This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/f6c862-af8b-43f3-98ad-44241fec1a9f/1/bet4fdymyOIlEb-62LJXEqjZz4M.roa File: bet4fdymyOIlEb-62LJXEqjZz4M.roa (raw, json) Hash identifier: z3hr8kxRBm3emLdFWmkitNGZ2vCXqhwRUzbp9y48TSg= Subject key identifier: 6D:EB:78:7D:DC:A6:C8:E2:25:11:BF:BA:D8:B2:57:12:A8:D9:CF:83 Certificate issuer: /CN=6a8b5a374f146d7b6a6dc7d316e8ebb12deea670 Certificate serial: 019B7C80D064E074AEE1B5E9672B3785A85A Authority key identifier: 6A:8B:5A:37:4F:14:6D:7B:6A:6D:C7:D3:16:E8:EB:B1:2D:EE:A6:70 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aotaN08UbXtqbcfTFujrsS3upnA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/f6c862-af8b-43f3-98ad-44241fec1a9f/1/bet4fdymyOIlEb-62LJXEqjZz4M.roa Signing time: Fri 02 Jan 2026 02:19:35 +0000 ROA not before: Fri 02 Jan 2026 02:19:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212238 IP address blocks: 2a12:1780::/29 maxlen: 29 2a12:8440::/29 maxlen: 29 2a12:8dc0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/f6c862-af8b-43f3-98ad-44241fec1a9f/1/aotaN08UbXtqbcfTFujrsS3upnA.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/f6c862-af8b-43f3-98ad-44241fec1a9f/1/aotaN08UbXtqbcfTFujrsS3upnA.mft rsync://rpki.ripe.net/repository/DEFAULT/aotaN08UbXtqbcfTFujrsS3upnA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 17:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:d0:64:e0:74:ae:e1:b5:e9:67:2b:37:85:a8:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6a8b5a374f146d7b6a6dc7d316e8ebb12deea670 Validity Not Before: Jan 2 02:19:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6deb787ddca6c8e22511bfbad8b25712a8d9cf83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:aa:82:5c:b1:0b:d5:f1:91:4f:1c:dd:d3:00: 55:20:bf:1c:7d:1f:8b:74:5b:5f:e2:43:0b:bb:3e: d6:1a:e2:67:2d:85:47:09:3b:28:70:e1:a5:bb:59: c8:8a:57:2b:75:3d:69:2f:b1:5c:5d:e8:65:bd:a0: f7:9e:e8:88:d5:7a:18:b5:77:16:bd:ca:79:67:71: b8:e1:32:07:09:3d:1a:1b:11:30:3d:a1:e5:27:70: 5c:da:80:47:9f:01:5f:6e:f5:a8:79:52:38:03:e3: 1e:64:8f:33:7c:c6:b4:4c:77:4a:ee:37:07:ee:90: aa:b6:ea:01:a9:41:6a:83:9b:d1:38:ad:29:38:ab: 15:fe:09:29:02:ea:30:2f:95:60:ea:94:42:37:51: ac:8f:54:21:60:87:2c:ab:2d:7e:a1:a7:2d:f7:d1: 50:ce:a5:26:ee:c2:92:08:be:5b:db:7b:67:db:04: e0:95:70:0c:aa:54:94:1f:82:96:49:df:97:c3:96: 89:96:9e:d6:89:1c:4f:95:7d:01:3f:42:87:f3:29: 81:7f:23:cd:4d:9d:71:52:cf:73:23:ca:bf:be:02: f2:41:74:86:72:a6:3a:72:4a:cf:69:3e:e5:a6:44: 77:34:dd:5c:4e:44:fb:26:53:2b:2c:7a:7f:1e:26: 2c:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:EB:78:7D:DC:A6:C8:E2:25:11:BF:BA:D8:B2:57:12:A8:D9:CF:83 X509v3 Authority Key Identifier: keyid:6A:8B:5A:37:4F:14:6D:7B:6A:6D:C7:D3:16:E8:EB:B1:2D:EE:A6:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aotaN08UbXtqbcfTFujrsS3upnA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f6c862-af8b-43f3-98ad-44241fec1a9f/1/bet4fdymyOIlEb-62LJXEqjZz4M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f6c862-af8b-43f3-98ad-44241fec1a9f/1/aotaN08UbXtqbcfTFujrsS3upnA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a12:1780::/29 2a12:8440::/29 2a12:8dc0::/29 Signature Algorithm: sha256WithRSAEncryption a6:15:64:80:37:8c:c5:61:33:77:2c:1f:47:c6:97:61:dc:03: 35:7c:f6:7c:7c:b9:ec:79:7b:60:ab:69:50:e7:37:2b:92:83: 5d:5e:39:c5:27:e8:6f:cd:6e:24:3f:a5:18:97:f4:8d:be:56: e6:6d:17:4e:fb:3e:2c:d9:b7:11:ec:d0:d4:9f:04:9c:94:53: d7:e3:f4:87:c9:f5:14:a7:00:1c:f6:37:25:8d:79:27:80:12: 33:27:3e:5b:52:34:b1:34:dc:6f:5e:4a:84:0f:b7:f8:d5:d0: db:4d:21:31:18:75:b3:50:c1:70:c3:c0:45:41:a9:ca:e0:d1: 75:94:0f:b1:26:87:8f:2f:31:4f:94:8e:2c:b8:60:12:e2:aa: 6e:69:53:68:f1:37:e3:4d:23:b7:1f:15:2b:50:bc:70:0d:dd: e5:29:85:9c:a0:f6:fd:e5:4f:20:77:39:97:52:19:c4:76:8e: 1b:b5:ec:84:b5:45:75:fb:b4:c8:b7:fa:5a:7a:8b:17:0e:df: bd:20:b3:f4:d8:90:4c:b2:81:26:c1:e8:71:9c:74:59:92:ab: 72:7e:22:17:f9:fd:f4:5b:1e:98:3d:9e:76:fd:d0:84:63:6b: 16:c8:6e:30:fb:8c:c1:69:f6:fe:2b:f8:e7:a7:eb:c0:f6:82: f4:37:f9:4c -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt8gNBk4HSu4bXpZys3hahaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZhOGI1YTM3NGYxNDZkN2I2YTZkYzdkMzE2ZThlYmIxMmRl ZWE2NzAwHhcNMjYwMTAyMDIxOTM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZGViNzg3ZGRjYTZjOGUyMjUxMWJmYmFkOGIyNTcxMmE4ZDljZjgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu6qCXLEL1fGRTxzd0wBVIL8cfR+L dFtf4kMLuz7WGuJnLYVHCTsocOGlu1nIilcrdT1pL7FcXehlvaD3nuiI1XoYtXcW vcp5Z3G44TIHCT0aGxEwPaHlJ3Bc2oBHnwFfbvWoeVI4A+MeZI8zfMa0THdK7jcH 7pCqtuoBqUFqg5vROK0pOKsV/gkpAuowL5Vg6pRCN1Gsj1QhYIcsqy1+oact99FQ zqUm7sKSCL5b23tn2wTglXAMqlSUH4KWSd+Xw5aJlp7WiRxPlX0BP0KH8ymBfyPN TZ1xUs9zI8q/vgLyQXSGcqY6ckrPaT7lpkR3NN1cTkT7JlMrLHp/HiYshwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFG3reH3cpsjiJRG/utiyVxKo2c+DMB8GA1UdIwQY MBaAFGqLWjdPFG17am3H0xbo67Et7qZwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYW90YU4wOFViWHRxYmNmVEZ1anJzUzN1cG5BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC9mNmM4NjItYWY4Yi00M2YzLTk4YWQt NDQyNDFmZWMxYTlmLzEvYmV0NGZkeW15T0lsRWItNjJMSlhFcWpaejRNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC9mNmM4NjItYWY4Yi00M2YzLTk4YWQtNDQyNDFmZWMxYTlm LzEvYW90YU4wOFViWHRxYmNmVEZ1anJzUzN1cG5BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAbBAIAAjAVAwUDKhIXgAMF AyoShEADBQMqEo3AMA0GCSqGSIb3DQEBCwUAA4IBAQCmFWSAN4zFYTN3LB9Hxpdh 3AM1fPZ8fLnseXtgq2lQ5zcrkoNdXjnFJ+hvzW4kP6UYl/SNvlbmbRdO+z4s2bcR 7NDUnwSclFPX4/SHyfUUpwAc9jcljXkngBIzJz5bUjSxNNxvXkqED7f41dDbTSEx GHWzUMFww8BFQanK4NF1lA+xJoePLzFPlI4suGAS4qpuaVNo8TfjTSO3HxUrULxw Dd3lKYWcoPb95U8gdzmXUhnEdo4bteyEtUV1+7TIt/paeosXDt+9ILP02JBMsoEm wehxnHRZkqtyfiIX+f30Wx6YPZ52/dCEY2sWyG4w+4zBafb+K/jnp+vA9oL0N/lM -----END CERTIFICATE-----Generated at Tue Jan 20 02:49:01 2026 by rpki-client