This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/66QLdVzaSwBwtiEZ9CrZcSHzqMs.roa File: 66QLdVzaSwBwtiEZ9CrZcSHzqMs.roa (raw, json) Hash identifier: mzVu9PmZWezA63TJvDd9U+Soah9ITDpF7pEdXqdmNWw= Subject key identifier: EB:A4:0B:75:5C:DA:4B:00:70:B6:21:19:F4:2A:D9:71:21:F3:A8:CB Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467 Certificate serial: 019B7C1345C7200B580B7E11B152B102FDF3 Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/66QLdVzaSwBwtiEZ9CrZcSHzqMs.roa Signing time: Fri 02 Jan 2026 00:19:56 +0000 ROA not before: Fri 02 Jan 2026 00:19:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 273197 IP address blocks: 185.226.193.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.mft rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 18:47:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:45:c7:20:0b:58:0b:7e:11:b1:52:b1:02:fd:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467 Validity Not Before: Jan 2 00:19:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=eba40b755cda4b0070b62119f42ad97121f3a8cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:38:94:57:00:57:38:28:91:f3:43:31:a8:dc: 16:2b:c7:0d:32:96:ff:6c:a6:3b:57:83:14:19:2f: aa:6d:74:6d:96:48:9b:98:d5:14:e8:01:79:85:4e: 40:e9:3e:1e:65:fb:0e:90:c0:29:a8:b4:cf:e6:0e: b8:39:c1:e7:b0:ef:97:df:d4:ef:9b:25:ee:fb:44: 1d:e0:62:4f:91:4b:c9:2a:85:0d:63:ab:92:94:59: 29:45:31:c0:a8:5b:bc:ee:dc:b3:90:af:c4:9c:8c: 4b:1c:8d:2b:65:fe:25:8e:03:7d:6f:04:39:1d:08: 85:41:e1:46:d9:8c:e6:73:75:b5:fb:a6:c4:6b:31: 9d:b6:1e:a2:94:0c:2b:93:c3:d6:c5:d7:25:2d:a9: 7e:2e:0e:86:5f:1b:e6:29:ea:a9:d3:c2:ea:9e:34: 0e:40:a8:31:81:5c:bc:07:11:d9:c4:58:fe:0f:db: 98:b5:57:c6:a0:99:7a:ed:c9:68:d5:57:d0:05:ce: cb:6f:32:65:b0:09:0f:26:bf:5d:85:8d:5c:39:72: 4f:75:e5:86:1e:fa:67:c1:dc:9b:8d:59:e1:7c:a2: 52:b3:9b:1b:a3:51:5a:fd:bf:73:e4:b9:ab:f5:d2: fc:4a:a3:4d:d9:68:f9:ec:69:44:03:57:b0:2f:53: 27:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:A4:0B:75:5C:DA:4B:00:70:B6:21:19:F4:2A:D9:71:21:F3:A8:CB X509v3 Authority Key Identifier: keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/66QLdVzaSwBwtiEZ9CrZcSHzqMs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.226.193.0/24 Signature Algorithm: sha256WithRSAEncryption 05:6a:d9:2b:92:8d:09:01:af:bf:d8:4e:53:65:f7:81:83:be: b9:5e:8c:d0:79:2a:da:f7:3c:ca:80:16:9e:ad:1e:8a:33:c4: 7e:5e:bb:9a:27:6d:11:8f:ce:d8:14:aa:4f:ef:a9:32:59:e5: 0d:59:bf:a6:db:4f:be:93:71:74:76:ec:32:18:15:a7:d9:df: 1c:62:75:fa:69:2a:82:12:39:59:44:cb:61:90:5d:1f:4a:72: 34:ab:3d:f9:5f:c6:4c:1b:ce:ed:84:79:a1:7a:ae:e4:79:87: 1c:ea:1f:c7:c3:dc:5b:27:64:78:d9:cb:7f:31:ad:4e:5d:75: e9:6b:8a:51:5f:c0:96:02:e2:7d:ab:c9:fe:de:32:32:d9:d0: 42:fd:12:b4:cb:85:e3:f3:17:ac:ab:8b:b3:dd:f0:58:dc:48: cc:2b:68:fa:57:4f:42:8b:26:e4:85:27:e1:94:36:a1:a8:c8: 81:6e:67:37:29:ba:5e:16:07:a5:db:fb:c3:9a:1f:51:92:68: 76:ce:f6:33:65:b3:5a:0a:1c:a7:ff:b8:e9:ca:22:ed:ee:be: 3e:f4:11:8a:d5:f5:01:e3:9c:10:e1:88:18:5c:25:00:12:d4: 63:2d:25:21:eb:60:15:93:e1:d5:9a:c8:21:09:18:b5:c9:a3: c0:e8:d0:41 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8E0XHIAtYC34RsVKxAv3zMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1MzRjNDlmY2ZhOGE0NTA0MWQ5NWVkNGQ4ZDRmYzY5Yzcy N2E0NjcwHhcNMjYwMTAyMDAxOTU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYmE0MGI3NTVjZGE0YjAwNzBiNjIxMTlmNDJhZDk3MTIxZjNhOGNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2jiUVwBXOCiR80MxqNwWK8cNMpb/ bKY7V4MUGS+qbXRtlkibmNUU6AF5hU5A6T4eZfsOkMApqLTP5g64OcHnsO+X39Tv myXu+0Qd4GJPkUvJKoUNY6uSlFkpRTHAqFu87tyzkK/EnIxLHI0rZf4ljgN9bwQ5 HQiFQeFG2Yzmc3W1+6bEazGdth6ilAwrk8PWxdclLal+Lg6GXxvmKeqp08LqnjQO QKgxgVy8BxHZxFj+D9uYtVfGoJl67clo1VfQBc7LbzJlsAkPJr9dhY1cOXJPdeWG HvpnwdybjVnhfKJSs5sbo1Fa/b9z5Lmr9dL8SqNN2Wj57GlEA1ewL1Mn9wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOukC3Vc2ksAcLYhGfQq2XEh86jLMB8GA1UdIwQY MBaAFAU0xJ/PqKRQQdle1NjU/GnHJ6RnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYt Y2Q3ZTA2Y2JiNTMxLzEvNjZRTGRWemFTd0J3dGlFWjlDclpjU0h6cU1zLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYtY2Q3ZTA2Y2JiNTMx LzEvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAueLBMA0G CSqGSIb3DQEBCwUAA4IBAQAFatkrko0JAa+/2E5TZfeBg765XozQeSra9zzKgBae rR6KM8R+XruaJ20Rj87YFKpP76kyWeUNWb+m20++k3F0duwyGBWn2d8cYnX6aSqC EjlZRMthkF0fSnI0qz35X8ZMG87thHmheq7keYcc6h/Hw9xbJ2R42ct/Ma1OXXXp a4pRX8CWAuJ9q8n+3jIy2dBC/RK0y4Xj8xesq4uz3fBY3EjMK2j6V09CiybkhSfh lDahqMiBbmc3KbpeFgel2/vDmh9Rkmh2zvYzZbNaChyn/7jpyiLt7r4+9BGK1fUB 45wQ4YgYXCUAEtRjLSUh62AVk+HVmsghCRi1yaPA6NBB -----END CERTIFICATE-----Generated at Fri Jan 23 21:36:10 2026 by rpki-client