This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/bpTS23GY5SFHVc8Tp2EjqmYVI3A.roa File: bpTS23GY5SFHVc8Tp2EjqmYVI3A.roa (raw, json) Hash identifier: B1/JYIHONeu5T+9KMFs8HbLkVSRnVqVbfPSbdjh7bZ8= Subject key identifier: 6E:94:D2:DB:71:98:E5:21:47:55:CF:13:A7:61:23:AA:66:15:23:70 Certificate issuer: /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa Certificate serial: 019B797EA9FAFD900FABE1D280496EEBE484 Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/bpTS23GY5SFHVc8Tp2EjqmYVI3A.roa Signing time: Thu 01 Jan 2026 12:18:22 +0000 ROA not before: Thu 01 Jan 2026 12:18:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203899 IP address blocks: 2a0e:aa07:e042::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.mft rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 07 Jan 2026 14:32:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:a9:fa:fd:90:0f:ab:e1:d2:80:49:6e:eb:e4:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa Validity Not Before: Jan 1 12:18:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6e94d2db7198e5214755cf13a76123aa66152370 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:14:53:62:8c:3e:b8:80:7b:b5:04:a6:a9:63: c4:3e:af:0c:9a:53:67:d9:33:6d:76:13:7b:51:ed: 42:ad:06:39:04:d7:c9:06:0c:85:58:d6:a9:45:bc: 87:e2:4c:27:51:35:89:6f:dd:b6:54:e9:10:65:5a: a5:1e:d5:03:5b:f3:be:1d:e6:80:ad:26:9a:42:d4: 21:82:86:37:1b:ff:06:2f:92:52:68:2e:95:49:35: 8d:63:5b:29:8a:a6:dd:78:0d:a0:1e:71:5c:35:8b: 53:2a:50:7f:41:fb:40:b1:44:fd:9a:19:0b:c1:3e: 38:f9:8a:40:3c:42:1c:d0:a4:1e:82:5d:d0:f3:18: af:c1:b5:cb:d0:c4:a1:63:f3:c8:b2:9c:4c:be:ef: df:ea:28:83:f3:43:e4:f5:ac:3a:8b:41:b7:a7:79: 06:fc:46:7b:e0:78:60:62:00:45:7c:e6:03:ea:56: bd:5a:40:42:dd:f1:79:ea:ad:bb:98:f3:e8:71:ca: 94:f0:af:66:3e:cc:de:92:58:87:5a:14:39:87:a5: 5c:98:95:19:24:b0:8c:4d:1c:8a:64:4a:48:9c:84: 8d:fa:ef:59:ae:60:3c:a7:64:29:0f:12:f4:88:82: 25:fe:79:ce:f5:a0:13:4d:e2:47:97:0e:4d:17:b3: 0f:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:94:D2:DB:71:98:E5:21:47:55:CF:13:A7:61:23:AA:66:15:23:70 X509v3 Authority Key Identifier: keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/bpTS23GY5SFHVc8Tp2EjqmYVI3A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:aa07:e042::/48 Signature Algorithm: sha256WithRSAEncryption 6b:57:48:91:66:16:f5:86:bf:55:6c:0e:ad:1f:17:74:27:3b: b5:29:eb:e0:bf:d5:97:8c:cd:24:b1:40:c1:09:c4:a9:0b:a4: a5:11:ad:6e:8b:67:56:72:eb:42:0e:2a:5f:87:bb:ca:d6:bb: 4a:0e:2b:71:89:6f:40:58:c8:50:09:2a:eb:a3:83:2a:19:79: f1:00:f1:fc:0a:40:36:4c:72:a3:d9:9e:c6:db:75:80:de:1a: 0d:4c:d1:d8:71:d8:4b:6d:99:ec:d4:5c:ed:b9:67:eb:85:0d: 12:9e:77:ad:91:e5:51:a7:01:83:a7:bf:59:11:2a:b8:0b:68: 84:02:44:cd:8a:3b:a4:58:59:07:c9:11:b8:35:df:b0:4f:b8: 26:75:11:01:7b:80:48:39:66:f8:2f:e2:e6:e0:99:77:67:97: 29:0e:e3:d1:cd:dc:69:ed:26:a6:16:27:7d:0d:74:95:63:53: 17:1c:d9:86:fe:62:78:67:f5:c8:22:43:3a:ac:98:20:89:cd: 8b:fd:af:66:95:3a:1f:39:b6:f5:41:d1:05:13:85:1e:ab:37: f8:a2:35:b3:11:35:77:0d:8d:2c:3e:4d:a8:b9:92:6c:6f:e9: d1:61:85:0c:0f:d0:6c:3f:49:b1:b6:b5:33:4a:67:25:e5:36: 42:7d:a8:9f -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt5fqn6/ZAPq+HSgElu6+SEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzNjFiNWNkNjk2ODI1Yjc0ZmNjYmE3ZDk3YzNkMGEyNzI0 ZWYzYWEwHhcNMjYwMTAxMTIxODIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZTk0ZDJkYjcxOThlNTIxNDc1NWNmMTNhNzYxMjNhYTY2MTUyMzcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxBRTYow+uIB7tQSmqWPEPq8MmlNn 2TNtdhN7Ue1CrQY5BNfJBgyFWNapRbyH4kwnUTWJb922VOkQZVqlHtUDW/O+HeaA rSaaQtQhgoY3G/8GL5JSaC6VSTWNY1spiqbdeA2gHnFcNYtTKlB/QftAsUT9mhkL wT44+YpAPEIc0KQegl3Q8xivwbXL0MShY/PIspxMvu/f6iiD80Pk9aw6i0G3p3kG /EZ74HhgYgBFfOYD6la9WkBC3fF56q27mPPoccqU8K9mPszekliHWhQ5h6VcmJUZ JLCMTRyKZEpInISN+u9ZrmA8p2QpDxL0iIIl/nnO9aATTeJHlw5NF7MPnwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFG6U0ttxmOUhR1XPE6dhI6pmFSNwMB8GA1UdIwQY MBaAFJNhtc1paCW3T8y6fZfD0KJyTvOqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazJHMXpXbG9KYmRQekxwOWw4UFFvbkpPODZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi83MmJmMmYtOGUzNC00OGEyLTg0OWEt YTU0MWQxYmNlZTE5LzEvYnBUUzIzR1k1U0ZIVmM4VHAyRWpxbVlWSTNBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi83MmJmMmYtOGUzNC00OGEyLTg0OWEtYTU0MWQxYmNlZTE5 LzEvazJHMXpXbG9KYmRQekxwOWw4UFFvbkpPODZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg6qB+BC MA0GCSqGSIb3DQEBCwUAA4IBAQBrV0iRZhb1hr9VbA6tHxd0Jzu1Kevgv9WXjM0k sUDBCcSpC6SlEa1ui2dWcutCDipfh7vK1rtKDitxiW9AWMhQCSrro4MqGXnxAPH8 CkA2THKj2Z7G23WA3hoNTNHYcdhLbZns1FztuWfrhQ0SnnetkeVRpwGDp79ZESq4 C2iEAkTNijukWFkHyRG4Nd+wT7gmdREBe4BIOWb4L+Lm4Jl3Z5cpDuPRzdxp7Sam Fid9DXSVY1MXHNmG/mJ4Z/XIIkM6rJggic2L/a9mlTofObb1QdEFE4Ueqzf4ojWz ETV3DY0sPk2ouZJsb+nRYYUMD9BsP0mxtrUzSmcl5TZCfaif -----END CERTIFICATE-----Generated at Tue Jan 6 21:30:57 2026 by rpki-client