This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/cd8fe8-8c08-46b2-b57d-fd664f032980/1/bfthD07WPuBzuF8V8MFMquzZVxc.roa File: bfthD07WPuBzuF8V8MFMquzZVxc.roa (raw, json) Hash identifier: TQL/YwkJgVnHTckXmWXUYr+a7nIsqs2yfinw/Sf17kw= Subject key identifier: 6D:FB:61:0F:4E:D6:3E:E0:73:B8:5F:15:F0:C1:4C:AA:EC:D9:57:17 Certificate issuer: /CN=50b6fee0e7a14c7e1d38609d9bc3c2efccaf33ac Certificate serial: 019B7758771428440C59315CC2840B2698C9 Authority key identifier: 50:B6:FE:E0:E7:A1:4C:7E:1D:38:60:9D:9B:C3:C2:EF:CC:AF:33:AC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ULb-4OehTH4dOGCdm8PC78yvM6w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/cd8fe8-8c08-46b2-b57d-fd664f032980/1/bfthD07WPuBzuF8V8MFMquzZVxc.roa Signing time: Thu 01 Jan 2026 02:17:24 +0000 ROA not before: Thu 01 Jan 2026 02:17:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51292 IP address blocks: 91.230.26.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/cd8fe8-8c08-46b2-b57d-fd664f032980/1/ULb-4OehTH4dOGCdm8PC78yvM6w.crl rsync://rpki.ripe.net/repository/DEFAULT/ec/cd8fe8-8c08-46b2-b57d-fd664f032980/1/ULb-4OehTH4dOGCdm8PC78yvM6w.mft rsync://rpki.ripe.net/repository/DEFAULT/ULb-4OehTH4dOGCdm8PC78yvM6w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:77:14:28:44:0c:59:31:5c:c2:84:0b:26:98:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50b6fee0e7a14c7e1d38609d9bc3c2efccaf33ac Validity Not Before: Jan 1 02:17:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6dfb610f4ed63ee073b85f15f0c14caaecd95717 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:a9:92:9f:95:1f:83:f2:54:b5:24:cb:ff:9c: 2b:fc:2b:52:bf:38:ea:a9:56:60:c7:e7:a4:41:ce: 69:15:74:47:b6:7f:78:36:c1:06:4b:ce:7b:fc:0d: 44:d2:c3:7c:f3:c4:16:c2:f9:64:aa:30:9e:35:0e: 41:a2:7d:b5:99:c5:e6:9b:bb:da:f0:93:d0:f5:5d: 6e:8b:fe:d3:63:c5:22:37:6f:97:d5:58:16:1a:e7: 7b:fa:9a:c2:7f:d0:92:5b:85:7f:ee:8f:71:5b:9b: 32:8d:e7:fc:e7:ef:7f:e7:29:61:d8:17:d0:3a:da: 9d:ac:2a:80:c8:68:e3:3c:8a:93:2e:2b:5e:2f:03: 36:a7:40:94:cd:59:79:24:d0:98:b4:16:61:ea:d9: 2d:87:98:bf:6c:38:8c:66:41:0d:2e:cd:aa:4c:f5: 15:45:15:20:d6:4d:f6:79:52:0f:3e:ef:3a:71:8d: e6:3f:f9:e2:40:d5:a6:3b:b6:f8:03:82:83:db:04: 9e:e1:54:b5:ff:72:5d:22:4b:33:5a:88:40:13:8b: 19:d3:8d:e9:36:aa:95:75:53:5a:b8:5b:c8:55:7a: 24:68:67:61:37:56:d5:a6:9e:e0:9c:e5:b2:1c:31: aa:bd:1f:35:2e:64:34:85:6d:48:00:a4:3b:49:57: 6d:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:FB:61:0F:4E:D6:3E:E0:73:B8:5F:15:F0:C1:4C:AA:EC:D9:57:17 X509v3 Authority Key Identifier: keyid:50:B6:FE:E0:E7:A1:4C:7E:1D:38:60:9D:9B:C3:C2:EF:CC:AF:33:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ULb-4OehTH4dOGCdm8PC78yvM6w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/cd8fe8-8c08-46b2-b57d-fd664f032980/1/bfthD07WPuBzuF8V8MFMquzZVxc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/cd8fe8-8c08-46b2-b57d-fd664f032980/1/ULb-4OehTH4dOGCdm8PC78yvM6w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.230.26.0/24 Signature Algorithm: sha256WithRSAEncryption d7:63:ec:f8:ce:6e:43:20:84:7d:24:a0:da:ab:e3:52:8e:9f: 4b:a8:e0:bc:51:ec:15:75:68:a7:45:fc:b1:1d:6e:5e:2a:20: f7:53:66:1a:2f:2e:29:5f:f0:a8:d1:57:b6:93:f7:ff:95:2c: c7:b3:85:a7:ea:1b:1d:47:f4:2f:17:c6:8b:70:4b:19:cf:f0: c8:0c:86:6c:ac:89:25:c3:34:9f:d0:9c:74:b5:88:30:ff:2b: 04:81:6e:cb:70:a9:8a:f1:5e:0f:65:06:89:a7:8f:71:35:08: a8:ed:d7:65:26:aa:e8:36:09:c4:aa:78:fe:35:aa:0a:80:05: 04:13:0a:22:c7:68:f4:8d:45:cf:7e:f1:92:d8:5d:78:4a:dc: 36:07:d3:0e:4e:9d:9c:47:53:d8:f8:ad:12:12:9a:83:a3:30: a7:5c:bc:0d:46:dc:8d:20:3f:ea:e3:18:3f:13:21:d1:c0:7b: 40:a8:e2:62:b9:4b:11:22:89:68:89:a2:e7:c4:d5:4d:f2:5b: 10:da:a2:89:ac:1a:13:86:90:80:8f:f2:ad:36:c8:b9:e9:c0: d6:88:d7:07:1c:26:13:15:9d:55:a1:3f:ec:14:ed:95:0b:d2: b3:d2:f4:a8:35:29:8f:16:4c:85:45:59:8b:44:c1:db:b0:17: 68:d5:8e:da -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WHcUKEQMWTFcwoQLJpjJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUwYjZmZWUwZTdhMTRjN2UxZDM4NjA5ZDliYzNjMmVmY2Nh ZjMzYWMwHhcNMjYwMTAxMDIxNzI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZGZiNjEwZjRlZDYzZWUwNzNiODVmMTVmMGMxNGNhYWVjZDk1NzE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3KmSn5Ufg/JUtSTL/5wr/CtSvzjq qVZgx+ekQc5pFXRHtn94NsEGS857/A1E0sN888QWwvlkqjCeNQ5Bon21mcXmm7va 8JPQ9V1ui/7TY8UiN2+X1VgWGud7+prCf9CSW4V/7o9xW5syjef85+9/5ylh2BfQ OtqdrCqAyGjjPIqTLiteLwM2p0CUzVl5JNCYtBZh6tkth5i/bDiMZkENLs2qTPUV RRUg1k32eVIPPu86cY3mP/niQNWmO7b4A4KD2wSe4VS1/3JdIkszWohAE4sZ043p NqqVdVNauFvIVXokaGdhN1bVpp7gnOWyHDGqvR81LmQ0hW1IAKQ7SVdtuwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFG37YQ9O1j7gc7hfFfDBTKrs2VcXMB8GA1UdIwQY MBaAFFC2/uDnoUx+HThgnZvDwu/MrzOsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVUxiLTRPZWhUSDRkT0dDZG04UEM3OHl2TTZ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy9jZDhmZTgtOGMwOC00NmIyLWI1N2Qt ZmQ2NjRmMDMyOTgwLzEvYmZ0aEQwN1dQdUJ6dUY4VjhNRk1xdXpaVnhjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYy9jZDhmZTgtOGMwOC00NmIyLWI1N2QtZmQ2NjRmMDMyOTgw LzEvVUxiLTRPZWhUSDRkT0dDZG04UEM3OHl2TTZ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+YaMA0G CSqGSIb3DQEBCwUAA4IBAQDXY+z4zm5DIIR9JKDaq+NSjp9LqOC8UewVdWinRfyx HW5eKiD3U2YaLy4pX/Co0Ve2k/f/lSzHs4Wn6hsdR/QvF8aLcEsZz/DIDIZsrIkl wzSf0Jx0tYgw/ysEgW7LcKmK8V4PZQaJp49xNQio7ddlJqroNgnEqnj+NaoKgAUE Ewoix2j0jUXPfvGS2F14Stw2B9MOTp2cR1PY+K0SEpqDozCnXLwNRtyNID/q4xg/ EyHRwHtAqOJiuUsRIoloiaLnxNVN8lsQ2qKJrBoThpCAj/KtNsi56cDWiNcHHCYT FZ1VoT/sFO2VC9Kz0vSoNSmPFkyFRVmLRMHbsBdo1Y7a -----END CERTIFICATE-----Generated at Mon Feb 9 23:41:45 2026 by rpki-client