This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/4aa5a7-8bec-4247-a15f-5a3612352b37/1/BP8ohZBcj6NcqBRjGc25QgNrnnI.roa File: BP8ohZBcj6NcqBRjGc25QgNrnnI.roa (raw, json) Hash identifier: 395UmkLig0TCCb9njfR7+pVbNAtUDBDAYXAZ0wdHK9o= Subject key identifier: 04:FF:28:85:90:5C:8F:A3:5C:A8:14:63:19:CD:B9:42:03:6B:9E:72 Certificate issuer: /CN=b360f0097be481c21bb1d51c85d44f6574158aa9 Certificate serial: 019B7F84636EA0C7A9D612C1355A31AAC7CE Authority key identifier: B3:60:F0:09:7B:E4:81:C2:1B:B1:D5:1C:85:D4:4F:65:74:15:8A:A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s2DwCXvkgcIbsdUchdRPZXQViqk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/4aa5a7-8bec-4247-a15f-5a3612352b37/1/BP8ohZBcj6NcqBRjGc25QgNrnnI.roa Signing time: Fri 02 Jan 2026 16:22:20 +0000 ROA not before: Fri 02 Jan 2026 16:22:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 2a14:2a00:100::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/4aa5a7-8bec-4247-a15f-5a3612352b37/1/s2DwCXvkgcIbsdUchdRPZXQViqk.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/4aa5a7-8bec-4247-a15f-5a3612352b37/1/s2DwCXvkgcIbsdUchdRPZXQViqk.mft rsync://rpki.ripe.net/repository/DEFAULT/s2DwCXvkgcIbsdUchdRPZXQViqk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 13:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:63:6e:a0:c7:a9:d6:12:c1:35:5a:31:aa:c7:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b360f0097be481c21bb1d51c85d44f6574158aa9 Validity Not Before: Jan 2 16:22:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=04ff2885905c8fa35ca8146319cdb942036b9e72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:1d:6d:ab:39:5a:55:68:6c:2c:6a:73:b0:ef: 5a:ee:d0:cc:ae:79:a8:f8:de:da:eb:a5:06:10:e0: 70:96:d5:6c:92:fc:42:17:f3:08:e8:0a:6f:0b:b1: 5b:9f:a0:03:50:b9:ef:cc:1a:36:2e:00:ce:ce:17: 48:72:76:82:45:9e:61:40:62:d5:18:e1:67:30:2d: 16:48:b9:0b:dd:ed:31:f0:04:77:ba:bd:60:43:c0: 0b:6e:80:94:4e:d8:05:2f:c5:50:b0:f2:3f:a8:f8: 69:d1:b2:8b:c5:70:d3:01:dd:97:85:33:65:4c:1b: 8d:81:b0:44:f8:d7:5f:88:72:4c:ee:de:d2:bc:c2: 3d:d9:d6:37:f3:5d:b4:67:0c:cc:e2:e1:e1:00:5d: 77:38:e6:e6:0f:92:87:94:4e:85:5b:92:04:78:44: 92:42:56:f3:eb:ed:7b:7a:6e:4d:5f:b4:cc:27:86: eb:ca:23:af:69:a8:a5:c8:95:52:92:03:df:0f:f7: ee:ff:27:a6:67:b6:f4:b1:53:5a:ea:db:a1:bf:f0: 23:b1:35:02:86:18:0e:aa:d6:71:da:49:0b:9c:5c: 67:31:75:79:7d:ae:4b:c1:f3:2a:77:e4:33:8d:ce: 2f:2e:78:e5:19:48:ff:90:8f:cb:ad:f3:0b:58:cf: ec:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:FF:28:85:90:5C:8F:A3:5C:A8:14:63:19:CD:B9:42:03:6B:9E:72 X509v3 Authority Key Identifier: keyid:B3:60:F0:09:7B:E4:81:C2:1B:B1:D5:1C:85:D4:4F:65:74:15:8A:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s2DwCXvkgcIbsdUchdRPZXQViqk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/4aa5a7-8bec-4247-a15f-5a3612352b37/1/BP8ohZBcj6NcqBRjGc25QgNrnnI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/4aa5a7-8bec-4247-a15f-5a3612352b37/1/s2DwCXvkgcIbsdUchdRPZXQViqk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:2a00:100::/40 Signature Algorithm: sha256WithRSAEncryption 53:3e:01:72:1f:f6:e0:f3:8b:d4:91:97:b3:80:a8:55:06:f6: 2a:ca:e2:a6:8f:78:c3:04:3e:36:f1:8e:14:e6:7f:50:0f:45: 04:a7:2a:07:91:05:c9:2c:3d:14:4a:79:7b:99:7c:c9:5b:a1: c1:6b:51:40:03:9d:3b:f7:2e:93:4b:20:c0:53:37:1c:e7:1a: 4b:ae:2f:1e:41:d4:5e:84:1c:cc:2a:cf:d9:a3:70:96:54:16: 7e:eb:4d:37:84:5a:c0:ae:da:bc:3e:ac:d5:29:b1:7a:d4:ec: 6d:87:83:b7:7a:da:92:7e:5d:43:fc:e7:51:44:11:2a:23:10: 1b:a9:ca:53:59:ea:01:49:12:35:9d:9f:32:4d:86:e7:54:e9: 30:fb:3e:68:1c:80:5f:32:00:4c:a6:5f:9d:97:29:4e:69:19: ed:b0:a7:ae:ad:75:d2:c3:55:b5:8f:93:d7:6d:49:2d:20:70: 7c:8f:15:5f:97:62:c7:31:90:74:f2:eb:3c:b5:ed:ea:8f:2f: f6:ae:fa:79:18:a3:00:33:cf:15:9c:b7:be:2d:82:02:4c:00: 62:38:37:89:9d:9d:fa:f7:88:80:40:69:97:d1:18:2b:c4:82: ab:55:3f:72:8b:38:65:4d:87:f2:90:dd:9c:08:72:ed:cb:d2: 4b:fe:73:15 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt/hGNuoMep1hLBNVoxqsfOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzNjBmMDA5N2JlNDgxYzIxYmIxZDUxYzg1ZDQ0ZjY1NzQx NThhYTkwHhcNMjYwMTAyMTYyMjIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNGZmMjg4NTkwNWM4ZmEzNWNhODE0NjMxOWNkYjk0MjAzNmI5ZTcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0B1tqzlaVWhsLGpzsO9a7tDMrnmo +N7a66UGEOBwltVskvxCF/MI6ApvC7Fbn6ADULnvzBo2LgDOzhdIcnaCRZ5hQGLV GOFnMC0WSLkL3e0x8AR3ur1gQ8ALboCUTtgFL8VQsPI/qPhp0bKLxXDTAd2XhTNl TBuNgbBE+NdfiHJM7t7SvMI92dY38120ZwzM4uHhAF13OObmD5KHlE6FW5IEeESS Qlbz6+17em5NX7TMJ4bryiOvaailyJVSkgPfD/fu/yemZ7b0sVNa6tuhv/AjsTUC hhgOqtZx2kkLnFxnMXV5fa5LwfMqd+Qzjc4vLnjlGUj/kI/LrfMLWM/swwIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFAT/KIWQXI+jXKgUYxnNuUIDa55yMB8GA1UdIwQY MBaAFLNg8Al75IHCG7HVHIXUT2V0FYqpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvczJEd0NYdmtnY0lic2RVY2hkUlBaWFFWaXFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi80YWE1YTctOGJlYy00MjQ3LWExNWYt NWEzNjEyMzUyYjM3LzEvQlA4b2haQmNqNk5jcUJSakdjMjVRZ05ybm5JLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi80YWE1YTctOGJlYy00MjQ3LWExNWYtNWEzNjEyMzUyYjM3 LzEvczJEd0NYdmtnY0lic2RVY2hkUlBaWFFWaXFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKhQqAAEw DQYJKoZIhvcNAQELBQADggEBAFM+AXIf9uDzi9SRl7OAqFUG9irK4qaPeMMEPjbx jhTmf1APRQSnKgeRBcksPRRKeXuZfMlbocFrUUADnTv3LpNLIMBTNxznGkuuLx5B 1F6EHMwqz9mjcJZUFn7rTTeEWsCu2rw+rNUpsXrU7G2Hg7d62pJ+XUP851FEESoj EBupylNZ6gFJEjWdnzJNhudU6TD7PmgcgF8yAEymX52XKU5pGe2wp66tddLDVbWP k9dtSS0gcHyPFV+XYscxkHTy6zy17eqPL/au+nkYowAzzxWct74tggJMAGI4N4md nfr3iIBAaZfRGCvEgqtVP3KLOGVNh/KQ3ZwIcu3L0kv+cxU= -----END CERTIFICATE-----Generated at Wed Jan 7 23:48:05 2026 by rpki-client