This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/bfjrc-oiggd1qo6rctoBZsBjqBA.roa File: bfjrc-oiggd1qo6rctoBZsBjqBA.roa (raw, json) Hash identifier: gT8ybax2ALNt41GPsw02TSXazlNeSoaU2pZJZ58CxTY= Subject key identifier: 6D:F8:EB:73:EA:22:82:07:75:AA:8E:AB:72:DA:01:66:C0:63:A8:10 Certificate issuer: /CN=0d3558546a2c54bbd812a19228aa98e078d3aa68 Certificate serial: 019B7BA45C6004E390657F3BBF8D9C894752 Authority key identifier: 0D:35:58:54:6A:2C:54:BB:D8:12:A1:92:28:AA:98:E0:78:D3:AA:68 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/bfjrc-oiggd1qo6rctoBZsBjqBA.roa Signing time: Thu 01 Jan 2026 22:18:47 +0000 ROA not before: Thu 01 Jan 2026 22:18:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212242 IP address blocks: 62.3.62.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.mft rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 16:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:5c:60:04:e3:90:65:7f:3b:bf:8d:9c:89:47:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d3558546a2c54bbd812a19228aa98e078d3aa68 Validity Not Before: Jan 1 22:18:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6df8eb73ea22820775aa8eab72da0166c063a810 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:ee:12:f2:41:21:c3:de:e8:64:cb:28:e5:66: 8a:4a:d2:1c:45:aa:38:1a:98:00:48:96:07:58:12: 41:24:8a:7b:22:0a:71:19:dc:8d:ea:14:a8:20:22: 4d:b7:96:61:0d:c8:8d:07:41:39:9f:7c:b4:b6:0c: dd:a1:ef:1b:80:dc:9f:93:13:43:24:23:82:a2:8a: aa:09:36:85:e0:05:09:45:c2:2c:ac:22:b6:86:69: f2:99:43:9e:7b:be:fd:21:5a:7e:d2:e4:0b:5e:ab: 8e:9b:c4:75:7e:2c:1b:50:4a:1f:73:bf:4d:c4:28: fd:f5:a7:2c:cc:67:07:c3:9a:de:b3:9d:4a:44:7c: fa:45:c8:60:c6:53:35:7d:66:92:12:1a:34:3f:0e: 0b:97:6a:8b:cc:28:cf:d6:a2:a6:1f:03:b7:c6:75: b5:9e:ad:0b:67:d1:28:15:75:ce:f1:72:bf:50:bb: db:86:99:da:da:b8:3f:2f:c9:a9:06:87:71:66:9c: c2:c7:14:32:12:e5:e7:ed:eb:6e:6b:8e:b2:a3:df: 69:b5:3b:00:02:0d:27:71:2e:79:a4:ef:90:a4:6d: 70:d0:da:1c:3b:24:c7:06:5e:be:ec:a6:fc:8c:fb: 2b:5f:f2:be:b3:48:e4:cc:a2:b6:69:c8:fd:11:f2: 8b:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:F8:EB:73:EA:22:82:07:75:AA:8E:AB:72:DA:01:66:C0:63:A8:10 X509v3 Authority Key Identifier: keyid:0D:35:58:54:6A:2C:54:BB:D8:12:A1:92:28:AA:98:E0:78:D3:AA:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/bfjrc-oiggd1qo6rctoBZsBjqBA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.3.62.0/24 Signature Algorithm: sha256WithRSAEncryption 9d:ab:ec:94:00:07:80:f2:b2:aa:29:f9:1e:82:eb:b6:b9:b7: 94:45:65:b9:3a:8f:6e:cf:4b:df:48:58:6b:53:2f:17:17:71: 15:d5:4f:d5:3d:fa:6f:52:4a:90:a7:42:a3:2c:31:81:59:0b: 82:9a:2d:26:bf:ed:22:d3:4a:6b:51:9d:9b:03:ec:51:f3:58: d3:7f:08:53:d2:25:6f:b0:85:96:1d:d9:47:81:52:b5:14:4e: 2e:4f:d5:b2:77:c7:f3:72:14:68:9d:16:b3:75:6d:01:ff:25: c9:fc:f6:bb:eb:f3:65:ce:ac:d1:7b:6f:48:68:cc:c7:45:37: 50:14:6a:6e:94:50:f9:00:9c:07:7b:67:9d:63:c9:e7:bd:4d: 46:8f:c5:3d:33:69:aa:cd:3f:7f:f3:e3:5b:c7:2b:07:a1:80: f1:19:a2:26:4b:e4:bd:4b:25:65:1c:70:b4:f9:13:12:54:6d: b8:65:38:71:a8:e7:2c:91:f9:e3:b2:bf:70:d4:88:f1:10:a1: 1b:ea:c6:06:d5:1c:66:94:2d:54:a6:75:ce:9e:5a:bf:6b:04: 45:49:e6:15:63:2d:b9:24:d9:69:5e:03:89:91:36:09:76:a6: 2c:12:d3:32:86:df:d1:9a:bf:fc:4d:a0:ec:d3:0e:a2:2d:45: c7:91:2b:60 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pFxgBOOQZX87v42ciUdSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkMzU1ODU0NmEyYzU0YmJkODEyYTE5MjI4YWE5OGUwNzhk M2FhNjgwHhcNMjYwMTAxMjIxODQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZGY4ZWI3M2VhMjI4MjA3NzVhYThlYWI3MmRhMDE2NmMwNjNhODEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnO4S8kEhw97oZMso5WaKStIcRao4 GpgASJYHWBJBJIp7IgpxGdyN6hSoICJNt5ZhDciNB0E5n3y0tgzdoe8bgNyfkxND JCOCooqqCTaF4AUJRcIsrCK2hmnymUOee779IVp+0uQLXquOm8R1fiwbUEofc79N xCj99acszGcHw5res51KRHz6RchgxlM1fWaSEho0Pw4Ll2qLzCjP1qKmHwO3xnW1 nq0LZ9EoFXXO8XK/ULvbhpna2rg/L8mpBodxZpzCxxQyEuXn7etua46yo99ptTsA Ag0ncS55pO+QpG1w0NocOyTHBl6+7Kb8jPsrX/K+s0jkzKK2acj9EfKLKQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFG3463PqIoIHdaqOq3LaAWbAY6gQMB8GA1UdIwQY MBaAFA01WFRqLFS72BKhkiiqmOB406poMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFRWWVZHb3NWTHZZRXFHU0tLcVk0SGpUcW1nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi80NzRmMjctYjI4Ni00NmYwLWFlNDUt MTMyZmZjOGJkZTQ2LzEvYmZqcmMtb2lnZ2QxcW82cmN0b0Jac0JqcUJBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi80NzRmMjctYjI4Ni00NmYwLWFlNDUtMTMyZmZjOGJkZTQ2 LzEvRFRWWVZHb3NWTHZZRXFHU0tLcVk0SGpUcW1nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPgM+MA0G CSqGSIb3DQEBCwUAA4IBAQCdq+yUAAeA8rKqKfkeguu2ubeURWW5Oo9uz0vfSFhr Uy8XF3EV1U/VPfpvUkqQp0KjLDGBWQuCmi0mv+0i00prUZ2bA+xR81jTfwhT0iVv sIWWHdlHgVK1FE4uT9Wyd8fzchRonRazdW0B/yXJ/Pa76/NlzqzRe29IaMzHRTdQ FGpulFD5AJwHe2edY8nnvU1Gj8U9M2mqzT9/8+NbxysHoYDxGaImS+S9SyVlHHC0 +RMSVG24ZThxqOcskfnjsr9w1IjxEKEb6sYG1RxmlC1UpnXOnlq/awRFSeYVYy25 JNlpXgOJkTYJdqYsEtMyht/Rmr/8TaDs0w6iLUXHkStg -----END CERTIFICATE-----Generated at Sat Jan 3 01:01:55 2026 by rpki-client