This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/fad672-e93a-4dd5-8893-efc175029740/1/CDyO9jxGLeWnKi1oYro8zSOZ6J8.roa File: CDyO9jxGLeWnKi1oYro8zSOZ6J8.roa (raw, json) Hash identifier: DGs9MBH9WSDg0RygkGFz7r1uMcCMHw3eINfD0pYmxrk= Subject key identifier: 08:3C:8E:F6:3C:46:2D:E5:A7:2A:2D:68:62:BA:3C:CD:23:99:E8:9F Certificate issuer: /CN=053f8469ec62520987896d8926c17228a7bcfb3d Certificate serial: 019B7910482AA2E400905E125C96D1116B30 Authority key identifier: 05:3F:84:69:EC:62:52:09:87:89:6D:89:26:C1:72:28:A7:BC:FB:3D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BT-EaexiUgmHiW2JJsFyKKe8-z0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/fad672-e93a-4dd5-8893-efc175029740/1/CDyO9jxGLeWnKi1oYro8zSOZ6J8.roa Signing time: Thu 01 Jan 2026 10:17:48 +0000 ROA not before: Thu 01 Jan 2026 10:17:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 196629 IP address blocks: 91.207.218.0/24 maxlen: 24 91.207.219.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/fad672-e93a-4dd5-8893-efc175029740/1/BT-EaexiUgmHiW2JJsFyKKe8-z0.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/fad672-e93a-4dd5-8893-efc175029740/1/BT-EaexiUgmHiW2JJsFyKKe8-z0.mft rsync://rpki.ripe.net/repository/DEFAULT/BT-EaexiUgmHiW2JJsFyKKe8-z0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:48:2a:a2:e4:00:90:5e:12:5c:96:d1:11:6b:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=053f8469ec62520987896d8926c17228a7bcfb3d Validity Not Before: Jan 1 10:17:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=083c8ef63c462de5a72a2d6862ba3ccd2399e89f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:de:4f:1d:0b:6f:78:7c:e4:f7:73:4c:ab:ce: 78:c7:1c:65:97:7f:17:ff:5e:66:d6:73:d5:b3:ff: 1a:6d:63:d9:a4:20:b2:80:bd:ef:97:c3:94:2f:e2: 9e:0f:96:30:79:85:8a:23:35:c1:bc:0c:4a:0d:ba: 62:fa:d8:93:21:f7:0b:7e:4c:df:98:57:d8:1f:d7: 3e:c0:9e:a7:ad:0b:32:3e:4d:95:02:62:5e:70:cf: bd:a8:66:7d:b8:c5:5b:3b:aa:3c:34:86:bf:b0:e5: b4:62:39:70:e8:3c:0c:b9:33:a0:5d:59:f3:a7:12: c4:9f:d0:c4:7d:1b:1f:ff:2b:cb:68:f2:83:d8:59: 90:0d:a2:3e:3a:e6:7e:66:06:1e:df:4d:58:1d:96: 21:02:5d:53:aa:88:ae:9a:c6:f6:db:82:1d:ef:7b: 51:ad:d8:89:e0:3a:e1:39:7a:81:a2:54:a8:07:af: 01:4a:9e:c9:d4:98:dd:d5:24:c5:d5:e6:48:81:d8: cf:9b:15:54:7e:a1:b8:37:76:d6:99:af:47:94:05: 2c:dc:fd:89:04:92:38:ae:bb:96:7c:d7:30:8f:6d: 69:23:1d:b8:73:c6:28:7e:3a:d9:c4:a8:14:f4:44: 68:c5:77:d4:0f:59:1c:21:b6:1c:f7:fc:d0:e3:8e: 3e:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:3C:8E:F6:3C:46:2D:E5:A7:2A:2D:68:62:BA:3C:CD:23:99:E8:9F X509v3 Authority Key Identifier: keyid:05:3F:84:69:EC:62:52:09:87:89:6D:89:26:C1:72:28:A7:BC:FB:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BT-EaexiUgmHiW2JJsFyKKe8-z0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/fad672-e93a-4dd5-8893-efc175029740/1/CDyO9jxGLeWnKi1oYro8zSOZ6J8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/fad672-e93a-4dd5-8893-efc175029740/1/BT-EaexiUgmHiW2JJsFyKKe8-z0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.207.218.0/23 Signature Algorithm: sha256WithRSAEncryption 8b:e2:02:3b:96:1c:f9:df:cc:20:db:f5:a4:fc:da:ff:6f:25: fc:56:22:5c:dc:60:37:64:6f:c6:05:9e:23:65:68:12:a7:9b: 6a:03:f8:0a:15:93:ae:d2:c6:d3:91:4e:f0:06:b4:56:67:bb: 6a:6a:76:58:1d:58:b2:f8:36:7d:4d:79:45:b4:e2:bf:cf:2f: d0:15:ef:dd:f5:b6:ef:0e:3d:a5:f8:17:ed:b5:02:cb:e1:ee: 91:7a:31:4c:c6:f2:7f:f2:8c:df:f0:51:c7:3e:08:55:1d:f4: 77:75:4e:d7:77:8a:00:41:05:7d:24:39:b1:2f:5d:a0:6b:55: f1:74:c3:c8:bf:30:e7:c3:e7:f7:ed:ca:cd:55:ed:5d:38:3c: 47:bf:4e:e2:c6:e8:0c:35:67:74:84:c2:be:14:61:56:b4:0a: 05:d9:37:7b:b5:a9:a4:d0:73:05:bc:fb:59:ff:3b:2d:cc:07: b4:d1:54:b3:fd:4d:a6:8c:8b:5e:67:52:6a:0d:18:df:77:0e: 86:3b:13:56:ae:6d:5b:c4:a7:d8:31:6c:c6:06:a3:69:ca:56: 61:30:7e:1d:6b:b6:d1:78:e4:33:f0:6f:25:5e:9c:3d:23:1a: 54:0a:f6:3a:8e:8c:54:4b:8b:59:f6:d4:75:49:b7:a1:74:74: 2e:c9:6f:13 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EEgqouQAkF4SXJbREWswMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1M2Y4NDY5ZWM2MjUyMDk4Nzg5NmQ4OTI2YzE3MjI4YTdi Y2ZiM2QwHhcNMjYwMTAxMTAxNzQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwODNjOGVmNjNjNDYyZGU1YTcyYTJkNjg2MmJhM2NjZDIzOTllODlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlN5PHQtveHzk93NMq854xxxll38X /15m1nPVs/8abWPZpCCygL3vl8OUL+KeD5YweYWKIzXBvAxKDbpi+tiTIfcLfkzf mFfYH9c+wJ6nrQsyPk2VAmJecM+9qGZ9uMVbO6o8NIa/sOW0Yjlw6DwMuTOgXVnz pxLEn9DEfRsf/yvLaPKD2FmQDaI+OuZ+ZgYe301YHZYhAl1Tqoiumsb224Id73tR rdiJ4DrhOXqBolSoB68BSp7J1Jjd1STF1eZIgdjPmxVUfqG4N3bWma9HlAUs3P2J BJI4rruWfNcwj21pIx24c8YofjrZxKgU9ERoxXfUD1kcIbYc9/zQ444+3wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAg8jvY8Ri3lpyotaGK6PM0jmeifMB8GA1UdIwQY MBaAFAU/hGnsYlIJh4ltiSbBciinvPs9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlQtRWFleGlVZ21IaVcySkpzRnlLS2U4LXowLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi9mYWQ2NzItZTkzYS00ZGQ1LTg4OTMt ZWZjMTc1MDI5NzQwLzEvQ0R5TzlqeEdMZVduS2kxb1lybzh6U09aNko4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi9mYWQ2NzItZTkzYS00ZGQ1LTg4OTMtZWZjMTc1MDI5NzQw LzEvQlQtRWFleGlVZ21IaVcySkpzRnlLS2U4LXowLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBW8/aMA0G CSqGSIb3DQEBCwUAA4IBAQCL4gI7lhz538wg2/Wk/Nr/byX8ViJc3GA3ZG/GBZ4j ZWgSp5tqA/gKFZOu0sbTkU7wBrRWZ7tqanZYHViy+DZ9TXlFtOK/zy/QFe/d9bbv Dj2l+BfttQLL4e6RejFMxvJ/8ozf8FHHPghVHfR3dU7Xd4oAQQV9JDmxL12ga1Xx dMPIvzDnw+f37crNVe1dODxHv07ixugMNWd0hMK+FGFWtAoF2Td7tamk0HMFvPtZ /zstzAe00VSz/U2mjIteZ1JqDRjfdw6GOxNWrm1bxKfYMWzGBqNpylZhMH4da7bR eOQz8G8lXpw9IxpUCvY6joxUS4tZ9tR1SbehdHQuyW8T -----END CERTIFICATE-----Generated at Tue Feb 10 00:14:46 2026 by rpki-client