This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/bUpsiGX-aGb34WbdNOIw9DZiH4s.roa File: bUpsiGX-aGb34WbdNOIw9DZiH4s.roa (raw, json) Hash identifier: xl03C5kmFTt0TLdmB8hxX8SxfLM5FDJ9iWqRX+kYeCg= Subject key identifier: 6D:4A:6C:88:65:FE:68:66:F7:E1:66:DD:34:E2:30:F4:36:62:1F:8B Certificate issuer: /CN=b05d28d16626bc5dcabf2e915435782b96e14071 Certificate serial: 019B7E38A7E884D69259E2C7A5DF0441EEDB Authority key identifier: B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/bUpsiGX-aGb34WbdNOIw9DZiH4s.roa Signing time: Fri 02 Jan 2026 10:20:00 +0000 ROA not before: Fri 02 Jan 2026 10:20:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213324 IP address blocks: 2a07:3500:1a50::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.mft rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 19:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:a7:e8:84:d6:92:59:e2:c7:a5:df:04:41:ee:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b05d28d16626bc5dcabf2e915435782b96e14071 Validity Not Before: Jan 2 10:20:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6d4a6c8865fe6866f7e166dd34e230f436621f8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:79:82:87:dd:3a:9c:44:9f:16:8a:52:4b:5d: 3c:17:2b:6f:c5:ef:7f:9c:db:33:f0:3e:7c:e3:58: 6a:d7:45:8d:e0:b3:3f:eb:1f:a0:9c:80:55:01:24: 27:d4:2d:d4:dc:e4:88:d5:15:cb:ce:80:1e:00:44: 90:3a:f8:e0:71:fe:0b:6c:0d:6d:bc:8b:92:f0:29: b2:e0:89:61:0d:61:1e:6b:8d:14:82:dd:ae:d0:7a: b7:c4:4b:82:5b:bc:ac:61:07:fc:3a:4d:ca:ea:8a: 6b:30:fc:76:ad:9f:bf:1a:7a:0a:2f:53:ae:45:d6: 83:f9:cc:5d:ed:e9:c9:9c:cf:86:a5:f4:70:07:ce: c9:45:61:48:45:4f:c3:87:aa:c0:93:92:4c:44:41: 44:1d:8d:32:7a:99:26:ce:77:cb:d3:a9:86:6e:5a: 2f:84:ad:64:bd:78:13:51:7f:07:51:cd:06:16:c5: 5a:10:9e:54:5d:ec:94:aa:0a:f9:6e:a1:95:ca:32: a7:3b:06:f8:03:ab:26:61:e5:c5:58:1a:e2:d3:f3: 86:51:32:6d:42:2b:ea:82:38:6b:24:d0:36:ec:bb: af:30:e0:1b:9b:b7:06:76:04:42:f1:78:2c:3d:5d: 0c:43:49:bf:49:40:5a:a3:5c:2c:28:cf:1c:58:a2: e8:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:4A:6C:88:65:FE:68:66:F7:E1:66:DD:34:E2:30:F4:36:62:1F:8B X509v3 Authority Key Identifier: keyid:B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/bUpsiGX-aGb34WbdNOIw9DZiH4s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:3500:1a50::/48 Signature Algorithm: sha256WithRSAEncryption 4f:d5:0a:57:63:f5:de:51:90:36:f9:b3:48:12:8d:0e:63:3d: 17:66:06:21:6a:33:2d:bb:ac:ac:e9:d1:ba:b7:06:e0:2f:50: 32:55:09:9d:ee:36:09:28:b5:ec:55:41:1c:d7:34:09:f5:13: b4:b1:97:45:d4:04:3c:01:59:c9:47:f9:17:b4:7b:12:20:65: a8:b4:8c:63:36:af:a6:11:27:1a:38:15:38:e6:fe:ed:56:ef: 1a:2a:93:c4:c6:74:d4:a4:83:89:92:3a:09:30:4a:4f:5a:3c: a2:bf:cf:3b:9b:8b:9f:7d:42:a6:ed:cb:1d:8f:1b:74:1c:0d: c1:dd:83:2f:80:5d:38:b9:a7:22:0f:62:fb:91:c0:40:8a:2c: 35:2b:cf:db:fe:82:71:9f:70:58:04:ea:3c:bf:0e:4f:bf:14: c8:31:f2:be:6d:cf:ed:87:85:7a:ee:9f:6c:02:9c:fd:00:b5: 1c:f1:ff:5d:98:e2:3b:57:5e:9d:2f:53:ae:c5:76:8d:6e:fc: 5c:32:db:bf:b9:bd:cc:5d:d9:2e:e1:89:25:7c:90:c0:ad:32: 45:f1:eb:04:f4:7e:24:0f:98:26:bd:ca:ff:83:e5:b3:d7:eb: 1d:f7:08:b7:8c:fd:20:d0:ac:ff:d8:cf:1d:33:aa:3d:52:8a: 82:2d:e2:9c -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+OKfohNaSWeLHpd8EQe7bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwNWQyOGQxNjYyNmJjNWRjYWJmMmU5MTU0MzU3ODJiOTZl MTQwNzEwHhcNMjYwMTAyMTAyMDAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZDRhNmM4ODY1ZmU2ODY2ZjdlMTY2ZGQzNGUyMzBmNDM2NjIxZjhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA93mCh906nESfFopSS108Fytvxe9/ nNsz8D5841hq10WN4LM/6x+gnIBVASQn1C3U3OSI1RXLzoAeAESQOvjgcf4LbA1t vIuS8Cmy4IlhDWEea40Ugt2u0Hq3xEuCW7ysYQf8Ok3K6oprMPx2rZ+/GnoKL1Ou RdaD+cxd7enJnM+GpfRwB87JRWFIRU/Dh6rAk5JMREFEHY0yepkmznfL06mGblov hK1kvXgTUX8HUc0GFsVaEJ5UXeyUqgr5bqGVyjKnOwb4A6smYeXFWBri0/OGUTJt QivqgjhrJNA27LuvMOAbm7cGdgRC8XgsPV0MQ0m/SUBao1wsKM8cWKLo4wIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFG1KbIhl/mhm9+Fm3TTiMPQ2Yh+LMB8GA1UdIwQY MBaAFLBdKNFmJrxdyr8ukVQ1eCuW4UBxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc0YwbzBXWW12RjNLdnk2UlZEVjRLNWJoUUhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9iYmE5NzMtN2M5Zi00YjExLWI2MTEt YWQ1NzU1MjJiMzY1LzEvYlVwc2lHWC1hR2IzNFdiZE5PSXc5RFppSDRzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy9iYmE5NzMtN2M5Zi00YjExLWI2MTEtYWQ1NzU1MjJiMzY1 LzEvc0YwbzBXWW12RjNLdnk2UlZEVjRLNWJoUUhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgc1ABpQ MA0GCSqGSIb3DQEBCwUAA4IBAQBP1QpXY/XeUZA2+bNIEo0OYz0XZgYhajMtu6ys 6dG6twbgL1AyVQmd7jYJKLXsVUEc1zQJ9RO0sZdF1AQ8AVnJR/kXtHsSIGWotIxj Nq+mEScaOBU45v7tVu8aKpPExnTUpIOJkjoJMEpPWjyiv887m4uffUKm7csdjxt0 HA3B3YMvgF04uaciD2L7kcBAiiw1K8/b/oJxn3BYBOo8vw5PvxTIMfK+bc/th4V6 7p9sApz9ALUc8f9dmOI7V16dL1OuxXaNbvxcMtu/ub3MXdku4YklfJDArTJF8esE 9H4kD5gmvcr/g+Wz1+sd9wi3jP0g0Kz/2M8dM6o9UoqCLeKc -----END CERTIFICATE-----Generated at Tue Jan 20 04:47:41 2026 by rpki-client