This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/ed5d3a-b869-4cda-9d32-250e55b9d4a9/1/bkpFrc_6laoYbGdkqTlHlW-Qe80.roa File: bkpFrc_6laoYbGdkqTlHlW-Qe80.roa (raw, json) Hash identifier: p/3gwRkkBDXycKoUYkEzWpJbWT3T+RMybdZ5AMyzIgo= Subject key identifier: 6E:4A:45:AD:CF:FA:95:AA:18:6C:67:64:A9:39:47:95:6F:90:7B:CD Certificate issuer: /CN=c43c74022cbbf0b3cfff6031d6d2de0369c99e4e Certificate serial: 019B77C6DFC3C4027AC04E09A319678B45A5 Authority key identifier: C4:3C:74:02:2C:BB:F0:B3:CF:FF:60:31:D6:D2:DE:03:69:C9:9E:4E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xDx0Aiy78LPP_2Ax1tLeA2nJnk4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/ed5d3a-b869-4cda-9d32-250e55b9d4a9/1/bkpFrc_6laoYbGdkqTlHlW-Qe80.roa Signing time: Thu 01 Jan 2026 04:18:00 +0000 ROA not before: Thu 01 Jan 2026 04:18:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207947 IP address blocks: 2001:67c:964::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/ed5d3a-b869-4cda-9d32-250e55b9d4a9/1/xDx0Aiy78LPP_2Ax1tLeA2nJnk4.crl rsync://rpki.ripe.net/repository/DEFAULT/f7/ed5d3a-b869-4cda-9d32-250e55b9d4a9/1/xDx0Aiy78LPP_2Ax1tLeA2nJnk4.mft rsync://rpki.ripe.net/repository/DEFAULT/xDx0Aiy78LPP_2Ax1tLeA2nJnk4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:df:c3:c4:02:7a:c0:4e:09:a3:19:67:8b:45:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c43c74022cbbf0b3cfff6031d6d2de0369c99e4e Validity Not Before: Jan 1 04:18:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6e4a45adcffa95aa186c6764a93947956f907bcd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:fd:84:a9:03:56:fe:15:3c:9b:94:90:9f:d4: 85:3b:87:03:ff:0a:32:50:91:ed:c5:ad:ab:8a:2b: 1f:a9:0c:90:11:36:08:91:41:d8:f7:99:d0:88:ed: c5:82:ad:55:31:0d:e8:e8:4b:20:cc:c5:88:6c:0d: 64:ab:20:7f:de:c4:14:c7:07:5f:df:90:65:69:98: 6a:91:0f:23:87:a6:00:ee:26:1d:68:e2:15:b9:66: 2e:04:dc:29:1d:09:b1:41:51:4f:84:75:50:e3:48: ec:68:09:52:b1:a8:23:a1:4e:32:db:b0:b7:3b:6d: 91:b3:d5:6a:78:f9:70:19:2e:3e:37:7c:e0:93:4e: 9c:31:02:1b:aa:97:c6:45:60:4c:a7:a2:e7:5c:9c: 2e:52:40:08:de:96:c7:2a:d6:59:e9:bc:fa:30:36: 6e:3a:6f:8f:b9:7a:87:8e:0a:b7:33:bf:6a:51:51: 22:6a:61:39:89:d1:13:ef:66:70:d8:dd:7b:35:db: 17:f8:01:61:38:fe:14:85:38:03:f9:cb:e9:17:26: 43:13:b2:2e:6b:ee:c5:c5:98:12:d5:df:ce:be:46: 1e:6a:8f:83:bf:c8:38:2b:94:ec:9e:b8:b0:f7:f2: ea:a0:85:c2:e1:1e:a5:a2:3c:c9:de:7d:9d:42:62: 6e:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:4A:45:AD:CF:FA:95:AA:18:6C:67:64:A9:39:47:95:6F:90:7B:CD X509v3 Authority Key Identifier: keyid:C4:3C:74:02:2C:BB:F0:B3:CF:FF:60:31:D6:D2:DE:03:69:C9:9E:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xDx0Aiy78LPP_2Ax1tLeA2nJnk4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/ed5d3a-b869-4cda-9d32-250e55b9d4a9/1/bkpFrc_6laoYbGdkqTlHlW-Qe80.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/ed5d3a-b869-4cda-9d32-250e55b9d4a9/1/xDx0Aiy78LPP_2Ax1tLeA2nJnk4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:964::/48 Signature Algorithm: sha256WithRSAEncryption 19:32:80:fe:1a:9c:63:ad:98:5a:c7:ff:0e:8c:53:96:2f:df: 0a:8a:bf:18:72:72:41:d3:08:36:ce:c9:55:8a:ae:ad:4b:3a: ae:c0:4d:45:e0:13:af:98:ae:01:eb:57:25:37:97:98:7c:7c: 7a:5d:50:db:ee:f9:4d:ea:b4:e3:10:aa:35:a9:b1:12:2f:37: 5a:09:a9:06:75:d0:2c:30:e7:1e:9b:cd:1a:4e:7f:8e:8f:17: 72:1f:d9:2c:c0:49:7e:96:42:6a:22:3f:17:9f:20:6d:d8:d1: 7a:5e:6d:cf:fe:a3:21:8b:c8:59:9a:5b:3e:4f:99:11:df:d2: 03:da:77:61:75:b5:78:4f:04:0e:e9:26:5b:65:f6:36:86:e5: ff:92:1b:f4:4f:18:e6:ab:ff:8c:a1:d4:62:9d:0b:ed:b3:27: bd:25:e7:4c:3b:b7:a2:d3:20:f5:3e:08:15:3e:85:23:a2:19: b8:ce:2e:3e:74:c1:ea:92:07:cf:7e:e7:c3:11:b6:f5:af:63: 79:57:fb:86:a0:f3:77:0c:4a:32:da:10:2f:04:d2:7b:d3:e3: 61:d4:47:6a:16:96:70:65:22:4c:e5:4a:9f:82:d0:7c:90:51: 44:7f:53:d5:b2:b5:81:74:de:8f:52:ec:6d:bc:b3:bc:9e:12: 3f:b7:e5:40 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt3xt/DxAJ6wE4Joxlni0WlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0M2M3NDAyMmNiYmYwYjNjZmZmNjAzMWQ2ZDJkZTAzNjlj OTllNGUwHhcNMjYwMTAxMDQxODAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZTRhNDVhZGNmZmE5NWFhMTg2YzY3NjRhOTM5NDc5NTZmOTA3YmNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAov2EqQNW/hU8m5SQn9SFO4cD/woy UJHtxa2riisfqQyQETYIkUHY95nQiO3Fgq1VMQ3o6EsgzMWIbA1kqyB/3sQUxwdf 35BlaZhqkQ8jh6YA7iYdaOIVuWYuBNwpHQmxQVFPhHVQ40jsaAlSsagjoU4y27C3 O22Rs9VqePlwGS4+N3zgk06cMQIbqpfGRWBMp6LnXJwuUkAI3pbHKtZZ6bz6MDZu Om+PuXqHjgq3M79qUVEiamE5idET72Zw2N17NdsX+AFhOP4UhTgD+cvpFyZDE7Iu a+7FxZgS1d/OvkYeao+Dv8g4K5Tsnriw9/LqoIXC4R6lojzJ3n2dQmJuIQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFG5KRa3P+pWqGGxnZKk5R5VvkHvNMB8GA1UdIwQY MBaAFMQ8dAIsu/Czz/9gMdbS3gNpyZ5OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveER4MEFpeTc4TFBQXzJBeDF0TGVBMm5Kbms0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy9lZDVkM2EtYjg2OS00Y2RhLTlkMzIt MjUwZTU1YjlkNGE5LzEvYmtwRnJjXzZsYW9ZYkdka3FUbEhsVy1RZTgwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNy9lZDVkM2EtYjg2OS00Y2RhLTlkMzItMjUwZTU1YjlkNGE5 LzEveER4MEFpeTc4TFBQXzJBeDF0TGVBMm5Kbms0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfAlk MA0GCSqGSIb3DQEBCwUAA4IBAQAZMoD+GpxjrZhax/8OjFOWL98Kir8YcnJB0wg2 zslViq6tSzquwE1F4BOvmK4B61clN5eYfHx6XVDb7vlN6rTjEKo1qbESLzdaCakG ddAsMOcem80aTn+OjxdyH9kswEl+lkJqIj8XnyBt2NF6Xm3P/qMhi8hZmls+T5kR 39ID2ndhdbV4TwQO6SZbZfY2huX/khv0Txjmq/+ModRinQvtsye9JedMO7ei0yD1 PggVPoUjohm4zi4+dMHqkgfPfufDEbb1r2N5V/uGoPN3DEoy2hAvBNJ70+Nh1Edq FpZwZSJM5UqfgtB8kFFEf1PVsrWBdN6PUuxtvLO8nhI/t+VA -----END CERTIFICATE-----Generated at Tue Jan 20 00:27:05 2026 by rpki-client