This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/_btmywIwp3v3huBUqZJHVBpxRN8.roa File: _btmywIwp3v3huBUqZJHVBpxRN8.roa (raw, json) Hash identifier: MO7a2Ef6nCdZSfsleuqWItOvXRjwfij80Q/thGE8Kyw= Subject key identifier: FD:BB:66:CB:02:30:A7:7B:F7:86:E0:54:A9:92:47:54:1A:71:44:DF Certificate issuer: /CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce Certificate serial: 019B797F359A01AE4AFDAE5896152243EF6E Authority key identifier: 2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/_btmywIwp3v3huBUqZJHVBpxRN8.roa Signing time: Thu 01 Jan 2026 12:18:58 +0000 ROA not before: Thu 01 Jan 2026 12:18:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203790 IP address blocks: 138.249.4.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.mft rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:35:9a:01:ae:4a:fd:ae:58:96:15:22:43:ef:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce Validity Not Before: Jan 1 12:18:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fdbb66cb0230a77bf786e054a99247541a7144df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:08:be:34:e8:9a:3d:20:cb:3a:cc:e6:a5:d2: 5e:f5:68:77:3d:cc:e5:8a:72:be:bb:58:72:16:0f: fe:8a:06:3c:d7:31:56:32:c9:cb:7f:d0:ce:3f:ad: df:98:67:42:da:ff:61:e0:42:5a:4e:49:f8:15:c5: f1:56:d9:49:32:db:17:86:14:20:a6:d0:0c:c2:9e: 84:8b:37:e5:64:1f:3d:d4:2d:c9:4e:37:d0:77:ee: 30:80:ad:5e:a8:d4:18:83:46:cb:ee:0b:66:f0:5b: 6d:7f:ed:4e:38:5e:64:e8:a8:ec:83:d7:ba:01:9b: 74:13:f6:c7:eb:ad:20:42:c2:8f:73:36:21:b3:4c: 43:26:ed:13:9f:90:09:66:02:2a:86:f3:78:62:9f: d0:45:0b:f1:a2:e5:97:47:ad:c6:02:f8:25:ab:80: b0:45:f9:ae:ec:fd:3b:ca:55:72:c8:bd:b8:0f:ce: cd:2a:af:17:5b:a4:25:74:49:7a:96:90:ef:97:9d: 29:27:b0:2a:88:0e:5c:b0:07:52:17:0e:90:33:dc: 75:0d:73:54:03:55:c6:91:17:1b:79:eb:5a:42:f7: 7e:25:36:9c:32:05:35:59:b2:69:b0:a4:fa:0d:60: 5a:d4:a0:e2:34:c5:67:6d:18:27:e6:61:dd:32:04: 88:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:BB:66:CB:02:30:A7:7B:F7:86:E0:54:A9:92:47:54:1A:71:44:DF X509v3 Authority Key Identifier: keyid:2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/_btmywIwp3v3huBUqZJHVBpxRN8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.249.4.0/23 Signature Algorithm: sha256WithRSAEncryption 5e:57:fd:b5:83:f2:55:03:32:57:61:15:23:fe:37:92:81:83: 14:b1:b8:b2:e7:0f:8d:92:06:3f:91:e5:bf:9d:9d:44:87:04: 67:b0:cb:b1:7b:bd:c2:00:96:53:ae:44:cc:e8:f3:7e:ea:e6: c7:b4:90:8f:f5:b8:3a:a8:e0:d6:2d:1d:6e:75:b7:e9:96:25: 53:4e:ea:d5:0a:af:0e:50:f8:4f:03:35:f1:9b:f7:00:9a:1b: f7:e2:08:73:80:0f:f3:0f:d8:ea:f8:49:e4:22:08:1b:41:b8: d9:13:37:69:90:5e:31:15:b5:a7:52:5f:99:b9:d8:2a:f3:b3: a3:8e:a9:09:92:a4:83:96:3e:9a:93:43:f8:11:4c:ca:fd:e8: f1:83:fb:6f:29:a0:e2:1e:fc:d8:0f:34:19:a1:08:32:b5:fb: 14:e4:40:d3:38:da:f3:bf:c8:0c:41:99:6a:32:04:19:dd:11: eb:a5:fa:20:91:20:4a:2b:f7:77:b6:3f:89:54:88:2f:9e:ec: 85:ed:9d:53:06:a8:1e:01:91:a0:60:05:08:fc:93:a2:f5:80: b6:b2:dd:71:46:5b:11:ec:60:8b:f3:4a:10:92:89:67:98:12: 3c:85:81:24:38:b6:4b:80:53:75:08:29:eb:1b:fa:58:a4:2b: 00:ab:96:22 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fzWaAa5K/a5YlhUiQ+9uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlNmE4NmU2MmYwY2U5OGUwMmU5ODA4NjlmZjQ0MTRlZTJh MGYwY2UwHhcNMjYwMTAxMTIxODU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZGJiNjZjYjAyMzBhNzdiZjc4NmUwNTRhOTkyNDc1NDFhNzE0NGRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArAi+NOiaPSDLOszmpdJe9Wh3Pczl inK+u1hyFg/+igY81zFWMsnLf9DOP63fmGdC2v9h4EJaTkn4FcXxVtlJMtsXhhQg ptAMwp6EizflZB891C3JTjfQd+4wgK1eqNQYg0bL7gtm8Fttf+1OOF5k6Kjsg9e6 AZt0E/bH660gQsKPczYhs0xDJu0Tn5AJZgIqhvN4Yp/QRQvxouWXR63GAvglq4Cw Rfmu7P07ylVyyL24D87NKq8XW6QldEl6lpDvl50pJ7AqiA5csAdSFw6QM9x1DXNU A1XGkRcbeetaQvd+JTacMgU1WbJpsKT6DWBa1KDiNMVnbRgn5mHdMgSIpwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFP27ZssCMKd794bgVKmSR1QacUTfMB8GA1UdIwQY MBaAFC5qhuYvDOmOAumAhp/0QU7ioPDOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTG1xRzVpOE02WTRDNllDR25fUkJUdUtnOE00LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC8yYjYwMzAtNmQ4OC00ZTNlLTlmM2Et YTY2N2JiNzY1MDYwLzEvX2J0bXl3SXdwM3YzaHVCVXFaSkhWQnB4Uk44LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC8yYjYwMzAtNmQ4OC00ZTNlLTlmM2EtYTY2N2JiNzY1MDYw LzEvTG1xRzVpOE02WTRDNllDR25fUkJUdUtnOE00LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBivkEMA0G CSqGSIb3DQEBCwUAA4IBAQBeV/21g/JVAzJXYRUj/jeSgYMUsbiy5w+NkgY/keW/ nZ1EhwRnsMuxe73CAJZTrkTM6PN+6ubHtJCP9bg6qODWLR1udbfpliVTTurVCq8O UPhPAzXxm/cAmhv34ghzgA/zD9jq+EnkIggbQbjZEzdpkF4xFbWnUl+Zudgq87Oj jqkJkqSDlj6ak0P4EUzK/ejxg/tvKaDiHvzYDzQZoQgytfsU5EDTONrzv8gMQZlq MgQZ3RHrpfogkSBKK/d3tj+JVIgvnuyF7Z1TBqgeAZGgYAUI/JOi9YC2st1xRlsR 7GCL80oQkolnmBI8hYEkOLZLgFN1CCnrG/pYpCsAq5Yi -----END CERTIFICATE-----Generated at Sun Jan 25 18:20:36 2026 by rpki-client