This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/BuCCAIR_5ckodCbHgOD1MMIt-Dk.roa
File: BuCCAIR_5ckodCbHgOD1MMIt-Dk.roa (raw, json)
Hash identifier: QG9xQu9PRC+aBkksrXZrhX4apZcVikxD0oV/WFqRvns=
Subject key identifier: 06:E0:82:00:84:7F:E5:C9:28:74:26:C7:80:E0:F5:30:C2:2D:F8:39
Certificate issuer: /CN=a85310f503137ae8b35d4f329f46f069dd703815
Certificate serial: 019B7AC7E728B688757BC7EE7CE2473221AD
Authority key identifier: A8:53:10:F5:03:13:7A:E8:B3:5D:4F:32:9F:46:F0:69:DD:70:38:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qFMQ9QMTeuizXU8yn0bwad1wOBU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/BuCCAIR_5ckodCbHgOD1MMIt-Dk.roa
Signing time: Thu 01 Jan 2026 18:17:59 +0000
ROA not before: Thu 01 Jan 2026 18:17:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213777
IP address blocks: 193.42.210.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.mft
rsync://rpki.ripe.net/repository/DEFAULT/qFMQ9QMTeuizXU8yn0bwad1wOBU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 16:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7a:c7:e7:28:b6:88:75:7b:c7:ee:7c:e2:47:32:21:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a85310f503137ae8b35d4f329f46f069dd703815
Validity
Not Before: Jan 1 18:17:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=06e08200847fe5c9287426c780e0f530c22df839
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:fb:fc:57:2d:51:0e:21:1d:08:e8:b4:71:e5:
5c:b8:fb:05:20:f0:62:f1:a3:e4:d6:b6:a1:b0:cb:
75:c2:ed:ab:c7:e1:0d:e9:6a:e3:06:2e:ff:46:a9:
f4:e5:c0:aa:f3:0f:af:19:78:ee:53:bb:47:cb:76:
45:10:2c:ea:0f:c2:f4:06:8d:0f:67:72:0b:c1:c2:
66:48:1d:67:aa:65:13:0a:0c:a1:11:65:72:24:5e:
48:d9:63:8e:71:bf:15:e0:75:e5:72:1a:67:c7:1e:
5b:13:0a:fc:8c:86:a3:c1:a4:03:99:87:37:b5:88:
c3:86:38:df:6c:a9:db:10:a2:c6:29:49:23:ba:20:
77:41:69:03:f8:66:6b:9e:68:0c:ba:8a:4f:54:c0:
91:a1:0e:a5:68:12:34:e2:a4:d2:cd:16:0e:6d:88:
84:81:6d:8e:9a:bd:99:a4:b6:8a:c9:db:fb:8f:16:
3e:8e:7c:49:f7:a4:f2:ed:38:53:3c:89:f2:0e:da:
59:fc:36:95:0d:f4:f1:4b:b7:15:09:8c:b6:06:ae:
fe:23:0e:04:e0:86:c1:3f:55:ef:f4:0e:44:39:a8:
2d:4d:34:32:b1:9e:b0:93:74:c6:2d:7e:57:6e:e0:
db:f6:15:c4:be:79:09:f5:de:3b:11:7a:d7:f3:c4:
eb:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:E0:82:00:84:7F:E5:C9:28:74:26:C7:80:E0:F5:30:C2:2D:F8:39
X509v3 Authority Key Identifier:
keyid:A8:53:10:F5:03:13:7A:E8:B3:5D:4F:32:9F:46:F0:69:DD:70:38:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qFMQ9QMTeuizXU8yn0bwad1wOBU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/BuCCAIR_5ckodCbHgOD1MMIt-Dk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.42.210.0/24
Signature Algorithm: sha256WithRSAEncryption
48:43:a4:19:30:17:68:3f:1b:b2:5c:9c:82:0d:42:78:75:4f:
68:10:da:89:50:49:f2:b6:b8:1c:ce:24:87:30:8e:4c:d5:e2:
f2:ec:af:bf:69:72:04:00:b9:65:37:6e:17:5e:83:c7:f3:47:
d8:bb:91:0d:2d:64:3d:77:3f:fc:05:2d:56:1a:23:e9:1e:f9:
97:f1:b3:55:bd:f7:53:2d:b9:81:a0:a9:a2:64:81:20:6a:96:
d9:c3:08:bb:fc:f4:c7:7e:42:52:25:15:9f:b0:42:8b:28:0f:
18:7d:32:52:08:57:1b:b6:3e:07:e2:9a:25:b3:fd:f2:23:58:
fa:14:e4:42:cd:04:af:9d:44:20:9b:08:40:45:47:4e:31:d0:
39:0e:ef:78:91:07:5e:98:06:b0:b6:17:66:ce:e8:a1:b6:4a:
88:13:0f:64:bd:81:23:f8:5f:e1:70:c7:62:1b:c3:44:88:e2:
38:e3:ce:5d:cb:a0:d6:7d:4a:4f:fc:6b:94:1d:1b:9a:94:f5:
2f:c8:9b:7c:54:81:bc:db:71:e7:eb:6e:be:35:e3:61:02:10:
9e:81:5d:be:bf:a9:4c:49:8e:2f:1b:97:d9:a3:2e:7c:73:82:
a2:25:5b:a8:bc:31:cf:3b:09:33:fc:d4:68:77:cc:d3:30:55:
f0:f3:e1:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:52:43 2026 by rpki-client