This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/bhnGGrynAOqBPaqGC3ro7GRDuNw.roa File: bhnGGrynAOqBPaqGC3ro7GRDuNw.roa (raw, json) Hash identifier: x2BM5kFxHPnJ0nUHceEr04d9BaRg+wuiwAIQ8Hfw7Bs= Subject key identifier: 6E:19:C6:1A:BC:A7:00:EA:81:3D:AA:86:0B:7A:E8:EC:64:43:B8:DC Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5D53D83DCEC8B0B6D8370F0F7B6F42 Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/bhnGGrynAOqBPaqGC3ro7GRDuNw.roa Signing time: Fri 02 Jan 2026 06:20:26 +0000 ROA not before: Fri 02 Jan 2026 06:20:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212580 IP address blocks: 2a0e:b107:de0::/44 maxlen: 48 2a0e:b107:e00::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 17:27:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:53:d8:3d:ce:c8:b0:b6:d8:37:0f:0f:7b:6f:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:20:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6e19c61abca700ea813daa860b7ae8ec6443b8dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:2a:3f:80:0c:7b:57:59:f5:c6:0f:23:0f:51: 79:20:4c:ae:71:84:de:fd:ce:44:0a:5a:ea:1a:c7: 2f:02:fc:dc:14:1b:e8:41:39:8c:c4:bb:31:c1:09: f3:d4:fb:e7:40:64:30:76:52:94:89:c4:65:17:70: 39:3a:a3:35:b2:99:94:70:87:a2:83:a8:05:76:cd: 67:a2:80:a1:e0:95:a4:2d:0e:7d:d2:40:91:f6:b2: 5c:01:a3:45:67:8b:c6:0d:e5:a0:20:df:c5:2b:84: 2e:ff:a5:30:f7:b3:68:6e:5a:07:5e:58:f0:25:c3: 0e:ee:41:d2:7a:03:bc:c5:f9:2d:80:5b:54:1e:2e: 8e:eb:cf:5b:e6:d6:b0:c0:83:fc:39:52:31:a6:77: 8c:d6:22:e9:60:70:37:7f:16:8f:38:2c:cc:ac:5a: 0d:6c:c4:ad:31:e9:5a:e9:a5:8c:d8:09:74:f8:90: be:9a:d5:6d:44:cb:46:fd:2f:aa:f1:f6:7f:d6:22: 49:8d:f1:17:a6:86:3d:9d:68:4a:d8:53:54:b3:e2: 41:27:a6:40:ec:78:9d:eb:79:ed:09:30:6f:f5:32: 84:db:f5:cb:f7:fb:4a:7d:b7:b3:0f:3d:36:10:b3: b2:db:00:9a:cb:d1:71:3b:21:e8:b5:d1:35:92:28: f1:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:19:C6:1A:BC:A7:00:EA:81:3D:AA:86:0B:7A:E8:EC:64:43:B8:DC X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/bhnGGrynAOqBPaqGC3ro7GRDuNw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:b107:de0::/44 2a0e:b107:e00::/44 Signature Algorithm: sha256WithRSAEncryption 03:ef:77:c7:a6:3c:b2:9a:27:cf:bb:69:11:ff:34:ad:ed:81: 68:86:e6:93:af:3e:58:85:f9:95:59:cc:3c:40:89:7d:b2:6e: 3b:4f:b3:c1:3d:db:2b:98:cc:25:27:6c:6d:86:8f:9c:60:c7: bc:b5:8e:7b:dd:f5:19:f4:1f:77:1c:13:56:12:35:05:77:13: 7a:58:9a:16:5f:2a:60:6d:a7:0d:95:08:1d:2d:f7:5d:dd:b8: aa:e0:91:08:40:ef:fd:f3:da:24:91:bc:42:0d:4e:b3:27:f8: a6:96:61:ed:0d:8a:e8:b2:8e:a1:6d:06:75:d2:40:94:32:c8: bf:42:fd:fb:2b:2e:13:1d:6d:6c:ef:63:78:c8:c7:ac:84:84: 6b:d0:db:94:c9:62:ec:77:a9:8a:bb:bf:6a:fe:b3:5b:15:ef: 90:2e:83:fb:cb:6a:7e:99:d9:34:22:07:ef:0d:4b:9e:39:4a: 71:98:45:cd:c3:31:21:2b:9e:b5:94:f5:2e:b6:03:74:f7:98: 43:11:bd:28:a1:56:42:19:0a:8b:cd:00:f9:4e:11:11:3c:95: a7:7f:04:8b:24:77:c4:8e:a5:45:8c:2d:db:30:4e:02:42:d2: 44:cd:c5:79:a4:1d:69:cf:4b:07:07:bb:d8:ba:46:c0:c2:33: 11:a3:c7:b9 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt9XVPYPc7IsLbYNw8Pe29CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYyMDI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZTE5YzYxYWJjYTcwMGVhODEzZGFhODYwYjdhZThlYzY0NDNiOGRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3io/gAx7V1n1xg8jD1F5IEyucYTe /c5EClrqGscvAvzcFBvoQTmMxLsxwQnz1PvnQGQwdlKUicRlF3A5OqM1spmUcIei g6gFds1nooCh4JWkLQ590kCR9rJcAaNFZ4vGDeWgIN/FK4Qu/6Uw97NobloHXljw JcMO7kHSegO8xfktgFtUHi6O689b5tawwIP8OVIxpneM1iLpYHA3fxaPOCzMrFoN bMStMela6aWM2Al0+JC+mtVtRMtG/S+q8fZ/1iJJjfEXpoY9nWhK2FNUs+JBJ6ZA 7Hid63ntCTBv9TKE2/XL9/tKfbezDz02ELOy2wCay9FxOyHotdE1kijxJQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFG4Zxhq8pwDqgT2qhgt66OxkQ7jcMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvYmhuR0dyeW5BT3FCUGFxR0Mzcm83R1JEdU53LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcEKg6xBw3g AwcEKg6xBw4AMA0GCSqGSIb3DQEBCwUAA4IBAQAD73fHpjyymifPu2kR/zSt7YFo huaTrz5YhfmVWcw8QIl9sm47T7PBPdsrmMwlJ2xtho+cYMe8tY573fUZ9B93HBNW EjUFdxN6WJoWXypgbacNlQgdLfdd3biq4JEIQO/989okkbxCDU6zJ/imlmHtDYro so6hbQZ10kCUMsi/Qv37Ky4THW1s72N4yMeshIRr0NuUyWLsd6mKu79q/rNbFe+Q LoP7y2p+mdk0IgfvDUueOUpxmEXNwzEhK561lPUutgN095hDEb0ooVZCGQqLzQD5 ThERPJWnfwSLJHfEjqVFjC3bME4CQtJEzcV5pB1pz0sHB7vYukbAwjMRo8e5 -----END CERTIFICATE-----Generated at Sat Jan 10 02:19:26 2026 by rpki-client