This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/BHhhqFzP0ymRDa525Vwdc_j8uKU.roa File: BHhhqFzP0ymRDa525Vwdc_j8uKU.roa (raw, json) Hash identifier: mEObpJTsL866uigxajOA2un1yVajx4RAMcq6UQxvFjg= Subject key identifier: 04:78:61:A8:5C:CF:D3:29:91:0D:AE:76:E5:5C:1D:73:F8:FC:B8:A5 Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Certificate serial: 019AD589CCA6CA9106AEE478B3D07E4D19B4 Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/BHhhqFzP0ymRDa525Vwdc_j8uKU.roa Signing time: Sun 30 Nov 2025 16:12:49 +0000 ROA not before: Sun 30 Nov 2025 16:12:49 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 199832 IP address blocks: 2a0c:9a40:8980::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:d5:89:cc:a6:ca:91:06:ae:e4:78:b3:d0:7e:4d:19:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Validity Not Before: Nov 30 16:12:49 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=047861a85ccfd329910dae76e55c1d73f8fcb8a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:91:15:b7:ce:f4:de:5c:91:26:fd:eb:7c:46: 0c:1d:ee:54:6d:a5:61:dd:f8:e1:18:b2:e4:6f:5b: f7:64:ca:d9:1b:74:09:67:07:29:da:8c:2b:5c:e3: 3b:64:43:2d:e5:60:4e:b9:9a:ed:ff:12:85:4c:7f: 41:ed:33:88:b7:3f:bf:4c:79:cb:2c:32:b9:68:bb: 97:c9:e5:cc:aa:d8:bc:4a:ad:16:1f:84:f7:6e:2b: 98:85:4e:aa:b1:9c:a5:2d:90:33:49:22:32:46:6b: 8b:42:3c:f1:41:c3:de:a4:88:35:00:a9:4e:c5:82: 8e:9d:69:95:f6:ed:a7:ce:eb:c4:80:59:61:95:94: 65:b9:a0:0d:d4:8d:20:07:9f:b4:ff:a8:60:5c:4c: 68:d7:22:c6:dc:63:fa:27:31:aa:d6:80:6f:17:51: 7f:88:2c:05:05:1a:46:b2:7a:d8:7d:ce:c7:3d:f0: 64:1a:c9:a4:ad:ae:40:f1:87:86:74:0a:c8:5c:c4: 35:13:ef:14:15:99:0c:32:78:ed:89:0a:04:0f:1e: e8:cc:51:a4:be:68:e3:0d:e1:bc:28:60:ea:23:50: 39:1a:7d:45:27:53:ed:93:51:f2:8c:d8:88:15:02: 02:cf:78:8d:b6:d5:63:3f:e3:bc:2a:d8:ef:bf:8c: f7:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:78:61:A8:5C:CF:D3:29:91:0D:AE:76:E5:5C:1D:73:F8:FC:B8:A5 X509v3 Authority Key Identifier: keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/BHhhqFzP0ymRDa525Vwdc_j8uKU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:9a40:8980::/44 Signature Algorithm: sha256WithRSAEncryption 5c:02:67:25:75:eb:8c:4b:2e:7e:77:3e:8c:17:e2:0d:d0:51: 49:71:d5:e9:30:90:4c:0d:ea:b2:55:40:da:c0:47:d5:d8:6b: 77:f2:69:f0:f3:12:2a:d2:0e:97:0b:b2:50:35:d6:da:b2:c7: 22:00:50:53:45:e2:cc:42:3e:c4:ca:a5:22:05:65:72:e8:dd: 49:24:a7:bc:56:d8:84:42:48:d3:3e:96:a9:a6:70:b7:5f:b4: 20:f2:61:a2:9e:ad:c5:2a:fc:f2:83:f6:2e:83:3c:44:9d:65: e5:67:86:29:ce:8f:30:1f:c5:4c:16:c7:6b:5b:3f:74:90:6e: 9e:9a:e9:89:3d:bc:47:8b:b2:a3:3e:0a:5f:bf:e3:94:dc:8c: 19:85:84:21:2d:6c:26:5a:bf:00:a4:47:6f:fd:9a:8b:ef:59: 12:36:94:f1:d6:82:4e:04:6a:db:43:a4:c1:33:ec:ea:47:20: ac:68:0a:d1:f9:19:6e:df:9d:a7:9e:b7:fd:25:60:5e:ee:02: aa:e1:b9:f8:65:cd:53:7e:b6:28:a7:e2:81:48:60:23:16:eb: d1:23:60:01:4f:45:4d:cf:bc:57:2d:d7:e9:2c:c4:c8:63:68: 69:a9:70:a6:9b:d3:39:00:29:c0:c9:60:29:82:a3:c6:bd:90: 0b:55:41:4d -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZrVicymypEGruR4s9B+TRm0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllOTVhMzYxZmUyYjJjNTI5MjYyNmJhNGM1NmE2NWE4MTRl NDgwMDgwHhcNMjUxMTMwMTYxMjQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNDc4NjFhODVjY2ZkMzI5OTEwZGFlNzZlNTVjMWQ3M2Y4ZmNiOGE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi5EVt8703lyRJv3rfEYMHe5UbaVh 3fjhGLLkb1v3ZMrZG3QJZwcp2owrXOM7ZEMt5WBOuZrt/xKFTH9B7TOItz+/THnL LDK5aLuXyeXMqti8Sq0WH4T3biuYhU6qsZylLZAzSSIyRmuLQjzxQcPepIg1AKlO xYKOnWmV9u2nzuvEgFlhlZRluaAN1I0gB5+0/6hgXExo1yLG3GP6JzGq1oBvF1F/ iCwFBRpGsnrYfc7HPfBkGsmkra5A8YeGdArIXMQ1E+8UFZkMMnjtiQoEDx7ozFGk vmjjDeG8KGDqI1A5Gn1FJ1Ptk1HyjNiIFQICz3iNttVjP+O8Ktjvv4z3JwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFAR4Yahcz9MpkQ2uduVcHXP4/LilMB8GA1UdIwQY MBaAFJ6Vo2H+KyxSkmJrpMVqZagU5IAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2Yt YmY0ZTUyN2I5ZmE4LzEvQkhoaHFGelAweW1SRGE1MjVWd2RjX2o4dUtVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2YtYmY0ZTUyN2I5ZmE4 LzEvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgyaQImA MA0GCSqGSIb3DQEBCwUAA4IBAQBcAmcldeuMSy5+dz6MF+IN0FFJcdXpMJBMDeqy VUDawEfV2Gt38mnw8xIq0g6XC7JQNdbassciAFBTReLMQj7EyqUiBWVy6N1JJKe8 VtiEQkjTPpappnC3X7Qg8mGinq3FKvzyg/YugzxEnWXlZ4Ypzo8wH8VMFsdrWz90 kG6emumJPbxHi7KjPgpfv+OU3IwZhYQhLWwmWr8ApEdv/ZqL71kSNpTx1oJOBGrb Q6TBM+zqRyCsaArR+Rlu352nnrf9JWBe7gKq4bn4Zc1TfrYop+KBSGAjFuvRI2AB T0VNz7xXLdfpLMTIY2hpqXCmm9M5ACnAyWApgqPGvZALVUFN -----END CERTIFICATE-----Generated at Sat Dec 6 03:14:55 2025 by rpki-client