This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/6bf54c-d806-463a-af37-59e193262ce4/1/btKwMs2T5TC2QpwmVJMMxVyV0rg.roa File: btKwMs2T5TC2QpwmVJMMxVyV0rg.roa (raw, json) Hash identifier: Ghbd1qi+LJjN0PIuRpUBKfXBNN+SmFWgi5pRWldZxGg= Subject key identifier: 6E:D2:B0:32:CD:93:E5:30:B6:42:9C:26:54:93:0C:C5:5C:95:D2:B8 Certificate issuer: /CN=fa646a6323b3d6fc34ae49d8be8884f7292bdbf4 Certificate serial: 019B7B3577BAFD5FF197C0F66B885CA6C161 Authority key identifier: FA:64:6A:63:23:B3:D6:FC:34:AE:49:D8:BE:88:84:F7:29:2B:DB:F4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-mRqYyOz1vw0rknYvoiE9ykr2_Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/6bf54c-d806-463a-af37-59e193262ce4/1/btKwMs2T5TC2QpwmVJMMxVyV0rg.roa Signing time: Thu 01 Jan 2026 20:17:40 +0000 ROA not before: Thu 01 Jan 2026 20:17:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213241 IP address blocks: 91.238.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/6bf54c-d806-463a-af37-59e193262ce4/1/1-mRqYyOz1vw0rknYvoiE9ykr2_Q.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/6bf54c-d806-463a-af37-59e193262ce4/1/1-mRqYyOz1vw0rknYvoiE9ykr2_Q.mft rsync://rpki.ripe.net/repository/DEFAULT/1-mRqYyOz1vw0rknYvoiE9ykr2_Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:77:ba:fd:5f:f1:97:c0:f6:6b:88:5c:a6:c1:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fa646a6323b3d6fc34ae49d8be8884f7292bdbf4 Validity Not Before: Jan 1 20:17:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6ed2b032cd93e530b6429c2654930cc55c95d2b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:42:4a:1f:84:cc:dc:f0:cd:dc:ef:10:5b:83: a6:df:9d:73:7c:8e:85:4a:69:c4:f4:1d:c5:42:59: 83:fc:28:45:6f:43:12:18:e0:f9:3a:87:fb:d4:87: 3b:ed:68:5d:ea:c5:5a:9e:6f:6c:2e:f6:4c:3e:8e: f3:9a:2f:2e:72:42:24:65:75:aa:a1:85:33:52:41: 86:e6:97:b9:0b:21:80:a9:fd:21:cc:29:e8:d6:89: 5b:c4:b1:2f:3d:7a:03:ee:cf:c2:7a:34:31:58:9e: f3:31:78:8b:8b:36:fb:e0:56:d5:e6:39:de:a1:3a: 98:e3:c1:38:af:d2:24:01:82:03:88:ee:2e:25:a5: ad:29:b2:da:b8:a2:3f:fb:69:9d:57:f0:5a:e6:bd: dc:72:38:67:c6:69:35:e1:b8:30:41:3f:90:45:1e: 26:e0:d9:5c:6c:8a:4f:af:63:9c:33:16:ae:e8:4d: 42:3b:a2:f4:0e:29:ba:b1:e8:01:43:39:69:c4:6a: 86:8c:6a:2b:f6:10:ac:af:18:0f:c2:d3:0d:57:f3: 98:f2:6f:6d:34:9a:8f:79:2c:2f:02:1b:45:63:c0: 0a:d2:8e:db:36:3e:24:17:89:c3:6f:a4:96:dd:8c: 6f:ea:fe:65:83:fd:ad:d1:cb:12:8c:43:b0:61:b3: e6:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:D2:B0:32:CD:93:E5:30:B6:42:9C:26:54:93:0C:C5:5C:95:D2:B8 X509v3 Authority Key Identifier: keyid:FA:64:6A:63:23:B3:D6:FC:34:AE:49:D8:BE:88:84:F7:29:2B:DB:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-mRqYyOz1vw0rknYvoiE9ykr2_Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6bf54c-d806-463a-af37-59e193262ce4/1/btKwMs2T5TC2QpwmVJMMxVyV0rg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6bf54c-d806-463a-af37-59e193262ce4/1/1-mRqYyOz1vw0rknYvoiE9ykr2_Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.238.237.0/24 Signature Algorithm: sha256WithRSAEncryption 41:02:4c:e2:77:eb:78:7c:61:14:9c:8e:b3:1c:9c:0d:78:56: d3:c7:1d:8f:8d:57:d6:8d:ea:5d:53:8c:c5:ea:a1:e6:2d:9c: 51:7f:70:ad:c1:64:3d:64:aa:e0:af:b5:22:eb:59:06:22:c1: ae:bc:ba:de:46:c3:ef:79:bf:83:73:6d:67:e6:f0:6e:74:2a: cc:f0:5e:d2:8e:2c:4d:9d:83:20:50:ef:43:74:62:67:f9:43: 21:35:a4:18:ef:7d:55:e5:44:83:6d:39:11:01:02:d6:73:90: d1:eb:ac:d7:4d:9b:dc:8a:41:9c:d5:5c:43:bb:5e:c1:b6:3e: 5e:e0:1e:e2:42:1a:06:e6:19:15:47:43:ea:f7:54:07:61:f9: af:6c:cb:a9:8f:3c:e0:1c:bc:1d:94:2f:fe:a1:11:cd:77:b6: 92:07:ef:47:18:4d:2f:93:d6:7e:e4:77:4b:d5:94:9d:e2:3b: 17:44:75:53:16:61:54:00:32:14:ac:46:6c:97:af:32:3e:99: b6:32:3c:c0:51:33:3e:ec:97:9b:ce:8d:8f:a2:a3:59:85:99: 3f:38:3c:07:de:f1:7b:cd:58:a5:c0:fb:01:9a:38:79:d2:2c: 48:07:5e:0c:07:d1:d7:bb:14:42:14:60:28:68:57:30:00:f1: 28:d1:20:86 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt7NXe6/V/xl8D2a4hcpsFhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhNjQ2YTYzMjNiM2Q2ZmMzNGFlNDlkOGJlODg4NGY3Mjky YmRiZjQwHhcNMjYwMTAxMjAxNzQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZWQyYjAzMmNkOTNlNTMwYjY0MjljMjY1NDkzMGNjNTVjOTVkMmI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu0JKH4TM3PDN3O8QW4Om351zfI6F SmnE9B3FQlmD/ChFb0MSGOD5Oof71Ic77Whd6sVanm9sLvZMPo7zmi8uckIkZXWq oYUzUkGG5pe5CyGAqf0hzCno1olbxLEvPXoD7s/CejQxWJ7zMXiLizb74FbV5jne oTqY48E4r9IkAYIDiO4uJaWtKbLauKI/+2mdV/Ba5r3ccjhnxmk14bgwQT+QRR4m 4NlcbIpPr2OcMxau6E1CO6L0Dim6segBQzlpxGqGjGor9hCsrxgPwtMNV/OY8m9t NJqPeSwvAhtFY8AK0o7bNj4kF4nDb6SW3Yxv6v5lg/2t0csSjEOwYbPmGwIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFG7SsDLNk+UwtkKcJlSTDMVcldK4MB8GA1UdIwQY MBaAFPpkamMjs9b8NK5J2L6IhPcpK9v0MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1tUnFZeU96MXZ3MHJrbll2b2lFOXlrcjJfUS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjIvNmJmNTRjLWQ4MDYtNDYzYS1hZjM3 LTU5ZTE5MzI2MmNlNC8xL2J0S3dNczJUNVRDMlFwd21WSk1NeFZ5VjByZy5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvZjIvNmJmNTRjLWQ4MDYtNDYzYS1hZjM3LTU5ZTE5MzI2MmNl NC8xLzEtbVJxWXlPejF2dzBya25Zdm9pRTl5a3IyX1EuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABb7u0w DQYJKoZIhvcNAQELBQADggEBAEECTOJ363h8YRScjrMcnA14VtPHHY+NV9aN6l1T jMXqoeYtnFF/cK3BZD1kquCvtSLrWQYiwa68ut5Gw+95v4NzbWfm8G50KszwXtKO LE2dgyBQ70N0Ymf5QyE1pBjvfVXlRINtOREBAtZzkNHrrNdNm9yKQZzVXEO7XsG2 Pl7gHuJCGgbmGRVHQ+r3VAdh+a9sy6mPPOAcvB2UL/6hEc13tpIH70cYTS+T1n7k d0vVlJ3iOxdEdVMWYVQAMhSsRmyXrzI+mbYyPMBRMz7sl5vOjY+io1mFmT84PAfe 8XvNWKXA+wGaOHnSLEgHXgwH0de7FEIUYChoVzAA8SjRIIY= -----END CERTIFICATE-----Generated at Mon Feb 9 21:01:39 2026 by rpki-client