This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/BFdJc-7yBxarSw_UwCSCI2_nZzY.roa File: BFdJc-7yBxarSw_UwCSCI2_nZzY.roa (raw, json) Hash identifier: Mfwh/Ri4oMFWHDOwaf0KLrBxq/7lyDjZHbminSO7kww= Subject key identifier: 04:57:49:73:EE:F2:07:16:AB:4B:0F:D4:C0:24:82:23:6F:E7:67:36 Certificate issuer: /CN=c74c60adeb0cd5768cf756f562b1b5cc5b9c180a Certificate serial: 019B79EC0D2CF1845C011A2F1607964A0468 Authority key identifier: C7:4C:60:AD:EB:0C:D5:76:8C:F7:56:F5:62:B1:B5:CC:5B:9C:18:0A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/BFdJc-7yBxarSw_UwCSCI2_nZzY.roa Signing time: Thu 01 Jan 2026 14:17:51 +0000 ROA not before: Thu 01 Jan 2026 14:17:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216395 IP address blocks: 2a05:4140:7::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.crl rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.mft rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:0d:2c:f1:84:5c:01:1a:2f:16:07:96:4a:04:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c74c60adeb0cd5768cf756f562b1b5cc5b9c180a Validity Not Before: Jan 1 14:17:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=04574973eef20716ab4b0fd4c02482236fe76736 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:97:f4:c8:92:c8:a8:b2:4f:75:53:c0:a3:03: 67:cb:29:57:00:de:2b:81:69:91:4c:e7:67:02:d5: 17:57:1d:dd:ea:6c:30:72:9a:3c:ca:7d:15:73:8e: da:86:3d:ed:c8:71:62:5e:81:fb:41:97:fb:fa:b7: f4:95:5a:b4:fe:06:d4:f5:be:2a:50:0e:02:6c:90: b5:47:a6:c0:fb:71:83:ee:8a:c8:77:2a:0c:ba:51: 77:2d:db:dc:fb:e1:04:6f:43:85:89:f2:09:62:4b: 29:7b:07:86:25:b4:f4:4b:6b:9c:8b:c5:eb:ec:3d: 1f:f4:12:c4:2c:95:e5:37:e2:25:f0:4c:a0:f6:3e: 3f:6c:6d:fc:a8:5b:59:c7:ea:93:43:2d:7d:e0:22: d8:78:e1:c9:1f:36:42:12:8a:58:78:96:45:da:f1: 4a:a4:dd:ae:0f:d5:1b:30:bd:3e:cc:94:f6:b3:df: e2:da:ac:e2:df:b0:e1:21:3e:cf:31:39:34:a7:95: c0:9e:b8:90:9b:16:5e:59:4b:54:61:da:fb:77:c7: bc:12:b5:10:69:9b:32:93:95:17:c5:8e:5e:52:d0: 0b:62:e4:73:32:93:9c:74:c4:7b:25:93:49:81:fd: ad:de:bf:20:52:be:3b:7c:bb:cd:4f:15:14:e2:b2: 4a:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:57:49:73:EE:F2:07:16:AB:4B:0F:D4:C0:24:82:23:6F:E7:67:36 X509v3 Authority Key Identifier: keyid:C7:4C:60:AD:EB:0C:D5:76:8C:F7:56:F5:62:B1:B5:CC:5B:9C:18:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/BFdJc-7yBxarSw_UwCSCI2_nZzY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:4140:7::/48 Signature Algorithm: sha256WithRSAEncryption 26:c9:3b:7e:b4:e0:31:37:d5:e2:cc:07:93:24:e5:c2:b9:94: 10:74:1b:bc:1f:6e:68:9f:2e:e0:4a:a3:11:00:10:23:52:06: 2c:7a:18:18:82:be:0b:57:5c:76:89:87:f0:aa:d3:6e:c9:4e: 63:db:9d:67:67:36:7e:f7:58:48:db:29:38:66:c7:5e:76:27: ef:6b:d3:cd:b9:9d:95:43:65:1c:6d:af:79:d2:fa:69:44:98: 2c:b3:fa:77:a4:9b:9e:ae:c7:81:f0:46:ac:5a:59:42:e1:c2: 26:b6:f0:88:cc:a7:1f:3f:e9:9d:7b:a3:91:11:80:37:ef:a0: aa:d5:14:98:e6:be:6b:e7:0a:75:86:14:b4:7b:79:ac:c8:5f: 69:37:16:8b:25:43:6e:44:13:f3:d6:a0:ed:dc:fb:7e:52:e8: 0c:59:c9:02:60:f9:a3:03:07:34:85:4c:57:f3:88:fa:30:71: 41:d9:99:89:0e:50:d7:64:29:76:a5:79:c4:a4:11:29:e6:9d: f1:82:aa:55:80:7b:3f:6f:8f:ad:e9:1e:15:2d:95:30:1d:59: c6:b3:6e:9e:f0:c5:c7:52:db:98:b8:18:95:3e:b7:e7:72:3c: 3a:04:e1:c7:25:0a:85:ef:e5:4f:18:a9:b3:c9:c4:c9:26:2a: 2f:b4:65:d8 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt57A0s8YRcARovFgeWSgRoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3NGM2MGFkZWIwY2Q1NzY4Y2Y3NTZmNTYyYjFiNWNjNWI5 YzE4MGEwHhcNMjYwMTAxMTQxNzUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNDU3NDk3M2VlZjIwNzE2YWI0YjBmZDRjMDI0ODIyMzZmZTc2NzM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxZf0yJLIqLJPdVPAowNnyylXAN4r gWmRTOdnAtUXVx3d6mwwcpo8yn0Vc47ahj3tyHFiXoH7QZf7+rf0lVq0/gbU9b4q UA4CbJC1R6bA+3GD7orIdyoMulF3Ldvc++EEb0OFifIJYkspeweGJbT0S2uci8Xr 7D0f9BLELJXlN+Il8Eyg9j4/bG38qFtZx+qTQy194CLYeOHJHzZCEopYeJZF2vFK pN2uD9UbML0+zJT2s9/i2qzi37DhIT7PMTk0p5XAnriQmxZeWUtUYdr7d8e8ErUQ aZsyk5UXxY5eUtALYuRzMpOcdMR7JZNJgf2t3r8gUr47fLvNTxUU4rJK/QIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFARXSXPu8gcWq0sP1MAkgiNv52c2MB8GA1UdIwQY MBaAFMdMYK3rDNV2jPdW9WKxtcxbnBgKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveDB4Z3Jlc00xWGFNOTFiMVlyRzF6RnVjR0FvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi9hZGI2NWMtZjZmNy00NDk1LWJhMjMt ODg1ZTg0ZTc1MTJlLzEvQkZkSmMtN3lCeGFyU3dfVXdDU0NJMl9uWnpZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZi9hZGI2NWMtZjZmNy00NDk1LWJhMjMtODg1ZTg0ZTc1MTJl LzEveDB4Z3Jlc00xWGFNOTFiMVlyRzF6RnVjR0FvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgVBQAAH MA0GCSqGSIb3DQEBCwUAA4IBAQAmyTt+tOAxN9XizAeTJOXCuZQQdBu8H25ony7g SqMRABAjUgYsehgYgr4LV1x2iYfwqtNuyU5j251nZzZ+91hI2yk4Zsdedifva9PN uZ2VQ2Ucba950vppRJgss/p3pJuerseB8EasWllC4cImtvCIzKcfP+mde6OREYA3 76Cq1RSY5r5r5wp1hhS0e3msyF9pNxaLJUNuRBPz1qDt3Pt+UugMWckCYPmjAwc0 hUxX84j6MHFB2ZmJDlDXZCl2pXnEpBEp5p3xgqpVgHs/b4+t6R4VLZUwHVnGs26e 8MXHUtuYuBiVPrfncjw6BOHHJQqF7+VPGKmzycTJJiovtGXY -----END CERTIFICATE-----Generated at Wed Jan 21 16:15:48 2026 by rpki-client