This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/BxYwJbfS1GIPwW8QFsKK9pmBZAo.roa File: BxYwJbfS1GIPwW8QFsKK9pmBZAo.roa (raw, json) Hash identifier: Zs8byqgyN4ljZ+GfWhjQwFtgmWDVv3OZ/Krm2a5piYo= Subject key identifier: 07:16:30:25:B7:D2:D4:62:0F:C1:6F:10:16:C2:8A:F6:99:81:64:0A Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019AFACB7E2E8236BFC8521AB97F6822590A Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/BxYwJbfS1GIPwW8QFsKK9pmBZAo.roa Signing time: Sun 07 Dec 2025 21:50:31 +0000 ROA not before: Sun 07 Dec 2025 21:50:31 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 213928 IP address blocks: 2a0e:97c0:190::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 10 Dec 2025 16:15:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fa:cb:7e:2e:82:36:bf:c8:52:1a:b9:7f:68:22:59:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Dec 7 21:50:31 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=07163025b7d2d4620fc16f1016c28af69981640a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:aa:4e:95:ad:86:09:5b:fa:63:4d:92:2a:f2: 83:5b:d1:2f:e1:7d:7c:42:f8:4b:30:c5:74:87:ed: ab:30:30:29:64:41:8f:2a:ab:c8:90:84:6b:82:09: f9:9a:db:7a:c6:90:70:3f:e5:bd:5d:27:b2:14:c6: e8:90:93:ae:d8:75:6d:79:85:22:16:ec:7d:3a:a2: d7:a6:7f:c7:50:75:c5:80:53:0e:2c:49:8b:a1:3f: 2b:37:82:72:6a:7c:e5:6f:b9:d7:77:4c:67:0a:22: f2:cd:38:32:ce:45:c0:fe:1a:b7:12:27:36:c6:0a: 43:7a:c4:fc:00:c1:d2:d2:fd:8a:0a:09:35:56:91: 3a:c7:b7:38:06:63:45:20:2c:ef:7f:bc:ae:f8:90: 03:ea:9b:4c:03:fa:5f:97:48:58:c9:9c:f7:e0:db: 37:50:6b:ae:06:30:a2:37:e5:be:6e:05:f6:44:22: b5:79:02:26:3f:f9:a4:76:8e:f1:cc:c2:a6:b3:28: d4:85:7d:99:1c:c3:0c:30:a4:1c:0c:01:16:54:5b: 19:95:e0:4c:81:e4:ce:d2:bf:00:0e:43:14:76:99: f9:42:c5:2a:b7:3d:72:47:e0:f9:de:54:cb:d4:96: e0:ac:7f:fe:77:f7:1f:3c:fc:b9:7a:b0:07:68:66: 7f:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:16:30:25:B7:D2:D4:62:0F:C1:6F:10:16:C2:8A:F6:99:81:64:0A X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/BxYwJbfS1GIPwW8QFsKK9pmBZAo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:97c0:190::/48 Signature Algorithm: sha256WithRSAEncryption 02:32:7d:27:a8:34:70:c9:b4:1c:85:3f:bd:c6:fb:c4:51:51: 64:77:61:c9:7e:7f:27:b1:f5:6b:92:0e:34:37:03:6c:5d:07: 29:fa:38:35:a8:33:0f:a1:77:ad:13:97:98:07:ce:f2:54:c8: fb:c1:7d:14:6b:a4:6f:1c:bb:47:79:59:b6:ff:69:fd:57:9f: 27:f2:0e:cd:cc:12:61:d4:4e:32:14:66:51:90:6c:36:b6:3f: 2c:35:52:25:43:74:7a:08:d7:ba:2e:31:25:f2:c5:b4:67:78: ef:39:81:19:0b:b3:d9:0e:4f:54:10:57:e2:40:34:5d:64:8e: bf:26:42:34:76:74:45:ca:d0:9e:04:61:14:57:6b:01:b6:2b: 1d:de:6f:70:30:23:f2:94:19:56:0d:2c:b6:df:f5:60:ba:8d: 7f:5c:e0:ff:17:0c:f1:61:88:df:c2:33:de:90:b2:cc:58:0d: 3a:b8:1b:31:a8:a3:99:a8:29:36:d2:db:54:35:b0:71:66:23: 54:78:bf:f9:69:0d:32:d3:f4:c2:56:20:86:2f:32:c5:63:bc: 88:b8:bd:6e:19:44:0c:87:f0:4d:2f:c6:6a:93:58:2e:d9:85: 52:2c:0a:4d:74:3c:b6:ab:06:f3:8c:d6:e6:13:e3:12:cd:60: 37:9c:a8:fe -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZr6y34ugja/yFIauX9oIlkKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjUxMjA3MjE1MDMxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNzE2MzAyNWI3ZDJkNDYyMGZjMTZmMTAxNmMyOGFmNjk5ODE2NDBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvKpOla2GCVv6Y02SKvKDW9Ev4X18 QvhLMMV0h+2rMDApZEGPKqvIkIRrggn5mtt6xpBwP+W9XSeyFMbokJOu2HVteYUi Fux9OqLXpn/HUHXFgFMOLEmLoT8rN4Jyanzlb7nXd0xnCiLyzTgyzkXA/hq3Eic2 xgpDesT8AMHS0v2KCgk1VpE6x7c4BmNFICzvf7yu+JAD6ptMA/pfl0hYyZz34Ns3 UGuuBjCiN+W+bgX2RCK1eQImP/mkdo7xzMKmsyjUhX2ZHMMMMKQcDAEWVFsZleBM geTO0r8ADkMUdpn5QsUqtz1yR+D53lTL1JbgrH/+d/cfPPy5erAHaGZ/IwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFAcWMCW30tRiD8FvEBbCivaZgWQKMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvQnhZd0piZlMxR0lQd1c4UUZzS0s5cG1CWkFvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg6XwAGQ MA0GCSqGSIb3DQEBCwUAA4IBAQACMn0nqDRwybQchT+9xvvEUVFkd2HJfn8nsfVr kg40NwNsXQcp+jg1qDMPoXetE5eYB87yVMj7wX0Ua6RvHLtHeVm2/2n9V58n8g7N zBJh1E4yFGZRkGw2tj8sNVIlQ3R6CNe6LjEl8sW0Z3jvOYEZC7PZDk9UEFfiQDRd ZI6/JkI0dnRFytCeBGEUV2sBtisd3m9wMCPylBlWDSy23/Vguo1/XOD/FwzxYYjf wjPekLLMWA06uBsxqKOZqCk20ttUNbBxZiNUeL/5aQ0y0/TCViCGLzLFY7yIuL1u GUQMh/BNL8Zqk1gu2YVSLApNdDy2qwbzjNbmE+MSzWA3nKj+ -----END CERTIFICATE-----Generated at Wed Dec 10 01:24:46 2025 by rpki-client