This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/2d26a3-346e-4d0d-ac1e-1d020ece07ea/1/bb1B8Fy2_C2bqbD9N4RRbHoFAbA.roa File: bb1B8Fy2_C2bqbD9N4RRbHoFAbA.roa (raw, json) Hash identifier: l0MLPIfI2aVoXdO47UK4RJDxoIk9MxZKupnuOkrWUdk= Subject key identifier: 6D:BD:41:F0:5C:B6:FC:2D:9B:A9:B0:FD:37:84:51:6C:7A:05:01:B0 Certificate issuer: /CN=66501165645aa80dcba315885cf374acb6d21305 Certificate serial: 019B7DCB2DC3EA0434A66AB9A382D5F118CC Authority key identifier: 66:50:11:65:64:5A:A8:0D:CB:A3:15:88:5C:F3:74:AC:B6:D2:13:05 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZlARZWRaqA3LoxWIXPN0rLbSEwU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/2d26a3-346e-4d0d-ac1e-1d020ece07ea/1/bb1B8Fy2_C2bqbD9N4RRbHoFAbA.roa Signing time: Fri 02 Jan 2026 08:20:26 +0000 ROA not before: Fri 02 Jan 2026 08:20:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6205 IP address blocks: 2001:67c:ac8::/48 maxlen: 48 2001:67c:acc::/48 maxlen: 48 2001:67c:ad0::/48 maxlen: 48 2001:67c:2788::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/2d26a3-346e-4d0d-ac1e-1d020ece07ea/1/ZlARZWRaqA3LoxWIXPN0rLbSEwU.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/2d26a3-346e-4d0d-ac1e-1d020ece07ea/1/ZlARZWRaqA3LoxWIXPN0rLbSEwU.mft rsync://rpki.ripe.net/repository/DEFAULT/ZlARZWRaqA3LoxWIXPN0rLbSEwU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 02:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:2d:c3:ea:04:34:a6:6a:b9:a3:82:d5:f1:18:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66501165645aa80dcba315885cf374acb6d21305 Validity Not Before: Jan 2 08:20:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6dbd41f05cb6fc2d9ba9b0fd3784516c7a0501b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:1d:b4:0b:76:ba:c4:00:8a:c0:05:1a:e6:28: 32:1d:1c:a3:fa:f3:49:95:7b:8a:10:d6:64:80:7a: e2:8a:63:0c:32:99:b0:7e:54:89:c1:c7:d5:3f:12: 45:2f:43:00:a5:e6:e8:65:eb:7c:c1:a9:18:82:4c: c2:78:a5:16:43:f8:1b:e7:57:59:29:ae:f8:f6:ac: 88:66:b2:4c:4d:19:73:30:e6:fb:bc:1d:52:c0:1a: ff:72:7d:24:47:68:e6:4c:85:31:27:87:dc:dc:e1: e2:a5:11:dd:f8:0d:3a:92:da:e8:d8:83:0e:a4:97: 15:f8:cb:9f:6c:59:bd:5f:70:a1:d0:59:d6:dc:f1: f4:e3:60:8c:48:99:76:aa:d6:08:75:bb:71:bb:e0: d9:cc:bb:31:f8:ef:98:12:8c:1d:60:07:a5:16:36: 56:c3:dd:c7:7c:e7:b2:53:59:40:a0:a6:50:7f:59: b8:22:5a:f0:04:98:f1:86:ef:b1:7e:5c:c7:df:9c: 33:01:88:e9:2f:c3:a7:5a:61:52:e6:00:77:e2:8a: 3c:13:35:b1:80:52:6a:80:e6:5b:2b:70:de:a0:9b: 93:cc:ea:42:d7:3f:53:99:72:4a:bd:59:d2:4a:2b: e9:0a:64:c1:98:25:56:fd:53:b7:e3:f2:9f:ab:cc: 9c:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:BD:41:F0:5C:B6:FC:2D:9B:A9:B0:FD:37:84:51:6C:7A:05:01:B0 X509v3 Authority Key Identifier: keyid:66:50:11:65:64:5A:A8:0D:CB:A3:15:88:5C:F3:74:AC:B6:D2:13:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZlARZWRaqA3LoxWIXPN0rLbSEwU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/2d26a3-346e-4d0d-ac1e-1d020ece07ea/1/bb1B8Fy2_C2bqbD9N4RRbHoFAbA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/2d26a3-346e-4d0d-ac1e-1d020ece07ea/1/ZlARZWRaqA3LoxWIXPN0rLbSEwU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:ac8::/48 2001:67c:acc::/48 2001:67c:ad0::/48 2001:67c:2788::/48 Signature Algorithm: sha256WithRSAEncryption 06:99:70:9d:cb:16:23:02:85:c0:2f:e5:98:08:63:af:7a:b3: 28:38:e9:8f:14:bf:52:bf:38:72:23:d4:a9:21:68:2f:15:5f: ad:c2:a7:c9:a6:ac:73:40:a4:91:c7:1d:43:57:8f:ac:55:a1: 10:58:cf:0c:b6:80:f8:13:eb:53:aa:d7:1a:e0:96:2e:67:14: 6b:6d:9a:e6:8e:ba:0e:b2:85:20:37:af:6f:db:18:44:ed:29: fd:3d:40:4c:15:3f:5b:bb:e6:8f:0a:5d:b1:3e:4c:55:fa:a9: db:37:b6:a7:a9:fe:ef:17:07:67:f0:54:8d:09:65:7c:80:2b: 24:0f:2d:28:1a:50:2a:ce:32:f2:c4:21:a6:bc:02:42:c8:ce: dc:21:e8:71:63:61:92:9b:66:ab:29:d9:57:b6:dc:4e:4b:ef: 71:0f:cc:76:7f:88:8c:fc:64:bb:48:cc:97:2d:9d:0d:d4:90: 23:80:3c:9b:59:8c:4f:bf:ff:97:68:10:39:5d:46:9c:bb:51: 1d:cb:86:e0:fb:14:d0:33:aa:6c:c9:95:9c:1d:db:88:87:74: 47:aa:2e:e8:1d:0e:5a:22:d0:71:51:0a:d3:01:e8:dc:30:ea: a6:4d:6b:5c:36:be:4b:f6:67:8f:59:49:2e:19:dc:21:8a:ff: d6:33:8f:08 -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgISAZt9yy3D6gQ0pmq5o4LV8RjMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2NTAxMTY1NjQ1YWE4MGRjYmEzMTU4ODVjZjM3NGFjYjZk MjEzMDUwHhcNMjYwMTAyMDgyMDI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZGJkNDFmMDVjYjZmYzJkOWJhOWIwZmQzNzg0NTE2YzdhMDUwMWIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4h20C3a6xACKwAUa5igyHRyj+vNJ lXuKENZkgHriimMMMpmwflSJwcfVPxJFL0MApeboZet8wakYgkzCeKUWQ/gb51dZ Ka749qyIZrJMTRlzMOb7vB1SwBr/cn0kR2jmTIUxJ4fc3OHipRHd+A06ktro2IMO pJcV+MufbFm9X3Ch0FnW3PH042CMSJl2qtYIdbtxu+DZzLsx+O+YEowdYAelFjZW w93HfOeyU1lAoKZQf1m4IlrwBJjxhu+xflzH35wzAYjpL8OnWmFS5gB34oo8EzWx gFJqgOZbK3DeoJuTzOpC1z9TmXJKvVnSSivpCmTBmCVW/VO34/Kfq8ycPQIDAQAB o4ICJzCCAiMwHQYDVR0OBBYEFG29QfBctvwtm6mw/TeEUWx6BQGwMB8GA1UdIwQY MBaAFGZQEWVkWqgNy6MViFzzdKy20hMFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmxBUlpXUmFxQTNMb3hXSVhQTjByTGJTRXdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC8yZDI2YTMtMzQ2ZS00ZDBkLWFjMWUt MWQwMjBlY2UwN2VhLzEvYmIxQjhGeTJfQzJicWJEOU40UlJiSG9GQWJBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC8yZDI2YTMtMzQ2ZS00ZDBkLWFjMWUtMWQwMjBlY2UwN2Vh LzEvWmxBUlpXUmFxQTNMb3hXSVhQTjByTGJTRXdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAAjAkAwcAIAEGfArI AwcAIAEGfArMAwcAIAEGfArQAwcAIAEGfCeIMA0GCSqGSIb3DQEBCwUAA4IBAQAG mXCdyxYjAoXAL+WYCGOverMoOOmPFL9SvzhyI9SpIWgvFV+twqfJpqxzQKSRxx1D V4+sVaEQWM8MtoD4E+tTqtca4JYuZxRrbZrmjroOsoUgN69v2xhE7Sn9PUBMFT9b u+aPCl2xPkxV+qnbN7anqf7vFwdn8FSNCWV8gCskDy0oGlAqzjLyxCGmvAJCyM7c IehxY2GSm2arKdlXttxOS+9xD8x2f4iM/GS7SMyXLZ0N1JAjgDybWYxPv/+XaBA5 XUacu1Edy4bg+xTQM6psyZWcHduIh3RHqi7oHQ5aItBxUQrTAejcMOqmTWtcNr5L 9mePWUkuGdwhiv/WM48I -----END CERTIFICATE-----Generated at Mon Jan 12 09:54:39 2026 by rpki-client