This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/d0f619-b2d3-4422-a618-b9dd51082655/1/BXTPXysSBRPuUoSICW7HfZCr-Dw.roa File: BXTPXysSBRPuUoSICW7HfZCr-Dw.roa (raw, json) Hash identifier: +AZDE7fpWxbiq4XsQ/ZUYVAIhS86drQiS4sJ0QHcFJ0= Subject key identifier: 05:74:CF:5F:2B:12:05:13:EE:52:84:88:09:6E:C7:7D:90:AB:F8:3C Certificate issuer: /CN=b607604501de3609768c5ba7c4cca9c56b61f9d5 Certificate serial: 019B797F3533AEE78453D61DE2445E0679D3 Authority key identifier: B6:07:60:45:01:DE:36:09:76:8C:5B:A7:C4:CC:A9:C5:6B:61:F9:D5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tgdgRQHeNgl2jFunxMypxWth-dU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/d0f619-b2d3-4422-a618-b9dd51082655/1/BXTPXysSBRPuUoSICW7HfZCr-Dw.roa Signing time: Thu 01 Jan 2026 12:18:58 +0000 ROA not before: Thu 01 Jan 2026 12:18:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 400818 IP address blocks: 2a05:b0c7:1800::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/d0f619-b2d3-4422-a618-b9dd51082655/1/tgdgRQHeNgl2jFunxMypxWth-dU.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/d0f619-b2d3-4422-a618-b9dd51082655/1/tgdgRQHeNgl2jFunxMypxWth-dU.mft rsync://rpki.ripe.net/repository/DEFAULT/tgdgRQHeNgl2jFunxMypxWth-dU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 12:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:35:33:ae:e7:84:53:d6:1d:e2:44:5e:06:79:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b607604501de3609768c5ba7c4cca9c56b61f9d5 Validity Not Before: Jan 1 12:18:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0574cf5f2b120513ee528488096ec77d90abf83c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:86:69:e3:ae:6a:ce:68:18:8a:73:03:ef:07: f8:c3:a0:61:0b:5d:ec:df:4a:e5:87:00:94:58:db: 89:59:69:44:d9:87:55:9d:93:b2:af:17:e1:f2:1a: f0:9f:3c:3d:8f:fa:86:d8:99:4d:13:d5:ba:0a:c7: 2c:19:fc:3d:bb:a9:39:a6:19:df:4b:08:b3:42:fd: 2d:3f:43:46:f1:1a:0e:30:2a:96:54:6f:4d:be:2c: ad:11:b4:19:88:50:67:ab:88:d0:8e:6a:3b:7c:e9: df:df:32:df:b7:b6:ac:51:2b:62:b4:5c:bf:01:95: db:58:72:fd:a1:4c:b2:24:61:9e:92:a3:c3:56:1c: 1b:1c:60:5f:78:81:ac:1d:33:ca:44:52:f0:01:01: 25:e7:cc:ae:ee:d6:44:4d:9f:69:52:f2:3a:8e:90: 14:1a:2a:63:4f:7a:b2:93:43:e4:6e:db:6c:b8:77: f8:44:0c:57:bc:dc:ac:4e:1a:e8:6d:ed:13:80:57: 3d:7c:21:b9:c6:21:5c:f6:c0:b4:1b:cf:d4:80:0d: 0c:1e:01:7d:4d:f2:12:fa:bb:35:c9:e9:5f:38:d7: 6d:09:0b:4f:6d:16:00:be:00:fe:c1:77:a4:b0:19: 2a:b7:8b:5b:f2:f8:ee:f4:2a:58:1e:10:72:ec:cb: 26:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:74:CF:5F:2B:12:05:13:EE:52:84:88:09:6E:C7:7D:90:AB:F8:3C X509v3 Authority Key Identifier: keyid:B6:07:60:45:01:DE:36:09:76:8C:5B:A7:C4:CC:A9:C5:6B:61:F9:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tgdgRQHeNgl2jFunxMypxWth-dU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/d0f619-b2d3-4422-a618-b9dd51082655/1/BXTPXysSBRPuUoSICW7HfZCr-Dw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/d0f619-b2d3-4422-a618-b9dd51082655/1/tgdgRQHeNgl2jFunxMypxWth-dU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:b0c7:1800::/48 Signature Algorithm: sha256WithRSAEncryption 51:dd:f0:5a:27:28:f7:2b:fa:9a:1e:10:ff:5f:32:fc:ec:0f: 61:33:fe:01:08:84:be:79:c5:41:c8:7d:aa:e5:48:d4:43:32: 71:2d:30:64:40:cd:85:34:e2:a1:1a:06:9b:6d:dc:a1:8b:f1: 1a:bf:92:6c:a7:84:d1:f3:f8:9e:7c:83:b1:6d:ab:aa:af:48: cc:ba:8f:2b:b0:cd:57:b4:ff:5e:e3:48:59:57:bd:6d:75:ea: c2:b8:cd:a9:a9:76:e1:d5:36:fe:9e:ec:23:ce:ff:e5:52:92: 9d:d6:00:32:37:18:83:53:4f:3d:2c:00:0b:f3:bd:7d:ec:50: c3:4b:d8:d7:5b:ae:3a:d4:f4:fc:56:aa:64:a4:91:21:f8:2d: e8:0f:dd:82:af:e6:fe:3d:33:d6:f6:a2:31:a8:a7:1e:69:c3: 4c:18:7a:f6:48:f6:a7:a7:7a:5c:ce:7b:ce:ba:50:21:06:6e: 84:1f:65:ea:ae:2e:7f:81:f1:32:d7:87:ea:99:f4:64:b9:59: 88:2c:5a:cf:23:0f:07:93:39:56:94:22:30:40:d0:a7:bd:8e: dc:4b:73:7b:57:c1:6f:12:84:34:dd:e5:d5:88:32:0d:1f:d4: 71:c8:eb:78:0b:4e:38:7f:06:24:97:ad:48:46:0e:fe:19:ca: 40:7c:a0:58 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt5fzUzrueEU9Yd4kReBnnTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2MDc2MDQ1MDFkZTM2MDk3NjhjNWJhN2M0Y2NhOWM1NmI2 MWY5ZDUwHhcNMjYwMTAxMTIxODU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNTc0Y2Y1ZjJiMTIwNTEzZWU1Mjg0ODgwOTZlYzc3ZDkwYWJmODNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9oZp465qzmgYinMD7wf4w6BhC13s 30rlhwCUWNuJWWlE2YdVnZOyrxfh8hrwnzw9j/qG2JlNE9W6CscsGfw9u6k5phnf SwizQv0tP0NG8RoOMCqWVG9NviytEbQZiFBnq4jQjmo7fOnf3zLft7asUStitFy/ AZXbWHL9oUyyJGGekqPDVhwbHGBfeIGsHTPKRFLwAQEl58yu7tZETZ9pUvI6jpAU GipjT3qyk0PkbttsuHf4RAxXvNysThrobe0TgFc9fCG5xiFc9sC0G8/UgA0MHgF9 TfIS+rs1yelfONdtCQtPbRYAvgD+wXeksBkqt4tb8vju9CpYHhBy7MsmgwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFAV0z18rEgUT7lKEiAlux32Qq/g8MB8GA1UdIwQY MBaAFLYHYEUB3jYJdoxbp8TMqcVrYfnVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdGdkZ1JRSGVOZ2wyakZ1bnhNeXB4V3RoLWRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9kMGY2MTktYjJkMy00NDIyLWE2MTgt YjlkZDUxMDgyNjU1LzEvQlhUUFh5c1NCUlB1VW9TSUNXN0hmWkNyLUR3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS9kMGY2MTktYjJkMy00NDIyLWE2MTgtYjlkZDUxMDgyNjU1 LzEvdGdkZ1JRSGVOZ2wyakZ1bnhNeXB4V3RoLWRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgWwxxgA MA0GCSqGSIb3DQEBCwUAA4IBAQBR3fBaJyj3K/qaHhD/XzL87A9hM/4BCIS+ecVB yH2q5UjUQzJxLTBkQM2FNOKhGgabbdyhi/Eav5Jsp4TR8/iefIOxbauqr0jMuo8r sM1XtP9e40hZV71tderCuM2pqXbh1Tb+nuwjzv/lUpKd1gAyNxiDU089LAAL8719 7FDDS9jXW6461PT8VqpkpJEh+C3oD92Cr+b+PTPW9qIxqKceacNMGHr2SPanp3pc znvOulAhBm6EH2Xqri5/gfEy14fqmfRkuVmILFrPIw8HkzlWlCIwQNCnvY7cS3N7 V8FvEoQ03eXViDINH9RxyOt4C044fwYkl61IRg7+GcpAfKBY -----END CERTIFICATE-----Generated at Mon Jan 19 20:36:06 2026 by rpki-client