This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/9f35e9-a17a-48cd-9402-31d245f3b3b8/1/BtnF3z_6Q5xPFk5aaPdB9AV2Ub0.roa File: BtnF3z_6Q5xPFk5aaPdB9AV2Ub0.roa (raw, json) Hash identifier: e4XrjTZT9DVKsoP6xpDG68p8DkyaP4kbQPdVBr18Zts= Subject key identifier: 06:D9:C5:DF:3F:FA:43:9C:4F:16:4E:5A:68:F7:41:F4:05:76:51:BD Certificate issuer: /CN=ad0618bc00d911a5d5eebf9c5896a41bf2898ecb Certificate serial: 019B775880D8C5AFC3A82344E9208345B730 Authority key identifier: AD:06:18:BC:00:D9:11:A5:D5:EE:BF:9C:58:96:A4:1B:F2:89:8E:CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rQYYvADZEaXV7r-cWJakG_KJjss.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/9f35e9-a17a-48cd-9402-31d245f3b3b8/1/BtnF3z_6Q5xPFk5aaPdB9AV2Ub0.roa Signing time: Thu 01 Jan 2026 02:17:27 +0000 ROA not before: Thu 01 Jan 2026 02:17:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199361 IP address blocks: 185.20.76.0/23 maxlen: 24 185.77.232.0/22 maxlen: 24 2a00:49e0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/9f35e9-a17a-48cd-9402-31d245f3b3b8/1/rQYYvADZEaXV7r-cWJakG_KJjss.crl rsync://rpki.ripe.net/repository/DEFAULT/be/9f35e9-a17a-48cd-9402-31d245f3b3b8/1/rQYYvADZEaXV7r-cWJakG_KJjss.mft rsync://rpki.ripe.net/repository/DEFAULT/rQYYvADZEaXV7r-cWJakG_KJjss.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:80:d8:c5:af:c3:a8:23:44:e9:20:83:45:b7:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ad0618bc00d911a5d5eebf9c5896a41bf2898ecb Validity Not Before: Jan 1 02:17:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=06d9c5df3ffa439c4f164e5a68f741f4057651bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:64:df:fe:24:b3:fe:ff:a9:a7:6f:9a:7b:fb: b8:d3:9d:e1:85:50:80:ad:39:35:1e:23:24:d1:2b: 67:d6:1f:3e:01:eb:5b:81:26:dc:7c:48:57:e3:a1: d8:60:08:ea:63:31:3d:64:00:75:a7:39:83:19:03: 41:10:5a:39:57:eb:7e:60:f1:cd:30:78:11:b8:6f: 5f:d0:a6:39:30:5b:14:aa:82:76:19:0c:76:69:a7: 6c:ad:77:0d:90:01:ee:a6:dd:4f:29:a6:ec:62:31: 94:23:f3:c5:43:83:33:46:7c:30:28:7e:94:3b:a4: 05:62:87:09:fc:f0:98:52:f5:34:8b:05:d8:c0:c8: 2b:87:a0:bd:ac:a4:d7:d4:1a:11:7b:0d:2a:85:1a: 04:2b:d9:27:b8:b0:5e:5b:ab:59:28:a7:7a:4f:94: ee:c4:c7:fe:d9:fe:5f:b3:db:8e:f7:55:d0:97:77: 64:32:18:22:88:51:fb:51:18:84:24:fb:90:e8:dd: c6:85:e1:b7:26:3c:ba:2f:e9:ab:9f:f2:24:f6:c8: e2:81:04:ef:cc:30:20:68:35:03:3f:19:e0:2e:f6: 96:d1:3f:ab:30:04:90:6e:48:03:b0:17:ce:8a:76: 59:52:e9:d0:af:29:07:8a:97:16:1d:cf:21:95:7c: c9:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:D9:C5:DF:3F:FA:43:9C:4F:16:4E:5A:68:F7:41:F4:05:76:51:BD X509v3 Authority Key Identifier: keyid:AD:06:18:BC:00:D9:11:A5:D5:EE:BF:9C:58:96:A4:1B:F2:89:8E:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rQYYvADZEaXV7r-cWJakG_KJjss.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/9f35e9-a17a-48cd-9402-31d245f3b3b8/1/BtnF3z_6Q5xPFk5aaPdB9AV2Ub0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/9f35e9-a17a-48cd-9402-31d245f3b3b8/1/rQYYvADZEaXV7r-cWJakG_KJjss.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.20.76.0/23 185.77.232.0/22 IPv6: 2a00:49e0::/32 Signature Algorithm: sha256WithRSAEncryption 63:35:aa:59:83:01:ad:5e:2f:93:ff:08:df:ba:49:67:75:76: 2c:a8:b0:76:f6:5e:75:4a:70:ef:47:91:bf:68:07:3f:72:de: 68:90:ba:f9:33:be:33:8c:45:fd:cd:55:62:fb:98:c3:14:08: e9:b4:9f:26:d2:32:de:dd:3e:cf:cd:c2:14:a7:cb:c1:82:4d: ff:c2:90:ea:0e:9d:d8:15:40:98:e9:1f:0c:2b:a4:99:79:f1: a3:27:bb:47:13:57:50:ad:c9:9f:ce:f1:e9:45:4f:61:0d:2e: 35:9f:a0:28:e9:b9:fa:9b:17:e1:c6:f0:a9:d1:15:c5:78:7a: 8e:66:df:e6:15:d0:ce:85:c7:c4:24:00:db:b1:b1:d5:90:77: 7a:86:7c:49:ea:48:10:c0:6b:a1:31:30:8f:d3:d6:d3:d6:01: a1:97:b6:50:8a:a7:be:c7:47:bd:33:1f:89:9f:27:22:be:b1: 18:f7:b6:3d:34:97:96:5a:c3:f9:89:1b:93:a3:df:d3:52:8d: ae:24:64:77:19:27:69:3f:dc:73:57:59:c3:de:fd:fe:ce:2c: ae:9e:3e:7d:f7:01:49:dc:42:8a:91:de:45:db:8f:df:ec:10: 74:b7:19:d1:51:89:d4:4d:20:c5:c8:b9:81:5f:6c:2f:10:48: fa:55:de:cc -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt3WIDYxa/DqCNE6SCDRbcwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkMDYxOGJjMDBkOTExYTVkNWVlYmY5YzU4OTZhNDFiZjI4 OThlY2IwHhcNMjYwMTAxMDIxNzI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNmQ5YzVkZjNmZmE0MzljNGYxNjRlNWE2OGY3NDFmNDA1NzY1MWJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApmTf/iSz/v+pp2+ae/u4053hhVCA rTk1HiMk0Stn1h8+AetbgSbcfEhX46HYYAjqYzE9ZAB1pzmDGQNBEFo5V+t+YPHN MHgRuG9f0KY5MFsUqoJ2GQx2aadsrXcNkAHupt1PKabsYjGUI/PFQ4MzRnwwKH6U O6QFYocJ/PCYUvU0iwXYwMgrh6C9rKTX1BoRew0qhRoEK9knuLBeW6tZKKd6T5Tu xMf+2f5fs9uO91XQl3dkMhgiiFH7URiEJPuQ6N3GheG3Jjy6L+mrn/Ik9sjigQTv zDAgaDUDPxngLvaW0T+rMASQbkgDsBfOinZZUunQrykHipcWHc8hlXzJYwIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFAbZxd8/+kOcTxZOWmj3QfQFdlG9MB8GA1UdIwQY MBaAFK0GGLwA2RGl1e6/nFiWpBvyiY7LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvclFZWXZBRFpFYVhWN3ItY1dKYWtHX0tKanNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS85ZjM1ZTktYTE3YS00OGNkLTk0MDIt MzFkMjQ1ZjNiM2I4LzEvQnRuRjN6XzZRNXhQRms1YWFQZEI5QVYyVWIwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS85ZjM1ZTktYTE3YS00OGNkLTk0MDItMzFkMjQ1ZjNiM2I4 LzEvclFZWXZBRFpFYVhWN3ItY1dKYWtHX0tKanNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQBuRRMAwQC uU3oMA0EAgACMAcDBQAqAEngMA0GCSqGSIb3DQEBCwUAA4IBAQBjNapZgwGtXi+T /wjfuklndXYsqLB29l51SnDvR5G/aAc/ct5okLr5M74zjEX9zVVi+5jDFAjptJ8m 0jLe3T7PzcIUp8vBgk3/wpDqDp3YFUCY6R8MK6SZefGjJ7tHE1dQrcmfzvHpRU9h DS41n6Ao6bn6mxfhxvCp0RXFeHqOZt/mFdDOhcfEJADbsbHVkHd6hnxJ6kgQwGuh MTCP09bT1gGhl7ZQiqe+x0e9Mx+JnycivrEY97Y9NJeWWsP5iRuTo9/TUo2uJGR3 GSdpP9xzV1nD3v3+ziyunj599wFJ3EKKkd5F24/f7BB0txnRUYnUTSDFyLmBX2wv EEj6Vd7M -----END CERTIFICATE-----Generated at Mon Feb 9 22:15:59 2026 by rpki-client