This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/8a344e-0ed8-42b2-a744-a9e8468710a3/1/BtrLSX90RAzPB8q1LlQ_3fEu81g.roa File: BtrLSX90RAzPB8q1LlQ_3fEu81g.roa (raw, json) Hash identifier: IqKkz+SIVV58QahCkxGAqKBl0a+skMTLBVSIzhk1MFc= Subject key identifier: 06:DA:CB:49:7F:74:44:0C:CF:07:CA:B5:2E:54:3F:DD:F1:2E:F3:58 Certificate issuer: /CN=c8d335041718b18830b1f58c15d3518510fe6118 Certificate serial: 019B7D5CFD30ED6489AC7E3B714E9081DC5A Authority key identifier: C8:D3:35:04:17:18:B1:88:30:B1:F5:8C:15:D3:51:85:10:FE:61:18 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yNM1BBcYsYgwsfWMFdNRhRD-YRg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/8a344e-0ed8-42b2-a744-a9e8468710a3/1/BtrLSX90RAzPB8q1LlQ_3fEu81g.roa Signing time: Fri 02 Jan 2026 06:20:04 +0000 ROA not before: Fri 02 Jan 2026 06:20:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 7155 IP address blocks: 37.1.168.0/21 maxlen: 24 37.252.200.0/21 maxlen: 24 185.15.32.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/8a344e-0ed8-42b2-a744-a9e8468710a3/1/yNM1BBcYsYgwsfWMFdNRhRD-YRg.crl rsync://rpki.ripe.net/repository/DEFAULT/41/8a344e-0ed8-42b2-a744-a9e8468710a3/1/yNM1BBcYsYgwsfWMFdNRhRD-YRg.mft rsync://rpki.ripe.net/repository/DEFAULT/yNM1BBcYsYgwsfWMFdNRhRD-YRg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:fd:30:ed:64:89:ac:7e:3b:71:4e:90:81:dc:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c8d335041718b18830b1f58c15d3518510fe6118 Validity Not Before: Jan 2 06:20:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=06dacb497f74440ccf07cab52e543fddf12ef358 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:68:f8:e7:1f:e9:97:51:5d:12:d4:7c:85:50: ab:64:4d:ac:70:cb:72:0b:22:a2:6d:f7:e4:6e:1f: e0:db:65:18:56:56:81:2a:20:fc:3f:24:bf:e7:85: 29:19:ce:37:7a:24:dc:27:db:90:21:83:04:d3:70: 09:4c:8a:a2:b5:41:e3:a6:1d:70:70:7f:83:fb:73: 64:64:a8:b3:11:27:a1:aa:b5:db:78:44:d8:b7:b3: 18:11:4d:e3:32:71:33:80:e1:15:24:6b:29:e4:b8: e1:f6:8f:28:0f:e0:1a:98:9c:5b:0f:a8:f5:e9:ba: 8e:04:0e:56:6d:d0:3d:cb:56:90:37:9a:73:2e:ec: 05:d9:62:4f:62:c3:24:4c:3a:8f:89:39:b2:77:68: 66:ee:01:17:7d:d0:07:77:21:aa:fc:c6:4f:bc:f3: 33:ea:73:b8:be:4f:67:9e:80:2b:45:57:58:42:93: 51:e3:50:eb:c3:a7:92:15:49:fc:ff:83:c2:b5:bb: 59:af:22:93:27:f0:bf:85:a7:32:a6:57:07:29:02: a3:32:a0:54:e1:26:71:6c:32:11:c3:34:97:90:bc: 31:7c:1e:92:02:96:77:59:d9:fe:39:fa:74:47:f7: 3d:1b:dd:28:31:53:bd:08:c1:e4:32:d1:04:58:91: 05:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:DA:CB:49:7F:74:44:0C:CF:07:CA:B5:2E:54:3F:DD:F1:2E:F3:58 X509v3 Authority Key Identifier: keyid:C8:D3:35:04:17:18:B1:88:30:B1:F5:8C:15:D3:51:85:10:FE:61:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yNM1BBcYsYgwsfWMFdNRhRD-YRg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/8a344e-0ed8-42b2-a744-a9e8468710a3/1/BtrLSX90RAzPB8q1LlQ_3fEu81g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/8a344e-0ed8-42b2-a744-a9e8468710a3/1/yNM1BBcYsYgwsfWMFdNRhRD-YRg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.1.168.0/21 37.252.200.0/21 185.15.32.0/22 Signature Algorithm: sha256WithRSAEncryption 90:fc:ee:44:fd:6f:a9:35:ba:89:00:de:9d:a7:4a:c0:99:36: cd:3a:91:79:bd:21:c6:2c:03:e5:a9:bd:2c:27:2c:0f:37:45: 83:a7:2f:ae:b9:b4:f8:0e:82:c7:95:13:3f:27:56:5e:b3:83: bc:23:20:c5:72:ee:12:32:a3:88:f6:be:6f:7d:93:a7:8b:73: 6b:bc:ac:83:c0:0f:a0:c3:a9:e1:cf:23:96:e6:b7:ee:bc:81: ce:20:ee:ed:7a:c3:ea:31:85:16:61:0c:1f:52:01:c5:86:26: ad:cd:e8:4a:d4:cc:1f:49:77:49:54:7e:6d:1a:69:a5:b8:4a: a1:c3:67:d2:f9:76:8d:76:3e:ff:e3:de:93:76:c9:5f:9d:79: 38:6c:4b:a3:c6:db:7b:9f:f8:4d:43:c1:68:aa:2f:43:d8:b5: 80:41:a2:d5:d3:9b:f6:87:70:dc:b6:b3:04:10:7d:9a:27:fa: 09:10:bd:b2:cf:81:10:30:ce:65:cc:2d:47:2b:b2:87:14:1e: 27:36:83:42:bb:d2:a1:30:5f:4d:11:16:90:cc:7e:9e:6f:d6: 09:25:65:29:2c:f4:d9:3a:1d:34:23:a2:fd:c3:20:70:3c:a7: 01:17:4f:5b:a3:99:50:be:19:11:10:d2:4a:09:34:8c:32:9c: 34:85:b2:be -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt9XP0w7WSJrH47cU6QgdxaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM4ZDMzNTA0MTcxOGIxODgzMGIxZjU4YzE1ZDM1MTg1MTBm ZTYxMTgwHhcNMjYwMTAyMDYyMDA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNmRhY2I0OTdmNzQ0NDBjY2YwN2NhYjUyZTU0M2ZkZGYxMmVmMzU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlWj45x/pl1FdEtR8hVCrZE2scMty CyKibffkbh/g22UYVlaBKiD8PyS/54UpGc43eiTcJ9uQIYME03AJTIqitUHjph1w cH+D+3NkZKizESehqrXbeETYt7MYEU3jMnEzgOEVJGsp5Ljh9o8oD+AamJxbD6j1 6bqOBA5WbdA9y1aQN5pzLuwF2WJPYsMkTDqPiTmyd2hm7gEXfdAHdyGq/MZPvPMz 6nO4vk9nnoArRVdYQpNR41Drw6eSFUn8/4PCtbtZryKTJ/C/hacyplcHKQKjMqBU 4SZxbDIRwzSXkLwxfB6SApZ3Wdn+Ofp0R/c9G90oMVO9CMHkMtEEWJEFiQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFAbay0l/dEQMzwfKtS5UP93xLvNYMB8GA1UdIwQY MBaAFMjTNQQXGLGIMLH1jBXTUYUQ/mEYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveU5NMUJCY1lzWWd3c2ZXTUZkTlJoUkQtWVJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS84YTM0NGUtMGVkOC00MmIyLWE3NDQt YTllODQ2ODcxMGEzLzEvQnRyTFNYOTBSQXpQQjhxMUxsUV8zZkV1ODFnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS84YTM0NGUtMGVkOC00MmIyLWE3NDQtYTllODQ2ODcxMGEz LzEveU5NMUJCY1lzWWd3c2ZXTUZkTlJoUkQtWVJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQDJQGoAwQD JfzIAwQCuQ8gMA0GCSqGSIb3DQEBCwUAA4IBAQCQ/O5E/W+pNbqJAN6dp0rAmTbN OpF5vSHGLAPlqb0sJywPN0WDpy+uubT4DoLHlRM/J1Zes4O8IyDFcu4SMqOI9r5v fZOni3NrvKyDwA+gw6nhzyOW5rfuvIHOIO7tesPqMYUWYQwfUgHFhiatzehK1Mwf SXdJVH5tGmmluEqhw2fS+XaNdj7/496TdslfnXk4bEujxtt7n/hNQ8Foqi9D2LWA QaLV05v2h3DctrMEEH2aJ/oJEL2yz4EQMM5lzC1HK7KHFB4nNoNCu9KhMF9NERaQ zH6eb9YJJWUpLPTZOh00I6L9wyBwPKcBF09bo5lQvhkRENJKCTSMMpw0hbK+ -----END CERTIFICATE-----Generated at Mon Jan 26 17:24:22 2026 by rpki-client