This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/a5cedc-bf61-4cbc-ab36-ad0953f7fd49/1/BSBTdISOwUSk76V2qhorPXUYcls.roa File: BSBTdISOwUSk76V2qhorPXUYcls.roa (raw, json) Hash identifier: gMCNavqIUpRgqrn5vcMqwPcSr1Q6xSaeOjz/QGd0jJc= Subject key identifier: 05:20:53:74:84:8E:C1:44:A4:EF:A5:76:AA:1A:2B:3D:75:18:72:5B Certificate issuer: /CN=b3fedb5009526f0c6bad423f00cda08a0933b78b Certificate serial: 019B79101DC529C893D9BD8A78DE14D494DD Authority key identifier: B3:FE:DB:50:09:52:6F:0C:6B:AD:42:3F:00:CD:A0:8A:09:33:B7:8B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s_7bUAlSbwxrrUI_AM2gigkzt4s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/a5cedc-bf61-4cbc-ab36-ad0953f7fd49/1/BSBTdISOwUSk76V2qhorPXUYcls.roa Signing time: Thu 01 Jan 2026 10:17:37 +0000 ROA not before: Thu 01 Jan 2026 10:17:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202932 IP address blocks: 185.136.4.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/a5cedc-bf61-4cbc-ab36-ad0953f7fd49/1/s_7bUAlSbwxrrUI_AM2gigkzt4s.crl rsync://rpki.ripe.net/repository/DEFAULT/17/a5cedc-bf61-4cbc-ab36-ad0953f7fd49/1/s_7bUAlSbwxrrUI_AM2gigkzt4s.mft rsync://rpki.ripe.net/repository/DEFAULT/s_7bUAlSbwxrrUI_AM2gigkzt4s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 19:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:1d:c5:29:c8:93:d9:bd:8a:78:de:14:d4:94:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b3fedb5009526f0c6bad423f00cda08a0933b78b Validity Not Before: Jan 1 10:17:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=05205374848ec144a4efa576aa1a2b3d7518725b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:d9:94:48:81:6f:43:2e:1c:09:96:c2:f2:74: 5f:3e:66:99:b5:16:67:b9:00:b0:7d:27:e9:d5:97: c8:b4:91:e8:c5:5a:ee:a9:93:61:80:b5:47:c8:bf: 68:80:5f:4e:9c:47:5b:d8:c4:7f:56:af:54:86:01: 19:5f:62:00:b8:4d:48:0b:c2:e2:88:b4:7e:e9:e2: a2:6a:b0:15:84:31:7c:94:bf:8a:4e:3f:a5:a2:eb: 01:fa:4d:9d:e1:27:a7:7f:e0:69:41:f1:73:30:a4: 83:29:79:16:7a:a7:e6:ee:fe:10:9c:0f:33:05:74: 4a:9f:be:a9:d7:34:fe:32:0e:a4:be:e1:3a:a3:08: 2b:5c:2e:aa:00:d8:55:9e:68:1b:f2:15:17:a6:44: 4b:2a:fd:a5:f1:f4:85:eb:fb:1b:ab:96:8b:a1:f8: bf:c6:d4:ea:47:a0:46:ac:3a:5b:01:9b:04:3e:c8: 11:b6:96:5d:ee:14:5e:c6:f0:b1:a6:c8:bf:7b:01: 94:79:84:53:63:30:56:2a:ce:03:62:9b:6e:9e:75: 8a:90:bc:94:f4:e7:f3:c6:16:9a:ab:a3:c1:34:b4: 31:4d:8b:51:4f:31:17:d9:70:1d:5a:ba:67:a0:de: fa:8d:3f:60:ba:63:9c:6a:80:c7:7d:9a:a0:35:25: 3d:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:20:53:74:84:8E:C1:44:A4:EF:A5:76:AA:1A:2B:3D:75:18:72:5B X509v3 Authority Key Identifier: keyid:B3:FE:DB:50:09:52:6F:0C:6B:AD:42:3F:00:CD:A0:8A:09:33:B7:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s_7bUAlSbwxrrUI_AM2gigkzt4s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a5cedc-bf61-4cbc-ab36-ad0953f7fd49/1/BSBTdISOwUSk76V2qhorPXUYcls.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a5cedc-bf61-4cbc-ab36-ad0953f7fd49/1/s_7bUAlSbwxrrUI_AM2gigkzt4s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.136.4.0/22 Signature Algorithm: sha256WithRSAEncryption 20:36:d7:d0:a9:81:85:27:eb:7d:56:f3:b4:0b:d3:5c:e6:2d: fd:7e:d9:b1:15:2c:da:ae:3b:8c:ca:63:52:0c:bd:54:4f:d7: 8c:7f:7a:ca:48:cb:47:3c:74:c2:7e:fb:51:90:21:e0:f5:2f: 88:eb:cc:ec:0a:3d:2b:91:34:3d:e1:2b:ac:e7:f3:ec:58:93: bf:91:e5:3c:21:9e:df:f2:65:27:70:4b:e9:e1:e7:33:93:00: ba:a8:51:d0:19:89:d6:b4:df:6a:a9:48:22:9f:a5:b9:b0:88: ab:9b:e6:d9:a5:98:b6:ac:71:b4:d9:33:41:0f:ab:c4:ae:b3: 4f:89:3a:af:48:ae:dc:e1:ee:83:2f:13:42:8f:bb:79:aa:f4: c8:65:8f:98:03:b1:ef:f8:00:81:60:13:7c:b2:98:10:be:d1: f2:b8:d7:a5:d2:00:53:bb:e9:52:8a:33:35:d6:c5:d3:8b:cb: 29:23:64:16:5a:6b:5c:7a:89:ba:3d:17:92:d0:25:6d:c1:9d: 6c:2b:45:f8:3e:bd:ae:1b:23:a7:b7:5a:c9:cc:73:5d:60:ff: 21:9e:38:ce:d9:21:cd:ef:4f:60:82:30:f7:84:46:85:c7:d5: e6:57:48:ac:7e:bb:a7:36:01:c4:42:cd:6d:da:6d:28:4c:d0: 94:f7:0e:5e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EB3FKciT2b2KeN4U1JTdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzZmVkYjUwMDk1MjZmMGM2YmFkNDIzZjAwY2RhMDhhMDkz M2I3OGIwHhcNMjYwMTAxMTAxNzM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNTIwNTM3NDg0OGVjMTQ0YTRlZmE1NzZhYTFhMmIzZDc1MTg3MjViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw9mUSIFvQy4cCZbC8nRfPmaZtRZn uQCwfSfp1ZfItJHoxVruqZNhgLVHyL9ogF9OnEdb2MR/Vq9UhgEZX2IAuE1IC8Li iLR+6eKiarAVhDF8lL+KTj+lousB+k2d4Senf+BpQfFzMKSDKXkWeqfm7v4QnA8z BXRKn76p1zT+Mg6kvuE6owgrXC6qANhVnmgb8hUXpkRLKv2l8fSF6/sbq5aLofi/ xtTqR6BGrDpbAZsEPsgRtpZd7hRexvCxpsi/ewGUeYRTYzBWKs4DYptunnWKkLyU 9Ofzxhaaq6PBNLQxTYtRTzEX2XAdWrpnoN76jT9gumOcaoDHfZqgNSU9OQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAUgU3SEjsFEpO+ldqoaKz11GHJbMB8GA1UdIwQY MBaAFLP+21AJUm8Ma61CPwDNoIoJM7eLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc183YlVBbFNid3hyclVJX0FNMmdpZ2t6dDRzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9hNWNlZGMtYmY2MS00Y2JjLWFiMzYt YWQwOTUzZjdmZDQ5LzEvQlNCVGRJU093VVNrNzZWMnFob3JQWFVZY2xzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy9hNWNlZGMtYmY2MS00Y2JjLWFiMzYtYWQwOTUzZjdmZDQ5 LzEvc183YlVBbFNid3hyclVJX0FNMmdpZ2t6dDRzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuYgEMA0G CSqGSIb3DQEBCwUAA4IBAQAgNtfQqYGFJ+t9VvO0C9Nc5i39ftmxFSzarjuMymNS DL1UT9eMf3rKSMtHPHTCfvtRkCHg9S+I68zsCj0rkTQ94Sus5/PsWJO/keU8IZ7f 8mUncEvp4eczkwC6qFHQGYnWtN9qqUgin6W5sIirm+bZpZi2rHG02TNBD6vErrNP iTqvSK7c4e6DLxNCj7t5qvTIZY+YA7Hv+ACBYBN8spgQvtHyuNel0gBTu+lSijM1 1sXTi8spI2QWWmtceom6PReS0CVtwZ1sK0X4Pr2uGyOnt1rJzHNdYP8hnjjO2SHN 709ggjD3hEaFx9XmV0isfrunNgHEQs1t2m0oTNCU9w5e -----END CERTIFICATE-----Generated at Tue Feb 10 03:09:19 2026 by rpki-client