This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/BgtyQP-sgln0GRykBoQ8S7fXMlI.roa File: BgtyQP-sgln0GRykBoQ8S7fXMlI.roa (raw, json) Hash identifier: rEMKdRQ0/06lU6cDXLyKWQBB7PBnclKe5v5PqGSdoKw= Subject key identifier: 06:0B:72:40:FF:AC:82:59:F4:19:1C:A4:06:84:3C:4B:B7:D7:32:52 Certificate issuer: /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa Certificate serial: 019B797E9C47C388EE04EAA8B58F54A561EA Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/BgtyQP-sgln0GRykBoQ8S7fXMlI.roa Signing time: Thu 01 Jan 2026 12:18:19 +0000 ROA not before: Thu 01 Jan 2026 12:18:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 24239 IP address blocks: 2a0e:aa06:490::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.mft rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 07 Jan 2026 14:32:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:9c:47:c3:88:ee:04:ea:a8:b5:8f:54:a5:61:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa Validity Not Before: Jan 1 12:18:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=060b7240ffac8259f4191ca406843c4bb7d73252 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:2e:e2:f2:9c:5a:e7:1e:f9:17:2b:a3:17:ee: 7b:39:cd:a0:8a:25:a2:0b:84:f9:b1:cf:48:4b:49: 84:17:41:bb:0c:8c:ae:96:21:01:30:47:30:73:cb: 1b:98:c4:27:b2:c5:c7:20:72:9a:81:2a:99:1a:b2: f0:ca:bb:92:98:9f:33:b4:cb:0f:18:b8:e4:50:d1: 03:45:27:a3:92:10:53:14:42:1c:39:49:fc:0f:85: b5:93:77:54:e5:c8:da:1b:6e:72:f7:e2:c3:08:ae: 2a:dd:cf:83:9b:d1:a6:01:42:f8:cb:de:fb:ea:a3: d8:35:93:12:1e:19:7c:1b:28:a6:fd:d9:80:13:66: d8:e9:59:94:a2:0f:5d:ea:98:c4:41:9b:30:30:d5: 9c:98:99:99:10:a3:9b:66:0b:99:e7:39:5f:68:c5: 0c:5f:ce:3d:8a:99:33:ea:78:e8:4f:a9:dd:93:80: f9:ca:8a:59:c8:7f:a2:00:87:c7:b3:a2:2c:34:7f: a1:68:97:05:21:5d:0e:1d:23:1e:5d:7c:db:a6:17: c1:64:08:c8:9d:35:ab:8d:bc:f7:6b:a1:b0:94:e5: 86:9d:89:38:fa:22:45:4b:ea:9e:73:6c:0c:3e:0c: 99:6e:42:97:a3:a1:f0:95:91:a5:c6:0f:52:ae:73: e3:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:0B:72:40:FF:AC:82:59:F4:19:1C:A4:06:84:3C:4B:B7:D7:32:52 X509v3 Authority Key Identifier: keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/BgtyQP-sgln0GRykBoQ8S7fXMlI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:aa06:490::/44 Signature Algorithm: sha256WithRSAEncryption 1d:f7:47:2b:43:67:d4:4c:ea:79:5b:49:66:db:1e:19:94:93: 74:ea:49:2e:28:5b:fa:e0:c2:62:fc:5f:bf:af:61:e7:28:f7: 9e:12:3c:52:e6:3e:03:94:b7:be:92:81:1d:a6:6a:d7:80:b5: 16:2d:ab:07:f5:4a:a1:e1:8a:e4:ed:8a:97:98:87:1a:b2:a2: 43:e4:c1:36:45:ee:11:6f:a7:ca:19:7a:bd:63:a6:48:c1:8c: ce:54:c1:22:1e:1a:27:20:43:0e:f8:ce:fe:5e:f2:d7:d3:7e: ac:53:b0:ca:73:c9:65:32:3b:2b:4c:07:4f:3d:2e:4c:59:dc: ed:d7:4e:87:ea:0e:02:81:48:00:07:07:cf:7a:f7:9b:1f:a2: 09:d2:9f:bd:3c:d7:be:00:f0:ea:aa:f1:6b:48:15:1c:77:b5: 15:3b:b3:dd:15:d6:db:4c:fd:47:1a:48:dc:bc:94:2b:9d:ac: 48:00:22:22:a3:48:1a:b8:9c:f5:23:dc:df:f1:44:6b:45:56: 4f:c7:18:1b:0b:8f:e3:2d:25:89:71:24:89:27:e6:ff:dd:1b: 00:d2:38:dc:b7:0e:86:57:1e:50:d9:28:04:7e:3a:82:47:68: 9d:15:97:c4:33:f4:3a:cc:86:3f:f0:95:6e:e9:72:cf:80:a2: 0b:7a:58:fe -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt5fpxHw4juBOqotY9UpWHqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzNjFiNWNkNjk2ODI1Yjc0ZmNjYmE3ZDk3YzNkMGEyNzI0 ZWYzYWEwHhcNMjYwMTAxMTIxODE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNjBiNzI0MGZmYWM4MjU5ZjQxOTFjYTQwNjg0M2M0YmI3ZDczMjUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0y7i8pxa5x75FyujF+57Oc2giiWi C4T5sc9IS0mEF0G7DIyuliEBMEcwc8sbmMQnssXHIHKagSqZGrLwyruSmJ8ztMsP GLjkUNEDRSejkhBTFEIcOUn8D4W1k3dU5cjaG25y9+LDCK4q3c+Dm9GmAUL4y977 6qPYNZMSHhl8Gyim/dmAE2bY6VmUog9d6pjEQZswMNWcmJmZEKObZguZ5zlfaMUM X849ipkz6njoT6ndk4D5yopZyH+iAIfHs6IsNH+haJcFIV0OHSMeXXzbphfBZAjI nTWrjbz3a6GwlOWGnYk4+iJFS+qec2wMPgyZbkKXo6HwlZGlxg9SrnPjHwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFAYLckD/rIJZ9BkcpAaEPEu31zJSMB8GA1UdIwQY MBaAFJNhtc1paCW3T8y6fZfD0KJyTvOqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazJHMXpXbG9KYmRQekxwOWw4UFFvbkpPODZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi83MmJmMmYtOGUzNC00OGEyLTg0OWEt YTU0MWQxYmNlZTE5LzEvQmd0eVFQLXNnbG4wR1J5a0JvUThTN2ZYTWxJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi83MmJmMmYtOGUzNC00OGEyLTg0OWEtYTU0MWQxYmNlZTE5 LzEvazJHMXpXbG9KYmRQekxwOWw4UFFvbkpPODZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg6qBgSQ MA0GCSqGSIb3DQEBCwUAA4IBAQAd90crQ2fUTOp5W0lm2x4ZlJN06kkuKFv64MJi /F+/r2HnKPeeEjxS5j4DlLe+koEdpmrXgLUWLasH9Uqh4Yrk7YqXmIcasqJD5ME2 Re4Rb6fKGXq9Y6ZIwYzOVMEiHhonIEMO+M7+XvLX036sU7DKc8llMjsrTAdPPS5M Wdzt106H6g4CgUgABwfPevebH6IJ0p+9PNe+APDqqvFrSBUcd7UVO7PdFdbbTP1H GkjcvJQrnaxIACIio0gauJz1I9zf8URrRVZPxxgbC4/jLSWJcSSJJ+b/3RsA0jjc tw6GVx5Q2SgEfjqCR2idFZfEM/Q6zIY/8JVu6XLPgKILelj+ -----END CERTIFICATE-----Generated at Tue Jan 6 21:31:19 2026 by rpki-client