This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/64d505-2204-4dca-a95e-8b5372584acd/1/BJI09oTntpyA_R-i8tfSB2MFaSE.roa File: BJI09oTntpyA_R-i8tfSB2MFaSE.roa (raw, json) Hash identifier: BZK3sECoqLCGouNoMBVSC4IiRqublRHBZMNuAsbtmxY= Subject key identifier: 04:92:34:F6:84:E7:B6:9C:80:FD:1F:A2:F2:D7:D2:07:63:05:69:21 Certificate issuer: /CN=7f5689de4a7ce768bf3ab5d9f8546e856ccb1936 Certificate serial: 019B7F83CF0F4B32D560349E0BAD7B2D0D0A Authority key identifier: 7F:56:89:DE:4A:7C:E7:68:BF:3A:B5:D9:F8:54:6E:85:6C:CB:19:36 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f1aJ3kp852i_OrXZ-FRuhWzLGTY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/64d505-2204-4dca-a95e-8b5372584acd/1/BJI09oTntpyA_R-i8tfSB2MFaSE.roa Signing time: Fri 02 Jan 2026 16:21:43 +0000 ROA not before: Fri 02 Jan 2026 16:21:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59990 IP address blocks: 2a00:1d60:f000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/64d505-2204-4dca-a95e-8b5372584acd/1/f1aJ3kp852i_OrXZ-FRuhWzLGTY.crl rsync://rpki.ripe.net/repository/DEFAULT/77/64d505-2204-4dca-a95e-8b5372584acd/1/f1aJ3kp852i_OrXZ-FRuhWzLGTY.mft rsync://rpki.ripe.net/repository/DEFAULT/f1aJ3kp852i_OrXZ-FRuhWzLGTY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 07:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:cf:0f:4b:32:d5:60:34:9e:0b:ad:7b:2d:0d:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7f5689de4a7ce768bf3ab5d9f8546e856ccb1936 Validity Not Before: Jan 2 16:21:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=049234f684e7b69c80fd1fa2f2d7d20763056921 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:42:df:b2:8c:67:76:4e:e0:80:c1:93:81:22: 31:62:fb:b8:66:70:4d:d8:d2:e5:a7:0a:a7:1f:a8: 49:10:9b:6e:f2:19:6a:0d:db:3e:d7:c7:05:85:6c: e8:65:54:62:da:61:6a:82:1e:bb:67:ad:9e:b2:a3: ee:c7:12:e7:0c:77:f6:5e:dc:b8:5a:8a:44:2b:c6: d2:6f:0b:be:d7:d9:7a:44:91:03:59:71:ed:5c:f4: 20:c1:b4:c5:cf:1a:2a:6f:4b:21:6d:8b:85:11:a0: c3:35:ec:a4:88:b2:56:72:71:ba:1d:fe:1d:18:e6: 55:90:59:9b:a9:fb:47:27:43:19:ae:92:5b:53:2f: 28:bc:5c:de:4d:01:e4:55:88:20:3f:31:85:e5:96: 41:57:37:c4:82:40:23:f1:0f:51:3b:63:88:fc:12: 58:fc:a0:0e:20:e7:f8:e8:ac:21:81:64:61:e0:11: 11:c5:77:d9:f4:d4:79:15:7b:45:eb:41:c5:b4:7e: 47:3b:2f:72:46:87:f2:c4:bc:c4:56:21:38:ba:9b: 17:1f:d7:98:ad:a3:3f:56:73:79:2f:97:cf:7e:83: 0d:60:62:f6:d3:24:5a:4e:ad:0a:10:df:ac:e5:ea: ca:f2:a1:11:70:9f:7f:2e:f2:23:11:2f:ae:ed:46: 42:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:92:34:F6:84:E7:B6:9C:80:FD:1F:A2:F2:D7:D2:07:63:05:69:21 X509v3 Authority Key Identifier: keyid:7F:56:89:DE:4A:7C:E7:68:BF:3A:B5:D9:F8:54:6E:85:6C:CB:19:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1aJ3kp852i_OrXZ-FRuhWzLGTY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/64d505-2204-4dca-a95e-8b5372584acd/1/BJI09oTntpyA_R-i8tfSB2MFaSE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/77/64d505-2204-4dca-a95e-8b5372584acd/1/f1aJ3kp852i_OrXZ-FRuhWzLGTY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a00:1d60:f000::/36 Signature Algorithm: sha256WithRSAEncryption 5d:29:ab:0e:c0:23:b2:ba:41:e9:39:73:7f:43:0f:fc:46:de: 12:ee:34:a7:af:4d:bf:c8:18:b9:38:4b:94:63:8b:6c:e9:df: 08:e6:de:74:b9:c2:a7:a7:20:88:ca:2b:76:fc:9a:5d:7f:7b: c0:7e:51:9f:69:93:a6:a0:7e:fa:b4:af:a5:ac:f1:44:8a:0d: 58:3e:86:71:e1:45:01:3f:bb:9d:ba:4f:35:2c:e6:f9:58:bd: 27:d2:63:3b:83:ae:cd:aa:5d:67:0b:59:56:dc:81:cf:71:80: 7e:94:cc:3d:30:ce:c4:7e:43:5c:3c:4d:f2:54:ef:cc:cc:a9: 13:26:70:4e:48:4d:9b:ea:2d:a0:d1:ea:e5:9c:95:0a:be:0a: 4c:4d:da:e3:a2:1a:a1:83:e4:dc:38:55:5e:3c:e2:e3:3c:5c: 59:ad:c7:8d:62:50:51:e6:29:ce:30:bf:cb:4b:c6:0b:ba:9c: 54:55:42:8f:0a:83:59:8a:1c:a3:19:c7:98:b4:87:d0:bb:35: fd:3f:83:74:ee:79:f1:6e:2b:be:27:ee:b3:45:7e:9c:b3:66: ea:ef:53:f8:21:01:f3:87:08:7e:8b:5d:00:a2:8b:44:ff:64: 0a:cf:2e:6a:8b:48:59:d1:61:5a:46:85:de:37:13:64:29:67: fb:c5:f5:c0 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt/g88PSzLVYDSeC617LQ0KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdmNTY4OWRlNGE3Y2U3NjhiZjNhYjVkOWY4NTQ2ZTg1NmNj YjE5MzYwHhcNMjYwMTAyMTYyMTQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNDkyMzRmNjg0ZTdiNjljODBmZDFmYTJmMmQ3ZDIwNzYzMDU2OTIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh0Lfsoxndk7ggMGTgSIxYvu4ZnBN 2NLlpwqnH6hJEJtu8hlqDds+18cFhWzoZVRi2mFqgh67Z62esqPuxxLnDHf2Xty4 WopEK8bSbwu+19l6RJEDWXHtXPQgwbTFzxoqb0shbYuFEaDDNeykiLJWcnG6Hf4d GOZVkFmbqftHJ0MZrpJbUy8ovFzeTQHkVYggPzGF5ZZBVzfEgkAj8Q9RO2OI/BJY /KAOIOf46KwhgWRh4BERxXfZ9NR5FXtF60HFtH5HOy9yRofyxLzEViE4upsXH9eY raM/VnN5L5fPfoMNYGL20yRaTq0KEN+s5erK8qERcJ9/LvIjES+u7UZCFQIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFASSNPaE57acgP0fovLX0gdjBWkhMB8GA1UdIwQY MBaAFH9Wid5KfOdovzq12fhUboVsyxk2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZjFhSjNrcDg1MmlfT3JYWi1GUnVoV3pMR1RZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny82NGQ1MDUtMjIwNC00ZGNhLWE5NWUt OGI1MzcyNTg0YWNkLzEvQkpJMDlvVG50cHlBX1ItaTh0ZlNCMk1GYVNFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ny82NGQ1MDUtMjIwNC00ZGNhLWE5NWUtOGI1MzcyNTg0YWNk LzEvZjFhSjNrcDg1MmlfT3JYWi1GUnVoV3pMR1RZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEKgAdYPAw DQYJKoZIhvcNAQELBQADggEBAF0pqw7AI7K6Qek5c39DD/xG3hLuNKevTb/IGLk4 S5Rji2zp3wjm3nS5wqenIIjKK3b8ml1/e8B+UZ9pk6agfvq0r6Ws8USKDVg+hnHh RQE/u526TzUs5vlYvSfSYzuDrs2qXWcLWVbcgc9xgH6UzD0wzsR+Q1w8TfJU78zM qRMmcE5ITZvqLaDR6uWclQq+CkxN2uOiGqGD5Nw4VV484uM8XFmtx41iUFHmKc4w v8tLxgu6nFRVQo8Kg1mKHKMZx5i0h9C7Nf0/g3TuefFuK74n7rNFfpyzZurvU/gh AfOHCH6LXQCii0T/ZArPLmqLSFnRYVpGhd43E2QpZ/vF9cA= -----END CERTIFICATE-----Generated at Mon Jan 26 17:24:24 2026 by rpki-client