This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/BSTC_M6ZXj_FEWVYRP6zJBuAZJc.roa File: BSTC_M6ZXj_FEWVYRP6zJBuAZJc.roa (raw, json) Hash identifier: EfPnf+y+gwvrAPGOw9PfAYccneZxQYod+vo0tIQgHeM= Subject key identifier: 05:24:C2:FC:CE:99:5E:3F:C5:11:65:58:44:FE:B3:24:1B:80:64:97 Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1 Certificate serial: 019ACB07F93E8FBAB8ED6E4125C5B7B630D3 Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/BSTC_M6ZXj_FEWVYRP6zJBuAZJc.roa Signing time: Fri 28 Nov 2025 15:14:48 +0000 ROA not before: Fri 28 Nov 2025 15:14:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 48678 IP address blocks: 77.81.88.0/24 maxlen: 24 77.81.100.0/24 maxlen: 24 86.105.4.0/24 maxlen: 24 86.107.51.0/24 maxlen: 24 89.35.73.0/24 maxlen: 24 89.37.194.0/24 maxlen: 24 89.43.62.0/24 maxlen: 24 89.45.162.0/24 maxlen: 24 91.132.51.0/24 maxlen: 24 93.90.75.0/24 maxlen: 24 93.115.105.0/24 maxlen: 24 188.241.137.0/24 maxlen: 24 194.135.18.0/24 maxlen: 24 212.192.5.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:cb:07:f9:3e:8f:ba:b8:ed:6e:41:25:c5:b7:b6:30:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1 Validity Not Before: Nov 28 15:14:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=0524c2fcce995e3fc511655844feb3241b806497 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:8f:8b:19:8b:4e:b3:5a:44:fd:15:93:30:dd: c1:21:b4:b3:4d:4d:90:58:08:1d:dc:9d:71:d6:bd: 69:cc:48:48:86:46:db:86:e9:94:ab:c6:67:c3:66: b1:7c:f6:fb:b0:e0:fa:d2:a6:c7:e8:55:c6:70:95: 53:e6:32:be:be:17:f1:6a:91:56:10:6e:3c:65:5c: 50:85:ca:4e:e1:2b:05:57:b4:7b:1e:eb:02:95:c2: 12:0a:f0:4a:cc:04:00:77:95:c0:1b:8d:47:69:72: 35:6b:48:b6:bd:bc:66:7e:01:d7:04:6a:05:42:2b: 37:ba:ae:36:f1:47:74:cf:e8:c6:cf:48:81:9a:28: 8d:3b:d6:84:70:51:21:e5:c3:e0:f7:f5:a9:45:63: a2:94:83:2d:80:4d:e9:9f:ca:2e:87:af:45:3b:01: e0:92:1a:47:4e:6d:50:69:9e:14:a4:9d:b8:62:25: 29:a8:a1:71:a1:ae:18:0a:7d:75:fd:09:5f:08:00: bd:cc:cf:a2:ca:4b:7a:6f:6b:57:ab:b0:24:38:8f: 93:32:44:0e:77:d7:bf:f5:6a:ac:9e:e5:26:54:38: fb:e2:cc:14:f5:47:7f:0a:2c:da:e6:73:9d:40:b5: 4e:be:e9:a1:48:08:6c:10:30:28:40:3e:37:cc:b9: 2f:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:24:C2:FC:CE:99:5E:3F:C5:11:65:58:44:FE:B3:24:1B:80:64:97 X509v3 Authority Key Identifier: keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/BSTC_M6ZXj_FEWVYRP6zJBuAZJc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.81.88.0/24 77.81.100.0/24 86.105.4.0/24 86.107.51.0/24 89.35.73.0/24 89.37.194.0/24 89.43.62.0/24 89.45.162.0/24 91.132.51.0/24 93.90.75.0/24 93.115.105.0/24 188.241.137.0/24 194.135.18.0/24 212.192.5.0/24 Signature Algorithm: sha256WithRSAEncryption 11:4a:7b:c3:e5:75:db:2f:29:0b:6f:c2:86:2c:ea:d4:ed:2f: 16:1b:d8:f9:3c:88:fc:40:27:e0:87:3d:06:08:8a:38:b7:5f: 9a:1c:22:9d:77:67:2e:e3:33:36:c5:3f:c1:14:57:62:7a:88: 84:ef:ec:a6:69:67:33:b2:00:73:4b:df:58:f5:cf:fb:ab:b4: 90:7b:0c:df:31:ca:74:87:e8:91:bd:82:00:02:a2:3f:c5:91: 49:33:3b:07:0e:0f:32:d4:cc:f3:27:2e:95:52:7f:47:22:a3: d3:18:a0:50:69:8c:b2:a4:a2:20:a1:6b:af:39:dd:24:27:97: 6d:4b:4c:a6:56:d5:b6:65:27:11:d0:44:81:81:d6:94:4c:0c: 6f:91:ca:17:62:59:78:f5:22:2f:0e:36:32:85:ea:39:0e:b5: 9b:d3:27:3a:0f:5c:27:8f:68:1c:96:4b:a1:ce:ef:ce:26:4f: a4:aa:48:2b:52:5a:5b:c8:85:ad:27:da:7f:2a:8d:8f:b6:80: bd:d8:de:f0:da:ad:4e:45:77:61:90:c6:f2:ec:a6:f6:22:46: 07:30:13:62:9f:95:08:3f:f1:b4:6f:a0:7f:88:1e:44:8e:53: 08:59:ae:12:68:42:86:fd:fe:9c:a1:c2:59:76:83:0f:9c:c0: a9:11:2c:38 -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgISAZrLB/k+j7q47W5BJcW3tjDTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm Y2ZlZDEwHhcNMjUxMTI4MTUxNDQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNTI0YzJmY2NlOTk1ZTNmYzUxMTY1NTg0NGZlYjMyNDFiODA2NDk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqo+LGYtOs1pE/RWTMN3BIbSzTU2Q WAgd3J1x1r1pzEhIhkbbhumUq8Znw2axfPb7sOD60qbH6FXGcJVT5jK+vhfxapFW EG48ZVxQhcpO4SsFV7R7HusClcISCvBKzAQAd5XAG41HaXI1a0i2vbxmfgHXBGoF Qis3uq428Ud0z+jGz0iBmiiNO9aEcFEh5cPg9/WpRWOilIMtgE3pn8ouh69FOwHg khpHTm1QaZ4UpJ24YiUpqKFxoa4YCn11/QlfCAC9zM+iykt6b2tXq7AkOI+TMkQO d9e/9WqsnuUmVDj74swU9Ud/Ciza5nOdQLVOvumhSAhsEDAoQD43zLkvhwIDAQAB o4ICVzCCAlMwHQYDVR0OBBYEFAUkwvzOmV4/xRFlWET+syQbgGSXMB8GA1UdIwQY MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt ZTU4MzlmNDNlNTgzLzEvQlNUQ19NNlpYal9GRVdWWVJQNnpKQnVBWkpjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMG0GCCsGAQUFBwEHAQH/BF4wXDBaBAIAATBUAwQATVFYAwQA TVFkAwQAVmkEAwQAVmszAwQAWSNJAwQAWSXCAwQAWSs+AwQAWS2iAwQAW4QzAwQA XVpLAwQAXXNpAwQAvPGJAwQAwocSAwQA1MAFMA0GCSqGSIb3DQEBCwUAA4IBAQAR SnvD5XXbLykLb8KGLOrU7S8WG9j5PIj8QCfghz0GCIo4t1+aHCKdd2cu4zM2xT/B FFdieoiE7+ymaWczsgBzS99Y9c/7q7SQewzfMcp0h+iRvYIAAqI/xZFJMzsHDg8y 1MzzJy6VUn9HIqPTGKBQaYyypKIgoWuvOd0kJ5dtS0ymVtW2ZScR0ESBgdaUTAxv kcoXYll49SIvDjYyheo5DrWb0yc6D1wnj2gclkuhzu/OJk+kqkgrUlpbyIWtJ9p/ Ko2PtoC92N7w2q1ORXdhkMby7Kb2IkYHMBNin5UIP/G0b6B/iB5EjlMIWa4SaEKG /f6cocJZdoMPnMCpESw4 -----END CERTIFICATE-----Generated at Fri Dec 5 07:58:51 2025 by rpki-client