This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/f91b2c-c5fe-4625-a180-9a46ed5b42db/1/BTEAuUNa_YsO4Msc4ADixEUAqHw.roa File: BTEAuUNa_YsO4Msc4ADixEUAqHw.roa (raw, json) Hash identifier: RPWke+z8J8p3T5a+cxL5wCmrsKLPXY/+WIucQz9R2x4= Subject key identifier: 05:31:00:B9:43:5A:FD:8B:0E:E0:CB:1C:E0:00:E2:C4:45:00:A8:7C Certificate issuer: /CN=8b6a23a2fd1a0956378a37d4fce259df2bd794a7 Certificate serial: 019B7C8003E3EB8387EE3379B22342F8DB7B Authority key identifier: 8B:6A:23:A2:FD:1A:09:56:37:8A:37:D4:FC:E2:59:DF:2B:D7:94:A7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2ojov0aCVY3ijfU_OJZ3yvXlKc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/f91b2c-c5fe-4625-a180-9a46ed5b42db/1/BTEAuUNa_YsO4Msc4ADixEUAqHw.roa Signing time: Fri 02 Jan 2026 02:18:42 +0000 ROA not before: Fri 02 Jan 2026 02:18:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 5400 IP address blocks: 185.68.200.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/f91b2c-c5fe-4625-a180-9a46ed5b42db/1/i2ojov0aCVY3ijfU_OJZ3yvXlKc.crl rsync://rpki.ripe.net/repository/DEFAULT/09/f91b2c-c5fe-4625-a180-9a46ed5b42db/1/i2ojov0aCVY3ijfU_OJZ3yvXlKc.mft rsync://rpki.ripe.net/repository/DEFAULT/i2ojov0aCVY3ijfU_OJZ3yvXlKc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:03:e3:eb:83:87:ee:33:79:b2:23:42:f8:db:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6a23a2fd1a0956378a37d4fce259df2bd794a7 Validity Not Before: Jan 2 02:18:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=053100b9435afd8b0ee0cb1ce000e2c44500a87c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:be:65:7c:52:17:c9:57:61:12:34:ea:bd:57: 0b:e3:97:eb:3e:48:aa:60:d2:c2:c5:34:5b:75:5d: ed:35:7e:b2:40:87:fc:8f:c0:2f:51:18:c6:bb:fe: 3f:cc:c9:d5:2a:07:20:16:a5:73:07:f6:22:bd:0c: c7:c0:ad:0d:cf:72:5f:a5:87:26:d6:10:d7:ee:1d: fa:7c:d3:dd:5a:a0:21:e2:43:f1:8b:a4:0b:bf:4d: 23:ee:24:d8:a1:5e:7f:7a:09:b9:53:80:d1:ec:b2: af:31:1f:c4:e4:a1:81:4d:98:9b:18:b5:09:d5:68: 57:8c:a2:96:53:8d:20:e3:ec:ae:a4:4d:cb:c8:54: bd:1d:92:be:e2:b1:8c:10:1c:d1:8f:03:be:ac:df: 2d:8d:ba:c1:5b:84:c7:ea:d3:b0:cd:60:b7:45:fe: 15:d9:ee:2d:ef:41:3c:a0:02:bd:67:21:ad:e2:f9: 62:7a:52:b1:8b:44:6a:51:fa:0e:95:10:52:42:34: ca:5a:48:1e:90:de:3c:4f:5a:bf:3c:e5:8f:4a:cb: 53:57:59:d1:4d:60:48:9e:59:36:d4:3d:05:5a:34: 4c:83:f9:fb:b1:cf:8b:d3:63:f2:ce:ea:72:4e:65: 88:46:9c:c6:1b:44:15:a9:4a:ee:fa:fc:87:4a:32: b4:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:31:00:B9:43:5A:FD:8B:0E:E0:CB:1C:E0:00:E2:C4:45:00:A8:7C X509v3 Authority Key Identifier: keyid:8B:6A:23:A2:FD:1A:09:56:37:8A:37:D4:FC:E2:59:DF:2B:D7:94:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2ojov0aCVY3ijfU_OJZ3yvXlKc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/f91b2c-c5fe-4625-a180-9a46ed5b42db/1/BTEAuUNa_YsO4Msc4ADixEUAqHw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/f91b2c-c5fe-4625-a180-9a46ed5b42db/1/i2ojov0aCVY3ijfU_OJZ3yvXlKc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.68.200.0/22 Signature Algorithm: sha256WithRSAEncryption 97:c4:64:3f:89:33:7e:2f:f7:8b:97:09:01:b6:21:bd:3d:99: 51:83:00:64:70:03:d4:68:1a:01:39:e2:6a:aa:93:54:2e:79: 2b:ea:35:57:c9:30:aa:2e:3d:6e:b9:a4:3a:9b:d2:b3:1f:ef: a1:7c:a7:b8:96:ae:2f:73:e2:6f:c9:fd:39:4b:7c:49:ab:53: de:bc:07:36:30:31:df:ae:67:ea:67:7b:14:1f:2c:dd:ee:24: 3d:fe:f5:4e:44:2c:7b:67:ba:98:6f:e2:5b:66:45:9d:89:a4: a3:1c:14:c8:5b:bc:5a:11:1a:a7:70:19:19:82:8b:37:3c:b3: e1:6e:38:a0:6f:cd:04:6f:50:1a:96:31:db:de:84:7f:8d:f6: 6e:c8:66:cd:63:c5:21:f6:c4:14:6a:36:7c:18:4c:fb:96:30: 0f:dc:f0:a5:b7:82:d0:db:70:b6:f4:57:92:f9:e8:f4:48:17: 5e:49:86:e6:65:ed:d7:5c:85:07:b7:dc:61:4f:f8:8b:5a:43: 7f:ab:aa:fc:02:e6:6a:83:7a:53:e8:16:24:76:fb:ab:79:62: 1b:e9:2b:e0:4c:b9:18:4c:92:5c:ad:6b:3c:53:0b:03:ba:2c: 5c:ec:a3:53:56:34:4b:df:d0:14:4c:2f:f5:3e:01:a4:d4:b0: 09:05:a8:3a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gAPj64OH7jN5siNC+Nt7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiNmEyM2EyZmQxYTA5NTYzNzhhMzdkNGZjZTI1OWRmMmJk Nzk0YTcwHhcNMjYwMTAyMDIxODQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNTMxMDBiOTQzNWFmZDhiMGVlMGNiMWNlMDAwZTJjNDQ1MDBhODdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAor5lfFIXyVdhEjTqvVcL45frPkiq YNLCxTRbdV3tNX6yQIf8j8AvURjGu/4/zMnVKgcgFqVzB/YivQzHwK0Nz3JfpYcm 1hDX7h36fNPdWqAh4kPxi6QLv00j7iTYoV5/egm5U4DR7LKvMR/E5KGBTZibGLUJ 1WhXjKKWU40g4+yupE3LyFS9HZK+4rGMEBzRjwO+rN8tjbrBW4TH6tOwzWC3Rf4V 2e4t70E8oAK9ZyGt4vlielKxi0RqUfoOlRBSQjTKWkgekN48T1q/POWPSstTV1nR TWBInlk21D0FWjRMg/n7sc+L02PyzupyTmWIRpzGG0QVqUru+vyHSjK0/QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAUxALlDWv2LDuDLHOAA4sRFAKh8MB8GA1UdIwQY MBaAFItqI6L9GglWN4o31PziWd8r15SnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaTJvam92MGFDVlkzaWpmVV9PSlozeXZYbEtjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9mOTFiMmMtYzVmZS00NjI1LWExODAt OWE0NmVkNWI0MmRiLzEvQlRFQXVVTmFfWXNPNE1zYzRBRGl4RVVBcUh3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS9mOTFiMmMtYzVmZS00NjI1LWExODAtOWE0NmVkNWI0MmRi LzEvaTJvam92MGFDVlkzaWpmVV9PSlozeXZYbEtjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuUTIMA0G CSqGSIb3DQEBCwUAA4IBAQCXxGQ/iTN+L/eLlwkBtiG9PZlRgwBkcAPUaBoBOeJq qpNULnkr6jVXyTCqLj1uuaQ6m9KzH++hfKe4lq4vc+Jvyf05S3xJq1PevAc2MDHf rmfqZ3sUHyzd7iQ9/vVORCx7Z7qYb+JbZkWdiaSjHBTIW7xaERqncBkZgos3PLPh bjigb80Eb1AaljHb3oR/jfZuyGbNY8Uh9sQUajZ8GEz7ljAP3PClt4LQ23C29FeS +ej0SBdeSYbmZe3XXIUHt9xhT/iLWkN/q6r8AuZqg3pT6BYkdvureWIb6SvgTLkY TJJcrWs8UwsDuixc7KNTVjRL39AUTC/1PgGk1LAJBag6 -----END CERTIFICATE-----Generated at Sun Jan 25 10:20:31 2026 by rpki-client