This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/bXvQDzztgR20YUmWOPJv3-d7kbs.roa File: bXvQDzztgR20YUmWOPJv3-d7kbs.roa (raw, json) Hash identifier: Yu03wDPl98lP1gZjiDY9V7dBNvUsvmd/sPZMcHPqSFo= Subject key identifier: 6D:7B:D0:0F:3C:ED:81:1D:B4:61:49:96:38:F2:6F:DF:E7:7B:91:BB Certificate issuer: /CN=0b4e3b3b84242258863142ed3a19792d97cbbc74 Certificate serial: 019BB2836670C3E72B22E239592E75AB2807 Authority key identifier: 0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/bXvQDzztgR20YUmWOPJv3-d7kbs.roa Signing time: Mon 12 Jan 2026 14:01:54 +0000 ROA not before: Mon 12 Jan 2026 14:01:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212743 IP address blocks: 2a0d:d940:b0::/44 maxlen: 44 2a0d:d940:400::/40 maxlen: 40 2a0d:d940:900f::/48 maxlen: 48 2a0d:d940:90a6::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.mft rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 15:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b2:83:66:70:c3:e7:2b:22:e2:39:59:2e:75:ab:28:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b4e3b3b84242258863142ed3a19792d97cbbc74 Validity Not Before: Jan 12 14:01:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6d7bd00f3ced811db461499638f26fdfe77b91bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:9f:9d:47:37:73:01:9d:93:b0:80:ee:c9:e5: 81:84:2b:94:8f:84:f0:53:94:fe:0f:fe:c8:63:d6: c2:bd:8a:6a:27:77:dc:3a:d6:c0:1d:81:d5:9a:b2: c4:e1:fc:98:79:88:1d:62:dc:44:bb:31:7b:91:69: 0f:cf:a5:11:c0:e6:48:b4:e9:51:3a:a7:f0:9a:ff: 2e:a3:3d:1c:2c:30:74:75:33:30:07:ca:48:72:e9: 5d:ec:7e:40:76:e6:ae:76:f0:f8:4f:d6:24:17:6a: fc:93:99:77:a0:11:17:ab:dc:09:07:ce:ff:e5:d3: 64:20:b7:26:2d:58:4d:50:8f:08:b2:86:e5:da:c2: 4d:aa:57:96:54:32:43:c5:33:7b:d1:7e:46:c3:78: 08:91:7a:7a:cd:39:68:ee:54:b7:c3:39:3f:ef:bd: 5d:04:19:c3:19:a9:d9:13:b7:43:95:47:86:6f:fe: d3:51:4c:c9:1c:32:10:6b:0c:76:9e:c0:b4:46:98: c4:86:2d:d4:b2:94:68:79:72:a8:b9:a3:03:37:d1: 52:b7:63:e5:47:d0:fa:ef:77:0b:fd:dc:3f:3a:5c: c4:b9:88:60:44:da:bd:63:20:ff:07:90:6b:d6:12: 7b:b3:84:96:ea:ca:bc:09:a5:03:e7:08:a4:ad:be: e9:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:7B:D0:0F:3C:ED:81:1D:B4:61:49:96:38:F2:6F:DF:E7:7B:91:BB X509v3 Authority Key Identifier: keyid:0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/bXvQDzztgR20YUmWOPJv3-d7kbs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0d:d940:b0::/44 2a0d:d940:400::/40 2a0d:d940:900f::/48 2a0d:d940:90a6::/48 Signature Algorithm: sha256WithRSAEncryption c6:e0:c3:ae:a9:0b:e8:46:24:fd:99:82:0f:a2:4e:49:c9:90: db:31:7c:e6:ff:3e:45:ba:89:c7:18:d2:60:f1:23:01:ad:53: 2e:0e:30:f0:54:a9:bf:7b:70:8c:0f:2c:b4:3f:b3:dc:55:aa: c2:50:16:9f:20:c5:a3:c9:ec:70:45:fc:b4:35:c7:d2:60:8f: df:75:c8:f0:3a:04:48:c6:9a:8e:38:69:1b:89:f2:e3:46:c2: 0d:aa:20:10:56:06:01:d6:83:e0:78:a0:c1:b1:6d:28:a4:70: 2f:7c:a6:d4:9e:53:8b:d3:37:77:4f:6b:a7:91:51:6b:52:25: 20:fc:e9:0c:9a:74:5e:0c:fd:de:d1:3b:7f:0b:75:99:24:ff: 11:90:2b:0f:03:64:a4:ac:87:a5:dc:1d:4a:d1:08:7a:a4:6f: 45:56:62:fb:ce:fe:c3:35:50:1f:a2:cf:d8:7b:c0:8e:78:7b: df:27:f2:f7:39:f6:96:a6:81:a3:d7:3a:6f:20:8d:2d:1f:88: 95:a4:32:0f:ed:10:20:e3:7f:08:e0:e9:61:7c:d1:8f:c2:c2: 00:17:84:40:29:85:da:ef:1c:14:4e:cd:77:c5:46:1f:f9:67: b8:b3:9b:46:b7:e0:e0:7f:71:cd:48:62:df:fe:d0:30:25:5b: 8d:c8:8d:09 -----BEGIN CERTIFICATE----- MIIFGjCCBAKgAwIBAgISAZuyg2Zww+crIuI5WS51qygHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiNGUzYjNiODQyNDIyNTg4NjMxNDJlZDNhMTk3OTJkOTdj YmJjNzQwHhcNMjYwMTEyMTQwMTU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZDdiZDAwZjNjZWQ4MTFkYjQ2MTQ5OTYzOGYyNmZkZmU3N2I5MWJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxJ+dRzdzAZ2TsIDuyeWBhCuUj4Tw U5T+D/7IY9bCvYpqJ3fcOtbAHYHVmrLE4fyYeYgdYtxEuzF7kWkPz6URwOZItOlR Oqfwmv8uoz0cLDB0dTMwB8pIculd7H5AduaudvD4T9YkF2r8k5l3oBEXq9wJB87/ 5dNkILcmLVhNUI8Isobl2sJNqleWVDJDxTN70X5Gw3gIkXp6zTlo7lS3wzk/771d BBnDGanZE7dDlUeGb/7TUUzJHDIQawx2nsC0RpjEhi3UspRoeXKouaMDN9FSt2Pl R9D673cL/dw/OlzEuYhgRNq9YyD/B5Br1hJ7s4SW6sq8CaUD5wikrb7p8wIDAQAB o4ICJjCCAiIwHQYDVR0OBBYEFG170A887YEdtGFJljjyb9/ne5G7MB8GA1UdIwQY MBaAFAtOOzuEJCJYhjFC7ToZeS2Xy7x0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQzA0N080UWtJbGlHTVVMdE9obDVMWmZMdkhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS83YmExYjEtNTU2Mi00YTMyLTlmNWQt MTRkMjM4NTI3ODM1LzEvYlh2UUR6enRnUjIwWVVtV09QSnYzLWQ3a2JzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS83YmExYjEtNTU2Mi00YTMyLTlmNWQtMTRkMjM4NTI3ODM1 LzEvQzA0N080UWtJbGlHTVVMdE9obDVMWmZMdkhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDwGCCsGAQUFBwEHAQH/BC0wKzApBAIAAjAjAwcEKg3ZQACw AwYAKg3ZQAQDBwAqDdlAkA8DBwAqDdlAkKYwDQYJKoZIhvcNAQELBQADggEBAMbg w66pC+hGJP2Zgg+iTknJkNsxfOb/PkW6iccY0mDxIwGtUy4OMPBUqb97cIwPLLQ/ s9xVqsJQFp8gxaPJ7HBF/LQ1x9Jgj991yPA6BEjGmo44aRuJ8uNGwg2qIBBWBgHW g+B4oMGxbSikcC98ptSeU4vTN3dPa6eRUWtSJSD86QyadF4M/d7RO38LdZkk/xGQ Kw8DZKSsh6XcHUrRCHqkb0VWYvvO/sM1UB+iz9h7wI54e98n8vc59pamgaPXOm8g jS0fiJWkMg/tECDjfwjg6WF80Y/CwgAXhEAphdrvHBROzXfFRh/5Z7izm0a34OB/ cc1IYt/+0DAlW43IjQk= -----END CERTIFICATE-----Generated at Wed Jan 21 16:59:08 2026 by rpki-client