This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/BeeQIAu6NMmjbyOm_zRckXrCzjQ.roa
File: BeeQIAu6NMmjbyOm_zRckXrCzjQ.roa (raw, json)
Hash identifier: Ca+da+tqS9qy4+b+qYuDpbM1Gp5JRavJKwLfRW2e9sg=
Subject key identifier: 05:E7:90:20:0B:BA:34:C9:A3:6F:23:A6:FF:34:5C:91:7A:C2:CE:34
Certificate issuer: /CN=a6a0434bebe5dfa63dda78c24a4ebc1d2cd7369d
Certificate serial: 019B7910B767C6C2D6168B834E2F7067698D
Authority key identifier: A6:A0:43:4B:EB:E5:DF:A6:3D:DA:78:C2:4A:4E:BC:1D:2C:D7:36:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pqBDS-vl36Y92njCSk68HSzXNp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/BeeQIAu6NMmjbyOm_zRckXrCzjQ.roa
Signing time: Thu 01 Jan 2026 10:18:17 +0000
ROA not before: Thu 01 Jan 2026 10:18:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209437
IP address blocks: 2a0a:56c4:3::/48 maxlen: 48
2a0a:56c4:5::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/pqBDS-vl36Y92njCSk68HSzXNp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/pqBDS-vl36Y92njCSk68HSzXNp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/pqBDS-vl36Y92njCSk68HSzXNp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 19:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:10:b7:67:c6:c2:d6:16:8b:83:4e:2f:70:67:69:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6a0434bebe5dfa63dda78c24a4ebc1d2cd7369d
Validity
Not Before: Jan 1 10:18:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=05e790200bba34c9a36f23a6ff345c917ac2ce34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:0b:71:ec:da:83:e8:38:b0:1a:8d:d5:29:3e:
2f:b5:da:48:a4:73:7a:a0:75:98:98:fe:ba:77:d2:
22:dd:c6:80:26:b4:ae:cc:50:52:dc:f3:87:5e:0e:
5d:e1:39:67:ae:f0:00:34:6b:50:ee:b9:0e:b4:12:
c6:99:01:ea:82:02:58:69:f9:ab:29:0b:16:4b:2e:
e1:a7:55:53:51:6a:40:17:e1:bd:ed:48:08:14:47:
7a:a2:c9:7a:a8:45:18:53:40:24:63:04:da:98:64:
79:bb:8b:fa:5e:82:ba:e8:10:e9:a7:ee:ce:e8:50:
8f:84:5d:7d:90:a1:9d:d7:d3:e3:a1:44:83:d5:32:
54:4c:48:cf:e1:87:53:6d:e4:be:8a:30:8d:4a:2a:
16:02:57:b5:8c:87:9d:e4:46:72:b7:32:fb:60:38:
5e:62:74:24:6e:e7:d2:f4:e8:f0:25:1b:d6:06:39:
7f:35:d5:a0:cb:e9:1e:e3:a3:12:84:13:75:b8:7b:
87:c8:06:ed:5e:bf:f4:38:ec:54:5b:b0:ff:46:52:
27:76:77:e0:76:90:c1:84:77:1f:51:fe:9f:57:2f:
01:f8:c4:01:96:31:53:e2:d1:05:c1:01:ec:27:c6:
c0:5d:4a:a2:08:a5:1b:c1:4e:77:40:16:eb:d0:08:
53:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:E7:90:20:0B:BA:34:C9:A3:6F:23:A6:FF:34:5C:91:7A:C2:CE:34
X509v3 Authority Key Identifier:
keyid:A6:A0:43:4B:EB:E5:DF:A6:3D:DA:78:C2:4A:4E:BC:1D:2C:D7:36:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pqBDS-vl36Y92njCSk68HSzXNp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/BeeQIAu6NMmjbyOm_zRckXrCzjQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/pqBDS-vl36Y92njCSk68HSzXNp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:56c4:3::/48
2a0a:56c4:5::/48
Signature Algorithm: sha256WithRSAEncryption
49:17:a4:19:53:d7:13:95:c0:3d:a0:c6:a5:0c:c9:43:8d:d9:
7c:dd:ca:b5:f5:e6:ae:16:14:96:52:64:6c:90:d3:a5:f1:8b:
36:f7:0f:ca:72:0f:e5:a9:8e:ab:82:55:e2:37:08:95:78:61:
bd:38:63:df:e9:38:b8:b6:88:9e:34:00:33:d3:cf:4e:85:98:
a0:dd:36:04:db:01:7b:7a:65:13:e1:ac:da:37:63:48:ef:3c:
6a:0f:48:99:01:fc:59:51:76:18:78:66:1e:e5:3a:fa:73:eb:
15:5d:94:21:cd:e1:c9:b5:98:ef:dc:7c:34:7c:84:63:07:36:
f6:d1:9f:13:aa:8f:ff:91:1c:a4:00:63:a1:75:5e:59:70:05:
c9:3b:36:24:cd:40:04:56:d0:02:05:3b:84:a4:ef:02:ce:b7:
ca:08:c8:6e:f3:04:c6:07:8c:06:5f:e8:ed:75:c2:c6:b9:0b:
3b:48:6c:26:0b:73:db:6c:3a:ca:b9:06:18:6f:75:61:9f:f4:
b0:86:1a:6e:ef:4e:47:c9:11:5e:7f:ae:c1:d1:3e:ee:4b:6f:
3c:0f:19:0e:99:6b:1a:6b:02:1f:14:3c:47:fe:65:e1:d6:6a:
a8:73:91:e4:4b:ce:81:f9:ca:40:f6:8e:97:36:ab:cf:23:7a:
d9:a6:7b:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 03:05:44 2026 by rpki-client