This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/bcTTwWMryli_TdMSWH3bjiZ0emk.roa File: bcTTwWMryli_TdMSWH3bjiZ0emk.roa (raw, json) Hash identifier: byHiT5bsSs28vC3s9mnZw4gVIDI3TUfaWC39AXm33ac= Subject key identifier: 6D:C4:D3:C1:63:2B:CA:58:BF:4D:D3:12:58:7D:DB:8E:26:74:7A:69 Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5D4BDC9D8BEFD63FB999D2CECC6AC4 Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/bcTTwWMryli_TdMSWH3bjiZ0emk.roa Signing time: Fri 02 Jan 2026 06:20:24 +0000 ROA not before: Fri 02 Jan 2026 06:20:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212173 IP address blocks: 2a0e:b107:1d40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:4b:dc:9d:8b:ef:d6:3f:b9:99:d2:ce:cc:6a:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:20:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6dc4d3c1632bca58bf4dd312587ddb8e26747a69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:a2:75:3c:bb:ab:0b:a8:ac:d5:80:66:d1:12: be:87:83:13:ce:f2:46:f4:7e:e2:95:9e:17:bf:dd: e1:f5:2e:c0:4f:35:e4:66:28:26:f5:2b:3d:75:47: 48:e0:92:03:11:7f:e8:0c:12:68:ed:eb:84:07:7e: 02:86:78:f5:7e:14:c1:b7:a9:eb:d3:eb:37:5a:97: 13:d5:b7:97:8e:aa:49:f5:88:00:2c:39:7a:ca:78: b7:25:5b:ca:bb:84:18:af:88:8e:69:cf:a4:96:a9: c9:b0:e4:35:53:a6:a0:81:cf:1d:00:1a:dc:eb:68: dd:45:26:58:0f:e8:2f:da:b5:ce:40:f7:92:12:77: da:b2:ff:8a:52:21:6d:f7:bc:de:1d:c4:81:57:a2: 40:6f:eb:78:ee:f8:a7:a0:12:8a:56:7d:eb:95:20: 73:a2:7b:59:89:67:6e:fb:07:8a:65:94:5e:d9:eb: e8:83:76:5d:6d:56:72:f8:44:fc:13:40:3b:96:cc: 08:ff:d6:d6:4b:ec:31:96:44:8a:1c:87:bb:b8:8c: f5:47:87:83:04:81:00:0b:48:66:df:59:da:ec:3c: d0:f5:4f:38:bb:9f:c2:76:45:1c:4e:c9:3d:4b:b4: d5:be:11:68:7b:7b:e8:2e:19:25:46:df:e2:ef:c8: 18:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:C4:D3:C1:63:2B:CA:58:BF:4D:D3:12:58:7D:DB:8E:26:74:7A:69 X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/bcTTwWMryli_TdMSWH3bjiZ0emk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:b107:1d40::/48 Signature Algorithm: sha256WithRSAEncryption 28:0b:6a:c8:9b:99:72:4a:0b:9c:4f:30:30:53:7b:83:08:73: 8d:bb:98:09:eb:4d:e4:e1:c0:4b:c5:07:0e:b7:5b:4d:bb:27: ca:3a:88:85:eb:e0:03:b7:8e:a5:30:72:0f:c5:9f:9d:bf:88: 97:75:9b:73:71:37:14:98:65:c5:44:91:29:03:2b:08:f4:78: f8:7b:81:8d:80:1c:8c:b8:20:f9:a1:06:c5:43:e9:dd:7e:e2: 7d:e7:8d:69:b0:4c:00:36:a6:12:9f:2a:9e:be:e1:c3:98:48: ba:a0:34:53:8d:36:8a:5c:cd:b3:42:1d:34:0f:e3:06:bb:0c: 81:70:79:af:b7:c9:4a:eb:db:14:e4:8f:fa:12:3a:ce:91:05: a2:4b:d7:9a:dd:cc:fe:57:56:57:84:cd:61:f6:1b:35:83:da: 06:90:36:22:42:c1:05:3d:ec:fb:40:51:22:53:55:67:ab:9a: 32:b9:cb:05:df:66:12:d9:fe:0c:35:9d:9a:c6:f7:ac:3c:6a: 78:7e:03:e8:d2:18:c0:bb:5f:e1:e2:11:79:90:ca:13:d1:03: 1c:3a:5c:33:67:fa:af:5c:0c:95:b6:f7:cd:50:dc:90:d2:13: d6:de:79:53:98:6d:82:de:c5:c3:e2:7f:c9:88:61:a8:b0:cd: 91:81:a6:d9 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9XUvcnYvv1j+5mdLOzGrEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYyMDI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZGM0ZDNjMTYzMmJjYTU4YmY0ZGQzMTI1ODdkZGI4ZTI2NzQ3YTY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3KJ1PLurC6is1YBm0RK+h4MTzvJG 9H7ilZ4Xv93h9S7ATzXkZigm9Ss9dUdI4JIDEX/oDBJo7euEB34Chnj1fhTBt6nr 0+s3WpcT1beXjqpJ9YgALDl6yni3JVvKu4QYr4iOac+klqnJsOQ1U6aggc8dABrc 62jdRSZYD+gv2rXOQPeSEnfasv+KUiFt97zeHcSBV6JAb+t47vinoBKKVn3rlSBz ontZiWdu+weKZZRe2evog3ZdbVZy+ET8E0A7lswI/9bWS+wxlkSKHIe7uIz1R4eD BIEAC0hm31na7DzQ9U84u5/CdkUcTsk9S7TVvhFoe3voLhklRt/i78gYHwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFG3E08FjK8pYv03TElh9244mdHppMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvYmNUVHdXTXJ5bGlfVGRNU1dIM2JqaVowZW1rLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg6xBx1A MA0GCSqGSIb3DQEBCwUAA4IBAQAoC2rIm5lySgucTzAwU3uDCHONu5gJ603k4cBL xQcOt1tNuyfKOoiF6+ADt46lMHIPxZ+dv4iXdZtzcTcUmGXFRJEpAysI9Hj4e4GN gByMuCD5oQbFQ+ndfuJ9541psEwANqYSnyqevuHDmEi6oDRTjTaKXM2zQh00D+MG uwyBcHmvt8lK69sU5I/6EjrOkQWiS9ea3cz+V1ZXhM1h9hs1g9oGkDYiQsEFPez7 QFEiU1Vnq5oyucsF32YS2f4MNZ2axvesPGp4fgPo0hjAu1/h4hF5kMoT0QMcOlwz Z/qvXAyVtvfNUNyQ0hPW3nlTmG2C3sXD4n/JiGGosM2RgabZ -----END CERTIFICATE-----Generated at Sun Jan 11 23:53:56 2026 by rpki-client