This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/c77825-68a3-4b3e-bc90-523fd86a07c7/1/BTQqaN3zxchRx-EpD2H2MNJ-ft4.roa File: BTQqaN3zxchRx-EpD2H2MNJ-ft4.roa (raw, json) Hash identifier: XV4ayQSd0b2rkVnEHjcvBGIgn52FBAArQFJOmYQB3pA= Subject key identifier: 05:34:2A:68:DD:F3:C5:C8:51:C7:E1:29:0F:61:F6:30:D2:7E:7E:DE Certificate issuer: /CN=53787cd7946e10d88646ac79de57cc6ec59e4132 Certificate serial: 019B76EB7E0A5460D8B1871C204FC62B8E0A Authority key identifier: 53:78:7C:D7:94:6E:10:D8:86:46:AC:79:DE:57:CC:6E:C5:9E:41:32 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U3h815RuENiGRqx53lfMbsWeQTI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/c77825-68a3-4b3e-bc90-523fd86a07c7/1/BTQqaN3zxchRx-EpD2H2MNJ-ft4.roa Signing time: Thu 01 Jan 2026 00:18:23 +0000 ROA not before: Thu 01 Jan 2026 00:18:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 185.54.124.0/24 maxlen: 24 185.54.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/c77825-68a3-4b3e-bc90-523fd86a07c7/1/U3h815RuENiGRqx53lfMbsWeQTI.crl rsync://rpki.ripe.net/repository/DEFAULT/df/c77825-68a3-4b3e-bc90-523fd86a07c7/1/U3h815RuENiGRqx53lfMbsWeQTI.mft rsync://rpki.ripe.net/repository/DEFAULT/U3h815RuENiGRqx53lfMbsWeQTI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 15:30:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:7e:0a:54:60:d8:b1:87:1c:20:4f:c6:2b:8e:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53787cd7946e10d88646ac79de57cc6ec59e4132 Validity Not Before: Jan 1 00:18:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=05342a68ddf3c5c851c7e1290f61f630d27e7ede Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:e9:e6:bb:31:17:a6:b1:3d:26:60:c7:4b:8b: d2:d9:62:11:84:b3:6d:1a:a8:0d:f9:47:aa:75:69: d2:20:25:65:f6:ae:f7:08:68:53:44:a9:5b:a6:b7: ce:fd:b9:01:8e:99:e2:99:71:7c:14:3a:48:f0:ab: de:eb:eb:eb:09:e3:1e:d2:e1:4f:7f:bf:a4:b2:50: 3b:09:73:79:21:5b:ef:db:7b:0d:b8:8d:be:ff:54: 4d:77:dd:31:0e:ce:1f:0a:1b:c6:26:0d:76:94:39: a4:48:65:c3:25:b1:ca:aa:02:94:b2:a8:c3:36:ea: 39:31:19:66:58:f4:c3:17:d0:ea:4b:82:d4:7b:16: 68:ad:e0:00:82:44:6a:14:9e:96:53:9a:e9:f5:99: b0:81:55:52:27:7e:03:bb:88:e3:ac:a1:02:6e:eb: ee:d8:eb:e9:87:a2:77:bd:ff:54:2e:46:42:de:3e: 6d:01:e5:8f:db:0d:e6:73:5d:63:ed:26:66:df:14: b8:02:e0:bc:02:31:88:59:03:ba:ac:7a:b0:07:ab: 90:09:f4:ab:41:1f:c2:0e:f8:6a:07:31:77:a0:5f: 30:eb:e4:94:76:8d:3f:2f:9d:46:0c:43:66:28:14: fb:f1:82:5e:e2:81:83:4a:42:d5:1a:c7:ff:9a:69: 04:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:34:2A:68:DD:F3:C5:C8:51:C7:E1:29:0F:61:F6:30:D2:7E:7E:DE X509v3 Authority Key Identifier: keyid:53:78:7C:D7:94:6E:10:D8:86:46:AC:79:DE:57:CC:6E:C5:9E:41:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U3h815RuENiGRqx53lfMbsWeQTI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/c77825-68a3-4b3e-bc90-523fd86a07c7/1/BTQqaN3zxchRx-EpD2H2MNJ-ft4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/c77825-68a3-4b3e-bc90-523fd86a07c7/1/U3h815RuENiGRqx53lfMbsWeQTI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.54.124.0/24 185.54.126.0/24 Signature Algorithm: sha256WithRSAEncryption b9:14:b7:a6:11:74:31:e0:67:20:27:44:d5:d4:69:42:e2:12: 29:87:0f:bd:b7:d4:f4:92:63:d5:c8:19:fb:ce:cf:ad:de:3d: 27:8b:43:95:fa:31:0c:ec:39:a4:2d:d9:98:72:b2:7b:02:1f: 6b:bf:a2:05:98:4e:5d:27:d1:1e:02:8b:10:1d:36:cf:77:02: 3a:9a:ce:14:01:84:3a:9b:20:cd:1e:2f:81:a4:3b:06:09:79: d4:da:e2:81:42:d7:7e:28:09:2d:bf:87:c0:03:de:14:4f:c9: 7c:03:14:8d:6a:48:63:91:83:77:d6:00:58:79:e1:4e:63:a8: 2e:bf:41:71:f1:6d:ce:0e:16:31:96:8b:2d:ce:0e:ab:68:4c: 08:9b:56:89:a4:37:39:f0:74:0a:bc:59:d4:9c:56:5b:0d:a4: 32:5f:2b:3b:47:cb:16:92:c3:05:cb:32:d1:ba:1f:83:a5:21: dc:81:6a:54:b9:11:29:44:3d:7c:4f:59:00:da:f8:75:be:df: e8:bc:70:ca:3a:e3:31:2e:c4:d3:a4:35:31:11:a6:a9:e0:34: 69:c7:ff:40:59:34:44:fc:22:85:3f:bd:e9:0e:92:49:c2:1a: 9f:92:85:15:35:eb:3f:34:c6:3b:c0:e5:56:fb:4d:20:b9:db: d3:7f:91:5f -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt2634KVGDYsYccIE/GK44KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzNzg3Y2Q3OTQ2ZTEwZDg4NjQ2YWM3OWRlNTdjYzZlYzU5 ZTQxMzIwHhcNMjYwMTAxMDAxODIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNTM0MmE2OGRkZjNjNWM4NTFjN2UxMjkwZjYxZjYzMGQyN2U3ZWRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAounmuzEXprE9JmDHS4vS2WIRhLNt GqgN+UeqdWnSICVl9q73CGhTRKlbprfO/bkBjpnimXF8FDpI8Kve6+vrCeMe0uFP f7+kslA7CXN5IVvv23sNuI2+/1RNd90xDs4fChvGJg12lDmkSGXDJbHKqgKUsqjD Nuo5MRlmWPTDF9DqS4LUexZoreAAgkRqFJ6WU5rp9ZmwgVVSJ34Du4jjrKECbuvu 2Ovph6J3vf9ULkZC3j5tAeWP2w3mc11j7SZm3xS4AuC8AjGIWQO6rHqwB6uQCfSr QR/CDvhqBzF3oF8w6+SUdo0/L51GDENmKBT78YJe4oGDSkLVGsf/mmkEOwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFAU0Kmjd88XIUcfhKQ9h9jDSfn7eMB8GA1UdIwQY MBaAFFN4fNeUbhDYhkased5XzG7FnkEyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVTNoODE1UnVFTmlHUnF4NTNsZk1ic1dlUVRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9jNzc4MjUtNjhhMy00YjNlLWJjOTAt NTIzZmQ4NmEwN2M3LzEvQlRRcWFOM3p4Y2hSeC1FcEQySDJNTkotZnQ0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi9jNzc4MjUtNjhhMy00YjNlLWJjOTAtNTIzZmQ4NmEwN2M3 LzEvVTNoODE1UnVFTmlHUnF4NTNsZk1ic1dlUVRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAuTZ8AwQA uTZ+MA0GCSqGSIb3DQEBCwUAA4IBAQC5FLemEXQx4GcgJ0TV1GlC4hIphw+9t9T0 kmPVyBn7zs+t3j0ni0OV+jEM7DmkLdmYcrJ7Ah9rv6IFmE5dJ9EeAosQHTbPdwI6 ms4UAYQ6myDNHi+BpDsGCXnU2uKBQtd+KAktv4fAA94UT8l8AxSNakhjkYN31gBY eeFOY6guv0Fx8W3ODhYxlostzg6raEwIm1aJpDc58HQKvFnUnFZbDaQyXys7R8sW ksMFyzLRuh+DpSHcgWpUuREpRD18T1kA2vh1vt/ovHDKOuMxLsTTpDUxEaap4DRp x/9AWTRE/CKFP73pDpJJwhqfkoUVNes/NMY7wOVW+00gudvTf5Ff -----END CERTIFICATE-----Generated at Wed Jan 7 23:47:45 2026 by rpki-client