8c:63:99:09:e5:45:05:81:09:eb:d2:25: b2:9b:a6:b8:de:49:3f:07:4f:06:e1:c8:27:b8:4b: f1:b8:d2:09:65:4d:6e:5c:eb:07:a6:de:24:bc:7e: d0:b7:e3:b2:39:02:bb:94:5d:4d:a7:0c:dd:a6:0a: ea:28:97:61:89:10:17:0b:e3:60:cc:0e:6a:a8:c6: 07:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:EC:BC:6E:37:90:AA:7C:7F:B9:5D:23:BA:D1:0C:35:74:7F:58:FA X509v3 Authority Key Identifier: keyid:73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/BOy8bjeQqnx_uV0jutEMNXR_WPo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:1085::/32 Signature Algorithm: sha256WithRSAEncryption 1f:54:6d:3a:3d:0b:27:ea:bd:a8:cd:9d:03:d1:48:38:94:b5: 31:fc:67:6c:47:76:49:cd:c6:bc:96:76:bb:94:c6:74:ad:77: 10:75:f3:bd:d5:82:73:7f:e4:3b:62:14:1b:8b:ba:62:10:28: c6:02:af:c2:fa:78:39:17:f5:37:41:12:c2:c7:66:fc:97:67: f4:0c:59:dd:e5:a4:19:d9:e2:dc:f8:28:9c:b9:27:02:26:dd: de:7b:2d:92:35:e8:f8:fd:c3:e4:b9:f4:63:5f:10:c6:b9:27: 43:40:90:be:79:2a:59:13:ca:47:1e:50:57:8c:74:cf:78:8a: 5c:a0:78:4e:56:a3:ed:ca:c0:7d:ab:f7:8d:e8:7a:9b:c1:0f: d0:4c:3a:ad:d8:fa:47:6c:34:da:cf:84:f6:07:90:4b:2d:e5: 12:aa:9f:0d:f9:38:30:99:0c:4b:84:4b:d7:5e:bf:de:a1:4e: 5e:14:9a:65:83:4c:39:31:f6:52:3b:d6:de:9e:4b:73:8f:80: dc:a7:b0:fa:ed:f1:36:b5:39:f8:ed:8e:85:86:bd:b0:40:ff: 81:d6:36:e6:39:6d:81:4c:9a:43:2b:fd:eb:e7:cf:91:15:7d: ca:75:99:76:57:3e:68:2a:21:cf:cd:a4:e0:31:a0:ce:1a:4b: b5:c5:2e:a0 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt87fBAWQu/x9EazvPJ1TBlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDczYzY5ZDA0NTgzNTAwYzVlZjgxMTM2ODMxMjM3NTkzZTBi Yjg2Y2UwHhcNMjYwMTAyMDQxODQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNGVjYmM2ZTM3OTBhYTdjN2ZiOTVkMjNiYWQxMGMzNTc0N2Y1OGZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0wV2StKJKIxu7V9EKmKcUErhPvIc nNPT5MQ94V0mGBBYZNJILzKkDY7/V/ZuS7RLMTqIfW+V7OXgFSxLS2otMUGNmbpB rEQUwg6FZ8R1XkPr58BTChnTQ53WGVOe4sMDHP9N55Gy7hQ4jpcdiLCyFCp3i2KH 2nxXWVtfvhNiVMEAhUWWoP5BwKsgqEfJt3mU5lRmXn6adDPJsQ5/l8Lso4IE4gW5 gCYuenAb2mkwFYJSgH9RpgSMY5kJ5UUFgQnr0iWym6a43kk/B08G4cgnuEvxuNIJ ZU1uXOsHpt4kvH7Qt+OyOQK7lF1NpwzdpgrqKJdhiRAXC+NgzA5qqMYHYQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFATsvG43kKp8f7ldI7rRDDV0f1j6MB8GA1UdIwQY MBaAFHPGnQRYNQDF74ETaDEjdZPgu4bOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYzhhZEJGZzFBTVh2Z1JOb01TTjFrLUM3aHM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC82ZjZjZTItZTZlZS00ZTJhLTkwNWQt ZjljYjBhN2IyMDZjLzEvQk95OGJqZVFxbnhfdVYwanV0RU1OWFJfV1BvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OC82ZjZjZTItZTZlZS00ZTJhLTkwNWQtZjljYjBhN2IyMDZj LzEvYzhhZEJGZzFBTVh2Z1JOb01TTjFrLUM3aHM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKgUQhTAN BgkqhkiG9w0BAQsFAAOCAQEAH1RtOj0LJ+q9qM2dA9FIOJS1MfxnbEd2Sc3GvJZ2 u5TGdK13EHXzvdWCc3/kO2IUG4u6YhAoxgKvwvp4ORf1N0ESwsdm/Jdn9AxZ3eWk Gdni3PgonLknAibd3nstkjXo+P3D5Ln0Y18QxrknQ0CQvnkqWRPKRx5QV4x0z3iK XKB4Tlaj7crAfav3jeh6m8EP0Ew6rdj6R2w02s+E9geQSy3lEqqfDfk4MJkMS4RL 116/3qFOXhSaZYNMOTH2UjvW3p5Lc4+A3Kew+u3xNrU5+O2OhYa9sED/gdY25jlt gUyaQyv96+fPkRV9ynWZdlc+aCohz82k4DGgzhpLtcUuoA== -----END CERTIFICATE-----Generated at Sun Jan 25 16:17:36 2026 by rpki-client