This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bVPAHIj80WWce7a3M1XCyh6YdoE.roa File: bVPAHIj80WWce7a3M1XCyh6YdoE.roa (raw, json) Hash identifier: sdPf2Cf+3VFGeiSN/Ap92x67gRehKgw0gxPfYcFUmLA= Subject key identifier: 6D:53:C0:1C:88:FC:D1:65:9C:7B:B6:B7:33:55:C2:CA:1E:98:76:81 Certificate issuer: /CN=6ca977f854c63dc9f97a18be7b13002121a5d384 Certificate serial: 019B7D5C7C9C7220551AE16E50BE2075B8C7 Authority key identifier: 6C:A9:77:F8:54:C6:3D:C9:F9:7A:18:BE:7B:13:00:21:21:A5:D3:84 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bKl3-FTGPcn5ehi-exMAISGl04Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bVPAHIj80WWce7a3M1XCyh6YdoE.roa Signing time: Fri 02 Jan 2026 06:19:31 +0000 ROA not before: Fri 02 Jan 2026 06:19:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199465 IP address blocks: 2a13:b487:1c00::/39 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.crl rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.mft rsync://rpki.ripe.net/repository/DEFAULT/bKl3-FTGPcn5ehi-exMAISGl04Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 23 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:7c:9c:72:20:55:1a:e1:6e:50:be:20:75:b8:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ca977f854c63dc9f97a18be7b13002121a5d384 Validity Not Before: Jan 2 06:19:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6d53c01c88fcd1659c7bb6b73355c2ca1e987681 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:fa:79:03:db:11:5d:92:4a:50:74:ef:fa:e5: e0:43:b0:77:a7:fa:47:57:ae:a4:11:86:02:24:90: 23:45:9d:c8:7e:89:c3:ba:e4:98:b7:8e:e5:3e:1b: 6e:cc:17:53:f8:63:c7:fb:8c:f5:29:92:44:d5:b6: 6c:1a:05:92:ed:65:1c:cc:67:ae:b2:b3:53:dd:ae: 06:ed:62:c4:16:40:5b:d0:2f:0e:49:25:57:d5:eb: c0:ec:53:cc:1a:88:9c:37:50:54:5d:27:32:a1:d6: c4:ee:a9:52:fa:88:bc:c7:57:b7:1c:64:7b:79:f7: e9:89:d6:8d:6e:bd:c7:33:51:a2:7e:d0:c4:7f:77: 1b:2e:0b:c5:af:ad:bb:8a:73:fd:96:cc:42:43:45: 94:ef:1e:ce:86:c9:1e:c7:1b:85:fd:45:97:b4:4f: 9a:b7:7b:1a:fe:1f:80:1f:e1:61:cc:ba:9f:36:ef: 74:69:e2:33:2d:a4:d1:57:d1:cb:1b:b2:42:78:c8: 63:ba:11:f1:3e:b2:02:ac:b6:29:db:9b:36:42:a5: ad:a7:b5:c4:14:c5:ba:38:ce:d2:37:32:5d:8e:d2: 6f:fb:3e:8b:d4:70:db:01:1e:20:0a:99:fc:e5:7e: be:72:3e:5f:fd:18:b5:97:0b:00:69:fd:2a:8a:07: 8e:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:53:C0:1C:88:FC:D1:65:9C:7B:B6:B7:33:55:C2:CA:1E:98:76:81 X509v3 Authority Key Identifier: keyid:6C:A9:77:F8:54:C6:3D:C9:F9:7A:18:BE:7B:13:00:21:21:A5:D3:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bKl3-FTGPcn5ehi-exMAISGl04Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bVPAHIj80WWce7a3M1XCyh6YdoE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a13:b487:1c00::/39 Signature Algorithm: sha256WithRSAEncryption 46:e6:25:7c:f0:09:86:df:23:d2:88:25:9a:b1:ce:e0:f9:4c: 63:2f:bb:d1:db:8e:a6:11:75:e3:1b:22:a0:0a:4d:b3:ea:fa: 00:41:ff:78:3a:f1:e9:6a:2c:52:b9:0f:92:35:bf:3d:20:8a: ed:f1:0c:84:82:4e:77:2e:fd:33:a4:e7:c0:f8:58:41:00:56: ef:e9:f1:3d:d0:b2:9b:dd:d5:20:d0:8f:b9:cd:35:6c:39:61: c3:bf:b9:37:25:c3:58:75:c3:76:b2:b7:7a:50:e0:36:fb:be: 9b:59:8a:f4:7f:7d:de:da:9a:aa:57:68:e0:21:6e:a2:86:e6: aa:db:a1:52:56:a7:79:3d:32:08:3b:6c:51:40:f8:df:36:df: b2:93:3a:a8:38:84:8d:c3:09:b1:c8:b0:ee:fc:1c:42:e2:3f: c1:c0:8b:2e:b8:ee:02:24:08:58:b4:7a:0c:c2:54:a7:e0:9a: 95:0b:e6:08:75:74:a8:60:0b:b9:69:11:15:8c:6f:98:0e:c6: 6f:f0:b6:76:19:df:c8:20:19:8a:b9:16:83:99:f3:ae:35:92: 82:aa:26:a9:85:57:2c:22:0f:72:b2:b2:4e:02:97:04:47:50: 56:68:7b:37:5c:46:b8:b6:be:70:c4:2d:a2:20:6f:61:45:43: c1:40:68:97 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt9XHycciBVGuFuUL4gdbjHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjYTk3N2Y4NTRjNjNkYzlmOTdhMThiZTdiMTMwMDIxMjFh NWQzODQwHhcNMjYwMTAyMDYxOTMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZDUzYzAxYzg4ZmNkMTY1OWM3YmI2YjczMzU1YzJjYTFlOTg3NjgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo/p5A9sRXZJKUHTv+uXgQ7B3p/pH V66kEYYCJJAjRZ3IfonDuuSYt47lPhtuzBdT+GPH+4z1KZJE1bZsGgWS7WUczGeu srNT3a4G7WLEFkBb0C8OSSVX1evA7FPMGoicN1BUXScyodbE7qlS+oi8x1e3HGR7 effpidaNbr3HM1GiftDEf3cbLgvFr627inP9lsxCQ0WU7x7OhskexxuF/UWXtE+a t3sa/h+AH+FhzLqfNu90aeIzLaTRV9HLG7JCeMhjuhHxPrICrLYp25s2QqWtp7XE FMW6OM7SNzJdjtJv+z6L1HDbAR4gCpn85X6+cj5f/Ri1lwsAaf0qigeOKQIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFG1TwByI/NFlnHu2tzNVwsoemHaBMB8GA1UdIwQY MBaAFGypd/hUxj3J+XoYvnsTACEhpdOEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYktsMy1GVEdQY241ZWhpLWV4TUFJU0dsMDRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS8wOWNjYjQtMjQ4My00YmE3LTk2MzQt ZDZhNTk1MGNhZGYyLzEvYlZQQUhJajgwV1djZTdhM00xWEN5aDZZZG9FLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS8wOWNjYjQtMjQ4My00YmE3LTk2MzQtZDZhNTk1MGNhZGYy LzEvYktsMy1GVEdQY241ZWhpLWV4TUFJU0dsMDRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYBKhO0hxww DQYJKoZIhvcNAQELBQADggEBAEbmJXzwCYbfI9KIJZqxzuD5TGMvu9HbjqYRdeMb IqAKTbPq+gBB/3g68elqLFK5D5I1vz0giu3xDISCTncu/TOk58D4WEEAVu/p8T3Q spvd1SDQj7nNNWw5YcO/uTclw1h1w3ayt3pQ4Db7vptZivR/fd7amqpXaOAhbqKG 5qrboVJWp3k9Mgg7bFFA+N8237KTOqg4hI3DCbHIsO78HELiP8HAiy647gIkCFi0 egzCVKfgmpUL5gh1dKhgC7lpERWMb5gOxm/wtnYZ38ggGYq5FoOZ8641koKqJqmF VywiD3Kysk4ClwRHUFZoezdcRri2vnDELaIgb2FFQ8FAaJc= -----END CERTIFICATE-----Generated at Thu Jan 22 06:17:08 2026 by rpki-client