This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/266caf-3b43-49e0-b6e1-9c174e53e4fe/1/Bsg46Hh18W2wtrBYU_MmVQa11_M.roa File: Bsg46Hh18W2wtrBYU_MmVQa11_M.roa (raw, json) Hash identifier: Wi9xpJM6gyN312GNJefY/RNhxBIItO+fm/kcAGluLLQ= Subject key identifier: 06:C8:38:E8:78:75:F1:6D:B0:B6:B0:58:53:F3:26:55:06:B5:D7:F3 Certificate issuer: /CN=1045dacc837798c3e6cf31f4d27946a33b0de661 Certificate serial: 019B77C74FCF6AC80C9BEFF22D782CE1C62D Authority key identifier: 10:45:DA:CC:83:77:98:C3:E6:CF:31:F4:D2:79:46:A3:3B:0D:E6:61 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EEXazIN3mMPmzzH00nlGozsN5mE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/266caf-3b43-49e0-b6e1-9c174e53e4fe/1/Bsg46Hh18W2wtrBYU_MmVQa11_M.roa Signing time: Thu 01 Jan 2026 04:18:29 +0000 ROA not before: Thu 01 Jan 2026 04:18:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200557 IP address blocks: 2a02:d0c2:2::/48 maxlen: 48 2a02:ec41::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/266caf-3b43-49e0-b6e1-9c174e53e4fe/1/EEXazIN3mMPmzzH00nlGozsN5mE.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/266caf-3b43-49e0-b6e1-9c174e53e4fe/1/EEXazIN3mMPmzzH00nlGozsN5mE.mft rsync://rpki.ripe.net/repository/DEFAULT/EEXazIN3mMPmzzH00nlGozsN5mE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:4f:cf:6a:c8:0c:9b:ef:f2:2d:78:2c:e1:c6:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1045dacc837798c3e6cf31f4d27946a33b0de661 Validity Not Before: Jan 1 04:18:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=06c838e87875f16db0b6b05853f3265506b5d7f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:da:83:f3:41:7f:c1:bb:86:ca:79:f5:84:0d: a1:99:9e:08:c6:38:12:8c:b7:1f:a7:e4:c5:c7:09: ae:c8:3f:3f:89:57:7e:7e:75:68:0a:0d:b4:e0:6f: 01:7c:da:cd:57:90:17:49:e8:ef:38:43:80:51:ee: 1d:72:5e:60:f4:92:43:e3:90:d2:bf:3e:73:9e:11: 39:a8:dc:b0:9a:2b:25:b8:ad:df:90:7f:6d:4c:5b: 2f:f0:75:85:37:bb:ec:a0:b9:96:63:a0:22:ec:92: 27:ac:e8:d5:bb:78:83:97:ac:75:50:30:92:00:fc: 42:09:5b:e7:c0:fa:85:a3:d5:3d:01:2b:d4:a6:02: d5:50:a6:98:ba:98:6f:43:5c:90:e3:d4:e3:5c:3e: 0a:d7:67:44:10:b0:6b:cb:d7:00:9f:2e:37:13:6d: a5:d8:5d:02:36:a2:45:f7:e5:15:78:1c:a8:84:a9: a6:e9:99:c3:b5:37:e0:06:7b:68:5e:b4:aa:11:60: e9:d0:d3:57:52:1f:bb:a0:10:5f:72:f2:f1:9f:0e: 93:59:f1:fb:5b:4e:d7:78:ed:e9:2f:a6:84:99:ea: 0f:0e:f9:0b:d2:18:f7:41:48:34:d3:40:b4:5b:09: 6a:b3:f1:c3:a4:7a:ab:a1:2f:df:36:8d:79:fc:2a: 0f:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:C8:38:E8:78:75:F1:6D:B0:B6:B0:58:53:F3:26:55:06:B5:D7:F3 X509v3 Authority Key Identifier: keyid:10:45:DA:CC:83:77:98:C3:E6:CF:31:F4:D2:79:46:A3:3B:0D:E6:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EEXazIN3mMPmzzH00nlGozsN5mE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/266caf-3b43-49e0-b6e1-9c174e53e4fe/1/Bsg46Hh18W2wtrBYU_MmVQa11_M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/266caf-3b43-49e0-b6e1-9c174e53e4fe/1/EEXazIN3mMPmzzH00nlGozsN5mE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a02:d0c2:2::/48 2a02:ec41::/48 Signature Algorithm: sha256WithRSAEncryption aa:5e:90:c1:91:8a:36:46:84:eb:21:86:3a:84:21:31:8f:5a: 72:9f:fd:d2:de:bb:f1:59:7a:d3:31:82:19:8d:74:0c:1c:16: 90:0d:fd:9d:50:b3:76:0f:62:17:ee:7d:5d:1d:20:e4:1d:dc: 9f:74:9a:2f:71:01:80:8e:dd:8d:9e:c3:2d:e9:7f:23:93:52: e6:23:72:f2:3e:bc:fc:db:e3:66:51:58:e1:9f:e3:07:71:20: f7:86:71:2d:15:4e:12:f3:7d:af:50:2a:2b:ae:fc:b3:a8:e1: 01:ae:0e:07:cb:e4:fd:9e:08:12:56:45:ea:fd:1d:28:1e:29: 10:2e:7d:03:79:ca:91:29:07:5a:a1:54:53:fd:37:6a:0b:b5: 7a:14:a5:0e:cb:39:93:73:0a:c4:ed:42:f1:a2:6b:e9:cc:c8: ab:cd:f9:b8:f6:89:eb:7e:1d:93:cb:6f:ba:23:95:23:66:52: fb:6b:7b:2c:38:81:58:b9:c9:5e:d2:4c:b5:f5:75:fe:c6:d1: 71:dd:84:9b:9c:e3:95:0e:cb:ad:22:ea:d4:40:14:6d:3b:99: ef:fb:9b:f0:ea:a2:3a:35:13:78:46:0f:e3:36:33:07:76:54: 48:d3:4d:0b:42:88:34:11:c5:d6:bb:6c:ff:08:6a:9c:40:a7: cd:76:cb:30 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt3x0/PasgMm+/yLXgs4cYtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEwNDVkYWNjODM3Nzk4YzNlNmNmMzFmNGQyNzk0NmEzM2Iw ZGU2NjEwHhcNMjYwMTAxMDQxODI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNmM4MzhlODc4NzVmMTZkYjBiNmIwNTg1M2YzMjY1NTA2YjVkN2YzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA09qD80F/wbuGynn1hA2hmZ4IxjgS jLcfp+TFxwmuyD8/iVd+fnVoCg204G8BfNrNV5AXSejvOEOAUe4dcl5g9JJD45DS vz5znhE5qNywmisluK3fkH9tTFsv8HWFN7vsoLmWY6Ai7JInrOjVu3iDl6x1UDCS APxCCVvnwPqFo9U9ASvUpgLVUKaYuphvQ1yQ49TjXD4K12dEELBry9cAny43E22l 2F0CNqJF9+UVeByohKmm6ZnDtTfgBntoXrSqEWDp0NNXUh+7oBBfcvLxnw6TWfH7 W07XeO3pL6aEmeoPDvkL0hj3QUg000C0Wwlqs/HDpHqroS/fNo15/CoPPQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFAbIOOh4dfFtsLawWFPzJlUGtdfzMB8GA1UdIwQY MBaAFBBF2syDd5jD5s8x9NJ5RqM7DeZhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRUVYYXpJTjNtTVBtenpIMDBubEdvenNONW1FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi8yNjZjYWYtM2I0My00OWUwLWI2ZTEt OWMxNzRlNTNlNGZlLzEvQnNnNDZIaDE4VzJ3dHJCWVVfTW1WUWExMV9NLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi8yNjZjYWYtM2I0My00OWUwLWI2ZTEtOWMxNzRlNTNlNGZl LzEvRUVYYXpJTjNtTVBtenpIMDBubEdvenNONW1FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcAKgLQwgAC AwcAKgLsQQAAMA0GCSqGSIb3DQEBCwUAA4IBAQCqXpDBkYo2RoTrIYY6hCExj1py n/3S3rvxWXrTMYIZjXQMHBaQDf2dULN2D2IX7n1dHSDkHdyfdJovcQGAjt2NnsMt 6X8jk1LmI3LyPrz82+NmUVjhn+MHcSD3hnEtFU4S832vUCorrvyzqOEBrg4Hy+T9 nggSVkXq/R0oHikQLn0DecqRKQdaoVRT/TdqC7V6FKUOyzmTcwrE7ULxomvpzMir zfm49onrfh2Ty2+6I5UjZlL7a3ssOIFYucle0ky19XX+xtFx3YSbnOOVDsutIurU QBRtO5nv+5vw6qI6NRN4Rg/jNjMHdlRI000LQog0EcXWu2z/CGqcQKfNdssw -----END CERTIFICATE-----Generated at Mon Jan 26 02:08:15 2026 by rpki-client