This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/21deba-db66-4702-bdbf-09115d592e6f/1/Brthxz7priRlJYXJ_EOaKSwdKP4.roa File: Brthxz7priRlJYXJ_EOaKSwdKP4.roa (raw, json) Hash identifier: E8F9SE2VrkKt66H0FbYQUbq5xRyURkLNcY48oGiYLYc= Subject key identifier: 06:BB:61:C7:3E:E9:AE:24:65:25:85:C9:FC:43:9A:29:2C:1D:28:FE Certificate issuer: /CN=27ff20440ba698a4dc0439bc179fb33a3ee1cc95 Certificate serial: 019B7FF121677FA5745FDD1AA0DD3209D35C Authority key identifier: 27:FF:20:44:0B:A6:98:A4:DC:04:39:BC:17:9F:B3:3A:3E:E1:CC:95 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J_8gRAummKTcBDm8F5-zOj7hzJU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/21deba-db66-4702-bdbf-09115d592e6f/1/Brthxz7priRlJYXJ_EOaKSwdKP4.roa Signing time: Fri 02 Jan 2026 18:21:07 +0000 ROA not before: Fri 02 Jan 2026 18:21:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44738 IP address blocks: 195.28.4.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/21deba-db66-4702-bdbf-09115d592e6f/1/J_8gRAummKTcBDm8F5-zOj7hzJU.crl rsync://rpki.ripe.net/repository/DEFAULT/38/21deba-db66-4702-bdbf-09115d592e6f/1/J_8gRAummKTcBDm8F5-zOj7hzJU.mft rsync://rpki.ripe.net/repository/DEFAULT/J_8gRAummKTcBDm8F5-zOj7hzJU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:21:67:7f:a5:74:5f:dd:1a:a0:dd:32:09:d3:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27ff20440ba698a4dc0439bc179fb33a3ee1cc95 Validity Not Before: Jan 2 18:21:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=06bb61c73ee9ae24652585c9fc439a292c1d28fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:e7:f9:e7:80:7e:18:d4:74:51:42:8c:8e:95: 30:e0:3c:67:12:24:58:b7:94:34:46:6d:65:a5:a6: 1a:90:6c:80:65:c9:d9:91:45:29:32:ff:8b:80:e6: f6:f2:bc:b9:fc:ca:ce:ca:9a:0d:82:ad:22:df:42: f7:dc:e2:a4:2f:ff:e2:89:98:ff:fb:a4:5a:06:47: 83:73:6a:b1:12:aa:14:4a:aa:29:49:ed:89:b7:62: 47:57:e3:0f:bd:7b:15:6b:8f:67:e4:f6:fd:74:5f: 77:89:1c:c1:09:08:80:4d:14:87:c3:a8:61:cf:e3: 96:19:fa:8c:5b:2d:9b:08:05:81:0b:69:c6:86:f8: 64:f7:76:97:60:cc:c3:53:62:21:17:41:34:c0:65: 6f:04:43:c5:d9:3e:5e:44:7a:aa:37:20:99:6c:16: 7f:f6:20:22:00:c4:e1:07:7a:d6:58:3f:23:60:b6: 3e:73:77:4a:d8:eb:d4:48:a6:0b:9e:40:fe:ce:28: 54:2b:78:d7:ed:fc:50:41:ba:e8:f2:8d:80:a9:70: 86:64:26:f4:45:a8:a6:a7:d1:0c:66:01:03:36:11: f4:36:69:87:36:81:67:39:ee:d8:1c:44:cf:fb:0a: d5:c2:88:b5:18:77:48:2d:4a:4b:65:bb:da:c2:05: 1b:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:BB:61:C7:3E:E9:AE:24:65:25:85:C9:FC:43:9A:29:2C:1D:28:FE X509v3 Authority Key Identifier: keyid:27:FF:20:44:0B:A6:98:A4:DC:04:39:BC:17:9F:B3:3A:3E:E1:CC:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J_8gRAummKTcBDm8F5-zOj7hzJU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/21deba-db66-4702-bdbf-09115d592e6f/1/Brthxz7priRlJYXJ_EOaKSwdKP4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/21deba-db66-4702-bdbf-09115d592e6f/1/J_8gRAummKTcBDm8F5-zOj7hzJU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.28.4.0/23 Signature Algorithm: sha256WithRSAEncryption 2a:f7:30:ca:e6:fa:43:ad:17:f4:3b:5b:93:b1:87:75:ad:27: 78:35:04:9d:58:06:01:a3:3f:36:71:63:f9:6b:66:be:ce:8e: 64:2a:87:35:05:d3:e7:fc:95:6f:2a:9a:37:0e:1f:63:64:da: a1:e7:bf:f6:01:e9:d7:ef:02:13:f5:40:4d:2a:31:cb:0b:24: 83:fe:ff:88:84:0e:32:03:7b:09:6c:6d:0b:d2:82:e6:81:2a: 7e:e0:69:17:09:5a:5f:73:e2:72:e0:bf:ed:ea:4c:5b:c2:91: 24:89:18:6c:11:a8:f6:fa:77:56:30:3c:9b:8a:f6:41:a9:bc: ad:ad:1d:83:9d:2c:8f:2a:11:e9:cb:5d:aa:d5:97:a0:f9:89: ee:e3:4f:a9:a9:2b:77:f5:94:52:6d:c2:3b:e4:b7:02:00:8b: f8:65:bc:c7:68:80:73:8e:2b:7c:16:a0:31:46:44:e6:42:dc: 99:a5:ac:28:dc:21:31:39:4d:c1:68:c2:d7:70:81:c7:59:e5: e2:01:c7:c8:a8:18:39:9d:f2:cc:e1:98:3c:1e:34:e8:5e:82: 99:bd:73:99:34:53:db:65:ff:da:26:76:8c:d2:24:54:3a:55: 5c:92:2a:81:f0:c6:64:18:12:19:62:f2:8f:df:0a:d6:2b:f6: 3f:54:54:3a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/8SFnf6V0X90aoN0yCdNcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3ZmYyMDQ0MGJhNjk4YTRkYzA0MzliYzE3OWZiMzNhM2Vl MWNjOTUwHhcNMjYwMTAyMTgyMTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNmJiNjFjNzNlZTlhZTI0NjUyNTg1YzlmYzQzOWEyOTJjMWQyOGZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuef554B+GNR0UUKMjpUw4DxnEiRY t5Q0Rm1lpaYakGyAZcnZkUUpMv+LgOb28ry5/MrOypoNgq0i30L33OKkL//iiZj/ +6RaBkeDc2qxEqoUSqopSe2Jt2JHV+MPvXsVa49n5Pb9dF93iRzBCQiATRSHw6hh z+OWGfqMWy2bCAWBC2nGhvhk93aXYMzDU2IhF0E0wGVvBEPF2T5eRHqqNyCZbBZ/ 9iAiAMThB3rWWD8jYLY+c3dK2OvUSKYLnkD+zihUK3jX7fxQQbro8o2AqXCGZCb0 Raimp9EMZgEDNhH0NmmHNoFnOe7YHETP+wrVwoi1GHdILUpLZbvawgUbhQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAa7Ycc+6a4kZSWFyfxDmiksHSj+MB8GA1UdIwQY MBaAFCf/IEQLppik3AQ5vBefszo+4cyVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSl84Z1JBdW1tS1RjQkRtOEY1LXpPajdoekpVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8yMWRlYmEtZGI2Ni00NzAyLWJkYmYt MDkxMTVkNTkyZTZmLzEvQnJ0aHh6N3ByaVJsSllYSl9FT2FLU3dkS1A0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC8yMWRlYmEtZGI2Ni00NzAyLWJkYmYtMDkxMTVkNTkyZTZm LzEvSl84Z1JBdW1tS1RjQkRtOEY1LXpPajdoekpVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwxwEMA0G CSqGSIb3DQEBCwUAA4IBAQAq9zDK5vpDrRf0O1uTsYd1rSd4NQSdWAYBoz82cWP5 a2a+zo5kKoc1BdPn/JVvKpo3Dh9jZNqh57/2AenX7wIT9UBNKjHLCySD/v+IhA4y A3sJbG0L0oLmgSp+4GkXCVpfc+Jy4L/t6kxbwpEkiRhsEaj2+ndWMDybivZBqbyt rR2DnSyPKhHpy12q1Zeg+Ynu40+pqSt39ZRSbcI75LcCAIv4ZbzHaIBzjit8FqAx RkTmQtyZpawo3CExOU3BaMLXcIHHWeXiAcfIqBg5nfLM4Zg8HjToXoKZvXOZNFPb Zf/aJnaM0iRUOlVckiqB8MZkGBIZYvKP3wrWK/Y/VFQ6 -----END CERTIFICATE-----Generated at Mon Feb 9 20:09:37 2026 by rpki-client