This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/f14721-2910-42de-b71e-46ce5c8241db/1/btFTz2r_BesZJN2u_oCmJMOAwZk.roa File: btFTz2r_BesZJN2u_oCmJMOAwZk.roa (raw, json) Hash identifier: 0LBuX7o2jR543EQsgYTaLGtgZY2hOEDSxDyt/nU6qa0= Subject key identifier: 6E:D1:53:CF:6A:FF:05:EB:19:24:DD:AE:FE:80:A6:24:C3:80:C1:99 Certificate issuer: /CN=7eac66fc2231cb2656e75335a1fd66771f57a9cc Certificate serial: 019B79ECDAA2C1ECB8C63DAF06CE39215307 Authority key identifier: 7E:AC:66:FC:22:31:CB:26:56:E7:53:35:A1:FD:66:77:1F:57:A9:CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqxm_CIxyyZW51M1of1mdx9Xqcw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/f14721-2910-42de-b71e-46ce5c8241db/1/btFTz2r_BesZJN2u_oCmJMOAwZk.roa Signing time: Thu 01 Jan 2026 14:18:44 +0000 ROA not before: Thu 01 Jan 2026 14:18:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203937 IP address blocks: 185.119.120.0/22 maxlen: 22 185.131.240.0/23 maxlen: 23 185.131.242.0/24 maxlen: 24 185.131.243.0/24 maxlen: 24 2a06:dec0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/f14721-2910-42de-b71e-46ce5c8241db/1/fqxm_CIxyyZW51M1of1mdx9Xqcw.crl rsync://rpki.ripe.net/repository/DEFAULT/47/f14721-2910-42de-b71e-46ce5c8241db/1/fqxm_CIxyyZW51M1of1mdx9Xqcw.mft rsync://rpki.ripe.net/repository/DEFAULT/fqxm_CIxyyZW51M1of1mdx9Xqcw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:da:a2:c1:ec:b8:c6:3d:af:06:ce:39:21:53:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7eac66fc2231cb2656e75335a1fd66771f57a9cc Validity Not Before: Jan 1 14:18:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6ed153cf6aff05eb1924ddaefe80a624c380c199 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:74:83:87:7e:c5:39:da:9b:31:3d:41:ad:ee: ab:df:e1:18:a2:16:ca:dd:21:14:34:ac:ec:7c:f4: 60:6b:67:66:9a:a0:3e:f0:3b:59:b8:b0:57:77:54: 5d:50:f0:45:2e:cb:73:90:93:a0:99:b9:b5:05:f3: 52:07:d3:74:07:c0:e4:40:06:73:fa:e0:0b:8e:a1: 5f:5c:a2:3d:39:46:8c:78:5d:12:b6:45:65:f8:b3: e3:6f:10:71:5e:17:f3:16:85:ea:57:03:7c:e6:ec: b8:18:21:30:70:e5:b5:42:a8:b8:e2:d3:be:23:31: 4c:0e:5a:a9:de:39:1d:2d:f0:aa:d4:66:52:81:3b: 2f:04:81:69:93:fa:34:26:c8:ad:ad:e7:66:19:1d: ce:ac:fc:3e:31:04:93:ce:06:37:61:0c:a2:9f:35: 53:14:c9:70:9e:4a:3e:75:30:ac:db:b5:e7:b0:0a: 98:36:bf:49:fb:50:7d:df:e0:9f:a1:39:73:52:87: 80:16:29:e7:a1:db:b7:11:ac:d5:ed:76:c1:e3:24: fd:aa:c7:29:b7:e0:89:23:58:31:66:cc:4c:ea:ad: b8:d3:ed:32:31:97:50:84:a1:18:d1:57:25:22:4c: 34:77:8f:f2:31:5f:fb:75:9e:68:08:38:6d:11:01: a7:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:D1:53:CF:6A:FF:05:EB:19:24:DD:AE:FE:80:A6:24:C3:80:C1:99 X509v3 Authority Key Identifier: keyid:7E:AC:66:FC:22:31:CB:26:56:E7:53:35:A1:FD:66:77:1F:57:A9:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqxm_CIxyyZW51M1of1mdx9Xqcw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/f14721-2910-42de-b71e-46ce5c8241db/1/btFTz2r_BesZJN2u_oCmJMOAwZk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/f14721-2910-42de-b71e-46ce5c8241db/1/fqxm_CIxyyZW51M1of1mdx9Xqcw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.119.120.0/22 185.131.240.0/22 IPv6: 2a06:dec0::/32 Signature Algorithm: sha256WithRSAEncryption c2:26:2c:80:0d:56:f1:2d:4e:44:b1:d3:c2:98:77:b2:af:65: a5:61:34:b1:8f:51:d7:9e:3f:9d:81:96:62:5e:e8:e8:1a:a5: 0e:ac:38:72:3a:cf:3a:49:ae:58:57:bf:e4:aa:b7:a6:c2:a7: ee:96:30:6d:40:c4:83:b9:d0:41:81:d3:4f:cd:d0:ba:ee:d7: 3b:fd:65:7d:a7:8a:86:1d:f6:db:a7:46:f7:a4:f3:10:03:3d: 86:87:20:e8:49:5d:a8:d4:77:7c:4d:54:fb:aa:40:51:8e:71: fd:90:58:82:5a:9c:c7:a2:2d:e9:5f:13:8a:73:87:c6:70:f4: 69:5f:15:be:76:22:b1:da:bc:d3:e9:ac:a4:9d:5c:e5:1b:ae: 06:12:09:b8:b6:60:e2:8e:6f:9d:91:cc:af:81:4b:7f:dd:0d: 5b:38:a9:4b:91:e0:bd:4e:57:03:16:c6:4b:92:e5:5f:f0:73: fd:17:fd:27:28:e3:d6:99:a0:ea:58:8e:20:6b:0b:36:0d:fc: e8:8c:eb:6a:2a:d2:ec:15:49:3b:1a:32:fd:80:cf:b4:59:12: 21:4d:15:16:ec:a6:b6:60:a4:13:3b:a0:1e:85:7b:6e:19:5b: e4:22:6c:1b:4d:bb:27:01:3f:e3:9a:36:f1:10:d2:51:e9:52: 2a:a4:02:df -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt57Nqiwey4xj2vBs45IVMHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlYWM2NmZjMjIzMWNiMjY1NmU3NTMzNWExZmQ2Njc3MWY1 N2E5Y2MwHhcNMjYwMTAxMTQxODQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZWQxNTNjZjZhZmYwNWViMTkyNGRkYWVmZTgwYTYyNGMzODBjMTk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2nSDh37FOdqbMT1Bre6r3+EYohbK 3SEUNKzsfPRga2dmmqA+8DtZuLBXd1RdUPBFLstzkJOgmbm1BfNSB9N0B8DkQAZz +uALjqFfXKI9OUaMeF0StkVl+LPjbxBxXhfzFoXqVwN85uy4GCEwcOW1Qqi44tO+ IzFMDlqp3jkdLfCq1GZSgTsvBIFpk/o0JsitredmGR3OrPw+MQSTzgY3YQyinzVT FMlwnko+dTCs27XnsAqYNr9J+1B93+CfoTlzUoeAFinnodu3EazV7XbB4yT9qscp t+CJI1gxZsxM6q240+0yMZdQhKEY0VclIkw0d4/yMV/7dZ5oCDhtEQGn7wIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFG7RU89q/wXrGSTdrv6ApiTDgMGZMB8GA1UdIwQY MBaAFH6sZvwiMcsmVudTNaH9ZncfV6nMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZnF4bV9DSXh5eVpXNTFNMW9mMW1keDlYcWN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9mMTQ3MjEtMjkxMC00MmRlLWI3MWUt NDZjZTVjODI0MWRiLzEvYnRGVHoycl9CZXNaSk4ydV9vQ21KTU9Bd1prLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny9mMTQ3MjEtMjkxMC00MmRlLWI3MWUtNDZjZTVjODI0MWRi LzEvZnF4bV9DSXh5eVpXNTFNMW9mMW1keDlYcWN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCuXd4AwQC uYPwMA0EAgACMAcDBQAqBt7AMA0GCSqGSIb3DQEBCwUAA4IBAQDCJiyADVbxLU5E sdPCmHeyr2WlYTSxj1HXnj+dgZZiXujoGqUOrDhyOs86Sa5YV7/kqremwqfuljBt QMSDudBBgdNPzdC67tc7/WV9p4qGHfbbp0b3pPMQAz2GhyDoSV2o1Hd8TVT7qkBR jnH9kFiCWpzHoi3pXxOKc4fGcPRpXxW+diKx2rzT6ayknVzlG64GEgm4tmDijm+d kcyvgUt/3Q1bOKlLkeC9TlcDFsZLkuVf8HP9F/0nKOPWmaDqWI4gaws2DfzojOtq KtLsFUk7GjL9gM+0WRIhTRUW7Ka2YKQTO6AehXtuGVvkImwbTbsnAT/jmjbxENJR 6VIqpALf -----END CERTIFICATE-----Generated at Mon Jan 26 11:06:07 2026 by rpki-client