This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/ad606a-4098-41bb-8eba-6afbb1f8f00a/1/BHHGcSt-xcyqmuqZZJUvi7Il74E.roa File: BHHGcSt-xcyqmuqZZJUvi7Il74E.roa (raw, json) Hash identifier: 1xQtvXwKdGqA3UbB0BtNu6enZHNYo0wQaicN5K3pYMc= Subject key identifier: 04:71:C6:71:2B:7E:C5:CC:AA:9A:EA:99:64:95:2F:8B:B2:25:EF:81 Certificate issuer: /CN=46ab1605a60fa89cc199cfd8cfeb7cc85cab3726 Certificate serial: 019BBB641CBC8DF84222E02F8D38981E9F25 Authority key identifier: 46:AB:16:05:A6:0F:A8:9C:C1:99:CF:D8:CF:EB:7C:C8:5C:AB:37:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RqsWBaYPqJzBmc_Yz-t8yFyrNyY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/ad606a-4098-41bb-8eba-6afbb1f8f00a/1/BHHGcSt-xcyqmuqZZJUvi7Il74E.roa Signing time: Wed 14 Jan 2026 07:24:18 +0000 ROA not before: Wed 14 Jan 2026 07:24:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212901 IP address blocks: 2a12:3980::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/ad606a-4098-41bb-8eba-6afbb1f8f00a/1/RqsWBaYPqJzBmc_Yz-t8yFyrNyY.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/ad606a-4098-41bb-8eba-6afbb1f8f00a/1/RqsWBaYPqJzBmc_Yz-t8yFyrNyY.mft rsync://rpki.ripe.net/repository/DEFAULT/RqsWBaYPqJzBmc_Yz-t8yFyrNyY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:bb:64:1c:bc:8d:f8:42:22:e0:2f:8d:38:98:1e:9f:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=46ab1605a60fa89cc199cfd8cfeb7cc85cab3726 Validity Not Before: Jan 14 07:24:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0471c6712b7ec5ccaa9aea9964952f8bb225ef81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:d6:14:71:d5:1a:20:cb:19:04:a9:82:26:62: bb:7a:9b:0b:62:cd:b5:00:05:5f:15:f4:88:28:8c: d1:05:97:e4:30:fd:d1:8d:b4:84:5f:2a:db:91:42: b9:8a:9f:2e:0a:bf:16:d7:3b:1a:0d:1c:9d:4b:12: b1:37:99:a4:81:d2:57:30:2c:e9:12:de:86:7c:b0: 3a:8c:4b:ec:08:94:94:05:9e:f5:dd:52:e5:b6:ad: 8a:a4:56:ec:0b:c2:49:a6:2b:8e:81:f0:ea:2d:86: 9d:d4:41:90:e3:d3:12:b0:63:9e:41:96:6a:c5:71: 12:e7:c4:0b:1d:95:19:0c:02:ca:96:8d:1e:32:9c: 43:8e:b6:1d:40:2f:00:ec:e3:69:67:9b:43:45:a5: 6d:ea:21:2d:6e:5e:24:0f:61:3c:1a:9c:72:57:52: 71:73:cb:0b:e4:f1:2d:e7:0d:82:87:f8:4f:2f:bd: 0b:7f:f0:f5:85:44:40:ea:55:23:12:79:02:66:5e: 29:c0:3f:52:08:2c:e2:0b:ef:e9:f3:66:0b:d0:14: f2:39:a7:02:c5:5d:2a:b2:c5:1e:0b:2a:d6:18:9d: 5f:63:4e:0c:4e:4f:e0:a1:ee:b0:40:00:e2:89:39: 70:73:92:14:b2:15:7c:97:67:d8:5e:43:f4:20:b6: 59:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:71:C6:71:2B:7E:C5:CC:AA:9A:EA:99:64:95:2F:8B:B2:25:EF:81 X509v3 Authority Key Identifier: keyid:46:AB:16:05:A6:0F:A8:9C:C1:99:CF:D8:CF:EB:7C:C8:5C:AB:37:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RqsWBaYPqJzBmc_Yz-t8yFyrNyY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/ad606a-4098-41bb-8eba-6afbb1f8f00a/1/BHHGcSt-xcyqmuqZZJUvi7Il74E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/ad606a-4098-41bb-8eba-6afbb1f8f00a/1/RqsWBaYPqJzBmc_Yz-t8yFyrNyY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a12:3980::/29 Signature Algorithm: sha256WithRSAEncryption 52:13:82:dc:23:bf:1c:43:e6:45:12:27:6d:15:6c:63:4d:ad: 1d:f3:e5:6a:43:c2:e1:d2:14:ad:4c:84:07:e1:ab:50:c5:e9: 89:65:b8:45:55:0b:c9:ea:23:4a:b1:45:22:c9:d0:c7:19:7d: 06:a6:3e:d6:b0:95:70:d3:10:d4:e5:51:32:5c:12:37:ee:88: ff:c4:20:21:13:01:a1:22:f2:7e:a5:22:c2:d0:c3:e4:a9:9e: 0b:f9:a2:de:09:50:34:3a:48:3d:37:97:cb:4d:e8:16:11:72: 2c:68:2e:0a:8a:f8:4b:96:9f:e2:ff:e2:a2:2f:28:38:5e:c9: 58:0b:42:e9:47:20:2e:55:a8:5c:91:6c:d2:a6:df:12:ca:12: dc:6c:02:52:f8:16:67:41:5c:4b:3b:45:53:bf:6e:05:94:8f: 87:e9:34:36:b3:6c:d4:a2:e5:87:9f:5d:40:b8:69:38:77:36: 58:46:d3:b1:42:63:03:a8:2f:7b:b4:bd:e5:31:c8:e2:82:b3: 3e:e1:0e:c8:93:62:bd:c8:07:5f:dc:7d:4c:af:a8:fd:2f:14: 5b:f2:57:5c:86:61:b0:75:e2:04:6f:bc:22:31:95:c4:91:76: b3:d1:76:d6:8d:7e:db:fc:88:9b:2b:55:24:83:68:4a:bf:4a: 15:02:60:4f -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZu7ZBy8jfhCIuAvjTiYHp8lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2YWIxNjA1YTYwZmE4OWNjMTk5Y2ZkOGNmZWI3Y2M4NWNh YjM3MjYwHhcNMjYwMTE0MDcyNDE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNDcxYzY3MTJiN2VjNWNjYWE5YWVhOTk2NDk1MmY4YmIyMjVlZjgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr9YUcdUaIMsZBKmCJmK7epsLYs21 AAVfFfSIKIzRBZfkMP3RjbSEXyrbkUK5ip8uCr8W1zsaDRydSxKxN5mkgdJXMCzp Et6GfLA6jEvsCJSUBZ713VLltq2KpFbsC8JJpiuOgfDqLYad1EGQ49MSsGOeQZZq xXES58QLHZUZDALKlo0eMpxDjrYdQC8A7ONpZ5tDRaVt6iEtbl4kD2E8GpxyV1Jx c8sL5PEt5w2Ch/hPL70Lf/D1hURA6lUjEnkCZl4pwD9SCCziC+/p82YL0BTyOacC xV0qssUeCyrWGJ1fY04MTk/goe6wQADiiTlwc5IUshV8l2fYXkP0ILZZXwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFARxxnErfsXMqprqmWSVL4uyJe+BMB8GA1UdIwQY MBaAFEarFgWmD6icwZnP2M/rfMhcqzcmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUnFzV0JhWVBxSnpCbWNfWXotdDh5RnlyTnlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS9hZDYwNmEtNDA5OC00MWJiLThlYmEt NmFmYmIxZjhmMDBhLzEvQkhIR2NTdC14Y3lxbXVxWlpKVXZpN0lsNzRFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS9hZDYwNmEtNDA5OC00MWJiLThlYmEtNmFmYmIxZjhmMDBh LzEvUnFzV0JhWVBxSnpCbWNfWXotdDh5RnlyTnlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhI5gDAN BgkqhkiG9w0BAQsFAAOCAQEAUhOC3CO/HEPmRRInbRVsY02tHfPlakPC4dIUrUyE B+GrUMXpiWW4RVULyeojSrFFIsnQxxl9BqY+1rCVcNMQ1OVRMlwSN+6I/8QgIRMB oSLyfqUiwtDD5KmeC/mi3glQNDpIPTeXy03oFhFyLGguCor4S5af4v/ioi8oOF7J WAtC6UcgLlWoXJFs0qbfEsoS3GwCUvgWZ0FcSztFU79uBZSPh+k0NrNs1KLlh59d QLhpOHc2WEbTsUJjA6gve7S95THI4oKzPuEOyJNivcgHX9x9TK+o/S8UW/JXXIZh sHXiBG+8IjGVxJF2s9F21o1+2/yImytVJINoSr9KFQJgTw== -----END CERTIFICATE-----Generated at Mon Feb 9 20:45:45 2026 by rpki-client