This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/fad672-e93a-4dd5-8893-efc175029740/1/zNSZogebh91OuVEeY5zQNX0A5Ic.roa File: zNSZogebh91OuVEeY5zQNX0A5Ic.roa (raw, json) Hash identifier: 2eN5NFfRRB29QtCtsqn2i6PCdLwZTn0MMIEPVRBBMcw= Subject key identifier: CC:D4:99:A2:07:9B:87:DD:4E:B9:51:1E:63:9C:D0:35:7D:00:E4:87 Certificate issuer: /CN=053f8469ec62520987896d8926c17228a7bcfb3d Certificate serial: 019B7910486E1BD55D56C32796D81B674F93 Authority key identifier: 05:3F:84:69:EC:62:52:09:87:89:6D:89:26:C1:72:28:A7:BC:FB:3D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BT-EaexiUgmHiW2JJsFyKKe8-z0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/fad672-e93a-4dd5-8893-efc175029740/1/zNSZogebh91OuVEeY5zQNX0A5Ic.roa Signing time: Thu 01 Jan 2026 10:17:48 +0000 ROA not before: Thu 01 Jan 2026 10:17:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197015 IP address blocks: 91.219.140.0/22 maxlen: 22 91.221.6.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/fad672-e93a-4dd5-8893-efc175029740/1/BT-EaexiUgmHiW2JJsFyKKe8-z0.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/fad672-e93a-4dd5-8893-efc175029740/1/BT-EaexiUgmHiW2JJsFyKKe8-z0.mft rsync://rpki.ripe.net/repository/DEFAULT/BT-EaexiUgmHiW2JJsFyKKe8-z0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:48:6e:1b:d5:5d:56:c3:27:96:d8:1b:67:4f:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=053f8469ec62520987896d8926c17228a7bcfb3d Validity Not Before: Jan 1 10:17:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ccd499a2079b87dd4eb9511e639cd0357d00e487 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:6a:21:a9:08:cf:84:87:25:0a:dc:53:c0:8a: 66:1a:2d:83:ed:35:fe:1a:51:ec:46:94:11:68:c1: 80:97:56:4e:3e:40:f5:85:14:a1:b0:32:5b:f5:8b: 11:57:67:fd:47:57:4a:9f:2c:c5:4e:c6:6b:5e:c0: 48:fc:5d:fe:e1:81:e3:67:91:92:77:27:ec:ec:8a: 44:3e:28:5a:46:da:ac:70:10:a1:14:f0:c9:6c:f2: b7:0d:4f:eb:11:96:59:b5:5f:ec:6f:50:ff:4d:85: 6a:55:35:9e:fc:5f:2a:94:94:99:05:cb:ea:18:28: de:98:1d:09:eb:23:6f:9c:72:70:9e:76:df:0d:21: 2c:49:14:af:f6:51:22:00:4b:91:ad:80:36:24:27: 6a:ce:e3:9d:48:66:38:a3:47:8a:6f:49:24:66:ac: ff:b2:f1:d0:58:00:b5:cc:08:dc:a2:47:03:f6:16: c1:81:b4:41:16:f5:a4:1c:6f:a4:ac:0b:1c:d1:7a: e0:d3:f3:4a:16:35:16:94:29:5a:07:f3:d5:2e:a9: b0:fd:bb:0d:01:0f:a4:ef:5b:7f:6d:b8:4d:0a:c7: ea:27:da:22:b6:a1:e0:31:c4:97:ff:17:03:a3:95: e9:3f:41:5e:dc:96:7d:af:82:98:0c:00:7d:f5:17: 6f:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:D4:99:A2:07:9B:87:DD:4E:B9:51:1E:63:9C:D0:35:7D:00:E4:87 X509v3 Authority Key Identifier: keyid:05:3F:84:69:EC:62:52:09:87:89:6D:89:26:C1:72:28:A7:BC:FB:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BT-EaexiUgmHiW2JJsFyKKe8-z0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/fad672-e93a-4dd5-8893-efc175029740/1/zNSZogebh91OuVEeY5zQNX0A5Ic.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/fad672-e93a-4dd5-8893-efc175029740/1/BT-EaexiUgmHiW2JJsFyKKe8-z0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.219.140.0/22 91.221.6.0/23 Signature Algorithm: sha256WithRSAEncryption 71:1c:fa:9e:e2:97:5f:5a:d6:7a:ab:87:9c:23:7f:4f:54:c5: 4c:c9:b7:4a:d4:15:5e:58:2c:be:0b:87:56:1a:2a:01:6f:16: 25:4e:bf:b1:30:3a:9b:bc:04:72:d5:f7:1d:80:a6:cc:af:97: 6b:a2:e2:90:8b:7d:26:9e:46:1d:68:50:ba:3c:04:5d:f8:ee: 2d:c9:a1:ae:9a:40:35:8a:83:e2:ad:23:27:86:81:55:33:38: 7d:48:66:f7:e7:1f:fb:76:7e:aa:2b:b6:90:70:1f:a9:cb:98: 2e:c1:95:0a:dd:14:21:3e:8a:77:77:bd:e3:2c:2f:ff:a6:42: 9e:37:fb:b3:29:6e:3e:10:b2:10:97:f7:0b:b4:95:63:73:0b: 61:40:76:45:9d:4d:ac:c6:6a:e8:cc:3c:28:72:ce:ce:d1:8e: bc:77:cc:68:1e:ae:90:6a:bc:44:d7:3d:f4:ae:0a:f8:90:d5: 2d:e7:df:26:05:79:77:77:e5:99:c6:ca:32:4c:d0:12:3b:da: 24:2c:ee:4a:11:21:e5:b7:88:c2:62:4b:17:be:64:0d:16:7e: 9e:b3:a8:1f:cf:3d:40:b7:f3:03:21:b0:5a:b9:e5:e5:e3:8c: 22:1d:84:85:d1:97:12:be:69:0b:75:ca:9d:37:42:2e:e8:04: a4:a8:07:25 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt5EEhuG9VdVsMnltgbZ0+TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1M2Y4NDY5ZWM2MjUyMDk4Nzg5NmQ4OTI2YzE3MjI4YTdi Y2ZiM2QwHhcNMjYwMTAxMTAxNzQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjY2Q0OTlhMjA3OWI4N2RkNGViOTUxMWU2MzljZDAzNTdkMDBlNDg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2mohqQjPhIclCtxTwIpmGi2D7TX+ GlHsRpQRaMGAl1ZOPkD1hRShsDJb9YsRV2f9R1dKnyzFTsZrXsBI/F3+4YHjZ5GS dyfs7IpEPihaRtqscBChFPDJbPK3DU/rEZZZtV/sb1D/TYVqVTWe/F8qlJSZBcvq GCjemB0J6yNvnHJwnnbfDSEsSRSv9lEiAEuRrYA2JCdqzuOdSGY4o0eKb0kkZqz/ svHQWAC1zAjcokcD9hbBgbRBFvWkHG+krAsc0Xrg0/NKFjUWlClaB/PVLqmw/bsN AQ+k71t/bbhNCsfqJ9oitqHgMcSX/xcDo5XpP0Fe3JZ9r4KYDAB99RdvBwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFMzUmaIHm4fdTrlRHmOc0DV9AOSHMB8GA1UdIwQY MBaAFAU/hGnsYlIJh4ltiSbBciinvPs9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlQtRWFleGlVZ21IaVcySkpzRnlLS2U4LXowLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi9mYWQ2NzItZTkzYS00ZGQ1LTg4OTMt ZWZjMTc1MDI5NzQwLzEvek5TWm9nZWJoOTFPdVZFZVk1elFOWDBBNUljLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi9mYWQ2NzItZTkzYS00ZGQ1LTg4OTMtZWZjMTc1MDI5NzQw LzEvQlQtRWFleGlVZ21IaVcySkpzRnlLS2U4LXowLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCW9uMAwQB W90GMA0GCSqGSIb3DQEBCwUAA4IBAQBxHPqe4pdfWtZ6q4ecI39PVMVMybdK1BVe WCy+C4dWGioBbxYlTr+xMDqbvARy1fcdgKbMr5drouKQi30mnkYdaFC6PARd+O4t yaGumkA1ioPirSMnhoFVMzh9SGb35x/7dn6qK7aQcB+py5guwZUK3RQhPop3d73j LC//pkKeN/uzKW4+ELIQl/cLtJVjcwthQHZFnU2sxmrozDwocs7O0Y68d8xoHq6Q arxE1z30rgr4kNUt598mBXl3d+WZxsoyTNASO9okLO5KESHlt4jCYksXvmQNFn6e s6gfzz1At/MDIbBaueXl44wiHYSF0ZcSvmkLdcqdN0Iu6ASkqAcl -----END CERTIFICATE-----Generated at Tue Feb 10 00:14:47 2026 by rpki-client