This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/bK_4sAIyMm7vi7Kf9XUlepjv_c4.roa File: bK_4sAIyMm7vi7Kf9XUlepjv_c4.roa (raw, json) Hash identifier: XPIFjQqXL34dAlZiMx35zcOAehpTCOrVlkq3nqHen10= Subject key identifier: 6C:AF:F8:B0:02:32:32:6E:EF:8B:B2:9F:F5:75:25:7A:98:EF:FD:CE Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f Certificate serial: 019B79109420A2323780D3C421D14B1DD441 Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/bK_4sAIyMm7vi7Kf9XUlepjv_c4.roa Signing time: Thu 01 Jan 2026 10:18:08 +0000 ROA not before: Thu 01 Jan 2026 10:18:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199519 IP address blocks: 2a12:bec0:210::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.mft rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:94:20:a2:32:37:80:d3:c4:21:d1:4b:1d:d4:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f Validity Not Before: Jan 1 10:18:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6caff8b00232326eef8bb29ff575257a98effdce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:e7:35:ce:d9:11:af:59:20:f4:c1:cc:d4:05: 47:65:61:97:51:bc:ab:2e:ac:22:a5:e7:1a:08:e9: 6a:8e:b4:24:50:98:5e:b3:6a:d4:8c:6c:38:ac:38: 15:bf:42:27:de:ea:34:7b:83:d2:96:d6:4d:bd:01: b0:ce:9f:a1:2a:c8:78:ab:17:b1:35:2d:86:7a:02: 15:df:f8:20:38:75:21:92:2a:3b:72:fe:85:4b:e3: 48:33:2c:00:6f:3d:6f:ff:1e:9a:27:d8:3f:69:05: 33:74:9c:06:22:3e:93:04:95:cf:99:8f:82:3d:b0: 27:52:25:fb:a1:65:28:b9:f0:8f:33:44:7b:58:78: db:6c:31:1f:23:61:37:7d:3d:08:c4:a9:83:67:e4: aa:46:47:6c:96:55:40:22:9e:72:47:1f:5c:d8:a9: fa:b2:55:8b:4b:df:ac:af:17:36:55:09:83:9b:2c: 4e:d6:de:f2:7e:73:e7:dc:36:6f:6d:d8:09:14:3b: de:c9:43:ff:fe:7c:98:c0:46:7d:94:0e:3c:1d:a7: a0:77:99:fc:b5:ba:20:85:c2:1b:02:2a:19:f1:11: 7e:32:e3:2a:3d:ec:1e:d5:3b:29:03:cd:2f:44:ab: ac:64:72:dd:52:ba:03:94:4e:f5:70:17:67:18:ad: 50:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:AF:F8:B0:02:32:32:6E:EF:8B:B2:9F:F5:75:25:7A:98:EF:FD:CE X509v3 Authority Key Identifier: keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/bK_4sAIyMm7vi7Kf9XUlepjv_c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a12:bec0:210::/44 Signature Algorithm: sha256WithRSAEncryption 05:95:dd:5e:30:98:53:b0:51:40:c4:68:12:96:b6:04:76:bf: b8:64:2c:e0:e9:2d:b0:27:91:db:2a:51:50:44:a3:f2:13:d6: d6:2e:8a:ff:e3:b9:b8:98:a5:80:ea:97:f8:73:2a:99:e2:1a: a4:b9:35:5f:7f:b4:13:18:37:e8:b3:e3:f7:dc:6e:3a:ae:38: 34:04:65:e2:e9:8d:04:2e:75:3a:09:05:9b:d2:60:d9:2f:cd: 85:85:6f:8e:b0:dd:bb:d1:9e:ad:3d:e8:ff:a3:90:57:74:99: 16:4f:37:0a:97:ef:3c:ad:c5:d6:21:25:3c:6b:56:03:38:00: 3e:40:95:c2:85:3e:8c:ae:1e:68:4d:c8:b6:1d:a1:de:55:e4: 67:da:1e:a5:66:0b:d8:2b:41:38:0d:47:6e:1f:26:ad:fc:02: a4:81:4c:74:3b:df:05:56:49:be:0d:60:1c:ab:2f:9f:01:19: a2:9e:0d:da:6c:99:db:03:f2:6c:13:00:2b:d9:58:f6:fc:53: 75:5a:3b:fe:89:22:61:cd:94:8e:99:ef:71:88:41:49:36:44: 51:43:54:8c:30:f4:e7:4f:da:b9:05:33:8a:15:12:4d:6e:c1: 6b:5b:f9:61:8d:7b:15:e2:d6:6a:3f:b3:54:89:d2:e3:9f:84: 04:d1:9a:02 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt5EJQgojI3gNPEIdFLHdRBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzN2UyMTVhNDE1ZWQ3YjVkZTRiNmRjMTJmMmY3Yjc3NTBj M2Q2NmYwHhcNMjYwMTAxMTAxODA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2Y2FmZjhiMDAyMzIzMjZlZWY4YmIyOWZmNTc1MjU3YTk4ZWZmZGNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvuc1ztkRr1kg9MHM1AVHZWGXUbyr LqwipecaCOlqjrQkUJhes2rUjGw4rDgVv0In3uo0e4PSltZNvQGwzp+hKsh4qxex NS2GegIV3/ggOHUhkio7cv6FS+NIMywAbz1v/x6aJ9g/aQUzdJwGIj6TBJXPmY+C PbAnUiX7oWUoufCPM0R7WHjbbDEfI2E3fT0IxKmDZ+SqRkdsllVAIp5yRx9c2Kn6 slWLS9+srxc2VQmDmyxO1t7yfnPn3DZvbdgJFDveyUP//nyYwEZ9lA48Haegd5n8 tboghcIbAioZ8RF+MuMqPewe1TspA80vRKusZHLdUroDlE71cBdnGK1Q1wIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFGyv+LACMjJu74uyn/V1JXqY7/3OMB8GA1UdIwQY MBaAFLN+IVpBXte13kttwS8ve3dQw9ZvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQt NTUzNjljZjUwN2VlLzEvYktfNHNBSXlNbTd2aTdLZjlYVWxlcGp2X2M0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQtNTUzNjljZjUwN2Vl LzEvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhK+wAIQ MA0GCSqGSIb3DQEBCwUAA4IBAQAFld1eMJhTsFFAxGgSlrYEdr+4ZCzg6S2wJ5Hb KlFQRKPyE9bWLor/47m4mKWA6pf4cyqZ4hqkuTVff7QTGDfos+P33G46rjg0BGXi 6Y0ELnU6CQWb0mDZL82FhW+OsN270Z6tPej/o5BXdJkWTzcKl+88rcXWISU8a1YD OAA+QJXChT6Mrh5oTci2HaHeVeRn2h6lZgvYK0E4DUduHyat/AKkgUx0O98FVkm+ DWAcqy+fARming3abJnbA/JsEwAr2Vj2/FN1Wjv+iSJhzZSOme9xiEFJNkRRQ1SM MPTnT9q5BTOKFRJNbsFrW/lhjXsV4tZqP7NUidLjn4QE0ZoC -----END CERTIFICATE-----Generated at Tue Jan 20 02:47:19 2026 by rpki-client