This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/bvKHF0fy1fQdv0NaYrW2WAWFDu0.roa File: bvKHF0fy1fQdv0NaYrW2WAWFDu0.roa (raw, json) Hash identifier: wCD4Ix53h5f1EfkygMLPzKoAmPbRt0DGwmoEgkfx1qw= Subject key identifier: 6E:F2:87:17:47:F2:D5:F4:1D:BF:43:5A:62:B5:B6:58:05:85:0E:ED Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5D1FBA2557CF1884EA9BB29562B3E1 Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/bvKHF0fy1fQdv0NaYrW2WAWFDu0.roa Signing time: Fri 02 Jan 2026 06:20:13 +0000 ROA not before: Fri 02 Jan 2026 06:20:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209710 IP address blocks: 2a0e:b107:340::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:1f:ba:25:57:cf:18:84:ea:9b:b2:95:62:b3:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:20:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6ef2871747f2d5f41dbf435a62b5b65805850eed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:5f:0f:ce:c2:42:71:8a:03:7f:d0:21:0c:98: 2b:27:6a:e5:6f:5d:66:0e:70:69:6f:55:0f:93:a5: 3c:81:26:e8:59:f0:0d:a9:cb:72:32:78:35:5a:35: f3:9d:cf:a7:5c:21:e9:1d:fc:5c:38:bf:74:60:ba: de:03:7c:5b:67:c5:0d:b3:76:55:c2:bb:65:c7:02: e8:84:61:b2:85:e4:89:39:d8:6f:28:7c:1d:2e:6f: ca:c5:0b:54:70:90:7e:f7:26:c2:d7:8f:1e:2a:22: 98:7f:f6:13:87:25:18:3f:07:02:ba:40:7d:3b:b7: c3:54:70:9a:90:5c:83:dc:a5:2c:ed:91:be:07:e1: bb:d0:0e:f3:1a:83:57:29:12:6b:b9:58:2e:23:19: 48:81:94:8c:ef:50:a4:d9:15:93:38:17:40:25:b8: d2:4a:60:fb:d6:e5:2d:2a:5d:10:19:e7:fb:3c:5d: 20:eb:60:c0:23:7b:02:09:c3:13:c0:19:92:51:23: 37:d6:6e:5b:71:6e:d5:57:a7:08:c4:03:10:1f:b6: 12:bb:04:04:23:cc:71:b3:0d:7d:28:df:47:6d:2d: 8e:90:d8:ad:d3:79:f0:14:1c:67:f0:89:37:b2:96: a5:98:e6:59:31:53:31:70:d5:9e:97:0e:73:b1:4c: bc:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:F2:87:17:47:F2:D5:F4:1D:BF:43:5A:62:B5:B6:58:05:85:0E:ED X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/bvKHF0fy1fQdv0NaYrW2WAWFDu0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:b107:340::/44 Signature Algorithm: sha256WithRSAEncryption 7e:95:9f:fe:ee:eb:23:ab:92:fc:76:ad:bb:5c:cb:f4:c1:7a: 9c:16:a0:6d:0e:f0:0a:e8:e9:ce:64:f2:8b:16:d2:f7:ee:25: 54:f2:69:c8:bb:65:b6:26:e7:9a:00:64:f1:ba:5d:12:e3:b0: 4c:ce:b6:ba:60:93:a6:9f:17:a1:98:b4:2b:ea:6c:92:5d:50: a9:36:9f:76:fc:e4:5a:54:11:36:bb:e8:57:f3:b9:73:7d:38: 20:36:bc:c8:b9:eb:18:65:d0:ea:be:cb:23:31:62:0f:a1:f5: 87:b3:a8:33:36:07:ff:9c:33:a6:94:9d:37:2a:ed:e4:bb:be: 01:48:78:0f:e0:7e:ce:9e:8a:90:2c:76:c5:79:aa:a1:e5:2e: 57:9a:fd:86:15:5a:5a:3a:f1:75:5f:05:f7:ad:f0:1e:1a:48: c5:c7:1c:80:e1:81:ad:27:6a:45:03:0d:02:bb:25:8a:19:e0: 62:03:e2:66:82:d3:23:4b:75:ed:03:4d:e9:00:78:8c:4c:21: bd:05:7d:ad:b2:e8:23:29:14:72:22:52:8b:b5:e6:11:43:de: d2:d0:72:c8:df:81:5f:96:ba:bb:0f:00:34:2f:3a:01:3a:3a: 52:70:78:b7:46:18:bc:e7:fa:f8:b2:ae:4e:74:ef:80:f6:f3: 0a:69:7a:d4 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9XR+6JVfPGITqm7KVYrPhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYyMDEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZWYyODcxNzQ3ZjJkNWY0MWRiZjQzNWE2MmI1YjY1ODA1ODUwZWVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA318PzsJCcYoDf9AhDJgrJ2rlb11m DnBpb1UPk6U8gSboWfANqctyMng1WjXznc+nXCHpHfxcOL90YLreA3xbZ8UNs3ZV wrtlxwLohGGyheSJOdhvKHwdLm/KxQtUcJB+9ybC148eKiKYf/YThyUYPwcCukB9 O7fDVHCakFyD3KUs7ZG+B+G70A7zGoNXKRJruVguIxlIgZSM71Ck2RWTOBdAJbjS SmD71uUtKl0QGef7PF0g62DAI3sCCcMTwBmSUSM31m5bcW7VV6cIxAMQH7YSuwQE I8xxsw19KN9HbS2OkNit03nwFBxn8Ik3spalmOZZMVMxcNWelw5zsUy8AQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFG7yhxdH8tX0Hb9DWmK1tlgFhQ7tMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvYnZLSEYwZnkxZlFkdjBOYVlyVzJXQVdGRHUwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg6xBwNA MA0GCSqGSIb3DQEBCwUAA4IBAQB+lZ/+7usjq5L8dq27XMv0wXqcFqBtDvAK6OnO ZPKLFtL37iVU8mnIu2W2JueaAGTxul0S47BMzra6YJOmnxehmLQr6mySXVCpNp92 /ORaVBE2u+hX87lzfTggNrzIuesYZdDqvssjMWIPofWHs6gzNgf/nDOmlJ03Ku3k u74BSHgP4H7OnoqQLHbFeaqh5S5Xmv2GFVpaOvF1XwX3rfAeGkjFxxyA4YGtJ2pF Aw0CuyWKGeBiA+JmgtMjS3XtA03pAHiMTCG9BX2tsugjKRRyIlKLteYRQ97S0HLI 34Fflrq7DwA0LzoBOjpScHi3Rhi85/r4sq5OdO+A9vMKaXrU -----END CERTIFICATE-----Generated at Fri Jan 9 13:13:27 2026 by rpki-client