This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/a94a4c-a552-46f6-8a81-cef9448124b0/1/BTNbf-Zetnrn5fG4oMBQEb3Lp6E.roa File: BTNbf-Zetnrn5fG4oMBQEb3Lp6E.roa (raw, json) Hash identifier: A1g/+HrCWiAYQ0oLvI3fSXeEtYJcIWvKDusWeJft4J0= Subject key identifier: 05:33:5B:7F:E6:5E:B6:7A:E7:E5:F1:B8:A0:C0:50:11:BD:CB:A7:A1 Certificate issuer: /CN=6bba1d24e72c439ec7a5cbdc391357dd89cb86ab Certificate serial: 019B7C7EFF859B85A9580EEAFB4B0031EF4A Authority key identifier: 6B:BA:1D:24:E7:2C:43:9E:C7:A5:CB:DC:39:13:57:DD:89:CB:86:AB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a7odJOcsQ57HpcvcORNX3YnLhqs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/a94a4c-a552-46f6-8a81-cef9448124b0/1/BTNbf-Zetnrn5fG4oMBQEb3Lp6E.roa Signing time: Fri 02 Jan 2026 02:17:36 +0000 ROA not before: Fri 02 Jan 2026 02:17:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8560 IP address blocks: 2a0d:7f00::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/a94a4c-a552-46f6-8a81-cef9448124b0/1/a7odJOcsQ57HpcvcORNX3YnLhqs.crl rsync://rpki.ripe.net/repository/DEFAULT/68/a94a4c-a552-46f6-8a81-cef9448124b0/1/a7odJOcsQ57HpcvcORNX3YnLhqs.mft rsync://rpki.ripe.net/repository/DEFAULT/a7odJOcsQ57HpcvcORNX3YnLhqs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 09:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7e:ff:85:9b:85:a9:58:0e:ea:fb:4b:00:31:ef:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6bba1d24e72c439ec7a5cbdc391357dd89cb86ab Validity Not Before: Jan 2 02:17:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=05335b7fe65eb67ae7e5f1b8a0c05011bdcba7a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:d1:13:71:7a:6a:e5:66:11:71:bf:2e:21:85: 82:21:67:f0:46:84:a3:91:a9:ea:cd:4e:91:03:f7: c8:65:2f:0d:00:8e:bf:98:e3:96:c1:ea:d4:cc:29: 6d:cf:2e:a3:f8:b5:7f:d7:83:a5:78:35:91:18:80: 73:c1:d0:cd:65:a2:2d:d8:9f:e0:8f:f6:0f:76:be: 97:66:b5:e0:ad:13:14:40:dc:2b:53:75:c5:c6:10: d6:b1:6e:d5:e6:8c:75:88:d1:cd:bf:28:5b:cf:54: 72:4d:04:73:83:4c:f9:09:c5:ac:38:ad:05:68:66: 20:b9:ca:2f:d0:0e:8a:ba:54:62:f5:b8:1c:53:b7: b7:4d:fd:87:93:09:96:88:e5:74:6c:49:74:32:c1: 9f:38:48:b6:e4:fd:7e:6c:7c:cd:93:48:98:7f:70: c3:32:d2:81:1a:e6:b2:37:df:7c:00:ad:13:b5:68: de:51:72:df:86:4b:15:29:57:e4:a4:c9:9e:24:8a: 4d:f6:0f:28:75:33:69:70:8e:87:58:0e:f5:65:1e: 70:14:8f:b9:e0:b9:25:47:43:9b:02:d1:02:47:52: f9:b2:ed:9b:c8:2f:64:4c:01:96:1b:d6:96:6d:bd: 11:d9:31:76:7a:05:17:01:4b:95:08:b3:40:60:d8: b4:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:33:5B:7F:E6:5E:B6:7A:E7:E5:F1:B8:A0:C0:50:11:BD:CB:A7:A1 X509v3 Authority Key Identifier: keyid:6B:BA:1D:24:E7:2C:43:9E:C7:A5:CB:DC:39:13:57:DD:89:CB:86:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7odJOcsQ57HpcvcORNX3YnLhqs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/a94a4c-a552-46f6-8a81-cef9448124b0/1/BTNbf-Zetnrn5fG4oMBQEb3Lp6E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/68/a94a4c-a552-46f6-8a81-cef9448124b0/1/a7odJOcsQ57HpcvcORNX3YnLhqs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0d:7f00::/29 Signature Algorithm: sha256WithRSAEncryption 37:53:7e:19:a5:82:57:4b:3d:0c:1f:4c:22:3a:38:1f:b9:ba: 08:e9:9a:02:a9:6b:72:ea:43:d9:49:3b:17:e4:86:7d:5e:7d: 2f:ae:97:1a:b8:8b:be:fd:e6:b4:2c:95:c3:74:5f:1a:a5:91: 94:bf:a1:84:b8:e4:16:a0:45:08:a0:b7:74:0b:f9:1a:2d:0a: 9b:34:9b:3f:bd:52:f4:9a:18:25:0f:5a:35:2c:35:b2:02:cf: 9d:3b:38:31:1f:fb:05:aa:74:36:f5:8e:94:a9:49:ed:94:55: e7:da:83:37:f4:63:b4:e1:ae:ac:e4:f8:42:c8:f2:70:1e:84: 13:2a:63:2d:77:f0:d2:14:10:74:43:8d:8e:8b:61:2d:fd:d4: 3f:3c:ca:67:a1:7d:f3:e8:61:d8:84:1b:5a:80:b3:29:78:81: 5f:c7:ed:3e:0a:a8:22:df:c8:91:59:05:9a:01:b2:15:a7:91: 61:b7:75:bc:c9:45:b1:f7:a0:d0:f0:13:86:78:62:00:eb:a2: 4c:25:15:3e:c3:d4:e3:77:15:a8:37:e6:8f:de:f5:73:0a:28: cc:e3:ec:19:38:5f:40:63:b4:94:45:d4:70:43:95:94:ad:1e: c4:7d:6b:72:d2:a5:c7:f7:75:be:03:1d:f0:a6:de:17:0b:c4: 73:17:69:3e -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt8fv+Fm4WpWA7q+0sAMe9KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiYmExZDI0ZTcyYzQzOWVjN2E1Y2JkYzM5MTM1N2RkODlj Yjg2YWIwHhcNMjYwMTAyMDIxNzM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNTMzNWI3ZmU2NWViNjdhZTdlNWYxYjhhMGMwNTAxMWJkY2JhN2ExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAudETcXpq5WYRcb8uIYWCIWfwRoSj kanqzU6RA/fIZS8NAI6/mOOWwerUzCltzy6j+LV/14OleDWRGIBzwdDNZaIt2J/g j/YPdr6XZrXgrRMUQNwrU3XFxhDWsW7V5ox1iNHNvyhbz1RyTQRzg0z5CcWsOK0F aGYgucov0A6KulRi9bgcU7e3Tf2HkwmWiOV0bEl0MsGfOEi25P1+bHzNk0iYf3DD MtKBGuayN998AK0TtWjeUXLfhksVKVfkpMmeJIpN9g8odTNpcI6HWA71ZR5wFI+5 4LklR0ObAtECR1L5su2byC9kTAGWG9aWbb0R2TF2egUXAUuVCLNAYNi0cwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFAUzW3/mXrZ65+XxuKDAUBG9y6ehMB8GA1UdIwQY MBaAFGu6HSTnLEOex6XL3DkTV92Jy4arMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYTdvZEpPY3NRNTdIcGN2Y09STlgzWW5MaHFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC9hOTRhNGMtYTU1Mi00NmY2LThhODEt Y2VmOTQ0ODEyNGIwLzEvQlROYmYtWmV0bnJuNWZHNG9NQlFFYjNMcDZFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OC9hOTRhNGMtYTU1Mi00NmY2LThhODEtY2VmOTQ0ODEyNGIw LzEvYTdvZEpPY3NRNTdIcGN2Y09STlgzWW5MaHFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKg1/ADAN BgkqhkiG9w0BAQsFAAOCAQEAN1N+GaWCV0s9DB9MIjo4H7m6COmaAqlrcupD2Uk7 F+SGfV59L66XGriLvv3mtCyVw3RfGqWRlL+hhLjkFqBFCKC3dAv5Gi0KmzSbP71S 9JoYJQ9aNSw1sgLPnTs4MR/7Bap0NvWOlKlJ7ZRV59qDN/RjtOGurOT4QsjycB6E EypjLXfw0hQQdEONjothLf3UPzzKZ6F98+hh2IQbWoCzKXiBX8ftPgqoIt/IkVkF mgGyFaeRYbd1vMlFsfeg0PAThnhiAOuiTCUVPsPU43cVqDfmj971cwoozOPsGThf QGO0lEXUcEOVlK0exH1rctKlx/d1vgMd8KbeFwvEcxdpPg== -----END CERTIFICATE-----Generated at Tue Jan 27 16:05:10 2026 by rpki-client