This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/bMF5KolEIwXxiuT-0I0G0Bl7Nms.roa File: bMF5KolEIwXxiuT-0I0G0Bl7Nms.roa (raw, json) Hash identifier: mKXZlVGhXxQCTPDIZdEck+Xtd58J6RfyHuS84gWw8W4= Subject key identifier: 6C:C1:79:2A:89:44:23:05:F1:8A:E4:FE:D0:8D:06:D0:19:7B:36:6B Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704 Certificate serial: 019B76EAD9D5AABD16E0B1EB3F788BAE5247 Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/bMF5KolEIwXxiuT-0I0G0Bl7Nms.roa Signing time: Thu 01 Jan 2026 00:17:41 +0000 ROA not before: Thu 01 Jan 2026 00:17:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214967 IP address blocks: 2a11:f084::/32 maxlen: 36 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:d9:d5:aa:bd:16:e0:b1:eb:3f:78:8b:ae:52:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704 Validity Not Before: Jan 1 00:17:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6cc1792a89442305f18ae4fed08d06d0197b366b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:9e:8a:35:9f:ae:b1:a5:f7:c3:1a:aa:43:06: 0e:6b:09:dc:f7:97:46:39:ec:30:ce:a6:d2:15:3a: 33:e2:b5:79:2b:59:f3:84:08:2e:c1:62:91:01:5e: c9:39:6a:83:cb:e1:77:ba:bd:f4:22:2a:ae:84:b1: 14:b7:62:43:17:c9:cc:77:3b:a1:22:5a:19:b3:78: f1:57:26:ce:cd:1e:15:54:14:91:cd:2e:c2:c7:a4: 3d:12:6a:13:72:84:f0:3b:92:0e:76:a8:62:77:01: 09:4a:6a:aa:74:56:54:ab:61:87:50:fc:9b:22:e3: f5:9b:1d:f2:48:87:b6:04:b0:19:6f:db:e3:87:14: 3a:1e:af:60:de:bf:61:3f:c8:bf:ab:0d:32:19:9d: b1:32:43:35:db:e0:7f:cb:51:ba:c7:a1:a8:34:78: f4:6d:fd:fc:e6:b8:64:38:30:1d:02:78:cc:7c:43: 29:e9:9f:9a:ae:0f:12:18:ed:16:dc:08:f8:94:8d: 58:44:ea:11:f4:b8:2d:7d:e3:d7:af:8f:4c:8c:4a: 2c:2d:83:ba:c5:9d:2e:b2:10:88:59:d5:5d:88:f5: 6e:48:42:c1:32:9b:de:fe:e9:f6:bb:c1:a6:b7:d4: 32:e2:3d:5f:26:36:ba:c8:9f:fa:1e:0b:53:5f:2a: e1:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:C1:79:2A:89:44:23:05:F1:8A:E4:FE:D0:8D:06:D0:19:7B:36:6B X509v3 Authority Key Identifier: keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/bMF5KolEIwXxiuT-0I0G0Bl7Nms.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a11:f084::/32 Signature Algorithm: sha256WithRSAEncryption 08:3e:91:b6:0f:48:84:b2:70:42:9c:85:74:c2:e3:a5:93:14: 9f:a8:21:3b:00:f4:d0:5a:4a:c7:fd:33:ec:f8:c3:c1:3f:b9: a1:ee:cf:3a:6a:14:2d:31:34:84:db:ff:fe:46:ef:9d:22:e5: 7a:3e:76:37:83:a8:86:af:51:22:b9:5e:91:f0:8c:50:13:be: 3b:59:1d:f2:59:11:ac:f7:0e:03:8e:3a:cf:f9:48:a9:6d:56: 58:f7:42:ea:d6:aa:c1:8d:15:a1:c7:e6:7f:94:20:3c:c1:b0: d2:39:f1:5a:69:1d:ae:3e:50:fb:cf:cc:34:b1:05:4a:43:4f: 8b:73:31:40:d9:fb:99:13:c1:d1:b2:28:87:87:c6:16:70:26: bf:7b:75:32:4e:c7:30:91:28:e0:84:b8:38:56:00:38:55:68: 86:af:f1:b3:18:d2:29:73:f2:7c:5d:1a:f4:82:51:57:97:0c: 14:7e:86:6b:fa:82:cc:51:fa:3d:c0:f9:81:44:7e:f6:49:f3: a0:42:88:0c:e0:58:6e:71:3a:ea:11:9b:87:54:fa:2b:f4:1a: f0:1c:52:8e:cc:d2:33:c2:ef:8c:da:8e:aa:11:ab:bd:bd:82: 61:57:21:a6:ce:fe:ef:82:ae:2f:e9:b8:7f:58:d5:c5:41:fd: 3f:26:b3:62 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt26tnVqr0W4LHrP3iLrlJHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyZmRiNjc2NTRkZjYxODRlN2Q2MGM0MTUwZWE5NTMzYzJj Zjk3MDQwHhcNMjYwMTAxMDAxNzQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2Y2MxNzkyYTg5NDQyMzA1ZjE4YWU0ZmVkMDhkMDZkMDE5N2IzNjZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmZ6KNZ+usaX3wxqqQwYOawnc95dG OewwzqbSFToz4rV5K1nzhAguwWKRAV7JOWqDy+F3ur30IiquhLEUt2JDF8nMdzuh IloZs3jxVybOzR4VVBSRzS7Cx6Q9EmoTcoTwO5IOdqhidwEJSmqqdFZUq2GHUPyb IuP1mx3ySIe2BLAZb9vjhxQ6Hq9g3r9hP8i/qw0yGZ2xMkM12+B/y1G6x6GoNHj0 bf385rhkODAdAnjMfEMp6Z+arg8SGO0W3Aj4lI1YROoR9LgtfePXr49MjEosLYO6 xZ0ushCIWdVdiPVuSELBMpve/un2u8Gmt9Qy4j1fJja6yJ/6HgtTXyrhDwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFGzBeSqJRCMF8Yrk/tCNBtAZezZrMB8GA1UdIwQY MBaAFGL9tnZU32GE59YMQVDqlTPCz5cEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTct ZTg2MTIxYzU5NGRmLzEvYk1GNUtvbEVJd1h4aXVULTBJMEcwQmw3Tm1zLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTctZTg2MTIxYzU5NGRm LzEvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKhHwhDAN BgkqhkiG9w0BAQsFAAOCAQEACD6Rtg9IhLJwQpyFdMLjpZMUn6ghOwD00FpKx/0z 7PjDwT+5oe7POmoULTE0hNv//kbvnSLlej52N4Oohq9RIrlekfCMUBO+O1kd8lkR rPcOA446z/lIqW1WWPdC6taqwY0Vocfmf5QgPMGw0jnxWmkdrj5Q+8/MNLEFSkNP i3MxQNn7mRPB0bIoh4fGFnAmv3t1Mk7HMJEo4IS4OFYAOFVohq/xsxjSKXPyfF0a 9IJRV5cMFH6Ga/qCzFH6PcD5gUR+9knzoEKIDOBYbnE66hGbh1T6K/Qa8BxSjszS M8LvjNqOqhGrvb2CYVchps7+74KuL+m4f1jVxUH9PyazYg== -----END CERTIFICATE-----Generated at Sun Jan 25 08:49:06 2026 by rpki-client