This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/Bcg7UAJvSkwZBrcUqv0x5Az49IA.roa File: Bcg7UAJvSkwZBrcUqv0x5Az49IA.roa (raw, json) Hash identifier: 0ozhX8g/mw0yc94TISX70eWBPdkOuJmTnBUgWffqex8= Subject key identifier: 05:C8:3B:50:02:6F:4A:4C:19:06:B7:14:AA:FD:31:E4:0C:F8:F4:80 Certificate issuer: /CN=0c21b925b4c4bcc30f77c9c41ba8d040ac95dfc6 Certificate serial: 019B79ED501EA96917634F9743AC0E1D52A7 Authority key identifier: 0C:21:B9:25:B4:C4:BC:C3:0F:77:C9:C4:1B:A8:D0:40:AC:95:DF:C6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DCG5JbTEvMMPd8nEG6jQQKyV38Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/Bcg7UAJvSkwZBrcUqv0x5Az49IA.roa Signing time: Thu 01 Jan 2026 14:19:14 +0000 ROA not before: Thu 01 Jan 2026 14:19:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212425 IP address blocks: 2a0f:607:1052::/48 maxlen: 48 2a0f:607:1100::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.mft rsync://rpki.ripe.net/repository/DEFAULT/DCG5JbTEvMMPd8nEG6jQQKyV38Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 15:30:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:50:1e:a9:69:17:63:4f:97:43:ac:0e:1d:52:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c21b925b4c4bcc30f77c9c41ba8d040ac95dfc6 Validity Not Before: Jan 1 14:19:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=05c83b50026f4a4c1906b714aafd31e40cf8f480 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:6a:77:c4:75:83:91:1d:77:27:0c:96:4e:76: b8:ec:8a:2f:6b:1a:9d:ec:3d:85:74:98:7e:37:db: d9:7d:3a:1b:86:72:28:da:b5:24:12:f4:61:5e:e3: 5d:9c:6e:9b:f9:c3:08:5e:3e:e4:6b:a0:15:37:9f: 1b:86:48:56:18:00:3f:a5:a4:ec:45:90:55:9c:5a: 0d:b0:96:4b:1d:a3:da:08:70:d5:3a:74:6a:1a:d7: d0:69:8a:cb:42:73:c4:6d:0f:e8:4a:e9:68:ce:b3: 73:7f:b9:eb:73:01:00:3f:c3:07:9c:67:b7:b2:5d: d6:dc:a8:42:48:64:57:79:5a:37:c9:70:ae:54:6f: f9:67:2b:2a:e5:69:b2:16:7f:d5:c0:57:fc:4d:aa: 99:64:09:38:a9:cd:44:f1:fa:8f:54:10:63:24:09: fa:3e:7e:b7:e0:21:9c:c3:33:77:84:a4:96:d3:ab: d0:3d:b5:00:fa:f9:e7:2c:d0:6f:d8:4e:21:31:0b: 5c:f9:74:04:f6:3f:41:30:e6:a4:5d:bc:a1:70:d0: 2c:32:73:3b:8d:70:a4:2b:3f:2f:32:d6:c8:ed:93: 9c:3f:e2:1e:6c:ba:a5:e6:b2:22:f7:c1:11:fb:0d: 7d:bf:70:3e:03:64:ba:51:e5:cd:96:8a:8a:9a:a6: 4a:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:C8:3B:50:02:6F:4A:4C:19:06:B7:14:AA:FD:31:E4:0C:F8:F4:80 X509v3 Authority Key Identifier: keyid:0C:21:B9:25:B4:C4:BC:C3:0F:77:C9:C4:1B:A8:D0:40:AC:95:DF:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DCG5JbTEvMMPd8nEG6jQQKyV38Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/Bcg7UAJvSkwZBrcUqv0x5Az49IA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:607:1052::/48 2a0f:607:1100::/44 Signature Algorithm: sha256WithRSAEncryption ae:1d:27:95:07:cb:db:45:c6:2b:01:74:5f:c2:ad:e2:b7:33: e8:a0:9a:14:ef:d7:fd:27:dc:c0:07:96:ba:d4:69:89:2a:17: f0:af:a3:85:ca:85:94:82:c4:bb:ec:f7:09:87:33:e7:d2:e1: 2d:0f:0f:8a:a1:0c:5e:21:2f:ea:c4:d8:9b:e1:27:98:9d:f3: c5:17:8f:aa:eb:4d:a0:1e:18:86:a6:8b:97:7c:8a:f7:34:93: 16:1b:21:ab:43:1f:68:f5:63:bf:3d:77:bb:2f:28:89:00:c3: ab:3e:5c:79:d7:49:39:51:2e:a4:aa:03:a9:35:a9:34:62:c4: f2:95:b6:60:3c:87:81:63:67:f4:85:9e:9a:55:5d:5a:b5:d6: cf:64:f1:55:db:ff:4e:52:7c:7c:bd:81:b1:a1:d1:68:d2:fa: d2:77:c7:22:4c:48:7e:eb:85:aa:7f:1d:a2:15:92:f4:5a:26: 94:cc:4f:d1:b3:2f:ad:ba:de:ec:f5:21:03:25:24:73:3e:d2: c8:b7:e6:63:0a:60:07:63:fd:54:3c:e9:13:ae:67:09:7f:a6: 07:0c:93:97:e5:0e:f0:a7:90:6a:87:3e:03:21:24:b2:f0:4d: 9c:b9:cc:9b:3a:72:bf:33:99:2b:38:5d:8f:d4:cd:2c:25:76: 95:b9:b2:ed -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt57VAeqWkXY0+XQ6wOHVKnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjMjFiOTI1YjRjNGJjYzMwZjc3YzljNDFiYThkMDQwYWM5 NWRmYzYwHhcNMjYwMTAxMTQxOTE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNWM4M2I1MDAyNmY0YTRjMTkwNmI3MTRhYWZkMzFlNDBjZjhmNDgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvGp3xHWDkR13JwyWTna47Iovaxqd 7D2FdJh+N9vZfTobhnIo2rUkEvRhXuNdnG6b+cMIXj7ka6AVN58bhkhWGAA/paTs RZBVnFoNsJZLHaPaCHDVOnRqGtfQaYrLQnPEbQ/oSulozrNzf7nrcwEAP8MHnGe3 sl3W3KhCSGRXeVo3yXCuVG/5Zysq5WmyFn/VwFf8TaqZZAk4qc1E8fqPVBBjJAn6 Pn634CGcwzN3hKSW06vQPbUA+vnnLNBv2E4hMQtc+XQE9j9BMOakXbyhcNAsMnM7 jXCkKz8vMtbI7ZOcP+IebLql5rIi98ER+w19v3A+A2S6UeXNloqKmqZKrwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFAXIO1ACb0pMGQa3FKr9MeQM+PSAMB8GA1UdIwQY MBaAFAwhuSW0xLzDD3fJxBuo0ECsld/GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRENHNUpiVEV2TU1QZDhuRUc2alFRS3lWMzhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9jMGJkNjctZjdkZC00Y2UyLWFiN2Ut YTM0NzU2NDE1OGY4LzEvQmNnN1VBSnZTa3daQnJjVXF2MHg1QXo0OUlBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9jMGJkNjctZjdkZC00Y2UyLWFiN2UtYTM0NzU2NDE1OGY4 LzEvRENHNUpiVEV2TU1QZDhuRUc2alFRS3lWMzhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcAKg8GBxBS AwcEKg8GBxEAMA0GCSqGSIb3DQEBCwUAA4IBAQCuHSeVB8vbRcYrAXRfwq3itzPo oJoU79f9J9zAB5a61GmJKhfwr6OFyoWUgsS77PcJhzPn0uEtDw+KoQxeIS/qxNib 4SeYnfPFF4+q602gHhiGpouXfIr3NJMWGyGrQx9o9WO/PXe7LyiJAMOrPlx510k5 US6kqgOpNak0YsTylbZgPIeBY2f0hZ6aVV1atdbPZPFV2/9OUnx8vYGxodFo0vrS d8ciTEh+64Wqfx2iFZL0WiaUzE/Rsy+tut7s9SEDJSRzPtLIt+ZjCmAHY/1UPOkT rmcJf6YHDJOX5Q7wp5Bqhz4DISSy8E2cucybOnK/M5krOF2P1M0sJXaVubLt -----END CERTIFICATE-----Generated at Thu Jan 8 00:39:22 2026 by rpki-client