This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/c6a4fe-a760-4c4c-81b0-53ab88c5f2c7/1/btwX4uOLhpX8PdO9FjiDp3A4nDw.roa File: btwX4uOLhpX8PdO9FjiDp3A4nDw.roa (raw, json) Hash identifier: T8izFyz3wpewzhPofNbdL4jbwtjSxm9WFWHn9isN/w8= Subject key identifier: 6E:DC:17:E2:E3:8B:86:95:FC:3D:D3:BD:16:38:83:A7:70:38:9C:3C Certificate issuer: /CN=f7f4902d240b25d7eb77f4f02e24f233f44a9a13 Certificate serial: 019B7CEE2E6FD3A087467D6A4688FDB6B077 Authority key identifier: F7:F4:90:2D:24:0B:25:D7:EB:77:F4:F0:2E:24:F2:33:F4:4A:9A:13 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9_SQLSQLJdfrd_TwLiTyM_RKmhM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/c6a4fe-a760-4c4c-81b0-53ab88c5f2c7/1/btwX4uOLhpX8PdO9FjiDp3A4nDw.roa Signing time: Fri 02 Jan 2026 04:19:02 +0000 ROA not before: Fri 02 Jan 2026 04:19:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197441 IP address blocks: 46.23.0.0/20 maxlen: 24 2a02:7000::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/c6a4fe-a760-4c4c-81b0-53ab88c5f2c7/1/9_SQLSQLJdfrd_TwLiTyM_RKmhM.crl rsync://rpki.ripe.net/repository/DEFAULT/71/c6a4fe-a760-4c4c-81b0-53ab88c5f2c7/1/9_SQLSQLJdfrd_TwLiTyM_RKmhM.mft rsync://rpki.ripe.net/repository/DEFAULT/9_SQLSQLJdfrd_TwLiTyM_RKmhM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:2e:6f:d3:a0:87:46:7d:6a:46:88:fd:b6:b0:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f7f4902d240b25d7eb77f4f02e24f233f44a9a13 Validity Not Before: Jan 2 04:19:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6edc17e2e38b8695fc3dd3bd163883a770389c3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:18:7e:e4:92:f8:a8:df:fc:97:c8:41:3e:ef: 01:43:2e:01:3f:86:81:59:2d:25:36:30:9e:b7:be: 5d:42:57:51:1b:e2:9f:ea:50:75:45:7d:ac:25:ad: ec:76:1d:e4:53:c0:87:e3:8f:86:a9:af:fa:ba:b5: 7f:fe:00:d9:fc:fe:8f:a7:30:22:04:c4:c4:b8:93: 6a:05:47:a1:fe:d5:6a:7f:a7:c9:d7:73:10:bb:81: 13:9b:33:58:cd:89:26:7d:e0:f3:0f:3c:40:10:e0: f7:4e:4b:a6:8e:68:16:ef:00:8d:4a:35:96:e7:6d: 79:23:00:31:bd:ee:ad:c5:6c:c8:07:4d:23:09:cf: 1d:d3:51:05:c7:50:df:b8:7c:98:f1:0b:84:7d:33: 88:bc:67:cc:66:b8:49:1c:b2:86:68:4c:94:04:16: 67:c4:f7:36:ef:ea:16:c9:a9:99:d8:67:92:e4:40: 9e:b8:69:eb:41:3c:a6:73:25:6f:cc:8e:7f:b6:10: 33:12:77:0c:9c:e1:da:15:53:7a:94:bc:a2:b7:32: 02:fb:cf:da:cc:c6:e2:07:60:0d:3a:f1:ff:1d:8b: 25:76:19:5c:f4:28:5f:02:01:9c:96:aa:0c:55:06: a6:58:47:9a:a4:05:89:33:64:1f:b8:9d:d2:f1:a2: 0f:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:DC:17:E2:E3:8B:86:95:FC:3D:D3:BD:16:38:83:A7:70:38:9C:3C X509v3 Authority Key Identifier: keyid:F7:F4:90:2D:24:0B:25:D7:EB:77:F4:F0:2E:24:F2:33:F4:4A:9A:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9_SQLSQLJdfrd_TwLiTyM_RKmhM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/c6a4fe-a760-4c4c-81b0-53ab88c5f2c7/1/btwX4uOLhpX8PdO9FjiDp3A4nDw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/71/c6a4fe-a760-4c4c-81b0-53ab88c5f2c7/1/9_SQLSQLJdfrd_TwLiTyM_RKmhM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.23.0.0/20 IPv6: 2a02:7000::/32 Signature Algorithm: sha256WithRSAEncryption 05:4e:bd:d1:e6:18:16:7d:1e:52:9c:27:5e:b6:4e:87:ee:10: f4:aa:0b:c8:11:6a:7e:09:a0:90:54:f2:62:2e:92:29:e8:59: 1a:56:77:c9:53:15:6e:40:50:94:36:09:0d:94:b2:0d:3e:54: ee:06:1c:ff:43:0d:9e:65:27:76:a0:cc:0e:af:47:e9:7d:ba: e2:7a:52:66:47:ad:72:c1:96:ac:41:0f:76:eb:e7:75:65:2e: 55:1a:16:ac:5d:25:c0:9d:e1:70:d5:9b:87:ed:89:5b:0c:11: 5a:8a:2d:47:9f:fc:d4:3c:77:40:65:c2:8c:c9:c4:67:d4:b6: d9:12:e6:a3:9b:d1:d3:e1:f6:74:55:77:e2:b5:db:4f:94:ca: 66:6d:90:00:82:2d:54:9e:fe:be:e4:12:64:2d:43:37:c7:6c: c2:e8:aa:15:5d:9f:53:d2:ce:dd:94:28:0b:43:44:d0:98:f0: e4:96:ea:d1:c7:97:c4:37:38:c7:02:a3:94:c7:49:fd:7b:6a: 9f:9e:65:be:1a:84:91:eb:09:4c:90:33:21:6f:3d:7b:a5:ec: 9e:b8:2c:29:b6:9c:19:5f:e0:95:05:76:dc:5c:43:8b:25:ca: 7f:5e:56:57:db:05:a0:a3:6b:b9:9f:99:fe:92:63:a3:d4:b0: 2c:60:58:3e -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt87i5v06CHRn1qRoj9trB3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY3ZjQ5MDJkMjQwYjI1ZDdlYjc3ZjRmMDJlMjRmMjMzZjQ0 YTlhMTMwHhcNMjYwMTAyMDQxOTAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZWRjMTdlMmUzOGI4Njk1ZmMzZGQzYmQxNjM4ODNhNzcwMzg5YzNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7Rh+5JL4qN/8l8hBPu8BQy4BP4aB WS0lNjCet75dQldRG+Kf6lB1RX2sJa3sdh3kU8CH44+Gqa/6urV//gDZ/P6PpzAi BMTEuJNqBUeh/tVqf6fJ13MQu4ETmzNYzYkmfeDzDzxAEOD3TkumjmgW7wCNSjWW 5215IwAxve6txWzIB00jCc8d01EFx1DfuHyY8QuEfTOIvGfMZrhJHLKGaEyUBBZn xPc27+oWyamZ2GeS5ECeuGnrQTymcyVvzI5/thAzEncMnOHaFVN6lLyitzIC+8/a zMbiB2ANOvH/HYsldhlc9ChfAgGclqoMVQamWEeapAWJM2QfuJ3S8aIP7wIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFG7cF+Lji4aV/D3TvRY4g6dwOJw8MB8GA1UdIwQY MBaAFPf0kC0kCyXX63f08C4k8jP0SpoTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOV9TUUxTUUxKZGZyZF9Ud0xpVHlNX1JLbWhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS9jNmE0ZmUtYTc2MC00YzRjLTgxYjAt NTNhYjg4YzVmMmM3LzEvYnR3WDR1T0xocFg4UGRPOUZqaURwM0E0bkR3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MS9jNmE0ZmUtYTc2MC00YzRjLTgxYjAtNTNhYjg4YzVmMmM3 LzEvOV9TUUxTUUxKZGZyZF9Ud0xpVHlNX1JLbWhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQELhcAMA0E AgACMAcDBQAqAnAAMA0GCSqGSIb3DQEBCwUAA4IBAQAFTr3R5hgWfR5SnCdetk6H 7hD0qgvIEWp+CaCQVPJiLpIp6FkaVnfJUxVuQFCUNgkNlLINPlTuBhz/Qw2eZSd2 oMwOr0fpfbrielJmR61ywZasQQ926+d1ZS5VGhasXSXAneFw1ZuH7YlbDBFaii1H n/zUPHdAZcKMycRn1LbZEuajm9HT4fZ0VXfitdtPlMpmbZAAgi1Unv6+5BJkLUM3 x2zC6KoVXZ9T0s7dlCgLQ0TQmPDklurRx5fENzjHAqOUx0n9e2qfnmW+GoSR6wlM kDMhbz17peyeuCwptpwZX+CVBXbcXEOLJcp/XlZX2wWgo2u5n5n+kmOj1LAsYFg+ -----END CERTIFICATE-----Generated at Mon Feb 9 22:36:52 2026 by rpki-client