This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/bftxVTMBqmZ6jPfVxW6kFOFKymo.roa File: bftxVTMBqmZ6jPfVxW6kFOFKymo.roa (raw, json) Hash identifier: uHX6W7OLzeKUzqa71O/+0xZStq8/3p0C2HUdy8v01Ak= Subject key identifier: 6D:FB:71:55:33:01:AA:66:7A:8C:F7:D5:C5:6E:A4:14:E1:4A:CA:6A Certificate issuer: /CN=73c69d04583500c5ef81136831237593e0bb86ce Certificate serial: 019B7CEDEE099E0DB2BC2214A6BE50F838FB Authority key identifier: 73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/bftxVTMBqmZ6jPfVxW6kFOFKymo.roa Signing time: Fri 02 Jan 2026 04:18:46 +0000 ROA not before: Fri 02 Jan 2026 04:18:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199684 IP address blocks: 2a0d:2683:2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.crl rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.mft rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:ee:09:9e:0d:b2:bc:22:14:a6:be:50:f8:38:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73c69d04583500c5ef81136831237593e0bb86ce Validity Not Before: Jan 2 04:18:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6dfb71553301aa667a8cf7d5c56ea414e14aca6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:da:21:5b:83:0b:1b:42:25:22:85:8e:3f:91: 89:1c:fa:c9:67:36:00:76:6e:72:dc:6c:06:cd:f3: e3:9e:d4:36:59:d4:a6:f2:73:84:30:bc:a9:23:e7: f5:41:24:c4:70:4a:c9:d5:09:37:6a:e0:dd:a1:c9: 48:b3:1a:03:ce:90:c0:8b:bb:b1:ce:dc:14:19:17: 33:e3:66:c0:bf:33:0c:aa:2c:94:67:d2:a2:05:e4: c2:dd:b5:82:23:79:2f:05:8a:f8:4c:3b:6d:a6:25: e7:58:43:2a:03:ae:b7:38:46:8a:2b:5a:0b:6b:e1: c0:ff:fa:94:76:fe:19:6d:be:5e:9b:03:1c:18:80: eb:a0:14:cb:35:70:c6:e8:ea:aa:da:0d:54:45:60: 16:54:0d:0a:f4:b6:0e:ed:88:da:41:82:eb:c7:5c: 48:8e:27:93:72:0e:8d:4d:60:e7:2f:e7:05:38:ce: e0:e5:73:84:ff:65:35:2f:fe:01:cc:c4:0d:d6:eb: bd:88:e0:84:3f:45:00:29:55:ea:aa:f1:ef:e9:47: 31:a0:17:14:b9:da:b4:7b:07:01:28:7a:14:de:e9: 98:a2:6e:80:cb:8e:c0:a7:ff:64:ae:11:76:fa:2a: 48:65:2b:1d:a8:30:31:2e:8d:82:c9:3b:ac:20:ce: fd:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:FB:71:55:33:01:AA:66:7A:8C:F7:D5:C5:6E:A4:14:E1:4A:CA:6A X509v3 Authority Key Identifier: keyid:73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/bftxVTMBqmZ6jPfVxW6kFOFKymo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0d:2683:2::/48 Signature Algorithm: sha256WithRSAEncryption 43:7d:02:2e:98:96:24:4f:29:2a:82:22:87:01:48:bb:c0:2f: 47:9c:28:e7:e3:b4:15:a3:2c:e7:9f:f5:d6:37:f8:92:30:b6: f9:64:b2:58:a9:a5:62:c8:31:46:70:5c:78:cf:04:04:52:87: bf:81:7b:97:ca:48:b1:cc:e8:d7:00:df:a4:5d:fc:fd:57:71: 9d:d0:1d:e8:04:ff:47:84:0b:fb:72:c2:f8:f3:03:66:8e:6b: af:40:73:d7:88:dc:f0:75:94:20:93:11:be:b5:bf:51:e1:22: a0:5e:40:5d:dc:a3:95:72:61:cd:aa:da:a3:d7:97:0d:4f:31: b2:c4:8a:6c:6f:e8:01:2e:e3:cd:0b:4c:05:ad:bb:ae:83:f6: 6a:eb:7c:c4:b7:6d:2a:c6:2f:fb:0b:8d:40:91:1b:e3:ac:b8: d7:7d:9b:c3:06:c7:26:4d:56:d8:05:a6:a9:29:cd:7e:02:6f: be:76:6e:f3:4a:20:5a:9a:36:2d:7e:5f:29:eb:3c:4f:64:93: c8:a6:d2:ab:79:21:49:d7:c6:86:bd:a3:60:cd:08:73:19:67: c6:b7:ac:77:31:f6:c1:e8:35:b6:84:85:b7:03:6e:50:06:14: 06:ec:4e:37:14:1e:f2:10:a5:cb:ae:e6:f6:14:a5:b3:48:4a: 28:8a:c6:9e -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt87e4Jng2yvCIUpr5Q+Dj7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDczYzY5ZDA0NTgzNTAwYzVlZjgxMTM2ODMxMjM3NTkzZTBi Yjg2Y2UwHhcNMjYwMTAyMDQxODQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZGZiNzE1NTMzMDFhYTY2N2E4Y2Y3ZDVjNTZlYTQxNGUxNGFjYTZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv9ohW4MLG0IlIoWOP5GJHPrJZzYA dm5y3GwGzfPjntQ2WdSm8nOEMLypI+f1QSTEcErJ1Qk3auDdoclIsxoDzpDAi7ux ztwUGRcz42bAvzMMqiyUZ9KiBeTC3bWCI3kvBYr4TDttpiXnWEMqA663OEaKK1oL a+HA//qUdv4Zbb5emwMcGIDroBTLNXDG6Oqq2g1URWAWVA0K9LYO7YjaQYLrx1xI jieTcg6NTWDnL+cFOM7g5XOE/2U1L/4BzMQN1uu9iOCEP0UAKVXqqvHv6UcxoBcU udq0ewcBKHoU3umYom6Ay47Ap/9krhF2+ipIZSsdqDAxLo2CyTusIM79cQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFG37cVUzAapmeoz31cVupBThSspqMB8GA1UdIwQY MBaAFHPGnQRYNQDF74ETaDEjdZPgu4bOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYzhhZEJGZzFBTVh2Z1JOb01TTjFrLUM3aHM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC82ZjZjZTItZTZlZS00ZTJhLTkwNWQt ZjljYjBhN2IyMDZjLzEvYmZ0eFZUTUJxbVo2alBmVnhXNmtGT0ZLeW1vLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OC82ZjZjZTItZTZlZS00ZTJhLTkwNWQtZjljYjBhN2IyMDZj LzEvYzhhZEJGZzFBTVh2Z1JOb01TTjFrLUM3aHM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg0mgwAC MA0GCSqGSIb3DQEBCwUAA4IBAQBDfQIumJYkTykqgiKHAUi7wC9HnCjn47QVoyzn n/XWN/iSMLb5ZLJYqaViyDFGcFx4zwQEUoe/gXuXykixzOjXAN+kXfz9V3Gd0B3o BP9HhAv7csL48wNmjmuvQHPXiNzwdZQgkxG+tb9R4SKgXkBd3KOVcmHNqtqj15cN TzGyxIpsb+gBLuPNC0wFrbuug/Zq63zEt20qxi/7C41AkRvjrLjXfZvDBscmTVbY BaapKc1+Am++dm7zSiBamjYtfl8p6zxPZJPIptKreSFJ18aGvaNgzQhzGWfGt6x3 MfbB6DW2hIW3A25QBhQG7E43FB7yEKXLrub2FKWzSEooisae -----END CERTIFICATE-----Generated at Fri Jan 9 00:19:37 2026 by rpki-client