This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/37930a-288f-42b6-8c64-6603eb54bb3a/1/bfs8YI0YH3Io6ovI3fBPTv4Cxb0.roa File: bfs8YI0YH3Io6ovI3fBPTv4Cxb0.roa (raw, json) Hash identifier: rLPR7B5UIsCaVqkuX9IH0l6nJOJ5SAkKr0FgBYIBZvM= Subject key identifier: 6D:FB:3C:60:8D:18:1F:72:28:EA:8B:C8:DD:F0:4F:4E:FE:02:C5:BD Certificate issuer: /CN=e90610410cf8014ac1dbe9f6abcc81c66187afbe Certificate serial: 019B7C8095821A87D896CD7F213159624899 Authority key identifier: E9:06:10:41:0C:F8:01:4A:C1:DB:E9:F6:AB:CC:81:C6:61:87:AF:BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6QYQQQz4AUrB2-n2q8yBxmGHr74.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/37930a-288f-42b6-8c64-6603eb54bb3a/1/bfs8YI0YH3Io6ovI3fBPTv4Cxb0.roa Signing time: Fri 02 Jan 2026 02:19:20 +0000 ROA not before: Fri 02 Jan 2026 02:19:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 212.209.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/37930a-288f-42b6-8c64-6603eb54bb3a/1/6QYQQQz4AUrB2-n2q8yBxmGHr74.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/37930a-288f-42b6-8c64-6603eb54bb3a/1/6QYQQQz4AUrB2-n2q8yBxmGHr74.mft rsync://rpki.ripe.net/repository/DEFAULT/6QYQQQz4AUrB2-n2q8yBxmGHr74.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 04 Jan 2026 05:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:95:82:1a:87:d8:96:cd:7f:21:31:59:62:48:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e90610410cf8014ac1dbe9f6abcc81c66187afbe Validity Not Before: Jan 2 02:19:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6dfb3c608d181f7228ea8bc8ddf04f4efe02c5bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:0e:61:4d:f2:c1:9e:d5:de:b2:0e:f0:b2:e8: 93:47:bc:c7:b8:61:70:f8:85:0f:2a:35:19:4c:b1: 18:62:a3:67:6c:6c:66:a1:b7:18:1d:a1:75:cf:5f: 12:98:46:eb:6a:b7:51:65:cc:d2:a5:cf:22:59:0c: 4c:81:f9:b2:4c:59:3a:f4:49:0a:05:4d:d1:f2:4b: 20:50:ef:37:ed:fc:6b:2e:82:fe:c2:61:0d:bb:ac: a3:e3:23:f4:f8:ab:ca:04:88:cf:b7:2e:c5:6f:c3: 47:7f:a9:ce:60:b9:7b:3b:ec:88:9f:56:c3:c8:50: 09:04:bf:2a:11:e9:f0:4f:32:52:e4:4e:06:3c:06: 83:0d:3d:2c:a2:7c:78:aa:d7:d9:c4:ac:f7:02:aa: e8:99:07:8f:79:44:42:4d:cc:57:9e:64:ff:9e:53: 49:41:1f:dc:a3:6e:fc:39:d4:ab:79:1c:e9:69:94: 1b:9e:c7:24:2c:0d:03:67:4e:75:5c:3a:84:8c:c5: f1:f8:af:ca:62:79:2b:27:d3:fe:66:f0:63:2a:6a: f2:29:dc:da:4b:c9:32:77:57:a9:ac:91:41:22:5c: 25:d9:f7:a9:d1:22:5a:13:ec:2e:37:12:39:7d:9f: f8:64:38:f0:6a:4c:ec:e4:ad:9c:73:93:d0:b0:36: f8:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:FB:3C:60:8D:18:1F:72:28:EA:8B:C8:DD:F0:4F:4E:FE:02:C5:BD X509v3 Authority Key Identifier: keyid:E9:06:10:41:0C:F8:01:4A:C1:DB:E9:F6:AB:CC:81:C6:61:87:AF:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6QYQQQz4AUrB2-n2q8yBxmGHr74.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/37930a-288f-42b6-8c64-6603eb54bb3a/1/bfs8YI0YH3Io6ovI3fBPTv4Cxb0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/37930a-288f-42b6-8c64-6603eb54bb3a/1/6QYQQQz4AUrB2-n2q8yBxmGHr74.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.209.255.0/24 Signature Algorithm: sha256WithRSAEncryption 48:24:16:05:4c:c0:3e:ff:4a:4a:8d:4e:b0:46:7d:83:a9:85: af:97:dc:64:4f:30:3c:f9:0a:3e:87:eb:17:d8:db:ea:9c:d4: 61:72:bd:59:f8:11:f1:14:68:a2:ea:af:8b:30:a4:d5:6b:47: 4e:72:a5:4b:f8:11:ef:57:9f:da:f4:ba:48:eb:c3:e2:2a:10: 8e:78:35:ab:6d:fb:31:12:8f:d3:87:f2:81:df:99:b8:c0:f8: 3b:1a:d7:7b:9c:75:c1:e5:e9:55:aa:da:88:68:c2:63:cc:da: 7e:08:88:1e:e0:ae:1c:ad:30:56:e4:86:1d:2d:c6:3d:ab:36: e5:53:d7:2a:0f:c2:db:2e:c5:3e:73:9a:85:f2:37:6a:45:93: 65:90:42:a8:04:44:97:a0:e9:d1:5a:0f:92:b2:d2:e3:b9:92: de:b2:ce:84:69:9f:50:f7:db:9d:f3:a0:35:a0:b0:f5:64:a8: 6e:a8:e9:f1:15:d3:71:eb:c9:90:ae:f1:32:66:c0:bc:2f:49: 4d:54:13:c5:e1:94:a3:59:52:fd:7e:83:ce:d6:24:1b:bf:fe: 7d:5b:51:b9:95:09:24:d1:c5:f1:68:63:a1:35:30:53:02:01: a6:53:a2:ff:e6:7d:cb:7a:68:2b:d7:ee:2a:19:2c:c6:e3:8d: df:85:8f:21 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gJWCGofYls1/ITFZYkiZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU5MDYxMDQxMGNmODAxNGFjMWRiZTlmNmFiY2M4MWM2NjE4 N2FmYmUwHhcNMjYwMTAyMDIxOTIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZGZiM2M2MDhkMTgxZjcyMjhlYThiYzhkZGYwNGY0ZWZlMDJjNWJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtw5hTfLBntXesg7wsuiTR7zHuGFw +IUPKjUZTLEYYqNnbGxmobcYHaF1z18SmEbrardRZczSpc8iWQxMgfmyTFk69EkK BU3R8ksgUO837fxrLoL+wmENu6yj4yP0+KvKBIjPty7Fb8NHf6nOYLl7O+yIn1bD yFAJBL8qEenwTzJS5E4GPAaDDT0sonx4qtfZxKz3AqromQePeURCTcxXnmT/nlNJ QR/co278OdSreRzpaZQbnsckLA0DZ051XDqEjMXx+K/KYnkrJ9P+ZvBjKmryKdza S8kyd1eprJFBIlwl2fep0SJaE+wuNxI5fZ/4ZDjwakzs5K2cc5PQsDb4KwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFG37PGCNGB9yKOqLyN3wT07+AsW9MB8GA1UdIwQY MBaAFOkGEEEM+AFKwdvp9qvMgcZhh6++MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNlFZUVFRejRBVXJCMi1uMnE4eUJ4bUdIcjc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8zNzkzMGEtMjg4Zi00MmI2LThjNjQt NjYwM2ViNTRiYjNhLzEvYmZzOFlJMFlIM0lvNm92STNmQlBUdjRDeGIwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS8zNzkzMGEtMjg4Zi00MmI2LThjNjQtNjYwM2ViNTRiYjNh LzEvNlFZUVFRejRBVXJCMi1uMnE4eUJ4bUdIcjc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1NH/MA0G CSqGSIb3DQEBCwUAA4IBAQBIJBYFTMA+/0pKjU6wRn2DqYWvl9xkTzA8+Qo+h+sX 2NvqnNRhcr1Z+BHxFGii6q+LMKTVa0dOcqVL+BHvV5/a9LpI68PiKhCOeDWrbfsx Eo/Th/KB35m4wPg7Gtd7nHXB5elVqtqIaMJjzNp+CIge4K4crTBW5IYdLcY9qzbl U9cqD8LbLsU+c5qF8jdqRZNlkEKoBESXoOnRWg+SstLjuZLess6EaZ9Q99ud86A1 oLD1ZKhuqOnxFdNx68mQrvEyZsC8L0lNVBPF4ZSjWVL9foPO1iQbv/59W1G5lQkk 0cXxaGOhNTBTAgGmU6L/5n3Lemgr1+4qGSzG443fhY8h -----END CERTIFICATE-----Generated at Sat Jan 3 12:48:56 2026 by rpki-client