This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/bGOC2oXwsyyaCzeKsgYh2tkCJOo.roa File: bGOC2oXwsyyaCzeKsgYh2tkCJOo.roa (raw, json) Hash identifier: PFmiiT2W/4Ssea4Iqzn2dRCmhXpllyfaqF9OsnijkY0= Subject key identifier: 6C:63:82:DA:85:F0:B3:2C:9A:0B:37:8A:B2:06:21:DA:D9:02:24:EA Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f Certificate serial: 019B7910B7A8DF1FA101F116209D3A770534 Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/bGOC2oXwsyyaCzeKsgYh2tkCJOo.roa Signing time: Thu 01 Jan 2026 10:18:17 +0000 ROA not before: Thu 01 Jan 2026 10:18:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215114 IP address blocks: 2a12:bec4:1190::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.mft rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:b7:a8:df:1f:a1:01:f1:16:20:9d:3a:77:05:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f Validity Not Before: Jan 1 10:18:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6c6382da85f0b32c9a0b378ab20621dad90224ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:ae:24:b2:a3:2c:aa:d9:f1:a2:db:b1:19:0c: ef:88:96:24:39:bf:5d:db:32:6b:3c:c3:9b:03:b1: f4:f5:fa:d6:44:f5:e7:f0:ed:ee:6e:29:9f:c8:83: c0:86:be:69:d6:e5:f9:f5:24:ee:81:bd:ee:87:3f: b1:0b:d5:79:9e:1e:c1:58:15:9d:46:d5:1f:50:a5: 83:11:d6:83:a9:da:1a:d6:26:66:e0:c2:3a:a4:7e: c0:72:f4:f5:94:86:89:a2:3b:dc:8c:a2:28:ef:c8: 8c:18:61:bc:60:ec:ce:dc:ce:aa:63:67:4a:89:62: a2:28:d9:42:82:98:0f:a8:79:2b:e7:0b:cd:67:bb: bd:23:65:5a:02:64:ee:e0:6f:bf:96:ad:91:31:80: 6b:af:fa:63:bc:86:ba:c1:02:f6:a6:75:67:32:51: 33:91:fd:5c:40:34:75:71:07:0b:7f:68:64:2f:2b: 05:43:25:0b:cd:f5:47:a5:6a:a1:64:58:d4:d9:bc: c5:77:1b:2f:9b:83:ef:f6:25:71:46:2f:a8:44:c4: d5:83:57:8c:97:92:d0:32:b2:3f:0f:b7:65:52:3c: df:d9:7e:80:89:68:a7:67:99:93:f3:3c:1d:61:ef: 85:0e:60:10:fa:bb:e3:d9:01:92:c0:c3:7f:2a:f4: 15:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:63:82:DA:85:F0:B3:2C:9A:0B:37:8A:B2:06:21:DA:D9:02:24:EA X509v3 Authority Key Identifier: keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/bGOC2oXwsyyaCzeKsgYh2tkCJOo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a12:bec4:1190::/44 Signature Algorithm: sha256WithRSAEncryption 33:32:af:4a:70:24:1c:fd:21:60:d6:0f:46:6f:66:98:a0:19: ca:93:da:e7:41:88:d6:b0:c5:96:74:64:ec:e6:8e:fb:e4:d0: cc:f7:78:e6:33:10:5f:af:da:9c:8f:3c:17:82:7f:49:01:70: 1a:8b:e2:c6:88:b4:d2:b9:8d:d2:33:e5:9d:57:81:10:ed:06: cd:be:65:fe:b1:1e:06:3c:81:cf:b6:a1:8b:e9:a3:cd:ea:2e: ca:f2:ca:af:6c:6e:a1:51:6c:bc:1e:ba:21:42:62:4e:d4:54: 9f:a9:97:91:58:3c:0e:14:a3:b2:92:d6:ac:b3:20:cb:15:8d: ad:b6:8c:a0:86:28:7a:09:96:7b:df:e7:c9:51:16:b2:5a:e4: b7:d5:9d:b2:c0:0f:86:47:28:a4:21:14:b3:49:21:7a:61:a9: a7:9f:b6:e7:fd:50:3b:2b:b6:90:46:41:53:cd:0f:ef:3c:90: fc:3a:89:6e:06:31:99:20:c4:3b:52:21:be:5e:89:eb:4c:8b: 9a:8f:d8:b8:cb:f1:3f:98:aa:9b:db:e2:b1:03:1b:95:cc:83: 7e:40:88:b3:ec:d6:8b:f6:34:7a:9d:ad:b7:1b:bd:12:8c:07: 22:69:f6:4e:ce:de:f2:48:eb:91:97:70:1b:97:f2:c7:fd:a7: 47:24:70:93 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt5ELeo3x+hAfEWIJ06dwU0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzN2UyMTVhNDE1ZWQ3YjVkZTRiNmRjMTJmMmY3Yjc3NTBj M2Q2NmYwHhcNMjYwMTAxMTAxODE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YzYzODJkYTg1ZjBiMzJjOWEwYjM3OGFiMjA2MjFkYWQ5MDIyNGVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvq4ksqMsqtnxotuxGQzviJYkOb9d 2zJrPMObA7H09frWRPXn8O3ubimfyIPAhr5p1uX59STugb3uhz+xC9V5nh7BWBWd RtUfUKWDEdaDqdoa1iZm4MI6pH7AcvT1lIaJojvcjKIo78iMGGG8YOzO3M6qY2dK iWKiKNlCgpgPqHkr5wvNZ7u9I2VaAmTu4G+/lq2RMYBrr/pjvIa6wQL2pnVnMlEz kf1cQDR1cQcLf2hkLysFQyULzfVHpWqhZFjU2bzFdxsvm4Pv9iVxRi+oRMTVg1eM l5LQMrI/D7dlUjzf2X6AiWinZ5mT8zwdYe+FDmAQ+rvj2QGSwMN/KvQVGQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFGxjgtqF8LMsmgs3irIGIdrZAiTqMB8GA1UdIwQY MBaAFLN+IVpBXte13kttwS8ve3dQw9ZvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQt NTUzNjljZjUwN2VlLzEvYkdPQzJvWHdzeXlhQ3plS3NnWWgydGtDSk9vLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQtNTUzNjljZjUwN2Vl LzEvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhK+xBGQ MA0GCSqGSIb3DQEBCwUAA4IBAQAzMq9KcCQc/SFg1g9Gb2aYoBnKk9rnQYjWsMWW dGTs5o775NDM93jmMxBfr9qcjzwXgn9JAXAai+LGiLTSuY3SM+WdV4EQ7QbNvmX+ sR4GPIHPtqGL6aPN6i7K8sqvbG6hUWy8HrohQmJO1FSfqZeRWDwOFKOyktassyDL FY2ttoyghih6CZZ73+fJURayWuS31Z2ywA+GRyikIRSzSSF6Yamnn7bn/VA7K7aQ RkFTzQ/vPJD8OoluBjGZIMQ7UiG+XonrTIuaj9i4y/E/mKqb2+KxAxuVzIN+QIiz 7NaL9jR6na23G70SjAciafZOzt7ySOuRl3Abl/LH/adHJHCT -----END CERTIFICATE-----Generated at Tue Jan 20 02:47:18 2026 by rpki-client