This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/BPyJKL2LEjqnxrjcu1EWzSfZjCI.roa File: BPyJKL2LEjqnxrjcu1EWzSfZjCI.roa (raw, json) Hash identifier: IW2t1m5gIiuXHedBDTfnG+PcIt6emdN2QigirAHjYwY= Subject key identifier: 04:FC:89:28:BD:8B:12:3A:A7:C6:B8:DC:BB:51:16:CD:27:D9:8C:22 Certificate issuer: /CN=b05d28d16626bc5dcabf2e915435782b96e14071 Certificate serial: 019B7E38964191019765870206E55D802D74 Authority key identifier: B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/BPyJKL2LEjqnxrjcu1EWzSfZjCI.roa Signing time: Fri 02 Jan 2026 10:19:56 +0000 ROA not before: Fri 02 Jan 2026 10:19:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15542 IP address blocks: 2a07:3501:1030::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.mft rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 19:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:96:41:91:01:97:65:87:02:06:e5:5d:80:2d:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b05d28d16626bc5dcabf2e915435782b96e14071 Validity Not Before: Jan 2 10:19:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=04fc8928bd8b123aa7c6b8dcbb5116cd27d98c22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:b2:99:df:1b:80:b9:8b:69:bf:a8:48:9a:ae: 45:cc:ca:00:a6:b3:d9:69:48:d2:27:60:3c:93:27: 53:a2:f1:0d:0c:6c:ac:ec:36:19:8f:e7:00:40:86: c2:38:3a:3a:60:84:91:4e:e6:6b:77:50:57:0c:ad: f6:cd:f2:15:30:35:af:b7:df:76:60:02:ba:74:d2: 1d:30:bf:8b:ef:bc:2a:24:68:cb:69:5a:95:ef:9d: a3:8d:63:59:d3:71:0c:33:d8:df:c6:3e:06:de:af: 22:74:fa:5f:6c:01:99:37:8f:ac:b7:fc:1f:57:49: e8:b1:35:93:c9:ea:43:16:ae:98:aa:c1:b9:7d:d5: 6f:09:11:10:6f:cf:9e:f5:e7:f2:8a:68:56:52:52: be:4f:6e:35:89:aa:db:55:c9:24:fa:45:fa:31:9a: a2:1b:1e:ec:b5:48:1d:02:9d:e6:a5:a0:ed:15:dc: 86:a0:b7:ad:10:2a:a0:04:bc:91:07:4e:ec:e2:91: 10:39:1f:d5:f6:26:3b:20:36:bc:7e:5e:33:32:c3: 5b:8f:3a:8b:1c:d1:7f:d6:2e:dd:46:f3:96:27:20: 1e:54:1c:19:9b:dd:f3:77:46:60:05:83:3a:4c:a5: 4d:95:77:7a:3f:b0:32:a6:ba:0c:ca:36:c2:9b:90: b2:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:FC:89:28:BD:8B:12:3A:A7:C6:B8:DC:BB:51:16:CD:27:D9:8C:22 X509v3 Authority Key Identifier: keyid:B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/BPyJKL2LEjqnxrjcu1EWzSfZjCI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:3501:1030::/48 Signature Algorithm: sha256WithRSAEncryption 7b:25:c3:50:bb:31:40:10:14:7a:ca:28:85:bd:55:3f:9d:99: 0a:46:26:50:70:c2:ad:9e:7e:cf:e2:a6:62:1e:bc:78:4c:3c: 78:76:32:2a:c8:b0:f4:2a:ab:86:d5:c0:51:f6:6c:38:cd:f8: 7b:bb:fb:09:b0:00:15:2e:2c:24:b8:4d:8b:2a:00:77:65:b6: 95:8b:24:32:1f:ec:2d:28:3a:59:35:b7:5e:57:f8:64:aa:f9: 52:d0:50:23:28:14:13:27:ab:bb:fb:2c:9a:fb:d3:e1:33:e8: 05:a0:25:bb:cb:af:9c:ea:0b:8a:18:8b:2b:1f:47:f8:30:30: e1:e8:c3:c1:43:b7:a4:aa:33:30:78:d1:ff:50:b3:4e:bd:5b: 94:29:20:33:df:12:b8:62:51:36:2c:9c:fd:39:f2:4e:01:8a: 45:9a:3b:bc:25:71:06:db:0a:2c:be:44:41:2c:5e:c8:89:ed: d6:74:65:1a:cb:e8:a9:3d:2a:01:0b:f3:82:30:5f:fa:be:09: ab:b2:aa:a1:3e:df:f1:2d:f6:a1:7a:6e:40:29:21:36:42:29: 39:bb:ba:c7:d8:b2:db:c7:4d:2b:f6:72:69:e9:00:6f:3f:0d: 96:3d:bc:aa:1b:2a:b8:c6:e6:90:a3:6d:a1:f4:e1:67:f3:d7: 6e:68:fa:04 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+OJZBkQGXZYcCBuVdgC10MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwNWQyOGQxNjYyNmJjNWRjYWJmMmU5MTU0MzU3ODJiOTZl MTQwNzEwHhcNMjYwMTAyMTAxOTU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNGZjODkyOGJkOGIxMjNhYTdjNmI4ZGNiYjUxMTZjZDI3ZDk4YzIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvbKZ3xuAuYtpv6hImq5FzMoAprPZ aUjSJ2A8kydTovENDGys7DYZj+cAQIbCODo6YISRTuZrd1BXDK32zfIVMDWvt992 YAK6dNIdML+L77wqJGjLaVqV752jjWNZ03EMM9jfxj4G3q8idPpfbAGZN4+st/wf V0nosTWTyepDFq6YqsG5fdVvCREQb8+e9efyimhWUlK+T241iarbVckk+kX6MZqi Gx7stUgdAp3mpaDtFdyGoLetECqgBLyRB07s4pEQOR/V9iY7IDa8fl4zMsNbjzqL HNF/1i7dRvOWJyAeVBwZm93zd0ZgBYM6TKVNlXd6P7AyproMyjbCm5CyjQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFAT8iSi9ixI6p8a43LtRFs0n2YwiMB8GA1UdIwQY MBaAFLBdKNFmJrxdyr8ukVQ1eCuW4UBxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc0YwbzBXWW12RjNLdnk2UlZEVjRLNWJoUUhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9iYmE5NzMtN2M5Zi00YjExLWI2MTEt YWQ1NzU1MjJiMzY1LzEvQlB5SktMMkxFanFueHJqY3UxRVd6U2ZaakNJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy9iYmE5NzMtN2M5Zi00YjExLWI2MTEtYWQ1NzU1MjJiMzY1 LzEvc0YwbzBXWW12RjNLdnk2UlZEVjRLNWJoUUhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgc1ARAw MA0GCSqGSIb3DQEBCwUAA4IBAQB7JcNQuzFAEBR6yiiFvVU/nZkKRiZQcMKtnn7P 4qZiHrx4TDx4djIqyLD0KquG1cBR9mw4zfh7u/sJsAAVLiwkuE2LKgB3ZbaViyQy H+wtKDpZNbdeV/hkqvlS0FAjKBQTJ6u7+yya+9PhM+gFoCW7y6+c6guKGIsrH0f4 MDDh6MPBQ7ekqjMweNH/ULNOvVuUKSAz3xK4YlE2LJz9OfJOAYpFmju8JXEG2wos vkRBLF7Iie3WdGUay+ipPSoBC/OCMF/6vgmrsqqhPt/xLfahem5AKSE2Qik5u7rH 2LLbx00r9nJp6QBvPw2WPbyqGyq4xuaQo22h9OFn89duaPoE -----END CERTIFICATE-----Generated at Tue Jan 20 04:46:51 2026 by rpki-client