This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/bjFSQtRF34AqVafFJtFqhxgWQZc.roa File: bjFSQtRF34AqVafFJtFqhxgWQZc.roa (raw, json) Hash identifier: yES7m7w5zSaR30emDz0+YUk1mwW3sg3fxIM0I4pVGRw= Subject key identifier: 6E:31:52:42:D4:45:DF:80:2A:55:A7:C5:26:D1:6A:87:18:16:41:97 Certificate issuer: /CN=ef1c665b038692b93bdf5d1d8f3cea3e98697a03 Certificate serial: 019B7B36B12BF4DCEA63A3168E0F60E91216 Authority key identifier: EF:1C:66:5B:03:86:92:B9:3B:DF:5D:1D:8F:3C:EA:3E:98:69:7A:03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7xxmWwOGkrk7310djzzqPphpegM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/bjFSQtRF34AqVafFJtFqhxgWQZc.roa Signing time: Thu 01 Jan 2026 20:19:00 +0000 ROA not before: Thu 01 Jan 2026 20:19:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60915 IP address blocks: 2001:6d0:4004::/48 maxlen: 64 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/7xxmWwOGkrk7310djzzqPphpegM.crl rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/7xxmWwOGkrk7310djzzqPphpegM.mft rsync://rpki.ripe.net/repository/DEFAULT/7xxmWwOGkrk7310djzzqPphpegM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:b1:2b:f4:dc:ea:63:a3:16:8e:0f:60:e9:12:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef1c665b038692b93bdf5d1d8f3cea3e98697a03 Validity Not Before: Jan 1 20:19:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6e315242d445df802a55a7c526d16a8718164197 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:13:2b:01:4b:b4:46:b9:d3:ca:5b:1e:f1:9d: 5b:21:c9:63:16:81:3b:ea:14:77:36:72:37:73:7d: 1f:05:3a:01:c3:33:75:81:c2:70:e3:4e:08:be:b9: b9:60:e7:3a:b6:ab:67:7b:c7:90:17:4f:76:f3:8b: 52:7b:19:4a:c8:82:e7:c7:01:98:23:51:7e:d4:9c: 8a:6a:a4:31:a8:c5:59:30:65:bc:1c:e7:7e:c2:fb: 36:9f:ca:4d:9d:69:2a:40:41:65:36:0b:c1:6b:62: 49:fa:5e:d7:1a:ff:6e:e7:21:6a:8a:06:9e:63:32: 2a:74:fb:02:dc:24:fe:ad:9c:fd:93:4f:69:d5:f0: 2c:e4:b7:e1:5f:08:ab:af:a1:5e:7c:71:8a:b5:75: f8:3c:ba:60:5d:c9:23:d6:e4:27:c5:56:75:32:a7: 35:78:bd:90:06:d0:94:64:5a:a3:f1:5c:52:b3:19: dd:90:09:7f:43:dd:0e:8b:5e:86:fa:2f:28:b6:a8: aa:e9:9f:42:2e:c5:70:d5:f7:de:c5:12:95:37:b6: 66:e7:82:6d:ad:73:ec:51:d1:7e:b8:08:96:29:02: 9c:63:71:ad:2c:4d:d3:6b:0e:ef:55:60:05:78:3e: e0:30:12:2b:d1:0a:db:de:fd:81:c9:61:63:33:64: 1b:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:31:52:42:D4:45:DF:80:2A:55:A7:C5:26:D1:6A:87:18:16:41:97 X509v3 Authority Key Identifier: keyid:EF:1C:66:5B:03:86:92:B9:3B:DF:5D:1D:8F:3C:EA:3E:98:69:7A:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7xxmWwOGkrk7310djzzqPphpegM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/bjFSQtRF34AqVafFJtFqhxgWQZc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/7xxmWwOGkrk7310djzzqPphpegM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:6d0:4004::/48 Signature Algorithm: sha256WithRSAEncryption b8:fd:e0:3c:94:43:0b:ad:7d:14:77:75:1c:56:65:68:45:86: 88:6a:06:46:ae:9b:37:e2:06:24:76:e4:54:33:84:32:38:93: ea:3a:7b:51:a4:fc:2e:bf:98:23:38:d7:d7:0a:bd:ce:01:fe: 08:03:e2:6f:01:95:d2:00:d8:81:5f:c6:a5:4c:9f:d6:e9:49: 39:5e:1c:e4:e0:bf:a7:d2:67:74:93:3a:e6:12:4f:63:06:ce: 5f:79:8b:35:e3:f4:c6:a5:b6:3e:97:08:11:fa:83:8f:28:27: de:da:f9:14:b4:8f:be:1c:74:ff:5e:57:5c:8b:ce:f6:6d:39: 19:74:a4:30:40:57:bf:66:34:9c:d7:16:35:1c:0b:0f:de:f8: 91:ea:c3:8d:43:35:d3:b5:3f:82:19:d2:16:ae:86:26:f6:09: ba:d2:74:93:d1:b2:ff:0e:5a:e1:46:5d:23:1a:33:5c:4a:1b: 1c:3c:5f:86:5e:8f:63:78:61:ad:48:7f:4a:6a:6e:28:bb:b2: db:cc:b6:2c:05:67:9a:3c:b2:28:d9:96:38:13:a2:b4:5b:e4: 67:c0:fe:bb:8f:ff:ca:a6:45:e6:1b:b8:9d:8a:c3:bb:14:2d: 3d:db:bd:d0:ef:bf:b3:b8:05:8c:11:a6:df:ab:8a:64:ce:f8: f6:fc:53:2f -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt7NrEr9NzqY6MWjg9g6RIWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmMWM2NjViMDM4NjkyYjkzYmRmNWQxZDhmM2NlYTNlOTg2 OTdhMDMwHhcNMjYwMTAxMjAxOTAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZTMxNTI0MmQ0NDVkZjgwMmE1NWE3YzUyNmQxNmE4NzE4MTY0MTk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAthMrAUu0RrnTylse8Z1bIcljFoE7 6hR3NnI3c30fBToBwzN1gcJw404Ivrm5YOc6tqtne8eQF09284tSexlKyILnxwGY I1F+1JyKaqQxqMVZMGW8HOd+wvs2n8pNnWkqQEFlNgvBa2JJ+l7XGv9u5yFqigae YzIqdPsC3CT+rZz9k09p1fAs5LfhXwirr6FefHGKtXX4PLpgXckj1uQnxVZ1Mqc1 eL2QBtCUZFqj8VxSsxndkAl/Q90Oi16G+i8otqiq6Z9CLsVw1ffexRKVN7Zm54Jt rXPsUdF+uAiWKQKcY3GtLE3Taw7vVWAFeD7gMBIr0Qrb3v2ByWFjM2QbEQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFG4xUkLURd+AKlWnxSbRaocYFkGXMB8GA1UdIwQY MBaAFO8cZlsDhpK5O99dHY886j6YaXoDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN3h4bVd3T0drcms3MzEwZGp6enFQcGhwZWdNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC8yOTI1YTMtODcxYi00Njc2LWFlMTAt Njg4ZDMzM2VkOWQ1LzEvYmpGU1F0UkYzNEFxVmFmRkp0RnFoeGdXUVpjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OC8yOTI1YTMtODcxYi00Njc2LWFlMTAtNjg4ZDMzM2VkOWQ1 LzEvN3h4bVd3T0drcms3MzEwZGp6enFQcGhwZWdNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEG0EAE MA0GCSqGSIb3DQEBCwUAA4IBAQC4/eA8lEMLrX0Ud3UcVmVoRYaIagZGrps34gYk duRUM4QyOJPqOntRpPwuv5gjONfXCr3OAf4IA+JvAZXSANiBX8alTJ/W6Uk5Xhzk 4L+n0md0kzrmEk9jBs5feYs14/TGpbY+lwgR+oOPKCfe2vkUtI++HHT/Xldci872 bTkZdKQwQFe/ZjSc1xY1HAsP3viR6sONQzXTtT+CGdIWroYm9gm60nST0bL/Dlrh Rl0jGjNcShscPF+GXo9jeGGtSH9Kam4ou7LbzLYsBWeaPLIo2ZY4E6K0W+RnwP67 j//KpkXmG7idisO7FC09273Q77+zuAWMEabfq4pkzvj2/FMv -----END CERTIFICATE-----Generated at Sun Jan 25 22:17:05 2026 by rpki-client