This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/81d94d-2e40-4546-8b89-804f17ec245e/1/bteUfMNGCw4iekhcsm-TC--JQrY.roa File: bteUfMNGCw4iekhcsm-TC--JQrY.roa (raw, json) Hash identifier: 0mwVlH5pQckOHYni1LukazfItUgOS1Qd+GhZIFEebJo= Subject key identifier: 6E:D7:94:7C:C3:46:0B:0E:22:7A:48:5C:B2:6F:93:0B:EF:89:42:B6 Certificate issuer: /CN=0c17dae04476db1016caa43e3ed9bc6bd69f3975 Certificate serial: 019B7F83D302909D7E46B2F4EF912F74D540 Authority key identifier: 0C:17:DA:E0:44:76:DB:10:16:CA:A4:3E:3E:D9:BC:6B:D6:9F:39:75 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DBfa4ER22xAWyqQ-Ptm8a9afOXU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/81d94d-2e40-4546-8b89-804f17ec245e/1/bteUfMNGCw4iekhcsm-TC--JQrY.roa Signing time: Fri 02 Jan 2026 16:21:44 +0000 ROA not before: Fri 02 Jan 2026 16:21:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203228 IP address blocks: 185.124.72.0/22 maxlen: 22 185.124.75.0/24 maxlen: 24 2a03:93e0::/32 maxlen: 32 2a03:93e0:1000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/81d94d-2e40-4546-8b89-804f17ec245e/1/DBfa4ER22xAWyqQ-Ptm8a9afOXU.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/81d94d-2e40-4546-8b89-804f17ec245e/1/DBfa4ER22xAWyqQ-Ptm8a9afOXU.mft rsync://rpki.ripe.net/repository/DEFAULT/DBfa4ER22xAWyqQ-Ptm8a9afOXU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:d3:02:90:9d:7e:46:b2:f4:ef:91:2f:74:d5:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c17dae04476db1016caa43e3ed9bc6bd69f3975 Validity Not Before: Jan 2 16:21:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6ed7947cc3460b0e227a485cb26f930bef8942b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:42:9e:17:0a:9b:a1:ba:c0:34:30:ef:30:1f: ea:a8:ab:03:7f:f1:98:6e:7d:2e:8c:92:3d:04:72: 4d:ad:ae:36:2c:89:50:9e:dc:35:63:50:0c:41:e5: 30:4d:aa:bf:eb:eb:c6:a1:a8:a6:3b:79:e7:3b:7c: 3a:88:c5:ff:f1:8c:27:6a:08:94:f9:5a:b8:1c:14: a4:cd:07:fc:52:c3:6a:52:7e:e7:42:4d:cb:f2:00: 0c:1b:b1:c1:b5:ea:8d:68:98:ba:21:d5:f3:b7:87: 08:42:67:ca:0d:a4:a3:92:e2:69:c8:ce:ec:a9:6b: 44:a2:fa:f8:3b:4e:ad:cc:e7:d8:86:a2:e2:4d:7b: e3:b5:aa:d6:d9:58:5e:b2:13:7e:a4:60:0f:26:a3: b2:f4:e3:82:60:ea:2f:38:33:71:12:9a:af:a6:f6: 08:b5:b6:58:53:91:3f:fb:37:40:be:a1:a8:ac:63: 20:12:f4:f5:50:7f:84:95:9e:61:fd:6e:ab:1c:d4: 5f:46:ef:d7:40:f9:38:53:67:6c:c8:d1:90:10:e4: 3c:9f:ae:ce:a3:59:45:92:36:b6:06:f1:70:f4:8b: d3:ce:a8:f7:ca:4a:96:5d:76:36:cd:fd:6e:7e:4b: 41:9a:22:1c:eb:eb:74:a4:75:f1:18:bc:63:a5:f2: b3:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:D7:94:7C:C3:46:0B:0E:22:7A:48:5C:B2:6F:93:0B:EF:89:42:B6 X509v3 Authority Key Identifier: keyid:0C:17:DA:E0:44:76:DB:10:16:CA:A4:3E:3E:D9:BC:6B:D6:9F:39:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DBfa4ER22xAWyqQ-Ptm8a9afOXU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/81d94d-2e40-4546-8b89-804f17ec245e/1/bteUfMNGCw4iekhcsm-TC--JQrY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/81d94d-2e40-4546-8b89-804f17ec245e/1/DBfa4ER22xAWyqQ-Ptm8a9afOXU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.124.72.0/22 IPv6: 2a03:93e0::/32 Signature Algorithm: sha256WithRSAEncryption 33:e9:1d:3e:2b:2a:32:2d:47:b5:4f:81:34:a2:7e:35:85:d2: 00:ae:84:84:79:a4:96:fb:72:bd:27:ef:17:2d:dc:e7:e8:40: 0b:95:83:4a:33:1f:ec:c1:50:0b:d4:fb:0b:02:b4:85:71:42: 0d:73:bf:5b:20:bf:e0:43:02:46:e1:c8:eb:21:19:6d:26:2a: 5a:97:60:c8:1f:a5:8d:1e:4b:4f:3f:0b:e1:b8:7f:55:7a:ad: 61:79:35:e6:d4:57:77:d8:f6:9f:8e:9c:94:05:a3:e4:46:7f: 9f:1e:a1:25:d0:2f:be:34:29:35:d3:53:6a:28:a4:a0:8e:13: ff:c6:43:96:fb:d3:84:8d:d1:df:8a:ab:9e:ec:2c:32:e8:d4: b2:8d:bb:a8:b2:db:26:ba:db:92:c8:b2:eb:b6:58:fb:83:f7: 2c:ba:96:5f:28:5d:4a:7e:f9:4b:5f:77:f9:57:7f:d2:b3:51: f7:08:c4:af:35:a4:bc:14:74:4f:cb:93:6b:0f:a0:1e:36:c6: 1d:41:56:93:46:6a:0e:aa:d5:4a:42:6c:56:4b:0a:ff:a1:99: 81:13:3b:15:cd:15:70:85:8f:2a:c7:28:de:38:de:2c:95:94: 40:82:f3:0d:c2:dd:d5:87:fe:a0:cf:bf:59:23:09:a1:a2:76: f2:a4:51:b7 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt/g9MCkJ1+RrL075EvdNVAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjMTdkYWUwNDQ3NmRiMTAxNmNhYTQzZTNlZDliYzZiZDY5 ZjM5NzUwHhcNMjYwMTAyMTYyMTQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZWQ3OTQ3Y2MzNDYwYjBlMjI3YTQ4NWNiMjZmOTMwYmVmODk0MmI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuUKeFwqbobrANDDvMB/qqKsDf/GY bn0ujJI9BHJNra42LIlQntw1Y1AMQeUwTaq/6+vGoaimO3nnO3w6iMX/8YwnagiU +Vq4HBSkzQf8UsNqUn7nQk3L8gAMG7HBteqNaJi6IdXzt4cIQmfKDaSjkuJpyM7s qWtEovr4O06tzOfYhqLiTXvjtarW2VheshN+pGAPJqOy9OOCYOovODNxEpqvpvYI tbZYU5E/+zdAvqGorGMgEvT1UH+ElZ5h/W6rHNRfRu/XQPk4U2dsyNGQEOQ8n67O o1lFkja2BvFw9IvTzqj3ykqWXXY2zf1ufktBmiIc6+t0pHXxGLxjpfKzsQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFG7XlHzDRgsOInpIXLJvkwvviUK2MB8GA1UdIwQY MBaAFAwX2uBEdtsQFsqkPj7ZvGvWnzl1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvREJmYTRFUjIyeEFXeXFRLVB0bThhOWFmT1hVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi84MWQ5NGQtMmU0MC00NTQ2LThiODkt ODA0ZjE3ZWMyNDVlLzEvYnRlVWZNTkdDdzRpZWtoY3NtLVRDLS1KUXJZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi84MWQ5NGQtMmU0MC00NTQ2LThiODktODA0ZjE3ZWMyNDVl LzEvREJmYTRFUjIyeEFXeXFRLVB0bThhOWFmT1hVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuXxIMA0E AgACMAcDBQAqA5PgMA0GCSqGSIb3DQEBCwUAA4IBAQAz6R0+KyoyLUe1T4E0on41 hdIAroSEeaSW+3K9J+8XLdzn6EALlYNKMx/swVAL1PsLArSFcUINc79bIL/gQwJG 4cjrIRltJipal2DIH6WNHktPPwvhuH9Veq1heTXm1Fd32PafjpyUBaPkRn+fHqEl 0C++NCk101NqKKSgjhP/xkOW+9OEjdHfique7Cwy6NSyjbuostsmutuSyLLrtlj7 g/csupZfKF1KfvlLX3f5V3/Ss1H3CMSvNaS8FHRPy5NrD6AeNsYdQVaTRmoOqtVK QmxWSwr/oZmBEzsVzRVwhY8qxyjeON4slZRAgvMNwt3Vh/6gz79ZIwmhonbypFG3 -----END CERTIFICATE-----Generated at Mon Feb 9 22:31:46 2026 by rpki-client