This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/BtwXJmGDzOWtfm5BTQTLyiwjUuM.roa
File: BtwXJmGDzOWtfm5BTQTLyiwjUuM.roa (raw, json)
Hash identifier: eNIxSFwcUmiPlZbgTFHqO+Ul1U5PmjB2Al77LDuyMtc=
Subject key identifier: 06:DC:17:26:61:83:CC:E5:AD:7E:6E:41:4D:04:CB:CA:2C:23:52:E3
Certificate issuer: /CN=8eb441dadbbecb6965d4ea1f046cc5c8e28817fc
Certificate serial: 019A7D265E49029CF819EB8212F40EEF2AD1
Authority key identifier: 8E:B4:41:DA:DB:BE:CB:69:65:D4:EA:1F:04:6C:C5:C8:E2:88:17:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/BtwXJmGDzOWtfm5BTQTLyiwjUuM.roa
Signing time: Thu 13 Nov 2025 12:17:37 +0000
ROA not before: Thu 13 Nov 2025 12:17:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202984
IP address blocks: 83.142.214.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 05:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:7d:26:5e:49:02:9c:f8:19:eb:82:12:f4:0e:ef:2a:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8eb441dadbbecb6965d4ea1f046cc5c8e28817fc
Validity
Not Before: Nov 13 12:17:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=06dc17266183cce5ad7e6e414d04cbca2c2352e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:f5:3b:e3:b8:68:05:6d:b1:1b:ad:03:4d:30:
a2:af:45:be:38:59:a4:2c:78:5c:e6:12:2d:3a:84:
d6:67:96:ab:64:af:6b:d6:8d:78:14:a5:08:ab:c2:
40:a4:5f:b9:db:d2:ab:ec:28:1f:51:bb:73:e0:e3:
a6:9b:19:d3:ed:9e:14:82:1f:a5:98:d4:76:90:3d:
57:48:76:73:17:50:de:ad:44:8d:65:d6:31:69:3b:
08:10:39:15:cd:b5:3e:ad:d6:d5:a6:60:6d:94:8f:
bd:1b:61:d9:5e:06:a9:2a:a3:47:69:35:4c:fd:af:
77:32:2b:40:d4:3c:cc:c7:05:1f:ef:ce:85:48:51:
e4:89:92:2e:fb:13:dc:4d:d2:a3:1e:65:63:08:dd:
e7:89:ec:7e:84:a4:3c:fa:f4:c0:ec:7e:f4:d7:60:
43:3d:f8:b7:33:74:be:18:86:af:aa:7e:d2:3b:10:
5e:e2:8f:52:a9:75:18:1d:29:39:77:7f:99:45:59:
66:a7:b5:be:a6:42:11:24:9c:cf:30:9a:24:2b:82:
be:8d:0b:4e:de:65:a5:08:24:9a:c9:55:b0:03:d7:
4e:24:10:11:92:14:78:cd:3e:2f:67:e7:4b:b3:4a:
4b:a1:b3:1f:44:3b:83:40:20:be:1d:e6:df:96:52:
da:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:DC:17:26:61:83:CC:E5:AD:7E:6E:41:4D:04:CB:CA:2C:23:52:E3
X509v3 Authority Key Identifier:
keyid:8E:B4:41:DA:DB:BE:CB:69:65:D4:EA:1F:04:6C:C5:C8:E2:88:17:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/BtwXJmGDzOWtfm5BTQTLyiwjUuM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.142.214.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:62:08:cc:1f:23:1c:3d:f9:b0:28:e9:5a:c3:d3:d7:9d:75:
9f:e9:85:b9:70:29:56:52:7a:3f:48:c5:f1:6e:7f:bf:01:ed:
14:73:8f:46:ef:bf:ab:98:c5:c8:c1:f6:96:aa:33:45:d4:7f:
29:a1:ed:c5:88:c6:59:f3:c1:5c:e5:5e:89:bd:21:49:96:50:
96:0a:2f:f0:a7:27:a7:78:52:b1:14:c8:ee:3b:5e:0e:4d:0c:
03:68:22:17:6e:71:4a:35:52:65:17:f5:88:2f:ff:d9:00:c7:
c8:55:97:48:32:21:4c:da:ab:39:0b:2e:b8:4d:2f:8e:34:8e:
6a:ba:d3:07:1c:29:30:93:6d:58:c4:6c:8c:ad:7c:da:9c:ac:
3c:48:9f:60:e7:b8:79:88:91:4d:03:c9:07:0e:19:a7:f5:3c:
5a:cb:db:03:09:2c:a4:cb:0c:42:28:b9:88:bf:d1:d5:9d:bf:
98:44:a6:7a:83:9b:64:e6:91:cf:f4:41:49:b5:d9:53:0c:59:
b1:c4:17:c7:6a:f9:bf:fb:df:ed:3c:60:24:9d:fb:e0:a7:05:
87:9c:95:46:94:be:df:b4:a3:bb:c3:5c:95:8a:6a:eb:6c:a9:
42:f0:90:9e:43:ed:7a:35:a1:91:da:ae:69:d3:86:f7:6d:47:
59:cf:02:1b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZp9Jl5JApz4GeuCEvQO7yrRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlYjQ0MWRhZGJiZWNiNjk2NWQ0ZWExZjA0NmNjNWM4ZTI4
ODE3ZmMwHhcNMjUxMTEzMTIxNzM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNmRjMTcyNjYxODNjY2U1YWQ3ZTZlNDE0ZDA0Y2JjYTJjMjM1MmUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5PU747hoBW2xG60DTTCir0W+OFmk
LHhc5hItOoTWZ5arZK9r1o14FKUIq8JApF+529Kr7CgfUbtz4OOmmxnT7Z4Ugh+l
mNR2kD1XSHZzF1DerUSNZdYxaTsIEDkVzbU+rdbVpmBtlI+9G2HZXgapKqNHaTVM
/a93MitA1DzMxwUf786FSFHkiZIu+xPcTdKjHmVjCN3niex+hKQ8+vTA7H7012BD
Pfi3M3S+GIavqn7SOxBe4o9SqXUYHSk5d3+ZRVlmp7W+pkIRJJzPMJokK4K+jQtO
3mWlCCSayVWwA9dOJBARkhR4zT4vZ+dLs0pLobMfRDuDQCC+HebfllLarwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAbcFyZhg8zlrX5uQU0Ey8osI1LjMB8GA1UdIwQY
MBaAFI60QdrbvstpZdTqHwRsxcjiiBf8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvanJSQjJ0dS15MmxsMU9vZkJHekZ5T0tJRl93LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS85NzhkMGYtOTI5Ny00YzcxLTljZmIt
NDZiOTQ5MDkyY2JlLzEvQnR3WEptR0R6T1d0Zm01QlRRVEx5aXdqVXVNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS85NzhkMGYtOTI5Ny00YzcxLTljZmItNDZiOTQ5MDkyY2Jl
LzEvanJSQjJ0dS15MmxsMU9vZkJHekZ5T0tJRl93LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAU47WMA0G
CSqGSIb3DQEBCwUAA4IBAQCKYgjMHyMcPfmwKOlaw9PXnXWf6YW5cClWUno/SMXx
bn+/Ae0Uc49G77+rmMXIwfaWqjNF1H8poe3FiMZZ88Fc5V6JvSFJllCWCi/wpyen
eFKxFMjuO14OTQwDaCIXbnFKNVJlF/WIL//ZAMfIVZdIMiFM2qs5Cy64TS+ONI5q
utMHHCkwk21YxGyMrXzanKw8SJ9g57h5iJFNA8kHDhmn9Txay9sDCSykywxCKLmI
v9HVnb+YRKZ6g5tk5pHP9EFJtdlTDFmxxBfHavm/+9/tPGAknfvgpwWHnJVGlL7f
tKO7w1yVimrrbKlC8JCeQ+16NaGR2q5p04b3bUdZzwIb
-----END CERTIFICATE-----
Generated at Sat Dec 6 13:09:55 2025 by rpki-client