This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/BKueLsOieGAX9FvG3x_kc_Syo6Q.roa File: BKueLsOieGAX9FvG3x_kc_Syo6Q.roa (raw, json) Hash identifier: +P5r5MnLAE+8y6qPH4D2f3RLLlxkb9rqjIzieNdiiu8= Subject key identifier: 04:AB:9E:2E:C3:A2:78:60:17:F4:5B:C6:DF:1F:E4:73:F4:B2:A3:A4 Certificate issuer: /CN=fdd6ee010b990a33735756b4fe2f3d3c2671dd9d Certificate serial: 019B7E38BAD15ADF7EA215E6FB53834BB33E Authority key identifier: FD:D6:EE:01:0B:99:0A:33:73:57:56:B4:FE:2F:3D:3C:26:71:DD:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/BKueLsOieGAX9FvG3x_kc_Syo6Q.roa Signing time: Fri 02 Jan 2026 10:20:05 +0000 ROA not before: Fri 02 Jan 2026 10:20:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213663 IP address blocks: 2a13:a5c3:f100::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.mft rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 05 Jan 2026 18:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:ba:d1:5a:df:7e:a2:15:e6:fb:53:83:4b:b3:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fdd6ee010b990a33735756b4fe2f3d3c2671dd9d Validity Not Before: Jan 2 10:20:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=04ab9e2ec3a2786017f45bc6df1fe473f4b2a3a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:67:c7:a4:0a:4e:f0:a9:52:c7:f3:9e:1e:93: 5d:8a:37:87:60:94:c1:fa:cf:67:34:6e:52:e6:d7: c6:fe:13:e5:c0:40:b9:87:2e:ec:1e:06:53:b7:24: 8e:84:d4:17:e6:35:f6:49:ab:e8:84:39:67:8a:f8: 6f:84:6f:f7:8b:7c:11:8d:89:9a:b2:a6:b4:ce:2d: ba:05:09:40:2e:92:a7:c7:c8:38:70:c3:81:6e:51: 99:2f:5e:87:b7:a3:b1:94:c7:d4:16:b4:c2:7a:03: 80:f3:27:f0:c1:4c:a1:e9:3c:04:76:1b:b3:e8:14: d1:64:31:c4:3e:10:b2:b0:23:ea:e5:0d:c1:c1:fc: 27:a6:63:d4:dc:15:47:27:76:4f:c8:9e:17:26:3a: 4f:b7:4e:3f:81:68:d7:08:37:8a:1d:42:41:71:c5: 53:ca:6c:c0:fa:ce:dc:11:1d:a7:74:9a:57:45:18: b7:1f:68:0e:dc:3d:1c:28:d6:76:f5:9a:19:91:19: e4:f3:25:2a:02:9d:64:0a:ce:f0:49:82:87:7e:11: e5:cd:26:31:7b:4a:29:96:9e:6f:62:6d:1d:b4:ad: 35:01:a6:34:f2:4f:b3:be:cc:fc:c0:66:e3:48:1b: 2b:ab:9f:46:45:15:fc:66:fc:a6:c8:00:be:b1:ea: 9d:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:AB:9E:2E:C3:A2:78:60:17:F4:5B:C6:DF:1F:E4:73:F4:B2:A3:A4 X509v3 Authority Key Identifier: keyid:FD:D6:EE:01:0B:99:0A:33:73:57:56:B4:FE:2F:3D:3C:26:71:DD:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/BKueLsOieGAX9FvG3x_kc_Syo6Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a13:a5c3:f100::/40 Signature Algorithm: sha256WithRSAEncryption 31:8e:af:d8:97:74:e8:1b:82:d5:98:09:cd:ac:bb:e8:10:6c: ae:cd:bb:4e:a2:df:83:a7:0b:7e:b6:25:bc:49:58:5f:ea:96: 52:de:f1:ee:fe:ad:bb:de:8a:f8:7d:18:37:8c:22:f1:18:b2: 88:2d:6b:81:22:f5:57:20:2b:4a:ab:c9:27:a0:62:86:07:e8: 8c:72:95:8f:3b:1c:ce:09:6c:43:3e:43:db:20:45:c6:70:ff: 6c:bb:93:9c:88:32:51:ba:e4:83:4c:ee:1f:a8:f2:74:45:2f: eb:fc:b8:83:f6:d4:1e:d6:03:11:82:d6:80:a3:43:a6:73:c8: 84:09:b8:b0:a0:bf:27:88:69:d0:a0:2c:63:14:4e:0d:c5:2e: 4c:51:29:2c:dc:6d:a8:71:ae:c9:23:ce:85:f4:32:68:a4:a9: fc:b5:52:95:37:0a:a9:0f:31:75:fe:d7:e4:69:08:d2:b6:85: b9:69:df:0f:34:8f:ec:70:25:11:9e:ec:19:be:aa:99:09:77: 02:3f:f3:7e:2b:10:26:27:fb:30:f2:19:d9:f6:12:44:79:ba: 9d:86:cc:7d:e8:99:64:5a:84:96:ec:ea:d2:64:14:db:ea:7c: 11:63:44:53:51:20:6f:9d:4e:c7:20:42:69:90:63:d2:0a:a5: 9a:21:bf:14 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt+OLrRWt9+ohXm+1ODS7M+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZkZDZlZTAxMGI5OTBhMzM3MzU3NTZiNGZlMmYzZDNjMjY3 MWRkOWQwHhcNMjYwMTAyMTAyMDA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNGFiOWUyZWMzYTI3ODYwMTdmNDViYzZkZjFmZTQ3M2Y0YjJhM2E0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo2fHpApO8KlSx/OeHpNdijeHYJTB +s9nNG5S5tfG/hPlwEC5hy7sHgZTtySOhNQX5jX2SavohDlnivhvhG/3i3wRjYma sqa0zi26BQlALpKnx8g4cMOBblGZL16Ht6OxlMfUFrTCegOA8yfwwUyh6TwEdhuz 6BTRZDHEPhCysCPq5Q3BwfwnpmPU3BVHJ3ZPyJ4XJjpPt04/gWjXCDeKHUJBccVT ymzA+s7cER2ndJpXRRi3H2gO3D0cKNZ29ZoZkRnk8yUqAp1kCs7wSYKHfhHlzSYx e0oplp5vYm0dtK01AaY08k+zvsz8wGbjSBsrq59GRRX8ZvymyAC+seqd9QIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFASrni7DonhgF/Rbxt8f5HP0sqOkMB8GA1UdIwQY MBaAFP3W7gELmQozc1dWtP4vPTwmcd2dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX2RidUFRdVpDak56VjFhMF9pODlQQ1p4M1owLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS8yZDFhMzUtZmY4YS00NmI0LThjNDct NjNjNzIxY2YxZjU2LzEvQkt1ZUxzT2llR0FYOUZ2RzN4X2tjX1N5bzZRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS8yZDFhMzUtZmY4YS00NmI0LThjNDctNjNjNzIxY2YxZjU2 LzEvX2RidUFRdVpDak56VjFhMF9pODlQQ1p4M1owLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKhOlw/Ew DQYJKoZIhvcNAQELBQADggEBADGOr9iXdOgbgtWYCc2su+gQbK7Nu06i34OnC362 JbxJWF/qllLe8e7+rbveivh9GDeMIvEYsogta4Ei9VcgK0qrySegYoYH6IxylY87 HM4JbEM+Q9sgRcZw/2y7k5yIMlG65INM7h+o8nRFL+v8uIP21B7WAxGC1oCjQ6Zz yIQJuLCgvyeIadCgLGMUTg3FLkxRKSzcbahxrskjzoX0Mmikqfy1UpU3CqkPMXX+ 1+RpCNK2hblp3w80j+xwJRGe7Bm+qpkJdwI/834rECYn+zDyGdn2EkR5up2GzH3o mWRahJbs6tJkFNvqfBFjRFNRIG+dTscgQmmQY9IKpZohvxQ= -----END CERTIFICATE-----Generated at Mon Jan 5 03:49:58 2026 by rpki-client