This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/f9082b-cba3-4fbc-ada2-df063767c3f6/1/btb99o-J9mNfH3HRqZgvcRJQ75U.roa File: btb99o-J9mNfH3HRqZgvcRJQ75U.roa (raw, json) Hash identifier: w/haif8AZ8UwG8oHctXshBCLY/Zed4Mlzv9J3l0++VU= Subject key identifier: 6E:D6:FD:F6:8F:89:F6:63:5F:1F:71:D1:A9:98:2F:71:12:50:EF:95 Certificate issuer: /CN=f7e5647cd0b7f722bed4569f37b8bf8f92538cf5 Certificate serial: 019B7C7FE1D33DC976653961257492CADD9C Authority key identifier: F7:E5:64:7C:D0:B7:F7:22:BE:D4:56:9F:37:B8:BF:8F:92:53:8C:F5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9-VkfNC39yK-1FafN7i_j5JTjPU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/f9082b-cba3-4fbc-ada2-df063767c3f6/1/btb99o-J9mNfH3HRqZgvcRJQ75U.roa Signing time: Fri 02 Jan 2026 02:18:34 +0000 ROA not before: Fri 02 Jan 2026 02:18:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60860 IP address blocks: 193.106.64.0/24 maxlen: 24 193.106.65.0/24 maxlen: 24 193.106.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/f9082b-cba3-4fbc-ada2-df063767c3f6/1/9-VkfNC39yK-1FafN7i_j5JTjPU.crl rsync://rpki.ripe.net/repository/DEFAULT/33/f9082b-cba3-4fbc-ada2-df063767c3f6/1/9-VkfNC39yK-1FafN7i_j5JTjPU.mft rsync://rpki.ripe.net/repository/DEFAULT/9-VkfNC39yK-1FafN7i_j5JTjPU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:e1:d3:3d:c9:76:65:39:61:25:74:92:ca:dd:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f7e5647cd0b7f722bed4569f37b8bf8f92538cf5 Validity Not Before: Jan 2 02:18:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6ed6fdf68f89f6635f1f71d1a9982f711250ef95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:36:80:4c:ac:2d:60:d0:55:dc:bc:7d:07:f0: 03:8c:92:e5:7e:c6:92:41:86:a5:8a:18:16:51:21: d2:e9:37:3f:8a:65:fd:53:de:b8:d5:31:e4:15:80: cd:b0:04:0a:93:2b:01:f6:7a:04:c7:14:8c:31:62: 49:c3:42:05:33:3e:03:83:f6:03:8e:3e:db:e6:21: 8c:b5:02:62:d9:64:58:51:ff:67:63:b5:4d:1c:a6: 43:7c:d9:78:72:c7:1d:92:8e:eb:9f:38:42:ff:2b: bb:a7:59:9c:da:bf:13:c5:db:de:67:5d:3b:85:84: e7:78:21:3c:7d:bb:2c:96:12:dd:0d:e7:49:82:33: a2:f1:8d:18:ae:b6:de:3c:18:f7:af:f7:de:0a:72: 48:55:6d:27:d9:ab:07:11:71:30:cf:9e:ef:72:62: 6e:d5:54:3a:28:23:2d:8a:50:a0:bd:17:70:47:32: 0d:62:de:c6:c4:58:3a:7a:2c:b4:4f:d7:6e:05:a0: ea:8f:b2:4b:ae:f9:e0:b0:3b:09:69:ea:7c:cb:e2: 1e:dc:e0:7f:ed:be:43:83:b1:00:dd:83:86:c5:11: f5:5e:69:fa:52:55:6a:cc:29:3c:41:97:ff:fe:7c: 4f:9c:19:72:38:c1:93:bd:03:92:8d:6a:70:4e:6a: ee:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:D6:FD:F6:8F:89:F6:63:5F:1F:71:D1:A9:98:2F:71:12:50:EF:95 X509v3 Authority Key Identifier: keyid:F7:E5:64:7C:D0:B7:F7:22:BE:D4:56:9F:37:B8:BF:8F:92:53:8C:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9-VkfNC39yK-1FafN7i_j5JTjPU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/f9082b-cba3-4fbc-ada2-df063767c3f6/1/btb99o-J9mNfH3HRqZgvcRJQ75U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/f9082b-cba3-4fbc-ada2-df063767c3f6/1/9-VkfNC39yK-1FafN7i_j5JTjPU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.106.64.0/23 193.106.67.0/24 Signature Algorithm: sha256WithRSAEncryption 4d:e1:48:46:6e:5b:1d:9c:d2:4e:c5:6e:4d:1e:71:95:91:1c: c5:dd:b7:75:a8:5e:3c:9e:67:2c:0d:b7:13:79:1f:bb:94:6f: 38:8f:63:d3:9c:ea:aa:eb:17:89:de:0e:b7:0b:41:73:2d:4d: 34:53:a1:b2:99:b3:72:43:b1:2b:cb:db:ad:cd:d5:22:f7:94: fd:75:bf:4a:a5:5d:a2:96:60:56:9b:ad:ea:89:71:bc:bd:f7: c8:7b:88:e2:a7:2a:47:7a:20:2b:63:89:66:d6:3b:c8:5a:6a: 88:50:fe:f3:87:ff:91:89:48:77:b4:b9:9c:e2:b6:2a:22:38: 64:55:66:8e:a9:9f:f5:b9:01:c1:4c:f5:e4:1f:c2:97:90:de: 3e:00:f2:eb:30:c1:c9:80:a2:56:0d:9b:a1:fb:b8:c6:ed:a9: 22:45:63:51:15:de:19:0f:ff:3b:40:77:19:30:32:4a:c7:a0: 0d:d1:e4:20:42:74:c6:3f:af:a6:f1:19:9e:3a:c7:95:aa:b9: ab:b5:58:82:ec:53:33:fd:3b:b5:da:ce:04:0e:1b:c6:d1:21: 39:5d:a2:29:dd:40:27:78:ac:cd:4d:1f:fe:76:62:e1:67:33: 78:8d:92:4c:11:ab:52:03:77:86:55:23:3e:bf:a7:7a:b1:78: db:ce:a0:b6 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt8f+HTPcl2ZTlhJXSSyt2cMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY3ZTU2NDdjZDBiN2Y3MjJiZWQ0NTY5ZjM3YjhiZjhmOTI1 MzhjZjUwHhcNMjYwMTAyMDIxODM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZWQ2ZmRmNjhmODlmNjYzNWYxZjcxZDFhOTk4MmY3MTEyNTBlZjk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuTaATKwtYNBV3Lx9B/ADjJLlfsaS QYalihgWUSHS6Tc/imX9U9641THkFYDNsAQKkysB9noExxSMMWJJw0IFMz4Dg/YD jj7b5iGMtQJi2WRYUf9nY7VNHKZDfNl4cscdko7rnzhC/yu7p1mc2r8TxdveZ107 hYTneCE8fbsslhLdDedJgjOi8Y0YrrbePBj3r/feCnJIVW0n2asHEXEwz57vcmJu 1VQ6KCMtilCgvRdwRzINYt7GxFg6eiy0T9duBaDqj7JLrvngsDsJaep8y+Ie3OB/ 7b5Dg7EA3YOGxRH1Xmn6UlVqzCk8QZf//nxPnBlyOMGTvQOSjWpwTmruZwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFG7W/faPifZjXx9x0amYL3ESUO+VMB8GA1UdIwQY MBaAFPflZHzQt/civtRWnze4v4+SU4z1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOS1Wa2ZOQzM5eUstMUZhZk43aV9qNUpUalBVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy9mOTA4MmItY2JhMy00ZmJjLWFkYTIt ZGYwNjM3NjdjM2Y2LzEvYnRiOTlvLUo5bU5mSDNIUnFaZ3ZjUkpRNzVVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy9mOTA4MmItY2JhMy00ZmJjLWFkYTItZGYwNjM3NjdjM2Y2 LzEvOS1Wa2ZOQzM5eUstMUZhZk43aV9qNUpUalBVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBwWpAAwQA wWpDMA0GCSqGSIb3DQEBCwUAA4IBAQBN4UhGblsdnNJOxW5NHnGVkRzF3bd1qF48 nmcsDbcTeR+7lG84j2PTnOqq6xeJ3g63C0FzLU00U6GymbNyQ7Ery9utzdUi95T9 db9KpV2ilmBWm63qiXG8vffIe4jipypHeiArY4lm1jvIWmqIUP7zh/+RiUh3tLmc 4rYqIjhkVWaOqZ/1uQHBTPXkH8KXkN4+APLrMMHJgKJWDZuh+7jG7akiRWNRFd4Z D/87QHcZMDJKx6AN0eQgQnTGP6+m8RmeOseVqrmrtViC7FMz/Tu12s4EDhvG0SE5 XaIp3UAneKzNTR/+dmLhZzN4jZJMEatSA3eGVSM+v6d6sXjbzqC2 -----END CERTIFICATE-----Generated at Sun Jan 25 16:55:20 2026 by rpki-client