This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/ba0ff0-2be2-4286-a2d7-58a8a33d54a6/1/betqUpBNxt2fw8P1gRb-nmRchZ0.roa File: betqUpBNxt2fw8P1gRb-nmRchZ0.roa (raw, json) Hash identifier: TA1LiGt+yd3esB5iVavjPJEuxZ2ixHs066seZWy0AXo= Subject key identifier: 6D:EB:6A:52:90:4D:C6:DD:9F:C3:C3:F5:81:16:FE:9E:64:5C:85:9D Certificate issuer: /CN=6b423b29a182936b22df8f9826dd583a0059134a Certificate serial: 019B7758E7B053D5F7B8F13689D7BD4F2222 Authority key identifier: 6B:42:3B:29:A1:82:93:6B:22:DF:8F:98:26:DD:58:3A:00:59:13:4A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a0I7KaGCk2si34-YJt1YOgBZE0o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/ba0ff0-2be2-4286-a2d7-58a8a33d54a6/1/betqUpBNxt2fw8P1gRb-nmRchZ0.roa Signing time: Thu 01 Jan 2026 02:17:53 +0000 ROA not before: Thu 01 Jan 2026 02:17:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204550 IP address blocks: 94.101.100.0/24 maxlen: 24 198.205.102.0/24 maxlen: 24 2a0b:eb00::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/ba0ff0-2be2-4286-a2d7-58a8a33d54a6/1/a0I7KaGCk2si34-YJt1YOgBZE0o.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/ba0ff0-2be2-4286-a2d7-58a8a33d54a6/1/a0I7KaGCk2si34-YJt1YOgBZE0o.mft rsync://rpki.ripe.net/repository/DEFAULT/a0I7KaGCk2si34-YJt1YOgBZE0o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:e7:b0:53:d5:f7:b8:f1:36:89:d7:bd:4f:22:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b423b29a182936b22df8f9826dd583a0059134a Validity Not Before: Jan 1 02:17:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6deb6a52904dc6dd9fc3c3f58116fe9e645c859d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:98:76:07:e6:90:c9:e7:47:c7:4a:60:45:a6: 88:a7:50:d7:4d:b1:d9:9e:37:ed:7c:80:79:10:ad: 9e:72:7e:b0:bb:8b:fa:d9:85:df:4a:8b:fa:9a:dd: e0:c4:68:4c:77:1a:53:d7:b4:7e:41:4d:0b:26:2c: d8:36:b6:07:10:e6:fe:3a:fe:eb:4d:b6:4e:a2:61: 03:98:d4:02:c6:8d:f8:2a:8b:fe:01:9c:94:05:d8: b0:ca:3d:f5:36:db:13:6b:ba:63:01:53:5a:31:76: 1b:5b:8e:74:a5:19:d7:23:9e:2c:db:71:52:41:bc: 10:ca:fd:df:22:3d:aa:19:f4:c2:ad:4c:52:ac:bd: a4:d1:8a:db:e9:f7:39:a7:9c:94:0d:3f:81:1a:78: 02:b8:10:b8:83:20:34:ef:82:50:8e:43:ce:48:56: 7f:c6:8a:c3:0a:0b:23:8f:20:2e:d8:e0:c1:9d:3a: 89:ba:0d:d9:80:ea:e5:61:cb:19:c0:c5:b5:e2:36: f3:e7:df:a5:ce:0d:2e:32:f5:26:25:9f:f9:61:f4: eb:a0:61:c5:52:3e:df:f6:33:df:b8:0c:87:bf:4a: a5:29:3c:1b:c5:87:67:d7:db:03:3c:e7:07:a4:4b: 6f:37:2e:91:b6:94:42:54:d1:a7:44:18:96:d1:df: e9:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:EB:6A:52:90:4D:C6:DD:9F:C3:C3:F5:81:16:FE:9E:64:5C:85:9D X509v3 Authority Key Identifier: keyid:6B:42:3B:29:A1:82:93:6B:22:DF:8F:98:26:DD:58:3A:00:59:13:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0I7KaGCk2si34-YJt1YOgBZE0o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/ba0ff0-2be2-4286-a2d7-58a8a33d54a6/1/betqUpBNxt2fw8P1gRb-nmRchZ0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/ba0ff0-2be2-4286-a2d7-58a8a33d54a6/1/a0I7KaGCk2si34-YJt1YOgBZE0o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.101.100.0/24 198.205.102.0/24 IPv6: 2a0b:eb00::/32 Signature Algorithm: sha256WithRSAEncryption 70:f0:66:31:7c:d7:ca:8c:31:de:8e:b5:55:f8:8b:75:20:de: 33:ab:c3:d3:a9:9f:fc:a9:72:fc:52:f1:34:70:4b:c2:cc:14: 5e:27:34:90:3f:31:0e:42:85:a3:ac:48:14:4e:85:38:12:04: 0f:1b:38:0e:71:30:d7:19:d3:61:ef:27:1b:19:a6:6a:ef:60: 1e:6a:40:20:fd:2a:f2:e9:be:3a:7d:58:cf:fa:8e:9e:2d:be: f5:ba:76:b1:3b:a2:67:af:13:e9:1b:dc:5c:b4:9c:97:32:cd: ef:6d:9d:e1:da:93:18:3e:4a:73:4d:c3:05:46:f2:61:39:83: 0a:2e:a0:73:32:bd:bb:4b:ac:39:ea:62:f1:6c:27:3a:57:b5: c5:43:64:6b:3d:0d:2c:c1:f9:b3:71:e2:55:36:4b:30:fd:75: 73:aa:b4:00:c5:e1:84:17:c6:3c:ac:cb:e7:28:34:61:21:15: b0:92:c1:42:c4:75:bf:a5:68:99:73:ae:a6:2f:11:62:99:bd: 97:98:1b:cd:22:e8:84:ef:b1:5e:f0:00:38:09:48:4b:23:65: 33:5e:e8:ca:b5:00:e1:9f:6d:b6:bd:8a:1f:63:5e:97:d8:d6: ed:52:2a:08:a0:71:0d:74:cb:ef:ec:84:b8:62:47:17:27:ac: 84:27:bf:08 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt3WOewU9X3uPE2ide9TyIiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiNDIzYjI5YTE4MjkzNmIyMmRmOGY5ODI2ZGQ1ODNhMDA1 OTEzNGEwHhcNMjYwMTAxMDIxNzUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZGViNmE1MjkwNGRjNmRkOWZjM2MzZjU4MTE2ZmU5ZTY0NWM4NTlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkJh2B+aQyedHx0pgRaaIp1DXTbHZ njftfIB5EK2ecn6wu4v62YXfSov6mt3gxGhMdxpT17R+QU0LJizYNrYHEOb+Ov7r TbZOomEDmNQCxo34Kov+AZyUBdiwyj31NtsTa7pjAVNaMXYbW450pRnXI54s23FS QbwQyv3fIj2qGfTCrUxSrL2k0Yrb6fc5p5yUDT+BGngCuBC4gyA074JQjkPOSFZ/ xorDCgsjjyAu2ODBnTqJug3ZgOrlYcsZwMW14jbz59+lzg0uMvUmJZ/5YfTroGHF Uj7f9jPfuAyHv0qlKTwbxYdn19sDPOcHpEtvNy6RtpRCVNGnRBiW0d/p7QIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFG3ralKQTcbdn8PD9YEW/p5kXIWdMB8GA1UdIwQY MBaAFGtCOymhgpNrIt+PmCbdWDoAWRNKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYTBJN0thR0NrMnNpMzQtWUp0MVlPZ0JaRTBvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC9iYTBmZjAtMmJlMi00Mjg2LWEyZDct NThhOGEzM2Q1NGE2LzEvYmV0cVVwQk54dDJmdzhQMWdSYi1ubVJjaFowLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC9iYTBmZjAtMmJlMi00Mjg2LWEyZDctNThhOGEzM2Q1NGE2 LzEvYTBJN0thR0NrMnNpMzQtWUp0MVlPZ0JaRTBvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQAXmVkAwQA xs1mMA0EAgACMAcDBQAqC+sAMA0GCSqGSIb3DQEBCwUAA4IBAQBw8GYxfNfKjDHe jrVV+It1IN4zq8PTqZ/8qXL8UvE0cEvCzBReJzSQPzEOQoWjrEgUToU4EgQPGzgO cTDXGdNh7ycbGaZq72AeakAg/Sry6b46fVjP+o6eLb71unaxO6JnrxPpG9xctJyX Ms3vbZ3h2pMYPkpzTcMFRvJhOYMKLqBzMr27S6w56mLxbCc6V7XFQ2RrPQ0swfmz ceJVNksw/XVzqrQAxeGEF8Y8rMvnKDRhIRWwksFCxHW/pWiZc66mLxFimb2XmBvN IuiE77Fe8AA4CUhLI2UzXujKtQDhn222vYofY16X2NbtUioIoHENdMvv7IS4YkcX J6yEJ78I -----END CERTIFICATE-----Generated at Tue Feb 10 01:44:25 2026 by rpki-client