This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/688e37-d942-486a-a932-5893bb7761cd/1/w5XzmEXW43VSoovsUGYhXAVueg0.roa File: w5XzmEXW43VSoovsUGYhXAVueg0.roa (raw, json) Hash identifier: EAiFQLFWJa8Sm5zDP29zAvgzVkCLLSccHJFgQ5JfQ5I= Subject key identifier: C3:95:F3:98:45:D6:E3:75:52:A2:8B:EC:50:66:21:5C:05:6E:7A:0D Certificate issuer: /CN=bcaa1146afd4f45f117095a15a7de0bbf978144a Certificate serial: 019B7C112929B9E20EF5B789711F2B1C2F4A Authority key identifier: BC:AA:11:46:AF:D4:F4:5F:11:70:95:A1:5A:7D:E0:BB:F9:78:14:4A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vKoRRq_U9F8RcJWhWn3gu_l4FEo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/688e37-d942-486a-a932-5893bb7761cd/1/w5XzmEXW43VSoovsUGYhXAVueg0.roa Signing time: Fri 02 Jan 2026 00:17:38 +0000 ROA not before: Fri 02 Jan 2026 00:17:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213603 IP address blocks: 2a14:ab00::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/688e37-d942-486a-a932-5893bb7761cd/1/vKoRRq_U9F8RcJWhWn3gu_l4FEo.crl rsync://rpki.ripe.net/repository/DEFAULT/14/688e37-d942-486a-a932-5893bb7761cd/1/vKoRRq_U9F8RcJWhWn3gu_l4FEo.mft rsync://rpki.ripe.net/repository/DEFAULT/vKoRRq_U9F8RcJWhWn3gu_l4FEo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:29:29:b9:e2:0e:f5:b7:89:71:1f:2b:1c:2f:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bcaa1146afd4f45f117095a15a7de0bbf978144a Validity Not Before: Jan 2 00:17:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c395f39845d6e37552a28bec5066215c056e7a0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:1b:46:cf:b0:59:1e:f8:f6:7a:ab:c0:8a:b0: 6b:25:bb:35:33:c7:4f:b2:be:1e:8b:be:7e:33:4e: 44:24:05:1e:33:af:97:01:f5:ec:41:9c:a6:68:0e: e7:82:16:4a:04:68:60:2b:92:47:84:cb:1e:35:d8: d6:b9:e7:87:ca:b6:aa:cf:e6:fe:42:72:9a:b6:9c: 8b:b2:72:2f:9a:1f:9f:56:65:0b:70:6e:48:89:0d: 27:94:a3:3e:c7:ec:ba:8f:b9:2c:e5:bd:2a:b5:29: a2:ef:64:11:8e:1c:89:9d:d3:ba:c5:ea:4b:02:5d: b7:9f:6f:df:4d:5e:8a:97:82:7c:f6:7d:2f:b0:91: f2:4d:29:20:df:0a:a5:9c:d7:69:db:a0:eb:e4:87: 7e:25:21:db:19:18:2e:56:17:46:cc:11:c9:1f:30: f8:77:19:79:64:70:6d:45:cb:34:e3:13:a5:1a:c2: 36:f7:ad:e1:b1:70:5a:5e:ca:43:19:b0:41:ca:b5: d2:e1:c1:78:4c:a2:1a:e3:20:18:ba:d3:b3:9e:d3: f2:37:ec:1c:72:41:73:21:58:f9:39:af:aa:e1:c5: a0:05:bd:6c:01:e5:18:4c:94:e4:be:64:1d:77:48: 73:98:6e:74:3f:ce:82:6e:3d:37:37:08:91:09:34: 29:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:95:F3:98:45:D6:E3:75:52:A2:8B:EC:50:66:21:5C:05:6E:7A:0D X509v3 Authority Key Identifier: keyid:BC:AA:11:46:AF:D4:F4:5F:11:70:95:A1:5A:7D:E0:BB:F9:78:14:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vKoRRq_U9F8RcJWhWn3gu_l4FEo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/688e37-d942-486a-a932-5893bb7761cd/1/w5XzmEXW43VSoovsUGYhXAVueg0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/688e37-d942-486a-a932-5893bb7761cd/1/vKoRRq_U9F8RcJWhWn3gu_l4FEo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:ab00::/29 Signature Algorithm: sha256WithRSAEncryption 3a:8f:10:3f:eb:e5:d4:76:74:76:ed:df:86:af:42:b8:7a:cd: 78:dd:68:57:0d:8d:2e:bb:da:08:84:1d:b1:15:c5:10:2f:63: 90:75:0f:9f:7c:e6:24:3a:b6:c9:f2:7e:78:00:04:89:28:c5: d8:ac:b7:5c:45:76:cd:df:02:29:77:c2:68:4c:44:7c:ba:df: 32:0d:47:a4:50:d9:17:5b:81:ea:da:cd:26:76:d6:b7:55:cc: 8d:86:32:0d:8f:9b:a7:34:92:cd:ac:39:f7:ad:37:f0:17:9a: 38:34:42:cf:3a:0e:1f:39:00:ad:e8:14:65:be:33:d6:d5:15: e9:32:6e:2d:57:44:4f:3b:81:29:8f:e9:86:53:c4:68:a4:a6: fc:5d:d1:b7:ac:fe:6e:c3:c4:ce:a2:94:ee:aa:21:d0:93:a7: 09:89:a9:27:05:d3:95:dd:47:da:9b:af:93:75:b9:d0:a7:9f: 26:ff:5d:e5:09:85:f8:71:e2:0e:36:67:c0:5f:e9:c7:80:73: b7:cb:5c:a8:44:c6:a4:63:59:c2:32:b7:06:72:2a:56:af:08: 4b:fb:6e:20:86:9c:e0:d2:ce:fd:cf:fb:20:8c:76:17:66:9f: 3e:00:6e:a9:4e:51:af:2b:bf:db:4b:ea:a8:94:27:80:f2:43: ea:a2:7c:78 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt8ESkpueIO9beJcR8rHC9KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjYWExMTQ2YWZkNGY0NWYxMTcwOTVhMTVhN2RlMGJiZjk3 ODE0NGEwHhcNMjYwMTAyMDAxNzM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMzk1ZjM5ODQ1ZDZlMzc1NTJhMjhiZWM1MDY2MjE1YzA1NmU3YTBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwxtGz7BZHvj2eqvAirBrJbs1M8dP sr4ei75+M05EJAUeM6+XAfXsQZymaA7nghZKBGhgK5JHhMseNdjWueeHyraqz+b+ QnKatpyLsnIvmh+fVmULcG5IiQ0nlKM+x+y6j7ks5b0qtSmi72QRjhyJndO6xepL Al23n2/fTV6Kl4J89n0vsJHyTSkg3wqlnNdp26Dr5Id+JSHbGRguVhdGzBHJHzD4 dxl5ZHBtRcs04xOlGsI2963hsXBaXspDGbBByrXS4cF4TKIa4yAYutOzntPyN+wc ckFzIVj5Oa+q4cWgBb1sAeUYTJTkvmQdd0hzmG50P86Cbj03NwiRCTQpXQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFMOV85hF1uN1UqKL7FBmIVwFbnoNMB8GA1UdIwQY MBaAFLyqEUav1PRfEXCVoVp94Lv5eBRKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdktvUlJxX1U5RjhSY0pXaFduM2d1X2w0RkVvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC82ODhlMzctZDk0Mi00ODZhLWE5MzIt NTg5M2JiNzc2MWNkLzEvdzVYem1FWFc0M1ZTb292c1VHWWhYQVZ1ZWcwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC82ODhlMzctZDk0Mi00ODZhLWE5MzItNTg5M2JiNzc2MWNk LzEvdktvUlJxX1U5RjhSY0pXaFduM2d1X2w0RkVvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhSrADAN BgkqhkiG9w0BAQsFAAOCAQEAOo8QP+vl1HZ0du3fhq9CuHrNeN1oVw2NLrvaCIQd sRXFEC9jkHUPn3zmJDq2yfJ+eAAEiSjF2Ky3XEV2zd8CKXfCaExEfLrfMg1HpFDZ F1uB6trNJnbWt1XMjYYyDY+bpzSSzaw596038BeaODRCzzoOHzkAregUZb4z1tUV 6TJuLVdETzuBKY/phlPEaKSm/F3Rt6z+bsPEzqKU7qoh0JOnCYmpJwXTld1H2puv k3W50KefJv9d5QmF+HHiDjZnwF/px4Bzt8tcqETGpGNZwjK3BnIqVq8IS/tuIIac 4NLO/c/7IIx2F2afPgBuqU5Rryu/20vqqJQngPJD6qJ8eA== -----END CERTIFICATE-----Generated at Mon Feb 9 21:25:44 2026 by rpki-client