This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/7f2c07-cef5-42f4-8f32-8631fbf5c620/1/B1xlxtkgltJzqbUtpT-T2k7OjtI.roa
File: B1xlxtkgltJzqbUtpT-T2k7OjtI.roa (raw, json)
Hash identifier: qZlWNzGPdE+IKxAZlX53rTWx5ECKk+OZ5/kaPPhGDH4=
Subject key identifier: 07:5C:65:C6:D9:20:96:D2:73:A9:B5:2D:A5:3F:93:DA:4E:CE:8E:D2
Certificate issuer: /CN=61b05789a4e824be8103de770dc25c593ef3fdca
Certificate serial: 019B7C7F44A465486DE5AF7C1C76B44A2C54
Authority key identifier: 61:B0:57:89:A4:E8:24:BE:81:03:DE:77:0D:C2:5C:59:3E:F3:FD:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbBXiaToJL6BA953DcJcWT7z_co.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/7f2c07-cef5-42f4-8f32-8631fbf5c620/1/B1xlxtkgltJzqbUtpT-T2k7OjtI.roa
Signing time: Fri 02 Jan 2026 02:17:54 +0000
ROA not before: Fri 02 Jan 2026 02:17:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211671
IP address blocks: 2001:67c:2978::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/7f2c07-cef5-42f4-8f32-8631fbf5c620/1/YbBXiaToJL6BA953DcJcWT7z_co.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/7f2c07-cef5-42f4-8f32-8631fbf5c620/1/YbBXiaToJL6BA953DcJcWT7z_co.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbBXiaToJL6BA953DcJcWT7z_co.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 13:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:7f:44:a4:65:48:6d:e5:af:7c:1c:76:b4:4a:2c:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b05789a4e824be8103de770dc25c593ef3fdca
Validity
Not Before: Jan 2 02:17:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=075c65c6d92096d273a9b52da53f93da4ece8ed2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:68:49:86:7e:fd:e0:85:62:b2:a4:0a:80:08:
a9:39:c0:8a:8d:6d:4e:5e:83:4a:1d:96:b6:b2:07:
a9:1d:d8:1c:76:cd:f8:77:7f:27:7f:4d:a4:b4:ef:
fb:c7:b3:96:33:c9:9b:79:ff:60:63:54:3f:f8:ba:
e8:89:df:f2:1f:01:6c:63:ff:b3:1e:ec:9c:16:0a:
76:e4:85:40:c5:d6:69:f2:35:52:dd:f7:02:ce:a8:
88:6d:19:8a:9b:ec:46:e6:45:e1:b8:00:08:8d:0e:
5f:27:8f:7e:b1:9e:7e:99:43:59:66:5d:8a:ed:36:
c6:21:ce:0b:22:b8:87:5c:3c:72:ee:c0:5c:e8:db:
df:c5:65:e4:15:a1:49:c3:50:e0:46:2b:54:82:40:
4b:47:72:0a:a3:5e:69:4c:5d:d1:6e:74:93:3e:da:
3a:6f:6c:d3:c3:d9:0a:78:cf:37:a7:85:89:0d:04:
3e:f9:5f:fc:f2:cd:82:ae:15:65:0e:ce:d7:a1:71:
3f:44:49:4d:4b:34:b5:d7:d3:f5:f5:bb:0d:98:9a:
a2:e5:77:cf:89:2e:fd:96:49:cc:14:bf:c1:f3:ea:
ec:83:f4:88:1c:4f:d9:0c:aa:92:2d:89:bf:bf:3d:
eb:52:31:f5:30:98:53:99:11:85:d7:77:8f:b2:99:
59:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:5C:65:C6:D9:20:96:D2:73:A9:B5:2D:A5:3F:93:DA:4E:CE:8E:D2
X509v3 Authority Key Identifier:
keyid:61:B0:57:89:A4:E8:24:BE:81:03:DE:77:0D:C2:5C:59:3E:F3:FD:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbBXiaToJL6BA953DcJcWT7z_co.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7f2c07-cef5-42f4-8f32-8631fbf5c620/1/B1xlxtkgltJzqbUtpT-T2k7OjtI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7f2c07-cef5-42f4-8f32-8631fbf5c620/1/YbBXiaToJL6BA953DcJcWT7z_co.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:2978::/48
Signature Algorithm: sha256WithRSAEncryption
6e:8b:4a:8f:bb:f2:01:15:76:e9:42:85:0a:ce:27:97:d3:d1:
52:75:04:8f:50:19:2a:6a:7d:da:35:78:f2:ef:cb:b1:a1:73:
45:c0:b1:9b:ac:ef:15:0e:55:a1:58:65:5a:20:96:de:0f:ef:
dd:0b:44:dc:f2:03:cb:71:85:4b:d5:82:d2:5b:5a:d5:c9:5c:
d8:e1:7f:39:2c:fb:62:e7:f3:3a:fb:2a:43:12:9b:a5:d7:40:
19:36:b7:1d:75:d4:c8:94:f4:73:47:ef:48:b1:49:f4:73:6d:
20:bc:6b:fd:3c:93:78:99:3f:70:dd:f3:72:d6:69:ba:af:0b:
4e:ea:8e:df:a8:8b:6c:91:52:d8:19:5d:87:06:95:08:33:2f:
c2:1c:33:5c:01:c0:23:dc:fc:24:66:6a:82:bf:89:ae:fb:f8:
a0:bc:01:48:eb:f3:84:c5:e8:be:3d:33:34:79:a7:d5:39:e4:
8f:b6:16:74:13:69:ad:c1:4d:b6:df:fd:6d:28:1c:ca:47:d6:
a0:56:a6:72:00:86:8c:9a:4f:15:79:44:2c:75:0c:57:67:63:
6e:e3:c0:48:24:05:92:9c:ba:ca:de:58:cd:5f:c9:e0:e2:b4:
95:9e:4a:fc:ad:11:ae:dc:81:1d:5b:5f:b4:3a:8f:f6:18:55:
4d:76:7e:4e
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZt8f0SkZUht5a98HHa0SixUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxYjA1Nzg5YTRlODI0YmU4MTAzZGU3NzBkYzI1YzU5M2Vm
M2ZkY2EwHhcNMjYwMTAyMDIxNzU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNzVjNjVjNmQ5MjA5NmQyNzNhOWI1MmRhNTNmOTNkYTRlY2U4ZWQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsGhJhn794IVisqQKgAipOcCKjW1O
XoNKHZa2sgepHdgcds34d38nf02ktO/7x7OWM8mbef9gY1Q/+Lroid/yHwFsY/+z
HuycFgp25IVAxdZp8jVS3fcCzqiIbRmKm+xG5kXhuAAIjQ5fJ49+sZ5+mUNZZl2K
7TbGIc4LIriHXDxy7sBc6NvfxWXkFaFJw1DgRitUgkBLR3IKo15pTF3RbnSTPto6
b2zTw9kKeM83p4WJDQQ++V/88s2CrhVlDs7XoXE/RElNSzS119P19bsNmJqi5XfP
iS79lknMFL/B8+rsg/SIHE/ZDKqSLYm/vz3rUjH1MJhTmRGF13ePsplZfQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFAdcZcbZIJbSc6m1LaU/k9pOzo7SMB8GA1UdIwQY
MBaAFGGwV4mk6CS+gQPedw3CXFk+8/3KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWJCWGlhVG9KTDZCQTk1M0RjSmNXVDd6X2NvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC83ZjJjMDctY2VmNS00MmY0LThmMzIt
ODYzMWZiZjVjNjIwLzEvQjF4bHh0a2dsdEp6cWJVdHBULVQyazdPanRJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC83ZjJjMDctY2VmNS00MmY0LThmMzItODYzMWZiZjVjNjIw
LzEvWWJCWGlhVG9KTDZCQTk1M0RjSmNXVDd6X2NvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfCl4
MA0GCSqGSIb3DQEBCwUAA4IBAQBui0qPu/IBFXbpQoUKzieX09FSdQSPUBkqan3a
NXjy78uxoXNFwLGbrO8VDlWhWGVaIJbeD+/dC0Tc8gPLcYVL1YLSW1rVyVzY4X85
LPti5/M6+ypDEpul10AZNrcdddTIlPRzR+9IsUn0c20gvGv9PJN4mT9w3fNy1mm6
rwtO6o7fqItskVLYGV2HBpUIMy/CHDNcAcAj3PwkZmqCv4mu+/igvAFI6/OExei+
PTM0eafVOeSPthZ0E2mtwU223/1tKBzKR9agVqZyAIaMmk8VeUQsdQxXZ2Nu48BI
JAWSnLrK3ljNX8ng4rSVnkr8rRGu3IEdW1+0Oo/2GFVNdn5O
-----END CERTIFICATE-----
Generated at Mon Feb 9 21:00:39 2026 by rpki-client