This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/BTLJ0erQCM0UqLKKUKXx9Cl6YcU.roa File: BTLJ0erQCM0UqLKKUKXx9Cl6YcU.roa (raw, json) Hash identifier: KJO56sj/O1OpYh5D+flnc8M9/mVCXXA83YSRu8SiPLk= Subject key identifier: 05:32:C9:D1:EA:D0:08:CD:14:A8:B2:8A:50:A5:F1:F4:29:7A:61:C5 Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B53A3EFE83A261B4C7728BACCD6A1C3ED Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/BTLJ0erQCM0UqLKKUKXx9Cl6YcU.roa Signing time: Thu 25 Dec 2025 03:53:31 +0000 ROA not before: Thu 25 Dec 2025 03:53:31 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 203418 IP address blocks: 2a0e:97c0:980::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 15:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:53:a3:ef:e8:3a:26:1b:4c:77:28:ba:cc:d6:a1:c3:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Dec 25 03:53:31 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=0532c9d1ead008cd14a8b28a50a5f1f4297a61c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:c6:c8:96:aa:9a:83:15:cd:a7:02:4a:5a:c2: 85:81:a6:b9:cf:66:fc:07:d4:c7:77:f6:ac:21:18: f4:2d:09:89:f7:5e:70:42:1f:8b:ad:59:e0:8c:f6: 61:00:85:b6:d0:40:57:bd:a0:c2:fe:fa:ec:3e:86: dd:98:23:55:8f:57:71:33:79:f7:af:8d:c5:04:7f: b0:78:6e:2e:f3:6a:a7:af:d3:e3:16:cf:61:48:21: 9f:44:42:01:66:1c:99:9f:5e:1b:5d:8a:9d:05:cd: 1e:ee:27:e5:a5:40:90:8a:63:a6:a4:68:bc:f4:59: 23:10:89:ef:ee:70:2c:4b:72:6f:51:a1:74:c6:68: 97:cf:4c:4a:0e:f4:d4:52:b8:11:fc:f4:5b:b1:69: 70:63:ba:4a:61:ce:4a:fd:65:8c:94:2e:3c:86:e9: 67:aa:b8:f1:ff:cf:da:da:9d:4d:04:b4:4f:fd:24: 7e:a7:d4:14:b8:b3:37:51:5d:2b:20:1f:ad:d4:3a: 20:87:63:3a:eb:7a:a6:8b:c0:3e:75:1b:4d:ef:d4: b6:8d:1c:ad:bd:9d:dd:4c:46:ec:a9:dc:74:ce:95: d8:f6:79:b0:75:85:2e:80:74:3e:4c:ff:22:10:76: 69:ae:70:4f:61:70:db:2d:98:67:0a:a3:53:86:86: 33:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:32:C9:D1:EA:D0:08:CD:14:A8:B2:8A:50:A5:F1:F4:29:7A:61:C5 X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/BTLJ0erQCM0UqLKKUKXx9Cl6YcU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:97c0:980::/44 Signature Algorithm: sha256WithRSAEncryption 95:82:37:2d:ed:ad:46:8d:7a:a6:e1:25:f4:4a:92:82:f8:6c: 49:9b:1c:f9:a0:7f:87:c3:1f:a0:73:4f:44:40:d2:0b:bf:57: 7f:20:2b:17:07:c3:f3:48:61:f8:76:1d:4b:40:c8:4a:65:c7: 8c:5e:79:bb:05:83:dc:4c:da:fe:b9:b0:64:e3:f9:de:d2:20: a7:bd:79:40:43:fd:81:1f:e8:f7:ff:dc:d4:b3:29:c0:db:31: 10:99:59:e6:b1:66:0d:80:ab:13:94:b3:3b:d5:21:f2:c0:8d: d1:b9:78:88:77:0b:a6:20:c4:9e:28:12:a6:3e:02:e6:f4:c8: ea:b8:8e:7c:1d:81:d2:ce:7b:d8:9b:a9:a1:dd:81:90:27:74: ea:0f:c9:bb:73:47:01:35:5d:dc:fb:86:cf:13:50:1c:44:c8: 7c:89:55:e5:4f:b1:f8:e9:29:5c:a9:dd:fe:a4:38:7a:3f:32: d2:05:d3:33:fa:c5:81:4e:bb:f4:b1:38:a7:36:5b:93:ec:c0: d1:73:18:2a:10:3a:d6:c8:8f:20:57:c5:8f:2f:5e:9f:77:46: d8:8c:e0:7c:69:af:fc:ec:8c:10:98:5b:c9:3b:e1:44:ce:c4: 09:0d:ce:e5:cf:17:f5:ab:a1:ee:1a:97:ac:ac:bb:55:32:1f: ae:2a:07:20 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZtTo+/oOiYbTHcouszWocPtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjUxMjI1MDM1MzMxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNTMyYzlkMWVhZDAwOGNkMTRhOGIyOGE1MGE1ZjFmNDI5N2E2MWM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw8bIlqqagxXNpwJKWsKFgaa5z2b8 B9THd/asIRj0LQmJ915wQh+LrVngjPZhAIW20EBXvaDC/vrsPobdmCNVj1dxM3n3 r43FBH+weG4u82qnr9PjFs9hSCGfREIBZhyZn14bXYqdBc0e7iflpUCQimOmpGi8 9FkjEInv7nAsS3JvUaF0xmiXz0xKDvTUUrgR/PRbsWlwY7pKYc5K/WWMlC48huln qrjx/8/a2p1NBLRP/SR+p9QUuLM3UV0rIB+t1Dogh2M663qmi8A+dRtN79S2jRyt vZ3dTEbsqdx0zpXY9nmwdYUugHQ+TP8iEHZprnBPYXDbLZhnCqNThoYzLwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFAUyydHq0AjNFKiyilCl8fQpemHFMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvQlRMSjBlclFDTTBVcUxLS1VLWHg5Q2w2WWNVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg6XwAmA MA0GCSqGSIb3DQEBCwUAA4IBAQCVgjct7a1GjXqm4SX0SpKC+GxJmxz5oH+Hwx+g c09EQNILv1d/ICsXB8PzSGH4dh1LQMhKZceMXnm7BYPcTNr+ubBk4/ne0iCnvXlA Q/2BH+j3/9zUsynA2zEQmVnmsWYNgKsTlLM71SHywI3RuXiIdwumIMSeKBKmPgLm 9MjquI58HYHSznvYm6mh3YGQJ3TqD8m7c0cBNV3c+4bPE1AcRMh8iVXlT7H46Slc qd3+pDh6PzLSBdMz+sWBTrv0sTinNluT7MDRcxgqEDrWyI8gV8WPL16fd0bYjOB8 aa/87IwQmFvJO+FEzsQJDc7lzxf1q6HuGpesrLtVMh+uKgcg -----END CERTIFICATE-----Generated at Fri Dec 26 23:59:19 2025 by rpki-client