This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/BUT1NMkorMdojGeQxT5hIJgs8Nc.roa File: BUT1NMkorMdojGeQxT5hIJgs8Nc.roa (raw, json) Hash identifier: yZ0THgxl4+lAG7xhsfPweM9P6nUbmimKZfn0DgScC+E= Subject key identifier: 05:44:F5:34:C9:28:AC:C7:68:8C:67:90:C5:3E:61:20:98:2C:F0:D7 Certificate issuer: /CN=6ca977f854c63dc9f97a18be7b13002121a5d384 Certificate serial: 019B7D5C7C5741B308B6B5A4A1BC9568A5E3 Authority key identifier: 6C:A9:77:F8:54:C6:3D:C9:F9:7A:18:BE:7B:13:00:21:21:A5:D3:84 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bKl3-FTGPcn5ehi-exMAISGl04Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/BUT1NMkorMdojGeQxT5hIJgs8Nc.roa Signing time: Fri 02 Jan 2026 06:19:31 +0000 ROA not before: Fri 02 Jan 2026 06:19:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199436 IP address blocks: 2a13:b487:1b00::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.crl rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.mft rsync://rpki.ripe.net/repository/DEFAULT/bKl3-FTGPcn5ehi-exMAISGl04Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 23 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:7c:57:41:b3:08:b6:b5:a4:a1:bc:95:68:a5:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ca977f854c63dc9f97a18be7b13002121a5d384 Validity Not Before: Jan 2 06:19:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0544f534c928acc7688c6790c53e6120982cf0d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:7d:93:43:e5:e3:3b:e6:6c:cd:82:c4:b1:63: bc:54:a4:8b:21:ec:aa:b4:f6:06:f5:a4:b2:aa:7d: f7:ac:6e:f3:1e:ad:88:2c:c1:02:a1:e3:07:61:31: fe:d9:2b:86:91:9d:31:8f:ec:3f:f6:18:e1:0e:44: ef:2b:47:9f:9d:21:54:db:fe:3b:ab:67:8b:a3:da: 30:2f:65:3f:ac:c9:3b:b2:26:f9:5a:cc:9a:1e:da: f9:af:3d:a9:4d:77:5f:64:a8:cd:f6:7b:21:52:60: 55:3d:4e:80:a5:45:69:e8:22:1d:1e:82:2e:6e:74: 51:97:80:e0:f6:d6:d2:5b:f2:68:55:a0:0f:0e:43: d3:fa:96:f1:b2:47:50:d9:c5:f4:59:cd:cb:c9:01: e0:32:fc:35:21:72:2d:a6:bf:55:49:d8:43:47:a9: 08:89:77:f3:23:1e:83:96:79:2e:e7:03:43:0c:c1: bd:fd:e8:9e:00:ce:f1:c9:31:ba:75:37:98:bb:4f: 07:f4:3f:e2:03:ea:ce:94:48:9f:51:ec:2d:78:a0: 8e:31:99:7b:41:f9:f0:1a:d3:cb:49:04:00:95:10: 93:2e:6c:74:9a:4a:73:c1:cd:7d:6d:08:ed:ac:b3: aa:f3:9f:48:dc:4b:b4:89:9c:18:11:86:f0:80:9c: f9:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:44:F5:34:C9:28:AC:C7:68:8C:67:90:C5:3E:61:20:98:2C:F0:D7 X509v3 Authority Key Identifier: keyid:6C:A9:77:F8:54:C6:3D:C9:F9:7A:18:BE:7B:13:00:21:21:A5:D3:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bKl3-FTGPcn5ehi-exMAISGl04Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/BUT1NMkorMdojGeQxT5hIJgs8Nc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a13:b487:1b00::/40 Signature Algorithm: sha256WithRSAEncryption 6c:15:05:ea:d6:9b:49:33:35:20:c1:40:58:c8:4f:f6:6d:ee: c5:06:5c:95:9a:5b:f9:d5:27:e7:32:84:c3:5c:d6:ea:d7:24: 3a:2c:b3:db:d0:fb:ad:b2:bf:2a:a4:bb:25:f2:f4:42:44:c0: ca:66:5a:18:dc:4e:cf:92:14:2b:d6:46:01:56:7d:93:63:a4: e8:af:19:b1:14:20:ae:4f:9a:6b:29:69:05:28:dc:42:ae:af: 7a:5d:43:68:21:64:d9:f3:ae:f0:42:48:5d:44:9c:aa:e7:70: c2:bf:2e:97:3f:33:38:d1:4b:29:7c:2b:d1:32:ee:3f:59:1a: cb:e8:b2:e3:b7:b6:5d:31:c5:02:89:59:ae:7f:6e:fd:e3:b9: e7:27:26:e8:6b:1a:2f:56:b4:06:bc:5b:82:27:5f:51:66:3b: 79:bf:d7:65:4a:17:13:7d:c6:ad:d4:50:3d:d2:9c:04:7c:a9: 65:ab:9a:07:12:16:a5:6a:22:aa:11:da:c4:b7:3f:5a:7f:4c: b6:a1:02:d5:46:1e:5d:73:3a:00:cd:59:06:f9:88:a7:9c:b5: eb:77:d6:03:2a:60:95:dc:9e:73:64:5d:ed:6a:dd:12:d1:35: 74:4f:19:b8:c6:e2:74:f4:bb:ca:7d:ee:89:24:5b:2d:73:96: 8b:e8:ac:c9 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt9XHxXQbMItrWkobyVaKXjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjYTk3N2Y4NTRjNjNkYzlmOTdhMThiZTdiMTMwMDIxMjFh NWQzODQwHhcNMjYwMTAyMDYxOTMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNTQ0ZjUzNGM5MjhhY2M3Njg4YzY3OTBjNTNlNjEyMDk4MmNmMGQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt32TQ+XjO+ZszYLEsWO8VKSLIeyq tPYG9aSyqn33rG7zHq2ILMECoeMHYTH+2SuGkZ0xj+w/9hjhDkTvK0efnSFU2/47 q2eLo9owL2U/rMk7sib5WsyaHtr5rz2pTXdfZKjN9nshUmBVPU6ApUVp6CIdHoIu bnRRl4Dg9tbSW/JoVaAPDkPT+pbxskdQ2cX0Wc3LyQHgMvw1IXItpr9VSdhDR6kI iXfzIx6Dlnku5wNDDMG9/eieAM7xyTG6dTeYu08H9D/iA+rOlEifUewteKCOMZl7 QfnwGtPLSQQAlRCTLmx0mkpzwc19bQjtrLOq859I3Eu0iZwYEYbwgJz57QIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFAVE9TTJKKzHaIxnkMU+YSCYLPDXMB8GA1UdIwQY MBaAFGypd/hUxj3J+XoYvnsTACEhpdOEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYktsMy1GVEdQY241ZWhpLWV4TUFJU0dsMDRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS8wOWNjYjQtMjQ4My00YmE3LTk2MzQt ZDZhNTk1MGNhZGYyLzEvQlVUMU5Na29yTWRvakdlUXhUNWhJSmdzOE5jLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS8wOWNjYjQtMjQ4My00YmE3LTk2MzQtZDZhNTk1MGNhZGYy LzEvYktsMy1GVEdQY241ZWhpLWV4TUFJU0dsMDRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKhO0hxsw DQYJKoZIhvcNAQELBQADggEBAGwVBerWm0kzNSDBQFjIT/Zt7sUGXJWaW/nVJ+cy hMNc1urXJDoss9vQ+62yvyqkuyXy9EJEwMpmWhjcTs+SFCvWRgFWfZNjpOivGbEU IK5PmmspaQUo3EKur3pdQ2ghZNnzrvBCSF1EnKrncMK/Lpc/MzjRSyl8K9Ey7j9Z GsvosuO3tl0xxQKJWa5/bv3juecnJuhrGi9WtAa8W4InX1FmO3m/12VKFxN9xq3U UD3SnAR8qWWrmgcSFqVqIqoR2sS3P1p/TLahAtVGHl1zOgDNWQb5iKectet31gMq YJXcnnNkXe1q3RLRNXRPGbjG4nT0u8p97okkWy1zlovorMk= -----END CERTIFICATE-----Generated at Thu Jan 22 06:17:09 2026 by rpki-client