This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/KtXXZuWwAeJjsCfihoN1WNMLKhE.roa File: KtXXZuWwAeJjsCfihoN1WNMLKhE.roa (raw, json) Hash identifier: z/D/Fpz8w4Ztu9MCq2oyUdEs5IBrARr3qoMz86ovVW0= Subject key identifier: 2A:D5:D7:66:E5:B0:01:E2:63:B0:27:E2:86:83:75:58:D3:0B:2A:11 Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467 Certificate serial: 019B7C1317C1154132256AF3F8426685F294 Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/KtXXZuWwAeJjsCfihoN1WNMLKhE.roa Signing time: Fri 02 Jan 2026 00:19:44 +0000 ROA not before: Fri 02 Jan 2026 00:19:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 174 IP address blocks: 201.49.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.mft rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:17:c1:15:41:32:25:6a:f3:f8:42:66:85:f2:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467 Validity Not Before: Jan 2 00:19:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2ad5d766e5b001e263b027e286837558d30b2a11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:dd:03:e2:79:20:d4:44:6d:7b:f2:b2:7c:12: e0:eb:11:32:53:9a:02:0c:4a:23:00:0a:f8:f7:f4: 9c:f1:2b:7b:e1:2b:7e:91:b2:dc:c0:ce:2e:0e:2b: 20:59:0f:8a:4e:4b:89:8c:5b:4d:4b:0a:d7:02:ac: e1:2d:98:0c:7e:82:55:4a:36:81:7f:ce:ca:25:4b: 65:10:67:69:21:e2:91:33:80:f6:26:2c:57:18:1c: 2c:f8:54:6a:66:ee:07:34:34:50:27:fb:b8:17:8d: 80:a9:bc:21:46:ad:cb:34:5a:c6:f4:bd:e0:53:46: 1c:c3:ff:16:9d:51:d2:2b:54:a4:0b:af:19:c2:f6: c9:c7:eb:01:67:83:3e:ac:bd:e5:f0:4d:23:76:97: 34:12:fb:33:f0:03:ef:57:c2:15:ae:ef:f3:b0:e0: 3a:a1:1b:78:91:1c:6f:f4:50:fa:7e:66:39:fb:7c: ae:f7:21:2d:b9:ad:4f:1a:fe:98:24:86:ca:7d:80: 0a:7a:67:66:10:ec:0c:56:fb:9c:96:40:62:18:7a: b5:82:5d:e4:6a:d1:18:bf:63:64:b9:45:e3:99:f2: 47:c1:38:5f:32:a8:01:1e:06:e7:89:50:7e:67:0e: e9:53:32:ec:2c:18:69:24:42:2b:32:5c:ff:31:fa: 11:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:D5:D7:66:E5:B0:01:E2:63:B0:27:E2:86:83:75:58:D3:0B:2A:11 X509v3 Authority Key Identifier: keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/KtXXZuWwAeJjsCfihoN1WNMLKhE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 201.49.189.0/24 Signature Algorithm: sha256WithRSAEncryption 6b:21:7f:82:32:54:45:91:af:50:71:ac:86:8b:d0:d4:eb:14: f5:66:5b:fb:aa:96:fd:8b:cb:1c:99:ab:71:42:0d:ed:00:d0: 9c:f1:3d:3d:03:8c:23:b5:34:82:c6:55:11:45:47:08:6d:3b: d1:ae:83:4e:c8:08:79:10:2d:02:a7:e2:22:16:51:e1:d8:dd: b7:6d:d3:2b:3d:28:31:dd:93:de:e3:73:19:49:17:48:26:f5: 00:24:cd:4a:0f:15:d4:92:00:02:44:68:ef:4c:a8:01:8c:70: 6e:99:4d:09:fd:6f:c0:eb:b5:09:ff:bb:13:fa:cb:a9:c1:71: 49:16:86:42:8a:9d:bb:dc:3f:20:1f:c0:5e:38:7f:3b:8f:b5: ec:b9:bf:b0:b2:dd:c7:d8:64:5e:f6:33:d9:aa:93:5e:97:e9: 47:43:05:83:57:a8:18:81:ca:b4:60:84:3d:81:17:b2:c1:f6: 8e:c2:8b:a4:50:b9:13:5c:ac:65:8e:c3:b7:a2:92:a8:ac:53: e8:51:a6:f3:db:10:d2:05:a4:4b:8a:d6:ee:98:a3:11:19:ba: c0:24:c6:b0:5e:01:01:bc:40:9c:09:9b:66:b1:42:e3:a4:37: 1e:58:74:5f:9b:af:90:94:f3:80:6f:d8:c5:1e:7a:5c:b6:2b: fd:d8:77:a4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8ExfBFUEyJWrz+EJmhfKUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1MzRjNDlmY2ZhOGE0NTA0MWQ5NWVkNGQ4ZDRmYzY5Yzcy N2E0NjcwHhcNMjYwMTAyMDAxOTQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYWQ1ZDc2NmU1YjAwMWUyNjNiMDI3ZTI4NjgzNzU1OGQzMGIyYTExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl90D4nkg1ERte/KyfBLg6xEyU5oC DEojAAr49/Sc8St74St+kbLcwM4uDisgWQ+KTkuJjFtNSwrXAqzhLZgMfoJVSjaB f87KJUtlEGdpIeKRM4D2JixXGBws+FRqZu4HNDRQJ/u4F42AqbwhRq3LNFrG9L3g U0Ycw/8WnVHSK1SkC68ZwvbJx+sBZ4M+rL3l8E0jdpc0Evsz8APvV8IVru/zsOA6 oRt4kRxv9FD6fmY5+3yu9yEtua1PGv6YJIbKfYAKemdmEOwMVvuclkBiGHq1gl3k atEYv2NkuUXjmfJHwThfMqgBHgbniVB+Zw7pUzLsLBhpJEIrMlz/MfoRiQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCrV12blsAHiY7An4oaDdVjTCyoRMB8GA1UdIwQY MBaAFAU0xJ/PqKRQQdle1NjU/GnHJ6RnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYt Y2Q3ZTA2Y2JiNTMxLzEvS3RYWFp1V3dBZUpqc0NmaWhvTjFXTk1MS2hFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYtY2Q3ZTA2Y2JiNTMx LzEvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyTG9MA0G CSqGSIb3DQEBCwUAA4IBAQBrIX+CMlRFka9QcayGi9DU6xT1Zlv7qpb9i8scmatx Qg3tANCc8T09A4wjtTSCxlURRUcIbTvRroNOyAh5EC0Cp+IiFlHh2N23bdMrPSgx 3ZPe43MZSRdIJvUAJM1KDxXUkgACRGjvTKgBjHBumU0J/W/A67UJ/7sT+supwXFJ FoZCip273D8gH8BeOH87j7Xsub+wst3H2GRe9jPZqpNel+lHQwWDV6gYgcq0YIQ9 gReywfaOwoukULkTXKxljsO3opKorFPoUabz2xDSBaRLitbumKMRGbrAJMawXgEB vECcCZtmsULjpDceWHRfm6+QlPOAb9jFHnpctiv92Hek -----END CERTIFICATE-----Generated at Mon Jan 12 00:54:09 2026 by rpki-client