This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/bty_gOFaFOv2SDVjKB3QYZQX69k.roa File: bty_gOFaFOv2SDVjKB3QYZQX69k.roa (raw, json) Hash identifier: nbCQSxY7zUDojLUvJeNhMU+TUymfcvL81ieLp3P+RLg= Subject key identifier: 6E:DC:BF:80:E1:5A:14:EB:F6:48:35:63:28:1D:D0:61:94:17:EB:D9 Certificate issuer: /CN=cfcead390625edba1408108df57cea47160d70e5 Certificate serial: 019B7C801DFF4AFC28C4DBEB01F14BB487D0 Authority key identifier: CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/bty_gOFaFOv2SDVjKB3QYZQX69k.roa Signing time: Fri 02 Jan 2026 02:18:49 +0000 ROA not before: Fri 02 Jan 2026 02:18:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 151331 IP address blocks: 2a0f:7802:e000::/39 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.mft rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 14:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:1d:ff:4a:fc:28:c4:db:eb:01:f1:4b:b4:87:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cfcead390625edba1408108df57cea47160d70e5 Validity Not Before: Jan 2 02:18:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6edcbf80e15a14ebf6483563281dd0619417ebd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:db:e8:a0:7b:ca:8b:34:36:bf:db:df:c3:87: 50:ad:a0:dc:ea:a2:90:48:d7:93:66:d4:35:94:2a: f9:05:00:47:61:4b:63:25:9a:d8:83:d2:4c:9f:7a: 12:9d:d2:16:8e:d8:06:54:0e:61:ac:70:1e:66:b3: f7:84:6e:51:52:98:5c:b6:05:6a:39:d8:19:b9:b8: 89:4c:46:d1:46:86:bd:d0:3c:9d:e0:16:02:ad:c9: b8:f5:c0:06:97:22:c4:0c:8b:63:6d:d1:52:15:aa: 0f:70:7d:35:7f:ad:8d:f9:e4:27:dc:b9:98:3b:09: 50:18:36:e7:a0:87:b3:2d:37:73:64:62:06:dc:c3: 11:95:18:a2:df:1e:4b:d6:d9:71:65:cf:bc:df:9c: 02:47:3b:6e:5d:02:fa:75:f0:88:1f:98:f7:97:88: 60:77:d5:99:6c:47:11:75:24:2d:e9:9d:64:2b:ca: 60:27:93:27:ec:2c:0f:64:aa:d8:80:11:4e:35:30: 5a:1b:83:0d:ff:b3:b0:a2:14:76:d6:91:da:04:90: 6c:76:03:f8:08:1c:a0:0c:1b:ea:82:cb:c6:fa:9f: b9:fc:a1:48:22:cb:34:ed:a5:37:61:b8:02:f8:08: e3:73:fd:96:a0:a3:85:6b:29:5f:08:e1:63:b2:d8: 33:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:DC:BF:80:E1:5A:14:EB:F6:48:35:63:28:1D:D0:61:94:17:EB:D9 X509v3 Authority Key Identifier: keyid:CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/bty_gOFaFOv2SDVjKB3QYZQX69k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:7802:e000::/39 Signature Algorithm: sha256WithRSAEncryption 6f:7c:69:b5:48:07:65:89:59:65:6b:4f:34:7b:66:c5:6c:fe: aa:a7:3a:bd:bd:50:5a:22:12:74:9d:da:88:06:43:cc:ac:21: cf:b4:27:da:28:89:d5:1c:8a:e1:7d:17:f4:8a:37:f9:ab:92: eb:f6:24:92:e1:3d:d3:99:ae:70:11:7e:26:9b:2c:89:b9:c6: d2:4d:3d:ee:9e:86:18:a3:29:c1:75:5b:6e:04:a5:78:53:57: 4b:bc:bb:00:44:fe:9e:b1:e3:7c:7e:bf:fe:c4:0a:fa:6e:2b: 20:7b:37:92:e1:93:58:0d:04:2a:0d:55:75:e5:59:3a:c4:39: 28:93:3d:0b:51:83:73:70:44:28:6a:cc:71:e9:43:5f:51:74: 61:79:c7:14:06:22:fb:63:01:48:d7:2a:30:04:bc:2a:4a:80: d0:6a:4c:8d:e2:84:e3:0d:b0:1e:8d:ab:69:25:33:70:f5:4c: d8:b0:89:f6:51:24:4b:0a:c8:80:ee:d5:40:e0:83:ce:49:cf: af:e8:2c:e8:b7:15:0c:9f:d8:05:c1:cd:ff:30:ca:09:5b:41: 7f:b0:59:a5:c3:9e:ac:ad:01:ab:c0:d3:c4:34:6b:09:4e:0c: eb:cf:57:dc:84:b1:9c:f1:05:32:87:9a:7b:8f:ed:57:63:ee: 61:b1:06:1a -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt8gB3/SvwoxNvrAfFLtIfQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmY2VhZDM5MDYyNWVkYmExNDA4MTA4ZGY1N2NlYTQ3MTYw ZDcwZTUwHhcNMjYwMTAyMDIxODQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZWRjYmY4MGUxNWExNGViZjY0ODM1NjMyODFkZDA2MTk0MTdlYmQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm9vooHvKizQ2v9vfw4dQraDc6qKQ SNeTZtQ1lCr5BQBHYUtjJZrYg9JMn3oSndIWjtgGVA5hrHAeZrP3hG5RUphctgVq OdgZubiJTEbRRoa90Dyd4BYCrcm49cAGlyLEDItjbdFSFaoPcH01f62N+eQn3LmY OwlQGDbnoIezLTdzZGIG3MMRlRii3x5L1tlxZc+835wCRztuXQL6dfCIH5j3l4hg d9WZbEcRdSQt6Z1kK8pgJ5Mn7CwPZKrYgBFONTBaG4MN/7OwohR21pHaBJBsdgP4 CBygDBvqgsvG+p+5/KFIIss07aU3YbgC+Ajjc/2WoKOFaylfCOFjstgzzwIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFG7cv4DhWhTr9kg1Yygd0GGUF+vZMB8GA1UdIwQY MBaAFM/OrTkGJe26FAgQjfV86kcWDXDlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejg2dE9RWWw3Ym9VQ0JDTjlYenFSeFlOY09VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9jNDY0N2EtNjA0Mi00ZmU4LWEyNzYt ZjViNmE3MThmNGI1LzEvYnR5X2dPRmFGT3YyU0RWaktCM1FZWlFYNjlrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS9jNDY0N2EtNjA0Mi00ZmU4LWEyNzYtZjViNmE3MThmNGI1 LzEvejg2dE9RWWw3Ym9VQ0JDTjlYenFSeFlOY09VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYBKg94AuAw DQYJKoZIhvcNAQELBQADggEBAG98abVIB2WJWWVrTzR7ZsVs/qqnOr29UFoiEnSd 2ogGQ8ysIc+0J9ooidUciuF9F/SKN/mrkuv2JJLhPdOZrnARfiabLIm5xtJNPe6e hhijKcF1W24EpXhTV0u8uwBE/p6x43x+v/7ECvpuKyB7N5Lhk1gNBCoNVXXlWTrE OSiTPQtRg3NwRChqzHHpQ19RdGF5xxQGIvtjAUjXKjAEvCpKgNBqTI3ihOMNsB6N q2klM3D1TNiwifZRJEsKyIDu1UDgg85Jz6/oLOi3FQyf2AXBzf8wyglbQX+wWaXD nqytAavA08Q0awlODOvPV9yEsZzxBTKHmnuP7Vdj7mGxBho= -----END CERTIFICATE-----Generated at Wed Jan 21 16:57:11 2026 by rpki-client