This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/2cab1a-df66-4187-b182-703cab4d0598/1/BtcmHuwetapblyi9s6FZkxvndTA.roa
File: BtcmHuwetapblyi9s6FZkxvndTA.roa (raw, json)
Hash identifier: dnt6NY9Mo4FrwsWIa33YjdrYdhY3bDry7NAo/6vLCVQ=
Subject key identifier: 06:D7:26:1E:EC:1E:B5:AA:5B:97:28:BD:B3:A1:59:93:1B:E7:75:30
Certificate issuer: /CN=6894e1b8da80cac2ad1a2f3f09bf9db5a12486a4
Certificate serial: 019B7911263CCA04DA9DF23A234B997747EC
Authority key identifier: 68:94:E1:B8:DA:80:CA:C2:AD:1A:2F:3F:09:BF:9D:B5:A1:24:86:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aJThuNqAysKtGi8_Cb-dtaEkhqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/2cab1a-df66-4187-b182-703cab4d0598/1/BtcmHuwetapblyi9s6FZkxvndTA.roa
Signing time: Thu 01 Jan 2026 10:18:45 +0000
ROA not before: Thu 01 Jan 2026 10:18:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206610
IP address blocks: 46.29.176.0/21 maxlen: 24
185.28.204.0/22 maxlen: 24
2a02:2290::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/2cab1a-df66-4187-b182-703cab4d0598/1/aJThuNqAysKtGi8_Cb-dtaEkhqQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/2cab1a-df66-4187-b182-703cab4d0598/1/aJThuNqAysKtGi8_Cb-dtaEkhqQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/aJThuNqAysKtGi8_Cb-dtaEkhqQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:11:26:3c:ca:04:da:9d:f2:3a:23:4b:99:77:47:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6894e1b8da80cac2ad1a2f3f09bf9db5a12486a4
Validity
Not Before: Jan 1 10:18:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=06d7261eec1eb5aa5b9728bdb3a159931be77530
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:a8:a7:2f:2f:2f:05:76:e0:dd:76:01:a1:d6:
68:24:c7:d6:8e:03:2c:24:ee:6b:2d:ff:67:b7:29:
92:89:00:b6:d4:e1:c8:eb:e6:20:cd:9f:0e:1b:4a:
06:99:51:d5:a5:ae:bd:76:fd:3a:65:14:4b:27:13:
cd:df:a5:fd:5f:69:6e:c8:84:2a:57:7c:62:2e:e5:
ee:48:90:29:c9:76:9f:32:de:12:73:a9:81:2c:1e:
c7:43:a7:80:96:65:ca:01:f1:f4:b2:12:ad:76:6a:
73:5c:7b:55:53:6f:8d:ab:e0:6a:63:84:2b:17:df:
33:77:61:0d:07:1e:8d:44:81:dc:8d:95:c1:c2:f3:
10:d6:d8:2c:88:b3:7e:c7:4e:e4:2e:72:03:58:06:
da:3e:9e:0d:91:6c:1d:8d:f4:4b:81:85:63:2b:0d:
77:cc:56:18:3b:60:25:b1:78:fe:15:d4:59:8d:9d:
f7:43:e8:e8:db:a8:da:2c:73:a2:18:65:7d:6a:7e:
06:b5:a4:d3:b4:50:fa:0f:56:f3:e2:e2:24:3f:3e:
0c:87:dc:db:a6:58:97:cc:5b:42:7e:89:0a:d2:44:
f7:4a:83:6a:1f:b4:4c:44:8d:2a:24:1a:39:5c:a1:
e8:58:52:c7:53:47:a8:c8:7f:65:88:6e:d6:8a:97:
ea:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:D7:26:1E:EC:1E:B5:AA:5B:97:28:BD:B3:A1:59:93:1B:E7:75:30
X509v3 Authority Key Identifier:
keyid:68:94:E1:B8:DA:80:CA:C2:AD:1A:2F:3F:09:BF:9D:B5:A1:24:86:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aJThuNqAysKtGi8_Cb-dtaEkhqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/2cab1a-df66-4187-b182-703cab4d0598/1/BtcmHuwetapblyi9s6FZkxvndTA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/2cab1a-df66-4187-b182-703cab4d0598/1/aJThuNqAysKtGi8_Cb-dtaEkhqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.29.176.0/21
185.28.204.0/22
IPv6:
2a02:2290::/29
Signature Algorithm: sha256WithRSAEncryption
2f:a9:b3:b5:8b:10:b0:f3:14:b7:03:16:8b:15:c4:02:1b:87:
bd:6d:c3:ce:85:ac:87:20:5e:b0:72:96:ce:2c:45:ff:6c:61:
11:1d:78:21:dc:a3:04:f8:0d:06:ec:62:87:89:f6:50:05:b7:
2c:79:4d:e9:2f:68:3a:c3:5d:c7:cb:1f:f2:4c:f3:17:4b:96:
8d:4d:47:ce:d4:06:82:40:0a:a1:13:cf:ed:fe:d2:d9:3c:ee:
81:ab:1c:71:8b:3e:08:80:96:e7:ee:70:88:1a:68:18:63:d8:
26:ed:8d:78:41:fa:c5:43:44:b2:43:98:b6:b8:03:f0:f2:06:
11:c7:00:66:8d:f9:f9:c7:94:40:97:59:3b:0c:49:a8:dc:c5:
ad:d8:ab:a0:14:fa:54:4a:40:fa:8e:86:3c:81:9a:7e:4b:84:
99:8a:94:78:14:d2:de:45:e8:5d:42:ae:b0:ea:0b:41:1e:2c:
e0:22:77:b8:f1:71:fb:30:9d:9a:13:7b:00:1f:39:73:25:6f:
82:0a:05:8a:e6:97:e5:45:94:f0:dc:c0:cd:1e:c8:03:e4:a5:
4a:92:19:be:77:a2:d5:94:0e:cd:b9:8c:eb:c8:96:eb:9d:60:
83:3f:7f:88:2e:90:24:d7:33:74:34:de:48:3a:be:f7:0d:89:
e1:8d:71:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:23:29 2026 by rpki-client