This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/bcHyZY-1taxOQjKw3jsqvN48ad0.roa File: bcHyZY-1taxOQjKw3jsqvN48ad0.roa (raw, json) Hash identifier: EMjO7IFc+YsWGHZzoO70p0uFtM7S2vM3ng39QaC2z6Y= Subject key identifier: 6D:C1:F2:65:8F:B5:B5:AC:4E:42:32:B0:DE:3B:2A:BC:DE:3C:69:DD Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5 Certificate serial: 019B7C80BA3B4F19D0FDB2C504BECFDF3751 Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/bcHyZY-1taxOQjKw3jsqvN48ad0.roa Signing time: Fri 02 Jan 2026 02:19:29 +0000 ROA not before: Fri 02 Jan 2026 02:19:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214304 IP address blocks: 84.32.24.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.mft rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:ba:3b:4f:19:d0:fd:b2:c5:04:be:cf:df:37:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5 Validity Not Before: Jan 2 02:19:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6dc1f2658fb5b5ac4e4232b0de3b2abcde3c69dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:7f:20:4a:f4:ff:2c:23:98:f6:c4:a8:d9:6c: 25:05:90:b8:41:bf:f3:03:c7:31:39:59:58:7d:56: dd:48:93:8b:4a:7f:56:4e:40:7f:8d:09:f0:aa:7f: 3f:ea:4a:b6:15:84:8b:57:c8:d8:0f:a7:d3:50:e0: 49:c1:fb:29:76:b5:e1:1d:41:be:29:e4:d9:49:0e: 0e:a4:f3:e2:57:38:64:ce:09:b1:82:6d:50:d4:2f: 25:50:69:3a:86:27:10:94:8f:bc:ed:a3:2a:fa:81: 72:50:2a:8f:a1:cb:cb:69:98:64:db:3a:2e:17:bf: cf:f9:d2:7f:d3:31:65:19:5a:a3:97:38:53:e2:6b: 89:44:68:f5:64:1f:5e:61:08:f8:6f:53:96:ce:36: 00:cf:82:ec:f9:65:b1:bc:2c:71:63:7a:03:0a:d6: 81:be:91:51:9b:8a:45:9a:c9:02:33:b8:29:c7:f6: ef:3c:5b:61:18:d4:5a:4a:66:a5:a1:99:8f:b7:ad: e3:87:e8:21:28:f1:33:6b:cd:1d:d1:4a:89:61:3e: 9c:27:3d:53:da:8d:87:fb:9a:11:dd:a1:7b:15:b3: 9c:e0:fb:a6:45:df:e9:4f:90:86:c6:2c:2b:8e:11: eb:29:6e:ba:98:1f:c4:3f:da:c7:f9:89:db:ca:ab: 67:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:C1:F2:65:8F:B5:B5:AC:4E:42:32:B0:DE:3B:2A:BC:DE:3C:69:DD X509v3 Authority Key Identifier: keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/bcHyZY-1taxOQjKw3jsqvN48ad0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.32.24.0/22 Signature Algorithm: sha256WithRSAEncryption 87:fc:b5:dc:83:7c:27:c8:71:99:b0:74:90:c9:9f:9c:87:06: d2:c1:e1:a0:28:61:35:82:51:d1:31:ad:f4:20:cf:fe:b9:0d: 49:3a:89:da:83:78:6f:92:4b:dc:d4:58:a3:d4:59:e9:30:50: 5d:2b:0d:2a:e0:8d:1d:86:3e:57:e1:46:9d:d4:02:8e:ea:a4: 24:4b:79:71:11:ae:bc:27:47:c6:99:60:25:8f:7e:ac:f0:81: d5:34:1c:b5:2d:6c:ae:41:00:91:75:c4:bc:79:b2:63:48:b8: 1b:fa:41:2d:73:eb:08:bf:d8:0e:0e:2c:b3:68:03:ed:48:2c: 4e:72:91:f3:4f:ea:40:08:77:be:87:28:a6:1d:94:78:b0:82: 32:fb:28:f9:af:ae:bf:3e:9d:0c:c7:ba:b4:17:9f:b3:9a:24: 0c:fe:ee:ca:6c:f7:c1:4c:6e:cb:0f:0e:0d:6d:48:f8:4e:77: 68:9a:2f:45:16:d3:69:f7:c4:29:d5:4d:29:29:98:d9:23:16: 73:0e:88:98:f5:66:ca:80:00:e3:50:0e:65:be:5f:b6:cd:28: 0c:47:68:3a:ff:97:bc:21:d5:fc:cc:04:f1:ca:7c:83:f7:6d: 00:34:67:c6:06:63:77:8e:36:6e:f8:74:19:cc:db:f7:6b:49: 50:5e:c9:cc -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gLo7TxnQ/bLFBL7P3zdRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmYmQ0NWZjZTM1NmUyYTY1ZjFlNGQxZGFmNzgxNGI2ZDZi ZGEzYzUwHhcNMjYwMTAyMDIxOTI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZGMxZjI2NThmYjViNWFjNGU0MjMyYjBkZTNiMmFiY2RlM2M2OWRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA138gSvT/LCOY9sSo2WwlBZC4Qb/z A8cxOVlYfVbdSJOLSn9WTkB/jQnwqn8/6kq2FYSLV8jYD6fTUOBJwfspdrXhHUG+ KeTZSQ4OpPPiVzhkzgmxgm1Q1C8lUGk6hicQlI+87aMq+oFyUCqPocvLaZhk2zou F7/P+dJ/0zFlGVqjlzhT4muJRGj1ZB9eYQj4b1OWzjYAz4Ls+WWxvCxxY3oDCtaB vpFRm4pFmskCM7gpx/bvPFthGNRaSmaloZmPt63jh+ghKPEza80d0UqJYT6cJz1T 2o2H+5oR3aF7FbOc4PumRd/pT5CGxiwrjhHrKW66mB/EP9rH+YnbyqtnowIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFG3B8mWPtbWsTkIysN47KrzePGndMB8GA1UdIwQY MBaAFE+9RfzjVuKmXx5NHa94FLbWvaPFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWIt MjM0ODFiZjA5MWMzLzEvYmNIeVpZLTF0YXhPUWpLdzNqc3F2TjQ4YWQwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWItMjM0ODFiZjA5MWMz LzEvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCVCAYMA0G CSqGSIb3DQEBCwUAA4IBAQCH/LXcg3wnyHGZsHSQyZ+chwbSweGgKGE1glHRMa30 IM/+uQ1JOonag3hvkkvc1Fij1FnpMFBdKw0q4I0dhj5X4Uad1AKO6qQkS3lxEa68 J0fGmWAlj36s8IHVNBy1LWyuQQCRdcS8ebJjSLgb+kEtc+sIv9gODiyzaAPtSCxO cpHzT+pACHe+hyimHZR4sIIy+yj5r66/Pp0Mx7q0F5+zmiQM/u7KbPfBTG7LDw4N bUj4Tndomi9FFtNp98Qp1U0pKZjZIxZzDoiY9WbKgADjUA5lvl+2zSgMR2g6/5e8 IdX8zATxynyD920ANGfGBmN3jjZu+HQZzNv3a0lQXsnM -----END CERTIFICATE-----Generated at Mon Jan 19 13:54:14 2026 by rpki-client