This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/bBvGTyS2yQa6YR2RFe61hrCsDgk.roa File: bBvGTyS2yQa6YR2RFe61hrCsDgk.roa (raw, json) Hash identifier: +61f6+40PPC+07wtISqHIyXFeS6Le/BLpWRYgptfad4= Subject key identifier: 6C:1B:C6:4F:24:B6:C9:06:BA:61:1D:91:15:EE:B5:86:B0:AC:0E:09 Certificate issuer: /CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e Certificate serial: 019B7AC8E631DA4A8130FBAC3092253FDB4E Authority key identifier: A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/bBvGTyS2yQa6YR2RFe61hrCsDgk.roa Signing time: Thu 01 Jan 2026 18:19:05 +0000 ROA not before: Thu 01 Jan 2026 18:19:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48179 IP address blocks: 62.85.128.0/19 maxlen: 19 2a00:ec80::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.crl rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.mft rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 12:01:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:e6:31:da:4a:81:30:fb:ac:30:92:25:3f:db:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e Validity Not Before: Jan 1 18:19:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6c1bc64f24b6c906ba611d9115eeb586b0ac0e09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:7b:39:79:80:f4:1e:95:c4:a3:7a:14:fd:46: 24:0d:f6:69:77:d7:e8:17:33:44:f2:14:50:60:6c: 44:fe:88:d8:8f:af:44:cc:22:89:f3:0f:a2:fe:b7: c5:87:f9:76:11:13:87:6e:3c:dc:8c:3c:81:44:0e: 1c:a3:b5:53:9f:16:bb:a3:94:77:a9:e0:6d:05:91: 27:1b:c3:3d:2c:f8:1e:a6:9e:f9:06:f6:05:37:43: 8d:0a:1e:a7:d2:28:e9:bb:be:25:06:ee:0c:ee:c3: 08:fc:51:bd:3f:71:ac:d5:db:ec:99:0a:75:b7:d7: f1:71:4d:d5:5d:fe:3f:ee:6e:95:3d:86:5f:f3:eb: 31:46:13:65:50:36:ea:9c:8f:44:cf:83:df:5e:50: ea:f9:3e:69:94:66:e2:2b:67:a7:9b:75:b4:64:0d: 38:f9:af:92:a0:c0:4a:28:ed:b4:6f:dc:65:c7:73: 58:b5:0c:48:6c:a4:a3:19:76:0e:10:e7:53:54:aa: 0d:a1:27:ec:be:cb:ca:39:2d:8f:dd:6f:bf:10:03: 34:23:cb:48:58:5b:65:b7:2d:0c:01:6e:64:55:0b: 63:83:d0:35:ee:4e:32:d7:1a:49:1a:4a:a0:62:17: 97:28:c0:b7:14:fb:15:44:55:40:40:79:4c:33:96: 5d:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:1B:C6:4F:24:B6:C9:06:BA:61:1D:91:15:EE:B5:86:B0:AC:0E:09 X509v3 Authority Key Identifier: keyid:A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/bBvGTyS2yQa6YR2RFe61hrCsDgk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.85.128.0/19 IPv6: 2a00:ec80::/32 Signature Algorithm: sha256WithRSAEncryption 69:7a:3d:eb:35:56:23:3b:d6:e8:b0:a8:9a:dd:a5:5c:d8:3a: ac:55:14:d6:d9:92:26:ae:01:7a:93:c9:58:64:48:5a:bf:65: 58:a5:0c:6e:e7:d4:a8:b0:00:5f:80:6f:d3:10:ad:df:aa:b7: 31:ff:cd:51:b2:57:fe:5c:d9:2f:c7:12:86:0b:ae:27:60:8a: 7f:f4:42:d7:74:22:ab:15:62:c7:ea:1a:a1:9e:9e:ab:71:13: f9:bf:85:47:59:1b:2d:89:a0:22:c8:ea:1a:d2:a2:90:07:ab: c6:4a:b3:4e:7a:9d:ad:16:71:27:ab:ae:b6:30:b3:0b:a8:d0: 48:85:f1:62:cf:a8:a7:a0:ac:84:51:66:58:b4:9d:8c:56:d8: de:ab:23:1d:e6:a8:e9:35:82:f3:f0:6e:80:5b:66:ce:04:b5: 9b:ea:73:c1:76:4d:bc:d8:66:e4:5e:c4:7b:8d:1f:a3:2f:4f: f5:6f:d2:7a:87:08:e7:69:1e:17:9f:bf:1e:f6:5f:e7:28:9c: b9:c5:aa:7e:a4:43:31:8a:fd:7a:6c:a0:c3:1b:06:28:42:f8: d8:23:5c:f2:02:62:5e:d5:05:eb:11:9a:e0:9e:97:c7:09:17: ac:05:80:06:3d:d5:10:56:7c:af:87:eb:6d:9e:0e:47:a5:55: cf:ab:f9:9d -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt6yOYx2kqBMPusMJIlP9tOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEwZWY1ZmJiZmNhN2E5M2NmZWU5NjVlZWI2YmRlZTZmYjQz YzQwM2UwHhcNMjYwMTAxMTgxOTA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YzFiYzY0ZjI0YjZjOTA2YmE2MTFkOTExNWVlYjU4NmIwYWMwZTA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy3s5eYD0HpXEo3oU/UYkDfZpd9fo FzNE8hRQYGxE/ojYj69EzCKJ8w+i/rfFh/l2EROHbjzcjDyBRA4co7VTnxa7o5R3 qeBtBZEnG8M9LPgepp75BvYFN0ONCh6n0ijpu74lBu4M7sMI/FG9P3Gs1dvsmQp1 t9fxcU3VXf4/7m6VPYZf8+sxRhNlUDbqnI9Ez4PfXlDq+T5plGbiK2enm3W0ZA04 +a+SoMBKKO20b9xlx3NYtQxIbKSjGXYOEOdTVKoNoSfsvsvKOS2P3W+/EAM0I8tI WFtlty0MAW5kVQtjg9A17k4y1xpJGkqgYheXKMC3FPsVRFVAQHlMM5ZdzQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFGwbxk8ktskGumEdkRXutYawrA4JMB8GA1UdIwQY MBaAFKDvX7v8p6k8/ull7ra97m+0PEA+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb085ZnVfeW5xVHotNldYdXRyM3ViN1E4UUQ0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi9mZTkxNWMtYmY3MC00NjAyLThhM2Mt MDI5MmIwMjAxNTBhLzEvYkJ2R1R5UzJ5UWE2WVIyUkZlNjFockNzRGdrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Mi9mZTkxNWMtYmY3MC00NjAyLThhM2MtMDI5MmIwMjAxNTBh LzEvb085ZnVfeW5xVHotNldYdXRyM3ViN1E4UUQ0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQFPlWAMA0E AgACMAcDBQAqAOyAMA0GCSqGSIb3DQEBCwUAA4IBAQBpej3rNVYjO9bosKia3aVc 2DqsVRTW2ZImrgF6k8lYZEhav2VYpQxu59SosABfgG/TEK3fqrcx/81Rslf+XNkv xxKGC64nYIp/9ELXdCKrFWLH6hqhnp6rcRP5v4VHWRstiaAiyOoa0qKQB6vGSrNO ep2tFnEnq662MLMLqNBIhfFiz6inoKyEUWZYtJ2MVtjeqyMd5qjpNYLz8G6AW2bO BLWb6nPBdk282GbkXsR7jR+jL0/1b9J6hwjnaR4Xn78e9l/nKJy5xap+pEMxiv16 bKDDGwYoQvjYI1zyAmJe1QXrEZrgnpfHCResBYAGPdUQVnyvh+ttng5HpVXPq/md -----END CERTIFICATE-----Generated at Mon Jan 26 22:26:09 2026 by rpki-client