This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/bubT-pPll8boH0RKjKXxwo8xiq4.roa File: bubT-pPll8boH0RKjKXxwo8xiq4.roa (raw, json) Hash identifier: 8mRww0tFEkuliAkNPkjXf+1sftWU+tMxpm8XFShS3PE= Subject key identifier: 6E:E6:D3:FA:93:E5:97:C6:E8:1F:44:4A:8C:A5:F1:C2:8F:31:8A:AE Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5D84F18CED4C06579F1D3119480999 Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/bubT-pPll8boH0RKjKXxwo8xiq4.roa Signing time: Fri 02 Jan 2026 06:20:39 +0000 ROA not before: Fri 02 Jan 2026 06:20:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215849 IP address blocks: 2a0e:b107:27f0::/46 maxlen: 48 2a0e:b107:2830::/46 maxlen: 48 2a0e:b107:2834::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:84:f1:8c:ed:4c:06:57:9f:1d:31:19:48:09:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:20:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6ee6d3fa93e597c6e81f444a8ca5f1c28f318aae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:07:c0:06:74:f1:5e:33:b5:1d:60:ce:b3:e1: 53:54:4c:e1:75:96:97:c1:ea:92:9c:86:fe:dd:18: c3:6c:b0:73:8c:a6:62:1e:24:52:31:ca:b7:00:fc: 4c:71:7f:eb:1c:4e:a7:fa:0b:a6:25:37:5a:51:b1: 8b:88:b8:d0:45:42:89:d7:1a:88:b9:29:c9:fa:18: 20:65:1f:1e:4b:ef:22:f6:be:d7:6c:c2:0d:64:61: 6d:0f:ac:c8:af:5b:33:e7:e9:a3:e4:a6:e7:36:71: 69:35:db:6f:6d:63:78:b1:e8:65:11:bf:03:41:a3: c9:58:f7:9e:58:d3:d6:5b:c8:c9:72:dd:2f:bb:88: f2:74:50:cc:e4:cc:fa:6b:c9:3d:b9:57:92:b8:16: dd:5d:44:2d:9c:b9:c8:9c:36:ef:5e:89:f9:fb:12: f5:05:20:b6:19:4a:48:19:7a:f3:1d:e1:16:7b:43: 02:7f:ed:29:2d:9a:d0:47:b6:e1:e3:0b:f9:c3:97: d6:af:cc:25:a8:d6:c7:49:e3:d5:a9:72:30:24:a6: f8:db:f8:60:72:da:9b:74:df:cf:d0:b7:c9:0e:0f: 63:ad:d2:bc:35:ca:61:cd:ea:c8:df:91:89:a6:ef: 54:61:85:e3:79:dd:23:bf:b8:d5:3b:d8:86:5a:50: 3b:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:E6:D3:FA:93:E5:97:C6:E8:1F:44:4A:8C:A5:F1:C2:8F:31:8A:AE X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/bubT-pPll8boH0RKjKXxwo8xiq4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:b107:27f0::/46 2a0e:b107:2830::/45 Signature Algorithm: sha256WithRSAEncryption 46:be:8f:bd:9f:49:0c:ea:0a:a8:14:4f:23:c0:8d:6a:a8:12: c5:86:0e:b1:04:89:c3:cf:95:d8:af:77:82:42:92:34:40:b0: 90:28:0c:af:ef:45:53:c5:54:68:ca:a9:d3:83:a8:d2:b2:07: 4e:1b:a3:c6:28:c2:bb:80:a4:de:e3:c0:d1:14:65:fc:3f:07: 55:6b:10:12:bb:80:5a:1e:5c:67:56:19:17:e1:70:66:37:93: 85:12:46:17:e3:d5:d9:16:95:fe:84:3f:fd:b6:fd:20:d6:8e: 5b:e6:15:0e:36:dc:c2:66:1f:31:15:e7:1e:7b:28:25:4d:3f: bc:c8:0f:ed:fe:d4:96:23:5a:d7:d6:ba:d8:c2:70:5e:59:a3: 20:77:fd:47:88:e9:e3:8f:4c:ff:f8:a0:9b:e6:35:44:59:48: d1:05:20:8f:4d:6d:7d:06:1c:4a:09:e9:79:41:49:a8:32:60: 9c:66:78:9c:bb:3b:12:1a:91:74:d2:e1:ec:de:b0:38:97:53: 80:85:2e:3b:86:bd:a8:d0:99:77:42:80:66:3a:b9:4c:b7:18: ac:32:2a:69:4a:d5:ed:ed:b2:30:de:14:6a:45:02:6b:d6:3f: 34:35:c8:41:c9:9b:49:94:02:6b:6f:e4:89:b9:c4:c3:65:f1: 10:d4:dd:3d -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt9XYTxjO1MBlefHTEZSAmZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYyMDM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZWU2ZDNmYTkzZTU5N2M2ZTgxZjQ0NGE4Y2E1ZjFjMjhmMzE4YWFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvgfABnTxXjO1HWDOs+FTVEzhdZaX weqSnIb+3RjDbLBzjKZiHiRSMcq3APxMcX/rHE6n+gumJTdaUbGLiLjQRUKJ1xqI uSnJ+hggZR8eS+8i9r7XbMINZGFtD6zIr1sz5+mj5KbnNnFpNdtvbWN4sehlEb8D QaPJWPeeWNPWW8jJct0vu4jydFDM5Mz6a8k9uVeSuBbdXUQtnLnInDbvXon5+xL1 BSC2GUpIGXrzHeEWe0MCf+0pLZrQR7bh4wv5w5fWr8wlqNbHSePVqXIwJKb42/hg ctqbdN/P0LfJDg9jrdK8NcphzerI35GJpu9UYYXjed0jv7jVO9iGWlA7HQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFG7m0/qT5ZfG6B9ESoyl8cKPMYquMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvYnViVC1wUGxsOGJvSDBSS2pLWHh3bzh4aXE0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcCKg6xByfw AwcDKg6xBygwMA0GCSqGSIb3DQEBCwUAA4IBAQBGvo+9n0kM6gqoFE8jwI1qqBLF hg6xBInDz5XYr3eCQpI0QLCQKAyv70VTxVRoyqnTg6jSsgdOG6PGKMK7gKTe48DR FGX8PwdVaxASu4BaHlxnVhkX4XBmN5OFEkYX49XZFpX+hD/9tv0g1o5b5hUONtzC Zh8xFeceeyglTT+8yA/t/tSWI1rX1rrYwnBeWaMgd/1HiOnjj0z/+KCb5jVEWUjR BSCPTW19BhxKCel5QUmoMmCcZnicuzsSGpF00uHs3rA4l1OAhS47hr2o0Jl3QoBm OrlMtxisMippStXt7bIw3hRqRQJr1j80NchByZtJlAJrb+SJucTDZfEQ1N09 -----END CERTIFICATE-----Generated at Fri Jan 9 13:13:24 2026 by rpki-client