This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/btW96_v4qcI_Nqn0ptDVHkPj8OQ.roa File: btW96_v4qcI_Nqn0ptDVHkPj8OQ.roa (raw, json) Hash identifier: 1fl1pRJjy+lbxkOKpd1WX2tPZCGZWZkd4a2YxfCAPjU= Subject key identifier: 6E:D5:BD:EB:FB:F8:A9:C2:3F:36:A9:F4:A6:D0:D5:1E:43:E3:F0:E4 Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362 Certificate serial: 019AFEF6FB236C5063BBE492595CC67AA90C Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/btW96_v4qcI_Nqn0ptDVHkPj8OQ.roa Signing time: Mon 08 Dec 2025 17:16:30 +0000 ROA not before: Mon 08 Dec 2025 17:16:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 44103 IP address blocks: 5.83.149.0/24 maxlen: 24 77.90.23.0/24 maxlen: 24 89.144.47.0/24 maxlen: 24 178.18.152.0/22 maxlen: 32 178.18.152.0/24 maxlen: 32 178.18.153.0/24 maxlen: 32 178.18.154.0/24 maxlen: 32 178.18.155.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fe:f6:fb:23:6c:50:63:bb:e4:92:59:5c:c6:7a:a9:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362 Validity Not Before: Dec 8 17:16:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=6ed5bdebfbf8a9c23f36a9f4a6d0d51e43e3f0e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:76:07:5d:d9:b2:d2:73:57:d3:f3:9e:0f:dd: 11:c3:57:c8:f6:e1:f7:13:a6:be:8d:db:88:96:5e: f3:b6:98:70:2f:54:8a:3c:75:68:5b:55:98:af:cd: 2e:f8:8d:34:28:77:27:e1:70:ab:72:79:8d:72:18: 92:c0:ae:a5:e8:58:be:09:01:49:69:88:33:31:62: cc:0e:31:41:c7:1b:b7:ba:33:1a:13:b2:32:c9:66: 79:03:e6:70:9b:cb:fe:82:5f:37:70:9d:63:b5:05: a1:9b:c7:73:f7:7b:34:4f:18:ae:00:41:c7:d4:a3: 34:39:86:6b:16:64:64:53:58:20:8a:a5:1c:66:26: e0:25:f5:47:7e:63:a9:b2:78:c8:3f:0f:2a:bb:4d: cd:86:76:00:89:cd:e8:1e:73:90:9f:09:02:f5:f1: 9f:49:cb:55:54:6c:21:c6:38:4c:da:2b:05:27:0f: d4:73:00:69:8d:5d:3e:d7:d2:77:8c:4d:63:f0:28: e8:df:17:fa:ea:94:6b:65:75:9a:81:c3:c0:ac:33: 43:c3:22:6e:9e:3d:3c:0b:38:0c:a9:b1:60:19:40: 6b:51:42:aa:ce:18:73:5b:08:6f:b0:cd:ce:48:70: 8d:88:a0:e0:5d:13:32:49:ff:35:e9:f2:d1:40:a8: ee:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:D5:BD:EB:FB:F8:A9:C2:3F:36:A9:F4:A6:D0:D5:1E:43:E3:F0:E4 X509v3 Authority Key Identifier: keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/btW96_v4qcI_Nqn0ptDVHkPj8OQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.83.149.0/24 77.90.23.0/24 89.144.47.0/24 178.18.152.0/22 Signature Algorithm: sha256WithRSAEncryption c1:da:2f:25:52:ab:5b:1f:4d:a2:2c:dc:32:4e:a6:40:88:ef: 31:32:2f:8f:45:b6:6d:52:11:9d:88:1c:41:e0:df:10:30:16: 75:f6:83:07:21:e5:21:27:57:43:86:3d:8f:03:e3:5a:ef:1e: b6:8e:0a:1c:e7:84:ce:c1:7d:84:76:ef:b1:19:0b:87:89:07: 3b:93:2a:84:76:49:bf:02:15:a3:cb:29:20:58:23:8d:f1:e5: 8a:28:20:43:db:a4:a3:86:18:1e:07:9a:85:2c:a9:62:d5:a9: 1e:08:65:d4:44:af:9d:50:f6:b5:11:95:83:c2:fe:fd:d1:28: 52:12:e4:99:63:e4:c3:39:a8:b6:4f:64:c2:80:c4:6e:77:35: 72:50:55:89:63:80:6f:91:06:66:5b:d0:8a:b4:55:35:1e:f8: 46:8d:79:7e:55:b0:b9:a5:35:55:19:46:ba:0b:a5:36:f9:d8: 91:08:c2:09:d0:e7:b7:96:de:2d:54:07:dc:31:4c:61:dc:34: c6:db:dd:c0:ad:74:0b:c4:10:f7:60:04:7a:e1:4a:99:8b:8f: 97:dc:2b:93:13:54:f1:2e:30:d8:46:52:a0:87:55:d7:70:60: 73:49:84:0b:4c:dd:51:d5:1b:74:25:f2:74:ee:3e:d3:78:b1: b1:2f:b0:22 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZr+9vsjbFBju+SSWVzGeqkMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5 YjIzNjIwHhcNMjUxMjA4MTcxNjMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZWQ1YmRlYmZiZjhhOWMyM2YzNmE5ZjRhNmQwZDUxZTQzZTNmMGU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu3YHXdmy0nNX0/OeD90Rw1fI9uH3 E6a+jduIll7ztphwL1SKPHVoW1WYr80u+I00KHcn4XCrcnmNchiSwK6l6Fi+CQFJ aYgzMWLMDjFBxxu3ujMaE7IyyWZ5A+Zwm8v+gl83cJ1jtQWhm8dz93s0TxiuAEHH 1KM0OYZrFmRkU1ggiqUcZibgJfVHfmOpsnjIPw8qu03NhnYAic3oHnOQnwkC9fGf SctVVGwhxjhM2isFJw/UcwBpjV0+19J3jE1j8Cjo3xf66pRrZXWagcPArDNDwyJu nj08CzgMqbFgGUBrUUKqzhhzWwhvsM3OSHCNiKDgXRMySf816fLRQKjuMwIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFG7Vvev7+KnCPzap9KbQ1R5D4/DkMB8GA1UdIwQY MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt ZTFiZDg4ZDNmZDA3LzEvYnRXOTZfdjRxY0lfTnFuMHB0RFZIa1BqOE9RLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3 LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQABVOVAwQA TVoXAwQAWZAvAwQCshKYMA0GCSqGSIb3DQEBCwUAA4IBAQDB2i8lUqtbH02iLNwy TqZAiO8xMi+PRbZtUhGdiBxB4N8QMBZ19oMHIeUhJ1dDhj2PA+Na7x62jgoc54TO wX2Edu+xGQuHiQc7kyqEdkm/AhWjyykgWCON8eWKKCBD26SjhhgeB5qFLKli1ake CGXURK+dUPa1EZWDwv790ShSEuSZY+TDOai2T2TCgMRudzVyUFWJY4BvkQZmW9CK tFU1HvhGjXl+VbC5pTVVGUa6C6U2+diRCMIJ0Oe3lt4tVAfcMUxh3DTG293ArXQL xBD3YAR64UqZi4+X3CuTE1TxLjDYRlKgh1XXcGBzSYQLTN1R1Rt0JfJ07j7TeLGx L7Ai -----END CERTIFICATE-----Generated at Fri Dec 19 20:55:18 2025 by rpki-client