This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/7e4332-5358-43a9-b5bf-4ea12513cc6f/1/BtCXrEvFdYxbMF0edMC6GWPz6ng.roa File: BtCXrEvFdYxbMF0edMC6GWPz6ng.roa (raw, json) Hash identifier: BCQhsZLwl9WR9pVKc7HvUARtfotVM5FGfl7SM8KaDfU= Subject key identifier: 06:D0:97:AC:4B:C5:75:8C:5B:30:5D:1E:74:C0:BA:19:63:F3:EA:78 Certificate issuer: /CN=6a736cbd0011da31d29b061e5ff4d63842da2a4a Certificate serial: 019B76EB0C4763557845518EEE85B3ADEE20 Authority key identifier: 6A:73:6C:BD:00:11:DA:31:D2:9B:06:1E:5F:F4:D6:38:42:DA:2A:4A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/anNsvQAR2jHSmwYeX_TWOELaKko.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/7e4332-5358-43a9-b5bf-4ea12513cc6f/1/BtCXrEvFdYxbMF0edMC6GWPz6ng.roa Signing time: Thu 01 Jan 2026 00:17:54 +0000 ROA not before: Thu 01 Jan 2026 00:17:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59834 IP address blocks: 185.69.148.0/24 maxlen: 24 185.69.149.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/7e4332-5358-43a9-b5bf-4ea12513cc6f/1/anNsvQAR2jHSmwYeX_TWOELaKko.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/7e4332-5358-43a9-b5bf-4ea12513cc6f/1/anNsvQAR2jHSmwYeX_TWOELaKko.mft rsync://rpki.ripe.net/repository/DEFAULT/anNsvQAR2jHSmwYeX_TWOELaKko.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:0c:47:63:55:78:45:51:8e:ee:85:b3:ad:ee:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6a736cbd0011da31d29b061e5ff4d63842da2a4a Validity Not Before: Jan 1 00:17:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=06d097ac4bc5758c5b305d1e74c0ba1963f3ea78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:1d:9f:7d:07:b8:dc:af:c3:fb:e2:91:9f:0b: d9:fc:e6:6d:14:32:67:97:2d:21:93:e0:9a:8b:66: 60:cb:40:0e:aa:2c:e9:ec:e1:2b:62:17:cc:fa:d9: ba:69:57:62:39:55:3c:0f:b3:ef:5b:ac:d9:f0:01: 04:3c:91:d4:d4:38:6b:6c:8a:08:44:d3:7b:2a:27: 79:56:b7:da:42:d3:e3:a0:a8:3c:7d:5e:a6:f1:0b: fd:b7:94:47:a5:4b:0a:e7:ac:31:56:41:8a:ce:29: 8e:28:07:e3:bb:5e:c7:dc:2b:a3:84:71:30:1e:7f: 90:76:3c:c4:eb:43:a4:74:84:bd:c6:b4:f1:b4:9d: d8:d2:bf:1c:cd:86:3d:e0:1a:ca:c3:83:06:f8:0a: 95:93:8f:40:72:da:a3:2c:3d:e8:69:04:25:f1:08: e1:68:d4:46:f9:9e:30:b0:9d:e1:24:5e:3a:ed:7f: ae:d4:ec:6f:71:21:b2:87:4e:55:57:4b:5d:2a:c3: 38:bf:bd:93:5f:25:5c:a6:dc:3d:8e:ee:3e:23:a5: 11:0f:75:6a:82:4d:d5:8d:02:90:4f:15:bd:20:84: d7:72:cd:55:43:28:3d:68:05:e5:92:d8:5b:ff:89: c5:f1:aa:75:96:fc:65:6f:71:3a:4e:52:05:5d:57: 77:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:D0:97:AC:4B:C5:75:8C:5B:30:5D:1E:74:C0:BA:19:63:F3:EA:78 X509v3 Authority Key Identifier: keyid:6A:73:6C:BD:00:11:DA:31:D2:9B:06:1E:5F:F4:D6:38:42:DA:2A:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/anNsvQAR2jHSmwYeX_TWOELaKko.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/7e4332-5358-43a9-b5bf-4ea12513cc6f/1/BtCXrEvFdYxbMF0edMC6GWPz6ng.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/7e4332-5358-43a9-b5bf-4ea12513cc6f/1/anNsvQAR2jHSmwYeX_TWOELaKko.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.69.148.0/23 Signature Algorithm: sha256WithRSAEncryption 4c:da:66:87:71:56:61:13:4c:55:e1:7f:36:e8:d4:ae:54:e2: 74:70:e7:6a:56:75:dd:ff:eb:29:6f:58:8d:fb:a5:e3:8e:0d: ca:3d:80:42:e2:e6:cd:9a:13:dd:da:ca:f4:e1:52:87:fc:ce: 40:21:85:c1:fd:9e:70:b8:03:f7:d2:38:94:97:56:bd:ff:66: 74:12:94:cf:af:92:28:69:4e:5d:23:d3:4d:34:21:62:b1:02: 41:20:68:ca:b4:4c:61:ec:e5:a8:5d:f3:c6:2e:cd:ec:2a:77: 1f:e7:59:20:00:de:7f:39:de:19:1e:79:ed:65:a3:d2:84:52: c7:de:93:c9:df:d1:c1:46:53:25:76:62:b1:79:e7:96:97:68: 57:fa:0b:7d:84:54:06:3a:65:46:f7:69:dd:b0:2b:38:45:0f: b4:60:35:a2:6e:d8:95:47:4e:ba:29:28:96:a0:1d:9b:f3:fa: 60:f8:b7:41:83:16:e5:5c:ce:9d:2f:68:a4:08:48:5d:fa:b0: 3e:bf:43:55:f8:3f:84:24:51:7a:c2:7c:06:e5:da:b9:a1:4c: f7:1e:90:5f:ca:ac:6c:6b:26:7c:38:bf:aa:da:95:0c:f4:3e: 5f:a9:a9:d1:be:c1:de:d6:f9:d4:13:e9:ba:eb:42:c6:75:be: 6d:75:b9:df -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt26wxHY1V4RVGO7oWzre4gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZhNzM2Y2JkMDAxMWRhMzFkMjliMDYxZTVmZjRkNjM4NDJk YTJhNGEwHhcNMjYwMTAxMDAxNzU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNmQwOTdhYzRiYzU3NThjNWIzMDVkMWU3NGMwYmExOTYzZjNlYTc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkh2ffQe43K/D++KRnwvZ/OZtFDJn ly0hk+Cai2Zgy0AOqizp7OErYhfM+tm6aVdiOVU8D7PvW6zZ8AEEPJHU1DhrbIoI RNN7Kid5VrfaQtPjoKg8fV6m8Qv9t5RHpUsK56wxVkGKzimOKAfju17H3CujhHEw Hn+QdjzE60OkdIS9xrTxtJ3Y0r8czYY94BrKw4MG+AqVk49ActqjLD3oaQQl8Qjh aNRG+Z4wsJ3hJF467X+u1OxvcSGyh05VV0tdKsM4v72TXyVcptw9ju4+I6URD3Vq gk3VjQKQTxW9IITXcs1VQyg9aAXlkthb/4nF8ap1lvxlb3E6TlIFXVd37QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAbQl6xLxXWMWzBdHnTAuhlj8+p4MB8GA1UdIwQY MBaAFGpzbL0AEdox0psGHl/01jhC2ipKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYW5Oc3ZRQVIyakhTbXdZZVhfVFdPRUxhS2tvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS83ZTQzMzItNTM1OC00M2E5LWI1YmYt NGVhMTI1MTNjYzZmLzEvQnRDWHJFdkZkWXhiTUYwZWRNQzZHV1B6Nm5nLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS83ZTQzMzItNTM1OC00M2E5LWI1YmYtNGVhMTI1MTNjYzZm LzEvYW5Oc3ZRQVIyakhTbXdZZVhfVFdPRUxhS2tvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuUWUMA0G CSqGSIb3DQEBCwUAA4IBAQBM2maHcVZhE0xV4X826NSuVOJ0cOdqVnXd/+spb1iN +6Xjjg3KPYBC4ubNmhPd2sr04VKH/M5AIYXB/Z5wuAP30jiUl1a9/2Z0EpTPr5Io aU5dI9NNNCFisQJBIGjKtExh7OWoXfPGLs3sKncf51kgAN5/Od4ZHnntZaPShFLH 3pPJ39HBRlMldmKxeeeWl2hX+gt9hFQGOmVG92ndsCs4RQ+0YDWibtiVR066KSiW oB2b8/pg+LdBgxblXM6dL2ikCEhd+rA+v0NV+D+EJFF6wnwG5dq5oUz3HpBfyqxs ayZ8OL+q2pUM9D5fqanRvsHe1vnUE+m660LGdb5tdbnf -----END CERTIFICATE-----Generated at Mon Feb 9 21:00:13 2026 by rpki-client