This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/9cfea1-d82a-4755-810e-f1853d10e610/1/BfCf-SMP3jmpeBtSI6o8IcluZCE.roa File: BfCf-SMP3jmpeBtSI6o8IcluZCE.roa (raw, json) Hash identifier: U2GctbA/MKZUCV7DffODMpc1KtrAElXDTLg8lh43VyU= Subject key identifier: 05:F0:9F:F9:23:0F:DE:39:A9:78:1B:52:23:AA:3C:21:C9:6E:64:21 Certificate issuer: /CN=df2c15cf72fcdb8596b7c6489b15a6b720c14eb5 Certificate serial: 019B7FF1E36AC74E7937B924F855ABBD86F3 Authority key identifier: DF:2C:15:CF:72:FC:DB:85:96:B7:C6:48:9B:15:A6:B7:20:C1:4E:B5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ywVz3L824WWt8ZImxWmtyDBTrU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/9cfea1-d82a-4755-810e-f1853d10e610/1/BfCf-SMP3jmpeBtSI6o8IcluZCE.roa Signing time: Fri 02 Jan 2026 18:21:57 +0000 ROA not before: Fri 02 Jan 2026 18:21:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210896 IP address blocks: 2a0c:d540:1111::/48 maxlen: 48 2a0c:d540:1112::/48 maxlen: 48 2a0c:d540:1113::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/9cfea1-d82a-4755-810e-f1853d10e610/1/3ywVz3L824WWt8ZImxWmtyDBTrU.crl rsync://rpki.ripe.net/repository/DEFAULT/81/9cfea1-d82a-4755-810e-f1853d10e610/1/3ywVz3L824WWt8ZImxWmtyDBTrU.mft rsync://rpki.ripe.net/repository/DEFAULT/3ywVz3L824WWt8ZImxWmtyDBTrU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:e3:6a:c7:4e:79:37:b9:24:f8:55:ab:bd:86:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df2c15cf72fcdb8596b7c6489b15a6b720c14eb5 Validity Not Before: Jan 2 18:21:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=05f09ff9230fde39a9781b5223aa3c21c96e6421 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:1f:42:0f:d1:b8:eb:0e:31:8e:09:86:be:34: 16:70:3e:f1:1d:e7:33:f0:39:4e:96:68:3e:04:6e: 93:77:4a:f2:df:d3:f3:14:48:af:33:0e:bd:99:47: 1d:c5:50:31:13:91:2f:b7:f8:a7:15:ec:98:fa:ad: b8:12:04:35:0b:39:83:a9:a5:10:eb:87:e3:17:52: 4d:a7:de:bb:7c:3d:f8:a7:10:60:3d:7d:c3:b7:6e: ad:12:3a:c8:84:5c:97:55:82:1c:40:5b:3c:ca:42: d7:23:83:6b:9b:2e:68:f8:a9:9d:7f:9b:89:e2:73: 5e:7b:c1:ea:bd:78:ff:b4:73:3f:67:d6:f3:f5:16: 10:bc:c8:71:9d:fd:e3:c2:94:8a:a6:2b:e2:f7:ea: 56:ea:19:16:f7:5b:80:f8:70:13:0b:75:ed:9c:31: 0b:a1:3b:f4:1e:89:08:46:ed:10:2f:20:5b:05:f7: aa:95:83:79:51:a7:15:14:2c:f5:35:0e:c3:00:b0: ef:d2:11:82:0a:a4:89:80:db:f0:98:fd:b4:89:1b: 7f:2a:45:34:be:63:28:fb:91:53:df:d0:77:bb:a5: ca:42:87:6e:0c:a6:08:ae:5d:a2:4a:e9:26:6d:f6: 26:af:1e:e2:db:c0:b8:ae:80:d3:3c:84:4e:1d:80: 55:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:F0:9F:F9:23:0F:DE:39:A9:78:1B:52:23:AA:3C:21:C9:6E:64:21 X509v3 Authority Key Identifier: keyid:DF:2C:15:CF:72:FC:DB:85:96:B7:C6:48:9B:15:A6:B7:20:C1:4E:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ywVz3L824WWt8ZImxWmtyDBTrU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/9cfea1-d82a-4755-810e-f1853d10e610/1/BfCf-SMP3jmpeBtSI6o8IcluZCE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/9cfea1-d82a-4755-810e-f1853d10e610/1/3ywVz3L824WWt8ZImxWmtyDBTrU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:d540:1111::-2a0c:d540:1113:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 28:b9:af:fd:7c:cc:8a:58:9c:4a:6b:01:18:25:4a:5d:0a:50: 82:3e:3f:9c:bd:6f:26:7e:de:bc:49:89:b0:ba:fb:ca:47:a6: fe:7b:b3:fa:e0:6f:4b:73:87:dd:f3:cc:a7:b6:9d:4d:b2:ea: d9:c2:72:60:d5:2e:b5:2a:4d:d4:12:67:7b:12:42:21:f1:a1: 25:11:3b:4b:b7:27:d0:37:68:a6:2a:f5:86:4a:73:31:0c:f0: 7a:86:f3:fa:34:7a:7c:ad:b0:c5:e6:88:40:f3:c6:7f:ea:55: 3f:26:1c:bf:af:e2:f3:d6:50:95:70:3c:ec:32:c1:67:37:61: 2d:ff:c7:b6:a5:5e:e9:a8:41:16:43:72:75:83:11:28:8b:29: c0:2d:5e:7f:78:bc:db:85:d6:45:e4:b1:e6:e7:63:51:52:33: 27:80:ed:f1:83:f0:10:79:67:48:1e:91:3b:d5:5e:94:2c:12: 97:a3:57:7d:60:2a:14:7d:27:ef:f3:ce:2d:e3:89:ed:8d:1f: c0:37:13:b5:6a:9f:88:99:81:18:7c:bc:b9:4d:4e:d2:43:3b: 3d:61:f4:74:04:63:ba:35:f5:fc:27:fc:6f:6a:49:3d:5a:52: 7e:53:02:17:99:24:23:be:9f:34:8e:fd:b5:7d:44:4f:d0:cc: 4a:40:c1:4d -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt/8eNqx055N7kk+FWrvYbzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmMmMxNWNmNzJmY2RiODU5NmI3YzY0ODliMTVhNmI3MjBj MTRlYjUwHhcNMjYwMTAyMTgyMTU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNWYwOWZmOTIzMGZkZTM5YTk3ODFiNTIyM2FhM2MyMWM5NmU2NDIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzR9CD9G46w4xjgmGvjQWcD7xHecz 8DlOlmg+BG6Td0ry39PzFEivMw69mUcdxVAxE5Evt/inFeyY+q24EgQ1CzmDqaUQ 64fjF1JNp967fD34pxBgPX3Dt26tEjrIhFyXVYIcQFs8ykLXI4Nrmy5o+Kmdf5uJ 4nNee8HqvXj/tHM/Z9bz9RYQvMhxnf3jwpSKpivi9+pW6hkW91uA+HATC3XtnDEL oTv0HokIRu0QLyBbBfeqlYN5UacVFCz1NQ7DALDv0hGCCqSJgNvwmP20iRt/KkU0 vmMo+5FT39B3u6XKQoduDKYIrl2iSukmbfYmrx7i28C4roDTPIROHYBViQIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFAXwn/kjD945qXgbUiOqPCHJbmQhMB8GA1UdIwQY MBaAFN8sFc9y/NuFlrfGSJsVprcgwU61MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM3l3VnozTDgyNFdXdDhaSW14V210eURCVHJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS85Y2ZlYTEtZDgyYS00NzU1LTgxMGUt ZjE4NTNkMTBlNjEwLzEvQmZDZi1TTVAzam1wZUJ0U0k2bzhJY2x1WkNFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS85Y2ZlYTEtZDgyYS00NzU1LTgxMGUtZjE4NTNkMTBlNjEw LzEvM3l3VnozTDgyNFdXdDhaSW14V210eURCVHJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAAjAUMBIDBwAqDNVA EREDBwIqDNVAERAwDQYJKoZIhvcNAQELBQADggEBACi5r/18zIpYnEprARglSl0K UII+P5y9byZ+3rxJibC6+8pHpv57s/rgb0tzh93zzKe2nU2y6tnCcmDVLrUqTdQS Z3sSQiHxoSURO0u3J9A3aKYq9YZKczEM8HqG8/o0enytsMXmiEDzxn/qVT8mHL+v 4vPWUJVwPOwywWc3YS3/x7alXumoQRZDcnWDESiLKcAtXn94vNuF1kXksebnY1FS MyeA7fGD8BB5Z0gekTvVXpQsEpejV31gKhR9J+/zzi3jie2NH8A3E7Vqn4iZgRh8 vLlNTtJDOz1h9HQEY7o19fwn/G9qST1aUn5TAheZJCO+nzSO/bV9RE/QzEpAwU0= -----END CERTIFICATE-----Generated at Mon Jan 26 08:39:54 2026 by rpki-client