This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/bTW2H9C_f0Zyl4rbIo3Z2-aBupw.roa File: bTW2H9C_f0Zyl4rbIo3Z2-aBupw.roa (raw, json) Hash identifier: DXNshREIVgHPI/cdx6PYhMXkKa/NwvrXqrgQumwjc+8= Subject key identifier: 6D:35:B6:1F:D0:BF:7F:46:72:97:8A:DB:22:8D:D9:DB:E6:81:BA:9C Certificate issuer: /CN=e5a1b36552f9daccb92ac5c3b44b426d643749e2 Certificate serial: 019B7910B1A0BC78974F7CE1C3038437FF11 Authority key identifier: E5:A1:B3:65:52:F9:DA:CC:B9:2A:C5:C3:B4:4B:42:6D:64:37:49:E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5aGzZVL52sy5KsXDtEtCbWQ3SeI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/bTW2H9C_f0Zyl4rbIo3Z2-aBupw.roa Signing time: Thu 01 Jan 2026 10:18:15 +0000 ROA not before: Thu 01 Jan 2026 10:18:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51338 IP address blocks: 82.193.81.0/24 maxlen: 32 82.193.81.0/25 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/5aGzZVL52sy5KsXDtEtCbWQ3SeI.crl rsync://rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/5aGzZVL52sy5KsXDtEtCbWQ3SeI.mft rsync://rpki.ripe.net/repository/DEFAULT/5aGzZVL52sy5KsXDtEtCbWQ3SeI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 04:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:b1:a0:bc:78:97:4f:7c:e1:c3:03:84:37:ff:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e5a1b36552f9daccb92ac5c3b44b426d643749e2 Validity Not Before: Jan 1 10:18:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6d35b61fd0bf7f4672978adb228dd9dbe681ba9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:5d:28:29:71:be:b3:c0:6b:29:d7:3b:91:80: 97:f0:0b:85:3b:17:3e:d0:59:46:24:64:3f:07:7f: 43:87:55:b1:ff:e8:64:c9:e8:69:37:df:62:34:f6: 6e:44:75:fd:7d:bf:16:6e:89:eb:b1:7f:df:57:4d: b5:63:01:5b:03:04:c4:cf:88:91:de:c8:d8:ab:a4: 25:79:a5:c4:c9:c5:42:b0:a9:b6:cc:1c:b0:ca:d3: 14:8f:de:74:64:30:6c:c8:5e:2d:50:54:23:ab:8a: 82:de:83:94:ab:55:42:2b:2a:4f:72:07:44:f4:62: a7:b5:be:9a:3b:35:9f:ef:69:25:ea:45:77:b7:c7: d7:78:11:d3:b2:e1:45:b0:5a:69:9a:74:1d:9e:e3: 5a:f7:3a:38:a6:66:9b:00:22:b6:54:29:07:bb:9f: 7d:d0:ed:2a:d9:3b:47:d2:95:76:55:c0:bf:4b:b5: 2a:03:18:6d:bc:55:13:3a:11:ec:28:ab:c7:f3:cb: b4:54:25:65:92:02:d8:3e:cf:d7:7f:da:26:3b:42: f3:df:1a:37:88:93:89:fb:ed:6d:6f:92:88:61:40: 33:95:70:bb:dd:f0:5c:9e:54:4d:4b:2f:9d:f6:c1: be:a2:74:0e:ef:c1:7d:f6:32:a8:8d:bd:9d:92:b4: 61:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:35:B6:1F:D0:BF:7F:46:72:97:8A:DB:22:8D:D9:DB:E6:81:BA:9C X509v3 Authority Key Identifier: keyid:E5:A1:B3:65:52:F9:DA:CC:B9:2A:C5:C3:B4:4B:42:6D:64:37:49:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5aGzZVL52sy5KsXDtEtCbWQ3SeI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/bTW2H9C_f0Zyl4rbIo3Z2-aBupw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/5aGzZVL52sy5KsXDtEtCbWQ3SeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.193.81.0/24 Signature Algorithm: sha256WithRSAEncryption 60:9b:16:62:85:06:a1:c1:c4:3f:a8:e1:73:b3:a5:f3:0a:ed: 87:82:94:e3:9d:ee:18:7d:7f:62:0c:97:12:71:44:ed:5f:06: 1c:da:b1:19:63:84:f7:7b:8d:9a:79:4c:4d:de:90:8b:fc:46: cd:2f:be:2b:2e:ab:ca:e9:9a:62:f7:7d:7f:14:77:d9:f8:af: 0e:04:12:78:ff:79:6d:ef:88:14:e9:0b:b9:6b:ec:c4:36:e0: ef:56:83:42:4a:b2:78:5d:b7:9b:e0:cb:54:de:c5:55:6d:d1: 9b:5f:de:13:51:0f:ea:dc:92:17:df:54:19:97:1f:6c:dd:fc: d2:b6:69:31:cf:4c:51:ea:d9:4a:17:bf:bf:aa:20:bb:7d:7d: 60:cb:59:be:58:65:dc:ee:f4:90:c3:60:ab:a0:94:b1:2a:9c: 41:bc:d8:7a:16:3d:48:3f:b0:90:e1:2c:73:5e:c7:19:c9:df: 56:09:05:24:ac:4a:36:55:0f:a1:e4:9f:d4:39:96:d6:14:b3: 38:07:bd:03:0b:9d:e6:79:1a:0c:05:31:e8:10:25:3e:ac:3e: 7d:00:3e:af:c0:28:8a:f7:ea:02:fd:92:d4:17:ba:ff:37:57: 9a:4c:b4:88:6e:bb:70:78:5e:e2:d0:98:e3:ba:c4:63:f1:20: aa:f0:1a:e8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5ELGgvHiXT3zhwwOEN/8RMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU1YTFiMzY1NTJmOWRhY2NiOTJhYzVjM2I0NGI0MjZkNjQz NzQ5ZTIwHhcNMjYwMTAxMTAxODE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZDM1YjYxZmQwYmY3ZjQ2NzI5NzhhZGIyMjhkZDlkYmU2ODFiYTljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuF0oKXG+s8BrKdc7kYCX8AuFOxc+ 0FlGJGQ/B39Dh1Wx/+hkyehpN99iNPZuRHX9fb8WbonrsX/fV021YwFbAwTEz4iR 3sjYq6QleaXEycVCsKm2zBywytMUj950ZDBsyF4tUFQjq4qC3oOUq1VCKypPcgdE 9GKntb6aOzWf72kl6kV3t8fXeBHTsuFFsFppmnQdnuNa9zo4pmabACK2VCkHu599 0O0q2TtH0pV2VcC/S7UqAxhtvFUTOhHsKKvH88u0VCVlkgLYPs/Xf9omO0Lz3xo3 iJOJ++1tb5KIYUAzlXC73fBcnlRNSy+d9sG+onQO78F99jKojb2dkrRhzQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFG01th/Qv39GcpeK2yKN2dvmgbqcMB8GA1UdIwQY MBaAFOWhs2VS+drMuSrFw7RLQm1kN0niMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNWFHelpWTDUyc3k1S3NYRHRFdENiV1EzU2VJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9iOGVhNWItM2RkNC00Mzc0LWE3OTMt YzVlNmQyM2Y4YjA5LzEvYlRXMkg5Q19mMFp5bDRyYklvM1oyLWFCdXB3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC9iOGVhNWItM2RkNC00Mzc0LWE3OTMtYzVlNmQyM2Y4YjA5 LzEvNWFHelpWTDUyc3k1S3NYRHRFdENiV1EzU2VJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUsFRMA0G CSqGSIb3DQEBCwUAA4IBAQBgmxZihQahwcQ/qOFzs6XzCu2HgpTjne4YfX9iDJcS cUTtXwYc2rEZY4T3e42aeUxN3pCL/EbNL74rLqvK6Zpi931/FHfZ+K8OBBJ4/3lt 74gU6Qu5a+zENuDvVoNCSrJ4Xbeb4MtU3sVVbdGbX94TUQ/q3JIX31QZlx9s3fzS tmkxz0xR6tlKF7+/qiC7fX1gy1m+WGXc7vSQw2CroJSxKpxBvNh6Fj1IP7CQ4Sxz XscZyd9WCQUkrEo2VQ+h5J/UOZbWFLM4B70DC53meRoMBTHoECU+rD59AD6vwCiK 9+oC/ZLUF7r/N1eaTLSIbrtweF7i0JjjusRj8SCq8Bro -----END CERTIFICATE-----Generated at Mon Jan 26 11:43:53 2026 by rpki-client