This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/59a12c-cc7f-4271-831a-e7f2c07fc0f8/1/bJB2KlYnnSQctiMVw5LEcI6puPE.roa File: bJB2KlYnnSQctiMVw5LEcI6puPE.roa (raw, json) Hash identifier: NI9BvmeAMx8yGHKi/OTTLd4uTBAvPT7/AwZXssX4nIQ= Subject key identifier: 6C:90:76:2A:56:27:9D:24:1C:B6:23:15:C3:92:C4:70:8E:A9:B8:F1 Certificate issuer: /CN=9f7a47be773a8cad6d75980e739b7841ad4d9b91 Certificate serial: 019B7CED85ED54DF0903462E1E272B5FE299 Authority key identifier: 9F:7A:47:BE:77:3A:8C:AD:6D:75:98:0E:73:9B:78:41:AD:4D:9B:91 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n3pHvnc6jK1tdZgOc5t4Qa1Nm5E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/59a12c-cc7f-4271-831a-e7f2c07fc0f8/1/bJB2KlYnnSQctiMVw5LEcI6puPE.roa Signing time: Fri 02 Jan 2026 04:18:19 +0000 ROA not before: Fri 02 Jan 2026 04:18:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 40676 IP address blocks: 46.19.5.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/59a12c-cc7f-4271-831a-e7f2c07fc0f8/1/n3pHvnc6jK1tdZgOc5t4Qa1Nm5E.crl rsync://rpki.ripe.net/repository/DEFAULT/6b/59a12c-cc7f-4271-831a-e7f2c07fc0f8/1/n3pHvnc6jK1tdZgOc5t4Qa1Nm5E.mft rsync://rpki.ripe.net/repository/DEFAULT/n3pHvnc6jK1tdZgOc5t4Qa1Nm5E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 23 Jan 2026 16:20:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:85:ed:54:df:09:03:46:2e:1e:27:2b:5f:e2:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f7a47be773a8cad6d75980e739b7841ad4d9b91 Validity Not Before: Jan 2 04:18:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6c90762a56279d241cb62315c392c4708ea9b8f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:56:ae:e9:3c:37:e6:c4:8f:52:2a:bf:a3:39: af:57:69:17:64:06:5f:ce:11:91:e7:49:7c:a9:76: 54:6f:40:f2:84:36:21:c5:20:ae:cc:0c:cb:3d:67: 3e:8e:85:47:c6:3c:17:85:af:4e:eb:07:9f:ca:9a: 65:b1:c3:6d:d6:c1:f0:72:74:46:2b:ae:64:43:31: 73:4c:de:3a:90:13:34:2e:59:ee:4a:85:22:e8:af: 82:4a:d6:7d:05:f5:8f:c8:8e:8f:6f:cc:a9:01:04: 0d:a8:1d:f3:ef:bd:54:c8:ac:81:2b:7e:bc:e2:8a: 39:0c:ff:8c:21:c0:bb:4a:c0:e2:1a:69:51:1e:5b: a3:f0:1e:63:c6:71:3b:df:6d:3e:f8:ab:47:b8:fa: ec:b0:70:c5:c0:d8:01:a6:af:20:f2:ec:8d:28:00: 68:f5:12:a8:7c:f2:b2:48:2a:83:d5:83:4f:ce:04: 02:80:f8:38:e8:36:05:8d:e6:6d:61:0b:30:66:22: 6c:bd:79:26:e4:5e:4e:48:7a:38:89:82:51:4a:b7: 95:12:63:9e:ab:fb:aa:a8:a4:be:4a:bb:95:93:4d: f0:4c:20:6b:0d:74:cd:2e:03:4b:06:8c:b3:80:e9: d5:ba:27:de:1c:3d:dd:0d:ef:8e:03:04:a9:64:6c: 78:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:90:76:2A:56:27:9D:24:1C:B6:23:15:C3:92:C4:70:8E:A9:B8:F1 X509v3 Authority Key Identifier: keyid:9F:7A:47:BE:77:3A:8C:AD:6D:75:98:0E:73:9B:78:41:AD:4D:9B:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n3pHvnc6jK1tdZgOc5t4Qa1Nm5E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/59a12c-cc7f-4271-831a-e7f2c07fc0f8/1/bJB2KlYnnSQctiMVw5LEcI6puPE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/59a12c-cc7f-4271-831a-e7f2c07fc0f8/1/n3pHvnc6jK1tdZgOc5t4Qa1Nm5E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.19.5.0/24 Signature Algorithm: sha256WithRSAEncryption 15:b8:b4:34:d2:0b:06:11:02:22:6b:58:53:91:12:c4:fa:a6: 3f:28:0e:99:11:a2:5f:f9:88:c9:ec:1a:e3:a9:18:b2:25:ba: eb:8c:a8:89:5e:20:67:25:0d:a8:d9:c9:e3:31:e5:95:ba:0e: 83:a9:5f:55:a1:85:78:40:67:97:fa:e8:3b:98:05:8a:b4:43: e3:47:68:ea:cc:d8:8a:2d:6e:fd:1c:1e:7c:30:f4:54:9c:10: b2:30:af:f9:cc:f5:99:67:2a:6b:90:1e:9a:88:e0:dc:22:81: 29:b9:b5:1e:a1:f8:da:24:43:d8:58:ff:ec:1a:5b:89:ad:16: 57:16:bc:74:87:90:50:1c:0a:13:ba:ce:86:61:04:6f:2c:34: c1:44:67:ca:3c:e9:e2:15:9f:38:b1:b4:e8:dd:f1:ae:db:e2: e3:65:c4:e4:98:6e:e1:60:22:16:b5:2c:9c:f4:63:b7:ee:95: c1:53:8b:68:b0:c3:67:6f:a8:ae:fa:a1:25:40:57:17:5b:4c: 31:10:3c:1e:74:52:14:c3:e5:b2:c0:91:50:b5:05:3d:34:c7: d5:d5:70:13:36:9b:ed:ce:ec:49:e9:43:b1:e5:d0:e2:ba:f3: 2a:61:06:59:6e:79:71:c6:96:d3:0c:49:67:f0:34:64:1e:1e: d3:16:ba:f2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87YXtVN8JA0YuHicrX+KZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmN2E0N2JlNzczYThjYWQ2ZDc1OTgwZTczOWI3ODQxYWQ0 ZDliOTEwHhcNMjYwMTAyMDQxODE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YzkwNzYyYTU2Mjc5ZDI0MWNiNjIzMTVjMzkyYzQ3MDhlYTliOGYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA31au6Tw35sSPUiq/ozmvV2kXZAZf zhGR50l8qXZUb0DyhDYhxSCuzAzLPWc+joVHxjwXha9O6wefypplscNt1sHwcnRG K65kQzFzTN46kBM0LlnuSoUi6K+CStZ9BfWPyI6Pb8ypAQQNqB3z771UyKyBK368 4oo5DP+MIcC7SsDiGmlRHluj8B5jxnE7320++KtHuPrssHDFwNgBpq8g8uyNKABo 9RKofPKySCqD1YNPzgQCgPg46DYFjeZtYQswZiJsvXkm5F5OSHo4iYJRSreVEmOe q/uqqKS+SruVk03wTCBrDXTNLgNLBoyzgOnVuifeHD3dDe+OAwSpZGx4xQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGyQdipWJ50kHLYjFcOSxHCOqbjxMB8GA1UdIwQY MBaAFJ96R753OoytbXWYDnObeEGtTZuRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbjNwSHZuYzZqSzF0ZFpnT2M1dDRRYTFObTVFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi81OWExMmMtY2M3Zi00MjcxLTgzMWEt ZTdmMmMwN2ZjMGY4LzEvYkpCMktsWW5uU1FjdGlNVnc1TEVjSTZwdVBFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yi81OWExMmMtY2M3Zi00MjcxLTgzMWEtZTdmMmMwN2ZjMGY4 LzEvbjNwSHZuYzZqSzF0ZFpnT2M1dDRRYTFObTVFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALhMFMA0G CSqGSIb3DQEBCwUAA4IBAQAVuLQ00gsGEQIia1hTkRLE+qY/KA6ZEaJf+YjJ7Brj qRiyJbrrjKiJXiBnJQ2o2cnjMeWVug6DqV9VoYV4QGeX+ug7mAWKtEPjR2jqzNiK LW79HB58MPRUnBCyMK/5zPWZZyprkB6aiODcIoEpubUeofjaJEPYWP/sGluJrRZX Frx0h5BQHAoTus6GYQRvLDTBRGfKPOniFZ84sbTo3fGu2+LjZcTkmG7hYCIWtSyc 9GO37pXBU4tosMNnb6iu+qElQFcXW0wxEDwedFIUw+WywJFQtQU9NMfV1XATNpvt zuxJ6UOx5dDiuvMqYQZZbnlxxpbTDEln8DRkHh7TFrry -----END CERTIFICATE-----Generated at Fri Jan 23 01:59:12 2026 by rpki-client