This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/BssiEckUiYskM80zVCRaUA447rI.roa File: BssiEckUiYskM80zVCRaUA447rI.roa (raw, json) Hash identifier: SqDyQw+e1xRJpifVPh1MrJTtQz+US3752KuWU/3DyCc= Subject key identifier: 06:CB:22:11:C9:14:89:8B:24:33:CD:33:54:24:5A:50:0E:38:EE:B2 Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c Certificate serial: 019AC6E2E02709DCC246C5D2FAE0F9AEECA9 Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/BssiEckUiYskM80zVCRaUA447rI.roa Signing time: Thu 27 Nov 2025 19:55:48 +0000 ROA not before: Thu 27 Nov 2025 19:55:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 203359 IP address blocks: 2a0d:e247::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 08:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:c6:e2:e0:27:09:dc:c2:46:c5:d2:fa:e0:f9:ae:ec:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c Validity Not Before: Nov 27 19:55:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=06cb2211c914898b2433cd3354245a500e38eeb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:cb:37:eb:6d:16:41:13:61:c3:16:ee:2f:5c: 89:bd:60:2e:a7:7f:4e:f8:0f:f6:f2:cf:77:d2:f8: b0:af:e7:da:a0:03:db:31:3d:ed:09:b4:fc:ba:2b: 3a:de:af:d2:fd:21:5f:54:63:17:0e:6f:09:12:b6: 4c:0f:fe:f2:28:5a:13:b5:fe:af:00:92:46:5f:4d: fc:82:ad:c4:15:99:84:f9:17:cb:20:c4:17:63:d9: 5a:e4:72:3e:70:2f:55:2a:e9:91:f2:5d:3f:ae:97: bb:f9:58:11:7f:80:d2:20:d5:62:30:13:24:6a:9f: be:3a:f0:97:cf:7b:ed:90:6f:d4:51:dd:b3:8f:e0: f0:63:b9:f6:d7:b2:ab:f5:26:cb:76:b3:45:cd:4e: 9f:ac:86:0b:29:87:c9:61:7e:90:69:e5:70:d8:6e: 08:35:36:12:ef:d0:df:5b:63:61:b2:14:6f:45:38: 0d:a4:8d:49:ec:8b:1d:ee:8c:29:8f:da:cd:07:b5: 04:f3:f8:60:c5:4f:d0:79:66:02:f7:36:1e:17:a7: 2c:df:bb:f5:5f:69:7b:f1:36:4a:26:88:2f:c0:c5: cd:b7:9c:01:7e:8c:72:7a:d3:2b:8a:0b:87:5a:e7: 85:8d:4f:18:1f:ba:6e:32:35:4a:3b:92:9a:b9:e0: 4d:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:CB:22:11:C9:14:89:8B:24:33:CD:33:54:24:5A:50:0E:38:EE:B2 X509v3 Authority Key Identifier: keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/BssiEckUiYskM80zVCRaUA447rI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0d:e247::/32 Signature Algorithm: sha256WithRSAEncryption 93:a6:a0:21:f2:1c:68:41:98:8d:b2:75:15:f8:e2:2d:3f:b6: 85:3a:6e:d0:b3:16:61:22:fd:f4:de:d1:bc:2c:dd:1f:6d:c7: e0:2c:58:4d:16:ed:15:0b:b4:af:dd:bd:c4:a4:54:5a:80:a4: d1:a0:59:81:f8:c7:4c:70:8d:c5:22:2f:17:9b:51:d0:85:c4: 5b:d3:12:38:b3:fe:4b:43:3d:d2:20:3e:ac:f8:2a:a6:95:d0: 25:fe:29:4d:55:8c:5b:50:0a:a5:5e:7d:f4:64:8f:99:6c:59: e8:fe:46:6e:19:f9:b5:8c:59:48:41:42:52:f8:1c:62:6f:f0: aa:49:20:54:38:36:bc:2b:d6:c2:50:af:a7:ba:96:ac:7d:8f: 04:ee:65:3f:e0:91:ae:05:52:08:72:8f:4e:da:fe:3f:81:28: 05:6b:1c:66:e6:5d:b1:d9:83:69:bc:29:42:84:2d:b2:bd:f9: 1a:6e:22:22:3a:da:84:1d:47:62:54:5b:d1:c5:27:49:29:5e: 83:29:30:96:c5:9e:a1:27:be:0e:73:2a:8a:e2:84:58:51:04: f7:ad:0e:9c:d1:0b:d5:19:ad:5e:98:cd:cb:2f:77:36:07:8f: 18:33:e5:c3:f8:a8:e0:a5:1d:94:1f:47:06:4f:aa:b0:81:20: 31:25:10:16 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZrG4uAnCdzCRsXS+uD5ruypMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5MzM1M2MxZmFiZTg5NmFmOGI4NWZlNzYwMGU0NjM0OTY4 ZmNjNGMwHhcNMjUxMTI3MTk1NTQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNmNiMjIxMWM5MTQ4OThiMjQzM2NkMzM1NDI0NWE1MDBlMzhlZWIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA28s3620WQRNhwxbuL1yJvWAup39O +A/28s930viwr+faoAPbMT3tCbT8uis63q/S/SFfVGMXDm8JErZMD/7yKFoTtf6v AJJGX038gq3EFZmE+RfLIMQXY9la5HI+cC9VKumR8l0/rpe7+VgRf4DSINViMBMk ap++OvCXz3vtkG/UUd2zj+DwY7n217Kr9SbLdrNFzU6frIYLKYfJYX6QaeVw2G4I NTYS79DfW2NhshRvRTgNpI1J7Isd7owpj9rNB7UE8/hgxU/QeWYC9zYeF6cs37v1 X2l78TZKJogvwMXNt5wBfoxyetMriguHWueFjU8YH7puMjVKO5KaueBNZQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFAbLIhHJFImLJDPNM1QkWlAOOO6yMB8GA1UdIwQY MBaAFAkzU8H6volq+Lhf52AORjSWj8xMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGIt MjM5ZDJmZTM5OGIxLzEvQnNzaUVja1VpWXNrTTgwelZDUmFVQTQ0N3JJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGItMjM5ZDJmZTM5OGIx LzEvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKg3iRzAN BgkqhkiG9w0BAQsFAAOCAQEAk6agIfIcaEGYjbJ1FfjiLT+2hTpu0LMWYSL99N7R vCzdH23H4CxYTRbtFQu0r929xKRUWoCk0aBZgfjHTHCNxSIvF5tR0IXEW9MSOLP+ S0M90iA+rPgqppXQJf4pTVWMW1AKpV599GSPmWxZ6P5Gbhn5tYxZSEFCUvgcYm/w qkkgVDg2vCvWwlCvp7qWrH2PBO5lP+CRrgVSCHKPTtr+P4EoBWscZuZdsdmDabwp QoQtsr35Gm4iIjrahB1HYlRb0cUnSSlegykwlsWeoSe+DnMqiuKEWFEE960OnNEL 1RmtXpjNyy93NgePGDPlw/io4KUdlB9HBk+qsIEgMSUQFg== -----END CERTIFICATE-----Generated at Fri Dec 5 13:23:15 2025 by rpki-client