This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/4ce558-63d6-469a-bb5d-f7820c5e966a/1/B6Pi1uUnJZff0yH4k55r2kXtjkI.roa File: B6Pi1uUnJZff0yH4k55r2kXtjkI.roa (raw, json) Hash identifier: nFONkjpIyEwX4XgmL0VMVIS4fv9/E+OheTtNPB+NA0c= Subject key identifier: 07:A3:E2:D6:E5:27:25:97:DF:D3:21:F8:93:9E:6B:DA:45:ED:8E:42 Certificate issuer: /CN=bfe9f12c96ba20683aff5c958bfad8e4c577f7fe Certificate serial: 019B76EBA53D2CBBB38F0CFC1CC86B8F0186 Authority key identifier: BF:E9:F1:2C:96:BA:20:68:3A:FF:5C:95:8B:FA:D8:E4:C5:77:F7:FE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v-nxLJa6IGg6_1yVi_rY5MV39_4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/4ce558-63d6-469a-bb5d-f7820c5e966a/1/B6Pi1uUnJZff0yH4k55r2kXtjkI.roa Signing time: Thu 01 Jan 2026 00:18:33 +0000 ROA not before: Thu 01 Jan 2026 00:18:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 395747 IP address blocks: 2a09:bac0:108::/48 maxlen: 48 2a09:bac0:131::/48 maxlen: 48 2a09:bac0:133::/48 maxlen: 48 2a09:bac0:251::/48 maxlen: 48 2a09:bac0:693::/48 maxlen: 48 2a09:bac0:748::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/4ce558-63d6-469a-bb5d-f7820c5e966a/1/v-nxLJa6IGg6_1yVi_rY5MV39_4.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/4ce558-63d6-469a-bb5d-f7820c5e966a/1/v-nxLJa6IGg6_1yVi_rY5MV39_4.mft rsync://rpki.ripe.net/repository/DEFAULT/v-nxLJa6IGg6_1yVi_rY5MV39_4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:a5:3d:2c:bb:b3:8f:0c:fc:1c:c8:6b:8f:01:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bfe9f12c96ba20683aff5c958bfad8e4c577f7fe Validity Not Before: Jan 1 00:18:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=07a3e2d6e5272597dfd321f8939e6bda45ed8e42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:5f:e1:51:c5:af:17:5a:da:40:45:52:c5:55: c9:55:60:f5:a2:20:b1:61:25:ee:94:ee:16:04:7b: 66:e1:aa:6a:19:fd:bd:fa:08:0b:f4:82:82:e8:e6: a8:f2:df:62:4e:ae:43:a0:59:53:41:87:2e:be:40: 4c:98:1b:fc:a1:1f:05:e3:f3:55:69:4a:06:68:6c: be:5f:d2:00:f0:72:cd:b5:26:fb:06:81:e2:08:2b: ec:a0:97:2d:a1:ad:7e:54:f3:d0:08:d6:28:61:d7: b8:9a:93:0c:c7:5d:a5:b5:b8:e0:40:74:00:d9:da: 04:d8:78:6a:98:61:e9:ae:28:f3:17:4f:5b:40:3c: 58:52:07:c0:8b:26:fd:99:d0:b1:0b:05:74:3a:c4: 9e:d3:1c:7a:6b:0b:9e:e9:55:06:73:c7:6c:1d:89: 09:11:7c:26:f7:60:7a:4e:7b:44:c7:4b:b6:42:cc: df:48:b9:4f:1b:c3:49:df:df:2a:6d:6b:46:f0:7a: 03:88:e8:18:b1:b7:57:f2:18:71:4f:20:ce:af:9f: 0a:d5:9c:a2:be:00:ba:a9:e9:8e:88:59:0e:e9:07: 48:4c:18:c6:f6:50:97:f2:e9:17:af:27:04:e0:d4: 68:58:62:c4:81:b8:1b:34:01:db:af:06:0b:f3:20: 1e:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:A3:E2:D6:E5:27:25:97:DF:D3:21:F8:93:9E:6B:DA:45:ED:8E:42 X509v3 Authority Key Identifier: keyid:BF:E9:F1:2C:96:BA:20:68:3A:FF:5C:95:8B:FA:D8:E4:C5:77:F7:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v-nxLJa6IGg6_1yVi_rY5MV39_4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/4ce558-63d6-469a-bb5d-f7820c5e966a/1/B6Pi1uUnJZff0yH4k55r2kXtjkI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/4ce558-63d6-469a-bb5d-f7820c5e966a/1/v-nxLJa6IGg6_1yVi_rY5MV39_4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a09:bac0:108::/48 2a09:bac0:131::/48 2a09:bac0:133::/48 2a09:bac0:251::/48 2a09:bac0:693::/48 2a09:bac0:748::/48 Signature Algorithm: sha256WithRSAEncryption 95:29:d6:48:4d:06:aa:e0:f6:b1:d6:25:2a:de:43:59:c9:48: 62:a3:9f:25:1b:92:42:f2:10:80:6c:c0:56:2d:39:8f:bd:af: 27:87:67:ac:e3:1f:69:d6:79:52:9f:b6:7e:00:3c:b5:48:de: 5d:74:bb:d4:8d:4e:f8:71:b3:4d:29:27:27:1b:25:53:bd:d2: 3e:5e:18:c6:bc:4e:45:dd:93:30:c6:53:3c:39:f0:9f:5e:a2: 22:0c:bc:e2:0a:85:ed:c0:e6:51:6d:7f:63:a5:db:40:e0:e4: 6a:f4:d9:70:85:48:13:c9:83:41:61:26:be:be:fa:83:c5:e1: 16:6c:50:a8:22:16:6d:a4:61:af:7e:22:cf:df:d7:cd:9d:14: ca:6f:85:14:3d:f5:7e:54:8b:a2:01:b8:74:49:2b:0c:3e:df: e2:da:a4:23:74:a3:30:a2:6c:88:c6:5b:61:93:4a:30:b8:89: e2:24:c7:eb:bd:e9:1d:31:9a:95:e5:a2:54:b4:0a:98:78:d5: 07:b0:fa:8b:76:13:96:3a:b0:5e:8d:95:3b:c1:17:27:2e:08: 13:3f:77:6b:66:20:e9:e9:42:3a:ea:5e:82:a0:44:99:fc:f7: 79:e5:e1:a5:da:72:ee:1e:ac:08:07:40:5e:35:ef:17:43:1b: 59:42:41:ae -----BEGIN CERTIFICATE----- MIIFLTCCBBWgAwIBAgISAZt266U9LLuzjwz8HMhrjwGGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmZTlmMTJjOTZiYTIwNjgzYWZmNWM5NThiZmFkOGU0YzU3 N2Y3ZmUwHhcNMjYwMTAxMDAxODMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwN2EzZTJkNmU1MjcyNTk3ZGZkMzIxZjg5MzllNmJkYTQ1ZWQ4ZTQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhV/hUcWvF1raQEVSxVXJVWD1oiCx YSXulO4WBHtm4apqGf29+ggL9IKC6Oao8t9iTq5DoFlTQYcuvkBMmBv8oR8F4/NV aUoGaGy+X9IA8HLNtSb7BoHiCCvsoJctoa1+VPPQCNYoYde4mpMMx12ltbjgQHQA 2doE2HhqmGHprijzF09bQDxYUgfAiyb9mdCxCwV0OsSe0xx6awue6VUGc8dsHYkJ EXwm92B6TntEx0u2QszfSLlPG8NJ398qbWtG8HoDiOgYsbdX8hhxTyDOr58K1Zyi vgC6qemOiFkO6QdITBjG9lCX8ukXrycE4NRoWGLEgbgbNAHbrwYL8yAebwIDAQAB o4ICOTCCAjUwHQYDVR0OBBYEFAej4tblJyWX39Mh+JOea9pF7Y5CMB8GA1UdIwQY MBaAFL/p8SyWuiBoOv9clYv62OTFd/f+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdi1ueExKYTZJR2c2XzF5Vmlfclk1TVYzOV80LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy80Y2U1NTgtNjNkNi00NjlhLWJiNWQt Zjc4MjBjNWU5NjZhLzEvQjZQaTF1VW5KWmZmMHlINGs1NXIya1h0amtJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy80Y2U1NTgtNjNkNi00NjlhLWJiNWQtZjc4MjBjNWU5NjZh LzEvdi1ueExKYTZJR2c2XzF5Vmlfclk1TVYzOV80LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CME8GCCsGAQUFBwEHAQH/BEAwPjA8BAIAAjA2AwcAKgm6wAEI AwcAKgm6wAExAwcAKgm6wAEzAwcAKgm6wAJRAwcAKgm6wAaTAwcAKgm6wAdIMA0G CSqGSIb3DQEBCwUAA4IBAQCVKdZITQaq4Pax1iUq3kNZyUhio58lG5JC8hCAbMBW LTmPva8nh2es4x9p1nlSn7Z+ADy1SN5ddLvUjU74cbNNKScnGyVTvdI+XhjGvE5F 3ZMwxlM8OfCfXqIiDLziCoXtwOZRbX9jpdtA4ORq9NlwhUgTyYNBYSa+vvqDxeEW bFCoIhZtpGGvfiLP39fNnRTKb4UUPfV+VIuiAbh0SSsMPt/i2qQjdKMwomyIxlth k0owuIniJMfrvekdMZqV5aJUtAqYeNUHsPqLdhOWOrBejZU7wRcnLggTP3drZiDp 6UI66l6CoESZ/Pd55eGl2nLuHqwIB0BeNe8XQxtZQkGu -----END CERTIFICATE-----Generated at Sun Jan 25 14:21:13 2026 by rpki-client