This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/f630a8-7179-4005-85ef-9b6db1e72088/1/bXExQtE2rsssLcHm9zFscNvg6uU.roa File: bXExQtE2rsssLcHm9zFscNvg6uU.roa (raw, json) Hash identifier: +TlfvfkpHkxj8edMDvPQZBfnz+Yh21yBEM7LNlWsTfU= Subject key identifier: 6D:71:31:42:D1:36:AE:CB:2C:2D:C1:E6:F7:31:6C:70:DB:E0:EA:E5 Certificate issuer: /CN=0ca51990ce0c89f0d210609e67e9e807565c131f Certificate serial: 019B36E4E72CEF96277EB2D44C8630624FD4 Authority key identifier: 0C:A5:19:90:CE:0C:89:F0:D2:10:60:9E:67:E9:E8:07:56:5C:13:1F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DKUZkM4MifDSEGCeZ-noB1ZcEx8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/f630a8-7179-4005-85ef-9b6db1e72088/1/bXExQtE2rsssLcHm9zFscNvg6uU.roa Signing time: Fri 19 Dec 2025 13:55:29 +0000 ROA not before: Fri 19 Dec 2025 13:55:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 49432 IP address blocks: 2001:678:118c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/f630a8-7179-4005-85ef-9b6db1e72088/1/DKUZkM4MifDSEGCeZ-noB1ZcEx8.crl rsync://rpki.ripe.net/repository/DEFAULT/16/f630a8-7179-4005-85ef-9b6db1e72088/1/DKUZkM4MifDSEGCeZ-noB1ZcEx8.mft rsync://rpki.ripe.net/repository/DEFAULT/DKUZkM4MifDSEGCeZ-noB1ZcEx8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 11:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:e4:e7:2c:ef:96:27:7e:b2:d4:4c:86:30:62:4f:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ca51990ce0c89f0d210609e67e9e807565c131f Validity Not Before: Dec 19 13:55:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=6d713142d136aecb2c2dc1e6f7316c70dbe0eae5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:72:55:9a:de:8b:d0:60:08:3c:95:bf:94:2a: bf:78:06:ad:3b:2e:91:6c:d9:65:2e:e2:ab:48:e8: df:ac:78:e0:d9:b6:cc:ee:ff:a3:93:fd:30:2f:61: 87:b0:51:03:b5:d7:b7:c8:88:30:18:96:20:4b:6a: ef:d6:83:4e:6d:8d:cb:20:7b:92:8b:86:d9:7e:0f: c0:89:c4:0d:e2:6a:80:82:37:77:10:de:0e:ee:c9: 8b:35:cb:2a:b3:12:ac:a8:20:79:1c:c1:fc:03:f5: 61:49:af:7d:4b:ad:51:2b:6f:29:fa:f6:6b:c5:dd: 1c:5e:89:ad:7e:11:5e:17:2d:7c:ba:10:85:be:ba: 38:a2:2b:93:c6:0b:dc:e0:b1:40:9e:2e:25:10:7e: 35:af:60:bc:f7:51:1b:e5:98:ce:73:ef:0a:7a:68: ae:5d:33:62:98:6b:db:21:27:33:a9:97:97:46:25: 41:57:29:ba:fe:46:73:66:88:00:a9:d9:f2:e0:39: 0d:ed:81:47:1b:39:a8:40:a8:09:54:80:1c:5e:84: 1b:ac:5f:45:26:74:66:35:ec:f1:37:c5:5f:24:69: ce:ee:10:13:47:aa:ab:96:df:bd:16:ac:ce:35:aa: 86:79:7f:6f:e8:de:9e:db:1e:82:e6:d5:ea:ab:55: 81:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:71:31:42:D1:36:AE:CB:2C:2D:C1:E6:F7:31:6C:70:DB:E0:EA:E5 X509v3 Authority Key Identifier: keyid:0C:A5:19:90:CE:0C:89:F0:D2:10:60:9E:67:E9:E8:07:56:5C:13:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DKUZkM4MifDSEGCeZ-noB1ZcEx8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/f630a8-7179-4005-85ef-9b6db1e72088/1/bXExQtE2rsssLcHm9zFscNvg6uU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/f630a8-7179-4005-85ef-9b6db1e72088/1/DKUZkM4MifDSEGCeZ-noB1ZcEx8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:118c::/48 Signature Algorithm: sha256WithRSAEncryption 54:3b:f1:7f:27:75:a6:0a:49:e0:3d:41:13:53:8f:b9:3e:8b: 46:99:79:a1:6c:1d:2d:4c:60:05:4a:bd:d0:b0:60:85:8d:14: 3c:41:c2:57:1e:34:cf:01:84:16:75:d3:ae:14:1f:85:a7:3f: fc:52:c1:0c:44:c9:7e:f4:6d:12:f9:91:e0:27:ec:4b:96:64: 5a:60:f4:50:4a:9d:94:78:53:8a:84:a4:9f:d9:af:eb:d5:a9: 70:d0:63:b1:44:9a:93:ac:32:9e:c1:9f:04:40:ae:31:14:64: 26:f8:cc:80:36:c8:df:8a:fc:39:4c:23:11:88:bc:41:8f:17: 79:06:84:b0:d9:00:b1:5b:16:db:1f:39:35:17:dc:a8:33:58: 57:b0:3a:5d:32:f2:48:ad:6a:fc:eb:46:02:26:ef:24:a9:e1: 1a:ae:17:8d:e2:7a:58:27:af:ef:c5:d4:91:53:af:f5:7d:55: a1:07:1e:f4:02:21:37:3d:9a:ff:f1:23:a9:e1:f5:2d:f9:4b: 5c:fd:83:0b:03:00:ae:b0:d8:e1:de:70:5a:e9:9e:73:1f:24: f3:dd:43:e5:26:d0:96:8a:03:82:e3:07:e1:0f:a7:44:e4:c2: 70:2c:3e:d3:48:85:f9:0a:bd:63:0f:51:78:07:00:15:ec:4f: c7:29:0f:a2 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZs25Ocs75YnfrLUTIYwYk/UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjYTUxOTkwY2UwYzg5ZjBkMjEwNjA5ZTY3ZTllODA3NTY1 YzEzMWYwHhcNMjUxMjE5MTM1NTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZDcxMzE0MmQxMzZhZWNiMmMyZGMxZTZmNzMxNmM3MGRiZTBlYWU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsXJVmt6L0GAIPJW/lCq/eAatOy6R bNllLuKrSOjfrHjg2bbM7v+jk/0wL2GHsFEDtde3yIgwGJYgS2rv1oNObY3LIHuS i4bZfg/AicQN4mqAgjd3EN4O7smLNcsqsxKsqCB5HMH8A/VhSa99S61RK28p+vZr xd0cXomtfhFeFy18uhCFvro4oiuTxgvc4LFAni4lEH41r2C891Eb5ZjOc+8Kemiu XTNimGvbISczqZeXRiVBVym6/kZzZogAqdny4DkN7YFHGzmoQKgJVIAcXoQbrF9F JnRmNezxN8VfJGnO7hATR6qrlt+9FqzONaqGeX9v6N6e2x6C5tXqq1WBtQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFG1xMULRNq7LLC3B5vcxbHDb4OrlMB8GA1UdIwQY MBaAFAylGZDODInw0hBgnmfp6AdWXBMfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvREtVWmtNNE1pZkRTRUdDZVotbm9CMVpjRXg4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9mNjMwYTgtNzE3OS00MDA1LTg1ZWYt OWI2ZGIxZTcyMDg4LzEvYlhFeFF0RTJyc3NzTGNIbTl6RnNjTnZnNnVVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi9mNjMwYTgtNzE3OS00MDA1LTg1ZWYtOWI2ZGIxZTcyMDg4 LzEvREtVWmtNNE1pZkRTRUdDZVotbm9CMVpjRXg4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeBGM MA0GCSqGSIb3DQEBCwUAA4IBAQBUO/F/J3WmCkngPUETU4+5PotGmXmhbB0tTGAF Sr3QsGCFjRQ8QcJXHjTPAYQWddOuFB+Fpz/8UsEMRMl+9G0S+ZHgJ+xLlmRaYPRQ Sp2UeFOKhKSf2a/r1alw0GOxRJqTrDKewZ8EQK4xFGQm+MyANsjfivw5TCMRiLxB jxd5BoSw2QCxWxbbHzk1F9yoM1hXsDpdMvJIrWr860YCJu8kqeEarheN4npYJ6/v xdSRU6/1fVWhBx70AiE3PZr/8SOp4fUt+Utc/YMLAwCusNjh3nBa6Z5zHyTz3UPl JtCWigOC4wfhD6dE5MJwLD7TSIX5Cr1jD1F4BwAV7E/HKQ+i -----END CERTIFICATE-----Generated at Fri Dec 26 17:23:30 2025 by rpki-client