This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/BXsYcbjTxRZ5Rq9pCsvx7EKXBXE.roa File: BXsYcbjTxRZ5Rq9pCsvx7EKXBXE.roa (raw, json) Hash identifier: fDsxTkNxo0dsPCuB6RQRrUNQrvhghUZtv/5lAhqvN8s= Subject key identifier: 05:7B:18:71:B8:D3:C5:16:79:46:AF:69:0A:CB:F1:EC:42:97:05:71 Certificate issuer: /CN=d673d849b7d5047376d57e6f796f0018b70b4506 Certificate serial: 019B77C7109C48F75A89518E0AD8C3059809 Authority key identifier: D6:73:D8:49:B7:D5:04:73:76:D5:7E:6F:79:6F:00:18:B7:0B:45:06 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1nPYSbfVBHN21X5veW8AGLcLRQY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/BXsYcbjTxRZ5Rq9pCsvx7EKXBXE.roa Signing time: Thu 01 Jan 2026 04:18:13 +0000 ROA not before: Thu 01 Jan 2026 04:18:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 1764 IP address blocks: 2001:678:c1c::/48 maxlen: 48 2a01:190::/29 maxlen: 32 2a03:e600::/29 maxlen: 32 2a04:9300::/29 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1nPYSbfVBHN21X5veW8AGLcLRQY.crl rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1nPYSbfVBHN21X5veW8AGLcLRQY.mft rsync://rpki.ripe.net/repository/DEFAULT/1nPYSbfVBHN21X5veW8AGLcLRQY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:10:9c:48:f7:5a:89:51:8e:0a:d8:c3:05:98:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d673d849b7d5047376d57e6f796f0018b70b4506 Validity Not Before: Jan 1 04:18:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=057b1871b8d3c5167946af690acbf1ec42970571 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:09:fa:a7:0b:a8:86:55:f6:1a:10:d4:a3:8e: b9:31:31:7c:47:82:9e:50:45:b2:03:db:7e:30:48: b4:f3:39:e1:28:6b:28:a3:d8:65:cc:07:31:31:43: 3e:d2:eb:52:4a:02:96:bf:21:3d:58:5c:b2:3b:8b: 31:5d:58:cf:a6:c3:db:ca:e3:95:8b:ae:73:e5:80: 9d:a5:85:47:d7:05:35:b0:90:55:5f:1c:0e:f2:bb: 9d:d6:b0:ad:26:b8:29:ff:76:4c:97:9e:85:20:4d: e0:de:e8:58:94:fb:91:ba:f5:e3:2c:e6:82:e2:ce: a7:f5:40:61:fe:ec:48:27:37:e2:c9:0c:b6:5e:d6: 20:a3:3d:4f:41:67:af:e7:ed:25:23:26:c8:a9:6d: 21:1b:35:2b:4e:b5:12:d8:05:09:19:9a:ef:cd:b1: 91:25:ac:83:08:d3:b1:83:74:6f:77:d1:70:ac:20: 9c:ee:bf:9b:11:3f:e1:1a:8f:ad:b2:23:35:75:5b: cc:37:9d:16:40:ab:a6:e7:af:75:07:0d:b4:f9:0a: 54:f7:fe:7d:3f:79:27:eb:aa:a4:45:fa:a7:7c:23: 5d:68:a9:72:4d:35:a9:c8:00:78:cc:6f:0f:88:84: 01:2c:01:5a:c2:7b:b0:8b:94:c7:e5:fa:f7:1d:9b: f0:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:7B:18:71:B8:D3:C5:16:79:46:AF:69:0A:CB:F1:EC:42:97:05:71 X509v3 Authority Key Identifier: keyid:D6:73:D8:49:B7:D5:04:73:76:D5:7E:6F:79:6F:00:18:B7:0B:45:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1nPYSbfVBHN21X5veW8AGLcLRQY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/BXsYcbjTxRZ5Rq9pCsvx7EKXBXE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1nPYSbfVBHN21X5veW8AGLcLRQY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:c1c::/48 2a01:190::/29 2a03:e600::/29 2a04:9300::/29 Signature Algorithm: sha256WithRSAEncryption 82:2d:7b:a7:55:e7:b3:bf:95:4c:ac:a4:62:a1:4d:d0:1f:14: 92:76:d8:25:e9:46:48:66:51:6c:e5:3d:65:dc:22:8e:fb:65: 0b:bb:d0:cf:18:fc:34:87:b9:96:be:b2:4d:a2:90:e5:21:f8: 17:f2:1d:2e:40:9f:b3:a4:e4:b4:14:f8:2f:3e:2d:e6:fb:02: 7c:04:3a:17:ea:18:c3:d5:0d:68:03:c2:62:4c:04:67:b6:bd: 0b:43:5c:ca:1a:6c:5c:2e:c6:3a:25:79:da:27:1e:ce:cc:ee: 51:3b:58:c6:cb:d4:86:ee:ca:73:77:a2:86:ac:69:c1:63:ef: ef:76:af:28:37:57:70:6f:00:ee:a0:c5:e3:15:db:72:2f:03: a7:26:ba:0c:44:b8:45:5b:71:bd:50:c3:36:ec:79:e9:d6:ca: 27:12:3e:92:e1:89:67:00:c0:04:5d:6c:7a:8b:72:47:3e:e3: 53:c2:6b:46:f2:9c:4a:11:de:f4:ab:52:88:0f:ff:d2:ef:6e: e3:c2:f3:e2:d4:c2:2e:bb:0e:17:8a:36:3c:05:c0:f3:a6:7d: ca:c7:23:f7:a0:42:17:f5:c7:08:c6:69:7c:66:2f:1b:87:65: 07:0e:43:1a:d3:1c:41:6c:87:2f:80:98:d3:6d:91:45:8e:7c: 73:5c:19:c0 -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZt3xxCcSPdaiVGOCtjDBZgJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2NzNkODQ5YjdkNTA0NzM3NmQ1N2U2Zjc5NmYwMDE4Yjcw YjQ1MDYwHhcNMjYwMTAxMDQxODEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNTdiMTg3MWI4ZDNjNTE2Nzk0NmFmNjkwYWNiZjFlYzQyOTcwNTcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxAn6pwuohlX2GhDUo465MTF8R4Ke UEWyA9t+MEi08znhKGsoo9hlzAcxMUM+0utSSgKWvyE9WFyyO4sxXVjPpsPbyuOV i65z5YCdpYVH1wU1sJBVXxwO8rud1rCtJrgp/3ZMl56FIE3g3uhYlPuRuvXjLOaC 4s6n9UBh/uxIJzfiyQy2XtYgoz1PQWev5+0lIybIqW0hGzUrTrUS2AUJGZrvzbGR JayDCNOxg3Rvd9FwrCCc7r+bET/hGo+tsiM1dVvMN50WQKum5691Bw20+QpU9/59 P3kn66qkRfqnfCNdaKlyTTWpyAB4zG8PiIQBLAFawnuwi5TH5fr3HZvw4QIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFAV7GHG408UWeUavaQrL8exClwVxMB8GA1UdIwQY MBaAFNZz2Em31QRzdtV+b3lvABi3C0UGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMW5QWVNiZlZCSE4yMVg1dmVXOEFHTGNMUlFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS8yZWNlNjItMWQ4Yy00NTBjLTkxZTgt OGVlYjc1N2NmNTQ1LzEvQlhzWWNialR4Ulo1UnE5cENzdng3RUtYQlhFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS8yZWNlNjItMWQ4Yy00NTBjLTkxZTgtOGVlYjc1N2NmNTQ1 LzEvMW5QWVNiZlZCSE4yMVg1dmVXOEFHTGNMUlFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAAjAeAwcAIAEGeAwc AwUDKgEBkAMFAyoD5gADBQMqBJMAMA0GCSqGSIb3DQEBCwUAA4IBAQCCLXunVeez v5VMrKRioU3QHxSSdtgl6UZIZlFs5T1l3CKO+2ULu9DPGPw0h7mWvrJNopDlIfgX 8h0uQJ+zpOS0FPgvPi3m+wJ8BDoX6hjD1Q1oA8JiTARntr0LQ1zKGmxcLsY6JXna Jx7OzO5RO1jGy9SG7spzd6KGrGnBY+/vdq8oN1dwbwDuoMXjFdtyLwOnJroMRLhF W3G9UMM27Hnp1sonEj6S4YlnAMAEXWx6i3JHPuNTwmtG8pxKEd70q1KID//S727j wvPi1MIuuw4XijY8BcDzpn3KxyP3oEIX9ccIxml8Zi8bh2UHDkMa0xxBbIcvgJjT bZFFjnxzXBnA -----END CERTIFICATE-----Generated at Sun Jan 25 22:14:06 2026 by rpki-client