This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/6f4bf4-f1aa-47e7-9df1-80070af0eb5e/1/BtVpbbRhTPSI_oH1xQFlA8VjaKU.roa File: BtVpbbRhTPSI_oH1xQFlA8VjaKU.roa (raw, json) Hash identifier: hu9eE1y2abyGZOSyCMK7xsTStFETWYiRnLL7jNqyXrA= Subject key identifier: 06:D5:69:6D:B4:61:4C:F4:88:FE:81:F5:C5:01:65:03:C5:63:68:A5 Certificate issuer: /CN=e5e7b034b4e7ca86d716b1140fca5b590f3e78c0 Certificate serial: 019B7AC8DF13C2AC4261658D8813B0506981 Authority key identifier: E5:E7:B0:34:B4:E7:CA:86:D7:16:B1:14:0F:CA:5B:59:0F:3E:78:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5eewNLTnyobXFrEUD8pbWQ8-eMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/6f4bf4-f1aa-47e7-9df1-80070af0eb5e/1/BtVpbbRhTPSI_oH1xQFlA8VjaKU.roa Signing time: Thu 01 Jan 2026 18:19:03 +0000 ROA not before: Thu 01 Jan 2026 18:19:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 38927 IP address blocks: 91.213.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/6f4bf4-f1aa-47e7-9df1-80070af0eb5e/1/5eewNLTnyobXFrEUD8pbWQ8-eMA.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/6f4bf4-f1aa-47e7-9df1-80070af0eb5e/1/5eewNLTnyobXFrEUD8pbWQ8-eMA.mft rsync://rpki.ripe.net/repository/DEFAULT/5eewNLTnyobXFrEUD8pbWQ8-eMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 06:01:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:df:13:c2:ac:42:61:65:8d:88:13:b0:50:69:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e5e7b034b4e7ca86d716b1140fca5b590f3e78c0 Validity Not Before: Jan 1 18:19:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=06d5696db4614cf488fe81f5c5016503c56368a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:7e:57:6c:d3:a5:de:ff:f0:d0:8d:4f:70:1b: b8:b2:98:d4:7b:5e:b8:0b:78:99:ba:de:bd:e0:56: 76:b4:d4:01:6d:dc:be:91:33:ce:5f:97:c7:63:4a: 3f:0d:58:a7:31:d9:12:84:10:d9:04:ff:9a:6a:d5: 7a:3b:a5:5a:7f:f7:e3:b3:d3:77:af:a9:62:73:16: 9f:79:2c:d7:a7:08:3a:38:dc:cc:12:4e:f7:05:eb: e6:63:0b:51:f3:78:e5:76:27:86:8f:fe:d5:76:37: 4e:bc:c6:d2:1c:c5:9f:bd:c2:33:c3:57:a2:3c:dc: 8f:95:67:ba:04:7f:62:47:fa:f9:1c:fc:5b:aa:ab: 57:78:1f:7c:40:55:b3:18:1f:00:4a:ce:dc:6c:41: cd:73:45:52:60:f0:2c:c2:87:43:f2:12:81:d7:10: cc:d5:c6:a5:be:49:46:d9:24:5e:ee:0e:4d:48:d7: d3:e1:75:88:0c:37:39:5e:28:a0:54:13:06:35:69: 92:33:69:ca:3d:7b:c2:a0:6b:d1:85:77:52:2a:b9: bf:28:57:b3:50:6b:ba:46:fb:41:ab:a1:08:62:4c: 66:9e:de:67:f4:79:96:bf:03:ab:7b:dd:2f:61:7b: eb:36:98:ea:c5:64:28:d9:b1:db:ad:cd:4f:07:de: 7e:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:D5:69:6D:B4:61:4C:F4:88:FE:81:F5:C5:01:65:03:C5:63:68:A5 X509v3 Authority Key Identifier: keyid:E5:E7:B0:34:B4:E7:CA:86:D7:16:B1:14:0F:CA:5B:59:0F:3E:78:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5eewNLTnyobXFrEUD8pbWQ8-eMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/6f4bf4-f1aa-47e7-9df1-80070af0eb5e/1/BtVpbbRhTPSI_oH1xQFlA8VjaKU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/6f4bf4-f1aa-47e7-9df1-80070af0eb5e/1/5eewNLTnyobXFrEUD8pbWQ8-eMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.213.232.0/24 Signature Algorithm: sha256WithRSAEncryption 08:38:0f:f2:5f:e4:80:31:fd:09:75:fd:67:c2:c6:d8:37:71: a9:7e:b0:d8:9a:fd:05:53:a7:be:b6:fb:06:2a:14:fc:80:35: 54:75:6e:69:4f:91:ec:59:c1:bb:2e:a5:3a:7a:f9:1e:4e:6e: cb:81:83:b0:1b:4d:db:5b:35:f6:b4:06:e7:fa:51:51:d6:d3: e2:1d:0a:35:8d:e5:7b:c8:ff:d4:e2:0d:9c:16:35:8b:c4:f3: af:eb:08:37:6d:06:60:53:ff:9a:d4:91:a1:14:ff:e1:46:23: f3:b7:24:84:9c:56:c1:10:8e:77:9d:64:ca:d6:d5:f3:b8:53: 3f:44:8d:5b:18:c2:83:51:f2:a7:6c:ab:03:ff:74:1a:b9:a3: 80:e6:08:98:c9:db:98:cb:e3:3d:fe:fb:82:55:43:db:13:d7: 8a:31:99:06:b9:65:ae:fe:02:f8:b1:b4:26:02:52:f1:e7:2a: a6:bb:61:73:39:ee:2a:ca:02:1f:f2:34:e8:eb:b8:05:ed:83: 11:4e:a6:44:e2:fc:53:b1:ec:65:59:7a:1f:84:73:c0:5c:e3: 57:e1:b8:2f:25:1a:a2:c3:b3:cd:8b:dd:ff:80:69:8f:c8:88: 74:5a:d0:ab:a4:3d:f3:b0:ab:dc:2c:da:04:ba:72:21:37:bd: 58:d2:7a:60 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yN8TwqxCYWWNiBOwUGmBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU1ZTdiMDM0YjRlN2NhODZkNzE2YjExNDBmY2E1YjU5MGYz ZTc4YzAwHhcNMjYwMTAxMTgxOTAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNmQ1Njk2ZGI0NjE0Y2Y0ODhmZTgxZjVjNTAxNjUwM2M1NjM2OGE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlH5XbNOl3v/w0I1PcBu4spjUe164 C3iZut694FZ2tNQBbdy+kTPOX5fHY0o/DVinMdkShBDZBP+aatV6O6Vaf/fjs9N3 r6licxafeSzXpwg6ONzMEk73BevmYwtR83jldieGj/7VdjdOvMbSHMWfvcIzw1ei PNyPlWe6BH9iR/r5HPxbqqtXeB98QFWzGB8ASs7cbEHNc0VSYPAswodD8hKB1xDM 1calvklG2SRe7g5NSNfT4XWIDDc5XiigVBMGNWmSM2nKPXvCoGvRhXdSKrm/KFez UGu6RvtBq6EIYkxmnt5n9HmWvwOre90vYXvrNpjqxWQo2bHbrc1PB95+DQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAbVaW20YUz0iP6B9cUBZQPFY2ilMB8GA1UdIwQY MBaAFOXnsDS058qG1xaxFA/KW1kPPnjAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNWVld05MVG55b2JYRnJFVUQ4cGJXUTgtZU1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS82ZjRiZjQtZjFhYS00N2U3LTlkZjEt ODAwNzBhZjBlYjVlLzEvQnRWcGJiUmhUUFNJX29IMXhRRmxBOFZqYUtVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS82ZjRiZjQtZjFhYS00N2U3LTlkZjEtODAwNzBhZjBlYjVl LzEvNWVld05MVG55b2JYRnJFVUQ4cGJXUTgtZU1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9XoMA0G CSqGSIb3DQEBCwUAA4IBAQAIOA/yX+SAMf0Jdf1nwsbYN3GpfrDYmv0FU6e+tvsG KhT8gDVUdW5pT5HsWcG7LqU6evkeTm7LgYOwG03bWzX2tAbn+lFR1tPiHQo1jeV7 yP/U4g2cFjWLxPOv6wg3bQZgU/+a1JGhFP/hRiPztySEnFbBEI53nWTK1tXzuFM/ RI1bGMKDUfKnbKsD/3QauaOA5giYyduYy+M9/vuCVUPbE9eKMZkGuWWu/gL4sbQm AlLx5yqmu2FzOe4qygIf8jTo67gF7YMRTqZE4vxTsexlWXofhHPAXONX4bgvJRqi w7PNi93/gGmPyIh0WtCrpD3zsKvcLNoEunIhN71Y0npg -----END CERTIFICATE-----Generated at Wed Jan 21 13:49:40 2026 by rpki-client