This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/BTxTchU6FokRc_VcwM3L98cGZ2U.roa File: BTxTchU6FokRc_VcwM3L98cGZ2U.roa (raw, json) Hash identifier: m0sjZ9w9QwoBHNArgHsMC/szzWWl7/qHtpiIMhjerDQ= Subject key identifier: 05:3C:53:72:15:3A:16:89:11:73:F5:5C:C0:CD:CB:F7:C7:06:67:65 Certificate issuer: /CN=cfcead390625edba1408108df57cea47160d70e5 Certificate serial: 019B0C82FD7AF5260BCC5E5341C56C4C8238 Authority key identifier: CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/BTxTchU6FokRc_VcwM3L98cGZ2U.roa Signing time: Thu 11 Dec 2025 08:24:29 +0000 ROA not before: Thu 11 Dec 2025 08:24:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 215023 IP address blocks: 2a0f:7802:e200::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.mft rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 14:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0c:82:fd:7a:f5:26:0b:cc:5e:53:41:c5:6c:4c:82:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cfcead390625edba1408108df57cea47160d70e5 Validity Not Before: Dec 11 08:24:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=053c5372153a16891173f55cc0cdcbf7c7066765 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:dd:ce:5b:14:76:0d:e0:b1:02:4e:08:33:d4: 25:f7:05:8e:de:34:89:8e:17:e0:8c:5a:f6:3d:9d: 1b:95:51:cb:dd:07:87:5b:d4:3f:42:85:97:e4:7b: 9e:d0:70:87:4a:5c:65:7b:48:b2:05:3b:51:46:d7: d1:63:99:10:55:54:f6:e0:e3:83:e7:1b:2c:57:fc: f1:dc:fa:36:d0:f1:2f:c7:71:f7:32:25:19:71:67: 74:b7:e5:34:0d:aa:4a:9d:a3:0a:fb:e0:de:6a:ec: 60:68:a7:5f:bf:eb:fa:c4:60:76:5a:7d:e7:04:70: b5:16:7a:18:32:bd:1c:0a:f4:d5:34:59:d9:10:3f: 7d:ee:b3:26:07:fb:82:9d:e5:6e:46:c6:54:7c:cc: d4:30:2b:e9:6a:ad:54:ef:ad:55:f1:f9:27:2b:71: 79:13:57:0f:7e:e5:0a:8f:e4:ce:ec:5b:7e:82:64: ba:ed:42:49:87:29:25:4e:1c:ce:fa:fd:90:23:98: e0:35:86:ac:f4:39:79:56:e1:69:76:9b:59:27:1a: 74:6e:a5:a1:04:43:cf:7f:56:55:b1:8a:68:64:4f: e6:d1:cc:ea:45:7e:dd:ce:d0:3f:5f:18:23:a6:94: 6a:d3:ac:d7:cc:55:07:df:29:5e:59:a5:1d:8b:b9: 77:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:3C:53:72:15:3A:16:89:11:73:F5:5C:C0:CD:CB:F7:C7:06:67:65 X509v3 Authority Key Identifier: keyid:CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/BTxTchU6FokRc_VcwM3L98cGZ2U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:7802:e200::/40 Signature Algorithm: sha256WithRSAEncryption 9f:ad:81:4d:3a:c0:9e:5a:30:90:a0:b8:2a:ea:b2:fb:b5:c0: f8:f5:fd:4b:6e:73:f9:5b:84:66:f9:f1:ef:70:1a:9d:7b:1b: 45:c3:11:af:f7:61:bf:ce:19:cd:57:e6:52:eb:80:50:1b:c8: ad:40:33:6e:15:87:65:c2:13:68:f5:6e:53:40:30:75:03:30: 37:b1:73:8d:67:24:4e:fb:ff:e6:46:9e:48:fc:cd:42:e1:88: 19:1f:02:db:dc:c2:b0:44:68:73:1c:3d:f6:11:07:3c:9e:ec: da:4a:ed:9a:89:46:7b:d8:10:2f:7d:f7:7d:cd:f0:d1:e3:ec: 12:f5:46:1c:b8:84:13:b6:0e:90:f3:0d:49:85:fe:6a:3a:6d: dd:31:2e:58:19:85:0b:81:a0:af:af:fb:54:c0:ca:0a:93:a0: 4d:a3:27:70:87:89:2c:70:37:9e:24:2b:52:b4:29:16:64:d4: 64:eb:93:ac:f2:83:a8:c2:8d:b6:a9:b4:c1:d6:05:f1:f4:43: 95:f5:a7:1a:e8:b3:16:a5:b1:b1:32:0e:4d:03:b0:f2:ae:06: 2d:02:1d:11:c8:03:39:5f:b3:7c:a4:a8:21:07:6b:50:ac:22: d8:49:44:25:2c:86:06:dc:d9:cf:12:60:79:50:76:d1:e3:07: e5:59:68:36 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZsMgv169SYLzF5TQcVsTII4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmY2VhZDM5MDYyNWVkYmExNDA4MTA4ZGY1N2NlYTQ3MTYw ZDcwZTUwHhcNMjUxMjExMDgyNDI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNTNjNTM3MjE1M2ExNjg5MTE3M2Y1NWNjMGNkY2JmN2M3MDY2NzY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr93OWxR2DeCxAk4IM9Ql9wWO3jSJ jhfgjFr2PZ0blVHL3QeHW9Q/QoWX5Hue0HCHSlxle0iyBTtRRtfRY5kQVVT24OOD 5xssV/zx3Po20PEvx3H3MiUZcWd0t+U0DapKnaMK++DeauxgaKdfv+v6xGB2Wn3n BHC1FnoYMr0cCvTVNFnZED997rMmB/uCneVuRsZUfMzUMCvpaq1U761V8fknK3F5 E1cPfuUKj+TO7Ft+gmS67UJJhyklThzO+v2QI5jgNYas9Dl5VuFpdptZJxp0bqWh BEPPf1ZVsYpoZE/m0czqRX7dztA/XxgjppRq06zXzFUH3yleWaUdi7l3iQIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFAU8U3IVOhaJEXP1XMDNy/fHBmdlMB8GA1UdIwQY MBaAFM/OrTkGJe26FAgQjfV86kcWDXDlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejg2dE9RWWw3Ym9VQ0JDTjlYenFSeFlOY09VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9jNDY0N2EtNjA0Mi00ZmU4LWEyNzYt ZjViNmE3MThmNGI1LzEvQlR4VGNoVTZGb2tSY19WY3dNM0w5OGNHWjJVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS9jNDY0N2EtNjA0Mi00ZmU4LWEyNzYtZjViNmE3MThmNGI1 LzEvejg2dE9RWWw3Ym9VQ0JDTjlYenFSeFlOY09VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKg94AuIw DQYJKoZIhvcNAQELBQADggEBAJ+tgU06wJ5aMJCguCrqsvu1wPj1/Utuc/lbhGb5 8e9wGp17G0XDEa/3Yb/OGc1X5lLrgFAbyK1AM24Vh2XCE2j1blNAMHUDMDexc41n JE77/+ZGnkj8zULhiBkfAtvcwrBEaHMcPfYRBzye7NpK7ZqJRnvYEC99933N8NHj 7BL1Rhy4hBO2DpDzDUmF/mo6bd0xLlgZhQuBoK+v+1TAygqToE2jJ3CHiSxwN54k K1K0KRZk1GTrk6zyg6jCjbaptMHWBfH0Q5X1pxrosxalsbEyDk0DsPKuBi0CHRHI Azlfs3ykqCEHa1CsIthJRCUshgbc2c8SYHlQdtHjB+VZaDY= -----END CERTIFICATE-----Generated at Fri Dec 19 18:28:24 2025 by rpki-client