This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/BiOQs7w9eFljMQTyf_BYxTkrivE.roa File: BiOQs7w9eFljMQTyf_BYxTkrivE.roa (raw, json) Hash identifier: hrTu22GTJNrVdHFS6vIPz9zQHJ+aapNs0aGRVUU7Q8s= Subject key identifier: 06:23:90:B3:BC:3D:78:59:63:31:04:F2:7F:F0:58:C5:39:2B:8A:F1 Certificate issuer: /CN=cfcead390625edba1408108df57cea47160d70e5 Certificate serial: 019B7C801CFF974E7026012244FF113AC22C Authority key identifier: CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/BiOQs7w9eFljMQTyf_BYxTkrivE.roa Signing time: Fri 02 Jan 2026 02:18:49 +0000 ROA not before: Fri 02 Jan 2026 02:18:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 140096 IP address blocks: 2a0f:7802:f000::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.mft rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 05:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:1c:ff:97:4e:70:26:01:22:44:ff:11:3a:c2:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cfcead390625edba1408108df57cea47160d70e5 Validity Not Before: Jan 2 02:18:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=062390b3bc3d7859633104f27ff058c5392b8af1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:be:5f:c4:bb:fd:c5:27:05:61:3a:d7:ac:df: 33:66:ba:8e:94:f1:30:81:86:df:2a:37:d4:49:61: cd:1a:e1:34:19:5c:a0:f4:49:30:6e:fc:b6:bc:7c: c5:82:9d:af:77:69:aa:50:ac:73:2d:ba:78:3d:b8: 70:d2:bf:34:19:54:a9:17:3b:04:a3:82:aa:65:c9: 89:4c:10:8c:2b:0c:ad:1d:f8:ce:fc:cd:33:f8:e3: 3e:ca:f1:04:c0:82:46:f8:41:1b:36:61:f8:43:31: 1a:59:b4:08:5b:00:05:bd:03:38:40:a1:be:f7:c4: 7b:e3:8f:8f:77:c4:76:c9:80:55:63:1f:d3:1f:a8: 28:53:f9:e6:55:43:31:f4:d0:5d:f3:8b:5e:05:da: d9:c7:26:5b:f6:ce:0c:d5:8c:5f:27:2d:38:09:34: 29:49:b5:30:db:bd:02:5b:6c:7b:38:34:d5:17:6b: cc:48:fd:e0:6c:ba:c4:14:ef:c7:6e:b9:b5:f8:54: a4:0f:c3:54:42:62:f5:ea:16:83:db:12:52:b8:dc: 8f:0b:b7:40:6a:d4:6c:d8:df:75:9e:c7:32:aa:35: b8:05:2d:e5:ba:46:5f:23:37:68:37:4e:df:e8:1e: 12:5b:8b:8f:1c:39:4c:49:f8:93:40:fb:4c:35:cf: bf:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:23:90:B3:BC:3D:78:59:63:31:04:F2:7F:F0:58:C5:39:2B:8A:F1 X509v3 Authority Key Identifier: keyid:CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/BiOQs7w9eFljMQTyf_BYxTkrivE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:7802:f000::/36 Signature Algorithm: sha256WithRSAEncryption 48:94:58:cd:f5:f1:d0:ab:bd:3b:0f:c2:df:7e:23:7d:7e:37: ec:28:a0:2b:f8:15:17:08:79:e3:66:6f:e6:7c:3b:58:cc:12: e3:65:c8:7f:50:8f:40:80:10:d2:30:bd:83:47:c6:92:d5:67: 48:76:80:c5:d5:19:1f:e8:86:e7:34:d5:ab:f8:aa:c4:06:5c: e7:fc:59:82:0e:ce:5f:8e:e0:c2:b6:6a:1e:92:d7:a4:06:fd: 79:6d:5d:79:10:ca:1a:3e:e1:7a:6a:bb:5f:ff:ef:6b:a7:13: fb:32:68:92:59:d3:45:7d:ec:6c:dc:7f:d5:bd:f6:88:3a:53: 72:1d:0c:d6:83:8e:ed:35:f4:c5:cf:b1:30:64:9e:77:57:74: 65:52:a9:f0:68:0e:a0:74:a5:88:bf:9a:26:a9:2c:f1:e3:67: 20:86:20:71:b1:19:2c:eb:f5:10:16:a5:0d:8c:fb:b3:4d:80: f2:8d:bc:23:36:35:a2:cb:5b:f2:b0:d2:a3:ce:66:df:e2:b0: 1e:7b:58:4e:78:6b:83:e1:3b:04:35:28:58:b8:74:28:03:7d: e1:0f:c5:57:31:59:7c:f3:c2:15:8e:c9:4b:dc:51:70:a4:24: 6a:29:ca:e5:bd:eb:74:4f:9f:3e:de:7e:de:c2:de:f7:c4:e9: a1:e7:c3:c3 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt8gBz/l05wJgEiRP8ROsIsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmY2VhZDM5MDYyNWVkYmExNDA4MTA4ZGY1N2NlYTQ3MTYw ZDcwZTUwHhcNMjYwMTAyMDIxODQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNjIzOTBiM2JjM2Q3ODU5NjMzMTA0ZjI3ZmYwNThjNTM5MmI4YWYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwL5fxLv9xScFYTrXrN8zZrqOlPEw gYbfKjfUSWHNGuE0GVyg9Ekwbvy2vHzFgp2vd2mqUKxzLbp4Pbhw0r80GVSpFzsE o4KqZcmJTBCMKwytHfjO/M0z+OM+yvEEwIJG+EEbNmH4QzEaWbQIWwAFvQM4QKG+ 98R744+Pd8R2yYBVYx/TH6goU/nmVUMx9NBd84teBdrZxyZb9s4M1YxfJy04CTQp SbUw270CW2x7ODTVF2vMSP3gbLrEFO/Hbrm1+FSkD8NUQmL16haD2xJSuNyPC7dA atRs2N91nscyqjW4BS3lukZfIzdoN07f6B4SW4uPHDlMSfiTQPtMNc+/TwIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFAYjkLO8PXhZYzEE8n/wWMU5K4rxMB8GA1UdIwQY MBaAFM/OrTkGJe26FAgQjfV86kcWDXDlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejg2dE9RWWw3Ym9VQ0JDTjlYenFSeFlOY09VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9jNDY0N2EtNjA0Mi00ZmU4LWEyNzYt ZjViNmE3MThmNGI1LzEvQmlPUXM3dzllRmxqTVFUeWZfQll4VGtyaXZFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS9jNDY0N2EtNjA0Mi00ZmU4LWEyNzYtZjViNmE3MThmNGI1 LzEvejg2dE9RWWw3Ym9VQ0JDTjlYenFSeFlOY09VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEKg94AvAw DQYJKoZIhvcNAQELBQADggEBAEiUWM318dCrvTsPwt9+I31+N+wooCv4FRcIeeNm b+Z8O1jMEuNlyH9Qj0CAENIwvYNHxpLVZ0h2gMXVGR/ohuc01av4qsQGXOf8WYIO zl+O4MK2ah6S16QG/XltXXkQyho+4Xpqu1//72unE/syaJJZ00V97Gzcf9W99og6 U3IdDNaDju019MXPsTBknndXdGVSqfBoDqB0pYi/miapLPHjZyCGIHGxGSzr9RAW pQ2M+7NNgPKNvCM2NaLLW/Kw0qPOZt/isB57WE54a4PhOwQ1KFi4dCgDfeEPxVcx WXzzwhWOyUvcUXCkJGopyuW963RPnz7eft7C3vfE6aHnw8M= -----END CERTIFICATE-----Generated at Wed Jan 21 13:49:40 2026 by rpki-client