This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/bfwMqHopIa91PWDh0eufHOEGfYk.roa File: bfwMqHopIa91PWDh0eufHOEGfYk.roa (raw, json) Hash identifier: yx7QNG/YIytWQT89B+iePjeCBMi+5EpFuYDvTUFgwHw= Subject key identifier: 6D:FC:0C:A8:7A:29:21:AF:75:3D:60:E1:D1:EB:9F:1C:E1:06:7D:89 Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56 Certificate serial: 019B7B3601BB6E7A01F768300A1F7722FBB8 Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/bfwMqHopIa91PWDh0eufHOEGfYk.roa Signing time: Thu 01 Jan 2026 20:18:15 +0000 ROA not before: Thu 01 Jan 2026 20:18:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49111 IP address blocks: 2a0e:9c0::/29 maxlen: 29 2a0e:98c0::/29 maxlen: 29 2a11:6700::/29 maxlen: 29 2a11:8c80::/29 maxlen: 29 2a11:8cc0::/29 maxlen: 29 2a12:1ec0::/29 maxlen: 29 2a12:1f40::/29 maxlen: 29 2a12:3240::/29 maxlen: 29 2a12:4680::/29 maxlen: 29 2a12:4980::/29 maxlen: 29 2a12:6980::/29 maxlen: 29 2a12:7d00::/29 maxlen: 29 2a12:9180::/29 maxlen: 29 2a12:be00::/29 maxlen: 29 2a12:da00::/29 maxlen: 29 2a12:e900::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.mft rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 16 Jan 2026 04:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:01:bb:6e:7a:01:f7:68:30:0a:1f:77:22:fb:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56 Validity Not Before: Jan 1 20:18:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6dfc0ca87a2921af753d60e1d1eb9f1ce1067d89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:e8:d8:79:95:8f:1f:54:68:cf:c2:89:ae:1e: c0:08:da:73:2f:73:70:00:21:fd:bb:bb:ea:d3:a3: ec:41:85:f3:93:f3:f4:09:6f:e2:66:d3:05:2a:25: d2:8b:20:b1:9e:c1:47:b0:2d:a6:5d:de:a0:9a:53: f0:f9:3c:65:ff:6c:35:73:85:b5:f7:d1:b8:57:53: 26:55:3e:33:63:ce:f1:7e:7d:57:86:d5:08:de:fc: d3:8d:94:4a:32:d8:3b:d4:c0:db:14:41:bc:fa:1e: 45:4f:c4:24:5f:18:b4:41:4c:61:67:da:e0:9b:69: a2:fc:bb:32:13:29:c2:c8:67:b9:e3:98:70:69:21: 43:12:ef:27:0d:6b:f7:51:e6:09:d0:02:b8:bb:8b: 86:cc:30:11:31:ec:56:90:7d:04:e9:7f:72:07:5c: b7:ca:72:4f:b4:b8:ab:90:c3:e9:e9:4c:89:9c:b2: f8:f5:0e:61:8d:d9:d2:e4:99:10:17:a7:27:e6:e8: dc:de:1f:8f:3b:d1:ff:a6:de:bf:0f:5f:90:01:1d: 02:5a:4c:58:6d:43:42:35:2f:1d:18:ed:7b:58:d0: 31:46:6c:28:7f:99:28:35:ae:ec:89:ae:12:c5:88: d6:5a:60:49:77:7c:08:b9:c4:d6:eb:cc:12:b1:38: 1b:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:FC:0C:A8:7A:29:21:AF:75:3D:60:E1:D1:EB:9F:1C:E1:06:7D:89 X509v3 Authority Key Identifier: keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/bfwMqHopIa91PWDh0eufHOEGfYk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:9c0::/29 2a0e:98c0::/29 2a11:6700::/29 2a11:8c80::/29 2a11:8cc0::/29 2a12:1ec0::/29 2a12:1f40::/29 2a12:3240::/29 2a12:4680::/29 2a12:4980::/29 2a12:6980::/29 2a12:7d00::/29 2a12:9180::/29 2a12:be00::/29 2a12:da00::/29 2a12:e900::/29 Signature Algorithm: sha256WithRSAEncryption 2d:44:01:30:8c:c0:ec:06:fc:4c:ef:8f:47:13:fb:08:6f:10: 26:ad:bc:58:36:1f:74:37:fd:9a:dc:9c:44:77:03:34:cc:78: 90:a9:95:7a:7a:a7:98:b7:0d:10:e8:da:41:95:a8:a4:11:ea: 8e:04:bb:30:d7:ae:5c:93:57:e9:b3:ce:02:9c:ed:78:da:1e: 0c:cf:3c:63:a1:2d:78:45:54:09:9f:1e:59:98:2a:71:ad:e3: c0:9e:02:ac:c4:41:54:76:d4:45:06:44:2e:f4:ae:4f:1c:a8: d8:e4:66:0b:bd:de:5c:2c:be:4a:8e:4c:e2:5f:2a:e0:1e:f9: 7c:94:ec:b2:36:06:0c:84:33:c1:88:cb:2a:e8:45:19:b6:dc: 00:ae:e7:b7:1e:99:6c:46:cf:46:5d:86:d1:44:63:02:d6:02: 29:d6:79:c0:17:70:f2:38:40:a4:41:8b:1d:4f:1c:3e:13:a8: 37:bf:66:57:7f:6f:e1:9b:5e:d1:df:92:11:64:6a:20:a6:07: c1:5b:89:9e:f5:42:25:ea:09:b2:cb:b5:c1:ee:92:3d:f2:70: d5:e0:89:3b:17:57:9b:3f:6b:bf:bb:24:2c:61:32:16:4f:2a: 5d:59:b1:3f:07:bb:38:8d:9a:1f:4e:03:d5:05:cf:e7:81:0e: 85:c4:9f:49 -----BEGIN CERTIFICATE----- MIIFaDCCBFCgAwIBAgISAZt7NgG7bnoB92gwCh93Ivu4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3NmJiNDhlOTNlOGEwMDU4YzVjNzJhODFhODc5OTQ1NTMw N2VlNTYwHhcNMjYwMTAxMjAxODE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZGZjMGNhODdhMjkyMWFmNzUzZDYwZTFkMWViOWYxY2UxMDY3ZDg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiOjYeZWPH1Roz8KJrh7ACNpzL3Nw ACH9u7vq06PsQYXzk/P0CW/iZtMFKiXSiyCxnsFHsC2mXd6gmlPw+Txl/2w1c4W1 99G4V1MmVT4zY87xfn1XhtUI3vzTjZRKMtg71MDbFEG8+h5FT8QkXxi0QUxhZ9rg m2mi/LsyEynCyGe545hwaSFDEu8nDWv3UeYJ0AK4u4uGzDARMexWkH0E6X9yB1y3 ynJPtLirkMPp6UyJnLL49Q5hjdnS5JkQF6cn5ujc3h+PO9H/pt6/D1+QAR0CWkxY bUNCNS8dGO17WNAxRmwof5koNa7sia4SxYjWWmBJd3wIucTW68wSsTgb3QIDAQAB o4ICdDCCAnAwHQYDVR0OBBYEFG38DKh6KSGvdT1g4dHrnxzhBn2JMB8GA1UdIwQY MBaAFNdrtI6T6KAFjFxyqBqHmUVTB+5WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMTJ1MGpwUG9vQVdNWEhLb0dvZVpSVk1IN2xZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9hNWJmYjYtNmExMC00ZmJjLWFmNDgt OGJmYmRkNDVjYjYyLzEvYmZ3TXFIb3BJYTkxUFdEaDBldWZIT0VHZllrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9hNWJmYjYtNmExMC00ZmJjLWFmNDgtOGJmYmRkNDVjYjYy LzEvMTJ1MGpwUG9vQVdNWEhLb0dvZVpSVk1IN2xZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGJBggrBgEFBQcBBwEB/wR6MHgwdgQCAAIwcAMFAyoOCcAD BQMqDpjAAwUDKhFnAAMFAyoRjIADBQMqEYzAAwUDKhIewAMFAyoSH0ADBQMqEjJA AwUDKhJGgAMFAyoSSYADBQMqEmmAAwUDKhJ9AAMFAyoSkYADBQMqEr4AAwUDKhLa AAMFAyoS6QAwDQYJKoZIhvcNAQELBQADggEBAC1EATCMwOwG/Ezvj0cT+whvECat vFg2H3Q3/ZrcnER3AzTMeJCplXp6p5i3DRDo2kGVqKQR6o4EuzDXrlyTV+mzzgKc 7XjaHgzPPGOhLXhFVAmfHlmYKnGt48CeAqzEQVR21EUGRC70rk8cqNjkZgu93lws vkqOTOJfKuAe+XyU7LI2BgyEM8GIyyroRRm23ACu57cemWxGz0ZdhtFEYwLWAinW ecAXcPI4QKRBix1PHD4TqDe/Zld/b+GbXtHfkhFkaiCmB8FbiZ71QiXqCbLLtcHu kj3ycNXgiTsXV5s/a7+7JCxhMhZPKl1ZsT8HuziNmh9OA9UFz+eBDoXEn0k= -----END CERTIFICATE-----Generated at Thu Jan 15 13:16:48 2026 by rpki-client