This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/bztTpwKlalB50B7a8z_5imUIkhY.roa File: bztTpwKlalB50B7a8z_5imUIkhY.roa (raw, json) Hash identifier: wBUqojx0nucCr6H+m0QDrHliXYkmvtt+9hB08110reI= Subject key identifier: 6F:3B:53:A7:02:A5:6A:50:79:D0:1E:DA:F3:3F:F9:8A:65:08:92:16 Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Certificate serial: 019B78A342515E6FA5134D1816F24A9B2791 Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/bztTpwKlalB50B7a8z_5imUIkhY.roa Signing time: Thu 01 Jan 2026 08:18:43 +0000 ROA not before: Thu 01 Jan 2026 08:18:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213438 IP address blocks: 37.60.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 02:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:42:51:5e:6f:a5:13:4d:18:16:f2:4a:9b:27:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Validity Not Before: Jan 1 08:18:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6f3b53a702a56a5079d01edaf33ff98a65089216 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:fc:6c:ff:f7:c8:43:5d:68:d5:33:55:6b:54: ee:69:be:b9:bc:6c:16:99:61:27:aa:42:cd:a1:2b: 8c:11:17:48:21:e5:92:25:34:7f:bd:f5:00:27:68: ad:bf:37:7c:e7:ad:d6:4d:c0:39:ba:79:78:c3:96: d0:74:07:dc:3b:c9:e0:ab:26:94:2e:01:e4:1b:13: 9a:a6:0b:e6:7f:e1:06:0a:6f:74:dc:a8:83:6c:41: 17:7e:32:5b:a1:41:92:fe:8b:ca:e2:b0:3a:76:1a: 37:99:30:02:38:22:93:02:15:73:58:04:0c:06:e3: 1a:95:0a:f6:e7:1c:1b:e1:32:a6:d8:91:a0:5f:b9: 9e:cb:6d:dc:a8:65:5f:be:64:0e:32:0c:ea:6a:a2: d8:c1:d6:93:ae:dd:a6:a3:bf:a4:a4:6d:83:28:a7: c5:d9:e6:8d:3e:3f:d9:d3:ae:f5:a0:90:10:b4:5a: 27:4a:a7:82:7f:9a:67:cf:e4:24:7c:f8:d2:3b:85: 3c:65:4e:48:5b:e0:69:dc:ec:24:70:24:8d:b2:cd: 5a:12:29:2b:42:e5:59:31:45:34:d5:15:45:2b:f7: 44:1a:60:eb:98:c3:97:b6:57:39:77:c9:00:8a:ef: 31:16:09:0b:3f:cf:e2:bc:9d:03:e6:a2:90:cd:fc: cd:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:3B:53:A7:02:A5:6A:50:79:D0:1E:DA:F3:3F:F9:8A:65:08:92:16 X509v3 Authority Key Identifier: keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/bztTpwKlalB50B7a8z_5imUIkhY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.60.141.0/24 Signature Algorithm: sha256WithRSAEncryption 27:9a:ad:77:15:2a:d9:c2:c1:50:ac:a7:c3:92:d8:94:68:ab: 7d:a5:1c:bf:f9:6b:95:85:e7:1b:d2:04:23:37:85:91:69:49: 88:b8:53:a8:b8:e6:60:88:f5:91:43:27:6a:a0:3d:a0:07:4e: fa:90:02:0f:65:d6:54:32:ff:0e:bb:db:b7:d0:16:0a:42:45: 6f:c2:56:f0:47:2c:6c:a5:39:a2:10:42:2d:af:4d:92:b9:2a: 90:2e:74:27:59:26:94:ec:36:7b:c6:75:c0:47:a7:7a:76:61: 70:02:06:e9:18:a8:7d:89:05:39:75:a5:e8:36:35:63:a4:b5: 24:b5:a6:d6:43:9b:71:60:e3:8e:e3:e3:a8:65:77:80:3f:bc: 52:24:db:10:15:7b:ec:25:bf:7b:b0:ed:e6:9b:a4:bf:1d:48: d7:59:6a:98:79:b9:5c:c1:08:e3:c5:8a:a8:d3:c7:00:90:8b: 6f:35:d0:a0:df:71:7e:2a:6c:2d:25:41:3e:6b:57:f1:04:bf: b6:ae:1c:ee:a6:ce:9e:60:34:d7:9c:a1:a4:fa:3b:ae:f3:2e: 3f:c5:2f:31:6f:cb:59:50:7a:61:e7:ff:81:97:97:c9:82:eb: 66:1f:40:75:04:45:98:8f:77:18:da:cd:de:7e:ae:d4:50:25: fd:c0:5d:2b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4o0JRXm+lE00YFvJKmyeRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3 NzVlOWQwHhcNMjYwMTAxMDgxODQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZjNiNTNhNzAyYTU2YTUwNzlkMDFlZGFmMzNmZjk4YTY1MDg5MjE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArPxs//fIQ11o1TNVa1Tuab65vGwW mWEnqkLNoSuMERdIIeWSJTR/vfUAJ2itvzd8563WTcA5unl4w5bQdAfcO8ngqyaU LgHkGxOapgvmf+EGCm903KiDbEEXfjJboUGS/ovK4rA6dho3mTACOCKTAhVzWAQM BuMalQr25xwb4TKm2JGgX7mey23cqGVfvmQOMgzqaqLYwdaTrt2mo7+kpG2DKKfF 2eaNPj/Z0671oJAQtFonSqeCf5pnz+QkfPjSO4U8ZU5IW+Bp3OwkcCSNss1aEikr QuVZMUU01RVFK/dEGmDrmMOXtlc5d8kAiu8xFgkLP8/ivJ0D5qKQzfzNkwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFG87U6cCpWpQedAe2vM/+YplCJIWMB8GA1UdIwQY MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct Y2QzY2E1OTc1NzEyLzEvYnp0VHB3S2xhbEI1MEI3YTh6XzVpbVVJa2hZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJTyNMA0G CSqGSIb3DQEBCwUAA4IBAQAnmq13FSrZwsFQrKfDktiUaKt9pRy/+WuVhecb0gQj N4WRaUmIuFOouOZgiPWRQydqoD2gB076kAIPZdZUMv8Ou9u30BYKQkVvwlbwRyxs pTmiEEItr02SuSqQLnQnWSaU7DZ7xnXAR6d6dmFwAgbpGKh9iQU5daXoNjVjpLUk tabWQ5txYOOO4+OoZXeAP7xSJNsQFXvsJb97sO3mm6S/HUjXWWqYeblcwQjjxYqo 08cAkItvNdCg33F+KmwtJUE+a1fxBL+2rhzups6eYDTXnKGk+juu8y4/xS8xb8tZ UHph5/+Bl5fJgutmH0B1BEWYj3cY2s3efq7UUCX9wF0r -----END CERTIFICATE-----Generated at Fri Jan 2 12:05:20 2026 by rpki-client