This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/Btl1bCmLetxd0J5yWml2xku6Jd0.roa File: Btl1bCmLetxd0J5yWml2xku6Jd0.roa (raw, json) Hash identifier: P5QLGK5f1FMy/flgbkzMRzUhYfM5efcAY5iKbZNVV08= Subject key identifier: 06:D9:75:6C:29:8B:7A:DC:5D:D0:9E:72:5A:69:76:C6:4B:BA:25:DD Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Certificate serial: 019B7EA70A283BB94DB29FB1744062ACF558 Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/Btl1bCmLetxd0J5yWml2xku6Jd0.roa Signing time: Fri 02 Jan 2026 12:20:34 +0000 ROA not before: Fri 02 Jan 2026 12:20:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214102 IP address blocks: 2a0c:9a40:8fb0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 02:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:0a:28:3b:b9:4d:b2:9f:b1:74:40:62:ac:f5:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Validity Not Before: Jan 2 12:20:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=06d9756c298b7adc5dd09e725a6976c64bba25dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:02:78:d8:ab:71:06:b5:8c:ff:02:61:a1:25: 80:7f:ff:21:74:9f:76:7a:48:c3:dd:c7:1b:ff:eb: 7e:fa:60:8d:c4:af:af:a8:7a:25:9e:54:f0:ea:bb: 4d:eb:4d:e8:b0:66:bf:3e:81:6a:eb:be:f8:82:38: 9a:c6:1b:6b:4f:b9:bb:46:74:7c:9e:5e:62:15:cc: a9:ce:28:7d:6d:45:bc:69:13:ec:ce:84:af:2a:14: 65:0c:09:b1:a6:e3:de:3b:e8:d5:a0:bd:f3:8b:3e: 76:c8:53:24:54:2d:6d:60:ca:ae:a5:4a:1a:a6:92: 53:2d:ed:b3:57:c8:3f:4e:43:56:2d:09:73:df:2f: fb:fd:9b:8b:e4:bd:c5:72:a0:5c:42:81:cd:a9:b1: dd:33:ce:d9:ee:61:80:74:8d:8a:fb:d6:4c:90:c7: dc:b3:95:f0:0b:8e:1f:cb:cc:67:35:f9:ba:b7:5f: 22:ea:eb:45:53:a4:a9:25:ea:a0:49:1a:7a:07:cb: 9e:5d:b7:79:b8:c7:78:47:54:86:78:3f:ea:eb:ed: 4d:78:e1:5c:65:55:8c:16:46:97:72:67:e9:4b:0e: ee:ea:43:f0:ca:63:36:ed:e4:5f:27:18:e3:17:7f: 85:c3:41:f4:fd:85:ba:5a:2e:a2:b0:31:97:a0:f2: 0a:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:D9:75:6C:29:8B:7A:DC:5D:D0:9E:72:5A:69:76:C6:4B:BA:25:DD X509v3 Authority Key Identifier: keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/Btl1bCmLetxd0J5yWml2xku6Jd0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:9a40:8fb0::/48 Signature Algorithm: sha256WithRSAEncryption 4f:20:2d:29:c3:79:dd:c4:fe:6b:c4:33:09:12:15:9b:e6:96: 86:89:38:3a:21:ca:88:55:af:62:d8:21:6d:42:9c:be:c8:dd: a2:13:54:d1:36:0e:cb:3f:55:a0:c1:b2:9e:72:56:3e:0f:6f: 92:3d:6d:41:0b:ae:64:3c:1f:24:88:f1:96:64:3b:c7:dc:10: 65:9c:82:be:38:9e:76:ef:92:c8:c3:a6:9a:ba:7a:42:4c:cc: 22:65:da:8a:2d:69:2f:35:99:bd:e1:3f:f8:02:e0:b5:15:7a: dc:52:81:1f:17:04:15:6c:f3:47:12:67:0f:22:b1:bf:55:5a: 42:fc:fd:d1:8f:8d:38:dc:59:bf:61:09:30:9d:5d:24:b7:23: 93:a2:41:a4:79:05:48:ca:af:bb:86:a2:1b:56:42:e5:31:32: 9c:7d:d8:d2:fb:43:75:8d:6c:7a:14:65:24:e7:61:7e:59:6f: d8:c3:16:ac:f2:7a:0a:d4:2f:d4:f6:91:af:82:4a:38:04:bb: db:f3:53:c6:1b:eb:50:62:9b:ea:ed:1d:81:04:32:db:11:98: 6d:d1:10:47:df:7a:de:53:21:94:08:7e:d2:5c:e0:5d:2f:84: 19:fd:f3:94:52:cd:68:61:57:08:e6:52:3f:2a:6c:d0:59:2f: 67:c0:ba:9b -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+pwooO7lNsp+xdEBirPVYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllOTVhMzYxZmUyYjJjNTI5MjYyNmJhNGM1NmE2NWE4MTRl NDgwMDgwHhcNMjYwMTAyMTIyMDM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNmQ5NzU2YzI5OGI3YWRjNWRkMDllNzI1YTY5NzZjNjRiYmEyNWRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAywJ42KtxBrWM/wJhoSWAf/8hdJ92 ekjD3ccb/+t++mCNxK+vqHolnlTw6rtN603osGa/PoFq6774gjiaxhtrT7m7RnR8 nl5iFcypzih9bUW8aRPszoSvKhRlDAmxpuPeO+jVoL3ziz52yFMkVC1tYMqupUoa ppJTLe2zV8g/TkNWLQlz3y/7/ZuL5L3FcqBcQoHNqbHdM87Z7mGAdI2K+9ZMkMfc s5XwC44fy8xnNfm6t18i6utFU6SpJeqgSRp6B8ueXbd5uMd4R1SGeD/q6+1NeOFc ZVWMFkaXcmfpSw7u6kPwymM27eRfJxjjF3+Fw0H0/YW6Wi6isDGXoPIK4wIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFAbZdWwpi3rcXdCeclppdsZLuiXdMB8GA1UdIwQY MBaAFJ6Vo2H+KyxSkmJrpMVqZagU5IAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2Yt YmY0ZTUyN2I5ZmE4LzEvQnRsMWJDbUxldHhkMEo1eVdtbDJ4a3U2SmQwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2YtYmY0ZTUyN2I5ZmE4 LzEvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgyaQI+w MA0GCSqGSIb3DQEBCwUAA4IBAQBPIC0pw3ndxP5rxDMJEhWb5paGiTg6IcqIVa9i 2CFtQpy+yN2iE1TRNg7LP1WgwbKeclY+D2+SPW1BC65kPB8kiPGWZDvH3BBlnIK+ OJ5275LIw6aaunpCTMwiZdqKLWkvNZm94T/4AuC1FXrcUoEfFwQVbPNHEmcPIrG/ VVpC/P3Rj4043Fm/YQkwnV0ktyOTokGkeQVIyq+7hqIbVkLlMTKcfdjS+0N1jWx6 FGUk52F+WW/Ywxas8noK1C/U9pGvgko4BLvb81PGG+tQYpvq7R2BBDLbEZht0RBH 33reUyGUCH7SXOBdL4QZ/fOUUs1oYVcI5lI/KmzQWS9nwLqb -----END CERTIFICATE-----Generated at Tue Jan 20 09:04:41 2026 by rpki-client