This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/BThFi2Ra9PimZJIhECPTOT_tTg0.roa File: BThFi2Ra9PimZJIhECPTOT_tTg0.roa (raw, json) Hash identifier: Dlltmddhbys7SC1BBEXAHf4kOy2r85Z0JpTnPi7WaWw= Subject key identifier: 05:38:45:8B:64:5A:F4:F8:A6:64:92:21:10:23:D3:39:3F:ED:4E:0D Certificate issuer: /CN=b557ccd43afe816e4953228bf14a75dc29014b8d Certificate serial: 019B7F8444EBC78F120339B5E151D5324B21 Authority key identifier: B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/BThFi2Ra9PimZJIhECPTOT_tTg0.roa Signing time: Fri 02 Jan 2026 16:22:13 +0000 ROA not before: Fri 02 Jan 2026 16:22:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 45.148.51.0/24 maxlen: 24 45.152.37.0/24 maxlen: 24 45.154.237.0/24 maxlen: 24 185.208.211.0/24 maxlen: 24 185.232.85.0/24 maxlen: 24 193.57.9.0/24 maxlen: 24 195.60.177.0/24 maxlen: 24 195.88.210.0/24 maxlen: 24 213.185.92.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.mft rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 17 Jan 2026 22:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:44:eb:c7:8f:12:03:39:b5:e1:51:d5:32:4b:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b557ccd43afe816e4953228bf14a75dc29014b8d Validity Not Before: Jan 2 16:22:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0538458b645af4f8a66492211023d3393fed4e0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:f3:3a:7f:46:fa:d9:44:33:61:5e:3b:f1:be: 53:94:20:82:75:6d:99:e7:83:f6:6e:46:f8:e5:f2: 36:d2:79:16:ad:79:ca:b4:e8:59:7e:c5:11:42:23: ef:ff:2f:f7:39:91:4f:b8:fd:a1:4e:b7:7f:46:57: c2:d5:c4:50:ed:83:2c:eb:8d:6f:f6:db:38:19:d8: 1a:9a:99:89:a3:77:13:69:ad:bc:83:21:51:e1:85: 46:54:55:57:dc:e0:59:67:72:1b:2d:a7:1c:6b:50: 2b:59:09:a0:94:31:61:ae:24:a3:93:b9:e0:e3:f3: 41:e3:f3:1d:ff:b6:cc:f8:e4:93:07:f2:5b:e1:58: dd:d3:7b:80:fa:23:53:f1:86:77:ac:25:db:c4:c5: 29:0b:47:fb:c7:6d:ab:e8:00:33:dd:d0:ca:7c:4d: f3:ff:4d:df:51:d6:11:b6:1d:c3:d9:f8:79:a4:68: d1:21:1a:a4:93:02:38:a7:5c:ea:fe:ba:2d:5e:05: 86:e0:c8:14:af:b2:40:07:1b:14:ed:a5:09:59:c4: 34:68:fb:34:c3:8f:6a:64:10:3f:b4:3c:78:72:30: ca:73:57:7c:37:5f:92:34:1c:f3:ee:0a:a8:58:06: e8:14:df:d1:57:27:3b:60:0b:ae:47:19:16:cf:cc: 4c:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:38:45:8B:64:5A:F4:F8:A6:64:92:21:10:23:D3:39:3F:ED:4E:0D X509v3 Authority Key Identifier: keyid:B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/BThFi2Ra9PimZJIhECPTOT_tTg0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.148.51.0/24 45.152.37.0/24 45.154.237.0/24 185.208.211.0/24 185.232.85.0/24 193.57.9.0/24 195.60.177.0/24 195.88.210.0/24 213.185.92.0/22 Signature Algorithm: sha256WithRSAEncryption 85:dc:61:9f:31:2c:2c:9a:24:c9:9e:d5:45:d3:a6:3d:ae:fc: aa:ba:b3:97:87:9a:bd:84:5b:3d:1b:dd:31:ca:fd:c4:37:dd: de:66:93:19:03:e1:20:70:d3:f7:71:e9:94:0b:a8:8a:7b:e3: 13:82:4b:07:ee:f7:80:7e:0e:a5:81:5f:a7:6d:81:47:e3:33: a3:2c:56:cd:52:58:b7:61:00:d2:e2:a5:a2:2e:e9:d4:3c:31: 3a:da:95:7f:00:16:86:18:51:61:f1:96:99:da:b6:c8:ea:dc: 48:52:01:2a:55:be:f5:c2:e2:61:70:ef:61:47:e7:ea:41:51: 1e:12:f8:18:0e:59:b1:a5:38:f9:6b:a3:97:ae:8f:6d:c8:dd: 8b:f0:4a:26:c2:14:64:1d:f7:16:b9:21:5c:30:26:00:64:5f: 69:3c:86:96:6a:2a:b6:e4:ed:2e:8d:bb:2c:58:4d:82:44:fe: d7:7b:0a:45:aa:3b:e0:6a:07:d6:d6:f5:20:af:72:29:67:72: fb:49:b9:d7:b9:a1:f7:a9:8d:f4:19:9c:76:ca:94:94:c6:69: f3:46:8c:a5:f9:5e:e1:04:85:b0:af:0b:b7:20:b6:9b:35:4e: 22:23:6d:7b:b2:14:31:52:bb:ca:8d:33:45:61:dc:6d:8d:45: 7a:ed:c9:81 -----BEGIN CERTIFICATE----- MIIFLTCCBBWgAwIBAgISAZt/hETrx48SAzm14VHVMkshMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1NTdjY2Q0M2FmZTgxNmU0OTUzMjI4YmYxNGE3NWRjMjkw MTRiOGQwHhcNMjYwMTAyMTYyMjEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNTM4NDU4YjY0NWFmNGY4YTY2NDkyMjExMDIzZDMzOTNmZWQ0ZTBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy/M6f0b62UQzYV478b5TlCCCdW2Z 54P2bkb45fI20nkWrXnKtOhZfsURQiPv/y/3OZFPuP2hTrd/RlfC1cRQ7YMs641v 9ts4GdgampmJo3cTaa28gyFR4YVGVFVX3OBZZ3IbLacca1ArWQmglDFhriSjk7ng 4/NB4/Md/7bM+OSTB/Jb4Vjd03uA+iNT8YZ3rCXbxMUpC0f7x22r6AAz3dDKfE3z /03fUdYRth3D2fh5pGjRIRqkkwI4p1zq/rotXgWG4MgUr7JABxsU7aUJWcQ0aPs0 w49qZBA/tDx4cjDKc1d8N1+SNBzz7gqoWAboFN/RVyc7YAuuRxkWz8xMTwIDAQAB o4ICOTCCAjUwHQYDVR0OBBYEFAU4RYtkWvT4pmSSIRAj0zk/7U4NMB8GA1UdIwQY MBaAFLVXzNQ6/oFuSVMii/FKddwpAUuNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFZmTTFEci1nVzVKVXlLTDhVcDEzQ2tCUzQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi8xOTA4NDMtMTgwMy00NDYyLWE3OTUt NmJjNzU1NzhiNGMzLzEvQlRoRmkyUmE5UGltWkpJaEVDUFRPVF90VGcwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi8xOTA4NDMtMTgwMy00NDYyLWE3OTUtNmJjNzU1NzhiNGMz LzEvdFZmTTFEci1nVzVKVXlLTDhVcDEzQ2tCUzQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CME8GCCsGAQUFBwEHAQH/BEAwPjA8BAIAATA2AwQALZQzAwQA LZglAwQALZrtAwQAudDTAwQAuehVAwQAwTkJAwQAwzyxAwQAw1jSAwQC1blcMA0G CSqGSIb3DQEBCwUAA4IBAQCF3GGfMSwsmiTJntVF06Y9rvyqurOXh5q9hFs9G90x yv3EN93eZpMZA+EgcNP3cemUC6iKe+MTgksH7veAfg6lgV+nbYFH4zOjLFbNUli3 YQDS4qWiLunUPDE62pV/ABaGGFFh8ZaZ2rbI6txIUgEqVb71wuJhcO9hR+fqQVEe EvgYDlmxpTj5a6OXro9tyN2L8EomwhRkHfcWuSFcMCYAZF9pPIaWaiq25O0ujbss WE2CRP7XewpFqjvgagfW1vUgr3IpZ3L7SbnXuaH3qY30GZx2ypSUxmnzRoyl+V7h BIWwrwu3ILabNU4iI217shQxUrvKjTNFYdxtjUV67cmB -----END CERTIFICATE-----Generated at Sat Jan 17 06:46:26 2026 by rpki-client