This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/RbdrFxMpPdVSzRp_C-Rku8BRui4.roa File: RbdrFxMpPdVSzRp_C-Rku8BRui4.roa (raw, json) Hash identifier: i6eqmLVwiqXYOO52UX4iIvTthJpungIdi65hhhhuuR0= Subject key identifier: 45:B7:6B:17:13:29:3D:D5:52:CD:1A:7F:0B:E4:64:BB:C0:51:BA:2E Certificate issuer: /CN=6ca977f854c63dc9f97a18be7b13002121a5d384 Certificate serial: 019B7D5C80C682298F688B0A363C7C86CF34 Authority key identifier: 6C:A9:77:F8:54:C6:3D:C9:F9:7A:18:BE:7B:13:00:21:21:A5:D3:84 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bKl3-FTGPcn5ehi-exMAISGl04Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/RbdrFxMpPdVSzRp_C-Rku8BRui4.roa Signing time: Fri 02 Jan 2026 06:19:32 +0000 ROA not before: Fri 02 Jan 2026 06:19:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207142 IP address blocks: 2a13:b483::/32 maxlen: 48 2a13:b484::/31 maxlen: 48 2a13:b486::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.crl rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.mft rsync://rpki.ripe.net/repository/DEFAULT/bKl3-FTGPcn5ehi-exMAISGl04Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 23 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:80:c6:82:29:8f:68:8b:0a:36:3c:7c:86:cf:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ca977f854c63dc9f97a18be7b13002121a5d384 Validity Not Before: Jan 2 06:19:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=45b76b1713293dd552cd1a7f0be464bbc051ba2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:27:ab:4e:04:f9:76:45:ff:dd:61:ab:17:f8: c5:d8:3b:bb:ec:d7:19:c9:81:0b:77:bd:0d:f6:50: a7:1e:53:10:e2:d1:21:ff:60:ef:82:9b:2a:d8:04: bd:c8:51:7d:91:0c:6b:04:0d:66:30:ad:f5:87:21: 9d:fc:0d:61:e4:92:e6:ca:bd:73:a9:91:f5:ae:e1: f3:fc:87:d6:af:5c:ab:09:09:32:46:0b:e8:ea:d9: 85:e9:a1:bd:da:11:8a:b0:f0:d9:bd:f5:48:c4:95: 51:f3:8d:39:a1:67:b7:61:0f:6e:8b:59:f7:c1:a8: 61:61:9a:b9:3c:fa:21:ed:4e:5e:4f:49:50:5b:37: 53:80:7d:a6:08:6b:e2:1f:5b:f8:23:59:33:c2:78: 4c:b0:50:a7:5f:0f:e5:84:58:b1:45:7e:1d:a3:c0: 82:f7:20:fc:e1:aa:9c:e6:0c:a9:2a:8e:e4:27:1f: 53:82:57:f3:0e:f4:55:24:57:11:02:c8:ac:e0:04: 5a:d9:22:c6:0c:05:cb:f4:58:15:4f:04:5c:3b:7a: b8:d5:99:ca:29:28:e4:8e:e9:c7:ed:9e:4b:1d:4c: 6f:3e:48:ff:44:d8:e8:96:92:6e:26:21:f6:e8:b5: fa:28:10:be:b0:f2:df:5c:63:12:aa:c1:33:b6:4c: a5:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:B7:6B:17:13:29:3D:D5:52:CD:1A:7F:0B:E4:64:BB:C0:51:BA:2E X509v3 Authority Key Identifier: keyid:6C:A9:77:F8:54:C6:3D:C9:F9:7A:18:BE:7B:13:00:21:21:A5:D3:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bKl3-FTGPcn5ehi-exMAISGl04Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/RbdrFxMpPdVSzRp_C-Rku8BRui4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a13:b483::-2a13:b486:ffff:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 20:c9:ad:69:e9:80:e9:0b:30:99:84:88:52:62:90:8c:b7:64: 28:c9:2d:6d:98:1a:44:8e:6b:8a:b9:5a:2a:50:a9:28:c1:79: 07:2e:04:43:e3:2e:a0:a8:cd:00:ef:0f:41:1b:91:59:cc:81: 82:56:de:56:a7:8f:53:5e:9c:39:9f:1b:a2:b1:5d:20:f5:b1: ef:7f:cb:10:10:6e:42:2a:d0:2f:0e:f7:df:67:26:df:bb:00: a2:98:3f:9e:41:b6:dc:b4:4a:10:73:64:79:68:e6:ae:cb:7f: 82:16:82:f9:7a:9f:4f:b5:63:a3:54:c7:df:3e:2d:0e:6d:c8: d2:0a:75:d6:79:af:f4:e0:ae:c2:94:b3:ef:d9:62:4f:70:9f: dc:0c:5b:36:c7:aa:47:a9:fe:29:32:6b:2c:11:86:cb:e7:0e: e4:e3:de:5b:a9:03:a5:79:32:6f:2e:96:d6:21:41:df:5a:0c: 2b:d4:47:f5:40:56:80:29:1d:17:cd:ef:14:63:6c:c2:27:dc: a3:40:e1:7e:f3:c4:a6:1b:b5:10:63:be:ab:8a:48:81:b2:85: 47:e6:ab:ac:55:0c:ed:75:1b:7f:df:d4:a8:21:eb:70:2e:c4: 95:ff:7f:fd:5c:5a:73:52:89:d0:0e:f7:08:4c:96:38:94:8b: 01:91:d3:f3 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgISAZt9XIDGgimPaIsKNjx8hs80MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjYTk3N2Y4NTRjNjNkYzlmOTdhMThiZTdiMTMwMDIxMjFh NWQzODQwHhcNMjYwMTAyMDYxOTMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NWI3NmIxNzEzMjkzZGQ1NTJjZDFhN2YwYmU0NjRiYmMwNTFiYTJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuCerTgT5dkX/3WGrF/jF2Du77NcZ yYELd70N9lCnHlMQ4tEh/2Dvgpsq2AS9yFF9kQxrBA1mMK31hyGd/A1h5JLmyr1z qZH1ruHz/IfWr1yrCQkyRgvo6tmF6aG92hGKsPDZvfVIxJVR8405oWe3YQ9ui1n3 wahhYZq5PPoh7U5eT0lQWzdTgH2mCGviH1v4I1kzwnhMsFCnXw/lhFixRX4do8CC 9yD84aqc5gypKo7kJx9TglfzDvRVJFcRAsis4ARa2SLGDAXL9FgVTwRcO3q41ZnK KSjkjunH7Z5LHUxvPkj/RNjolpJuJiH26LX6KBC+sPLfXGMSqsEztkyl1wIDAQAB o4ICEzCCAg8wHQYDVR0OBBYEFEW3axcTKT3VUs0afwvkZLvAUbouMB8GA1UdIwQY MBaAFGypd/hUxj3J+XoYvnsTACEhpdOEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYktsMy1GVEdQY241ZWhpLWV4TUFJU0dsMDRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS8wOWNjYjQtMjQ4My00YmE3LTk2MzQt ZDZhNTk1MGNhZGYyLzEvUmJkckZ4TXBQZFZTelJwX0MtUmt1OEJSdWk0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS8wOWNjYjQtMjQ4My00YmE3LTk2MzQtZDZhNTk1MGNhZGYy LzEvYktsMy1GVEdQY241ZWhpLWV4TUFJU0dsMDRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCkGCCsGAQUFBwEHAQH/BBowGDAWBAIAAjAQMA4DBQAqE7SD AwUAKhO0hjANBgkqhkiG9w0BAQsFAAOCAQEAIMmtaemA6QswmYSIUmKQjLdkKMkt bZgaRI5rirlaKlCpKMF5By4EQ+MuoKjNAO8PQRuRWcyBglbeVqePU16cOZ8borFd IPWx73/LEBBuQirQLw7332cm37sAopg/nkG23LRKEHNkeWjmrst/ghaC+XqfT7Vj o1TH3z4tDm3I0gp11nmv9OCuwpSz79liT3Cf3AxbNseqR6n+KTJrLBGGy+cO5OPe W6kDpXkyby6W1iFB31oMK9RH9UBWgCkdF83vFGNswifco0DhfvPEphu1EGO+q4pI gbKFR+arrFUM7XUbf9/UqCHrcC7Elf9//Vxac1KJ0A73CEyWOJSLAZHT8w== -----END CERTIFICATE-----Generated at Thu Jan 22 06:16:08 2026 by rpki-client