This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/CIpKHjhVZY9Ujg9patYxNf3Dqas.roa File: CIpKHjhVZY9Ujg9patYxNf3Dqas.roa (raw, json) Hash identifier: I+1D/YRBbXKPcUT0uH5cD53YkWTVepGfyeuMf6rvrB0= Subject key identifier: 08:8A:4A:1E:38:55:65:8F:54:8E:0F:69:6A:D6:31:35:FD:C3:A9:AB Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467 Certificate serial: 019B7C134D8C09E97D4B859B22D26D856D8A Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/CIpKHjhVZY9Ujg9patYxNf3Dqas.roa Signing time: Fri 02 Jan 2026 00:19:58 +0000 ROA not before: Fri 02 Jan 2026 00:19:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 399382 IP address blocks: 217.26.190.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.mft rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 18:47:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:4d:8c:09:e9:7d:4b:85:9b:22:d2:6d:85:6d:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467 Validity Not Before: Jan 2 00:19:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=088a4a1e3855658f548e0f696ad63135fdc3a9ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:ca:26:15:a3:2e:20:04:ef:d0:98:6a:80:51: 3c:2b:f5:17:1b:50:a1:1e:26:81:95:d9:25:a4:88: 4d:c6:97:b9:7f:6b:0f:89:48:b7:49:39:f8:a9:49: da:79:a3:df:e9:98:1d:20:c3:f8:26:c3:8d:30:37: 39:99:17:fd:fa:d4:b4:26:ff:dd:cd:85:06:27:2a: b2:77:93:99:99:9f:65:0d:56:9c:d2:bc:54:5b:5f: 7b:dc:6f:db:72:c8:71:6b:9c:b0:dc:fa:8b:d6:df: 0e:98:c3:c0:a7:12:9e:98:92:00:9a:57:21:67:73: 6b:8c:bb:2a:ad:9c:0c:ee:b2:75:b1:e5:d2:c5:2d: 81:5a:f9:26:4b:8e:43:fc:0c:40:93:b8:40:e6:e3: de:13:29:cf:72:05:6e:b8:f1:fd:96:30:3d:94:bc: af:5e:ac:c5:87:c5:92:05:9b:cf:47:96:f6:16:37: 26:25:90:d3:55:c5:46:1f:60:35:d8:f3:69:9a:74: af:da:12:f4:03:47:38:3c:80:6b:0c:6f:ff:66:3a: ac:d4:9d:06:d5:16:ad:68:64:dd:4f:f7:94:e1:09: 01:ab:ea:45:e0:12:bb:cb:d1:a8:bf:b9:04:36:39: 02:20:70:a1:96:3a:96:07:42:f7:1e:6e:68:30:83: 61:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:8A:4A:1E:38:55:65:8F:54:8E:0F:69:6A:D6:31:35:FD:C3:A9:AB X509v3 Authority Key Identifier: keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/CIpKHjhVZY9Ujg9patYxNf3Dqas.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.26.190.0/24 Signature Algorithm: sha256WithRSAEncryption 16:9b:21:0d:a0:a7:4f:18:b3:c7:b6:69:28:99:a4:49:c8:5b: 23:30:18:2b:a2:e8:01:54:89:0b:9a:1a:f6:21:ae:f9:59:07: 8e:82:b0:97:f8:a4:d1:e8:4e:7c:06:86:d5:5c:ad:ff:5b:15: 8e:fb:3d:c5:ca:b2:5d:3f:67:34:45:82:37:d1:f5:0c:a1:68: f6:3a:e1:7a:c0:c4:a6:a6:c0:c3:05:73:94:08:79:e3:6d:28: cc:d4:e8:48:36:ce:9d:fb:bf:b2:a9:09:be:59:27:6e:97:0a: d4:39:1b:0f:51:d8:b0:b3:61:e8:19:61:5d:87:0f:7f:49:6f: 07:32:c3:fc:1e:b0:5a:ff:20:86:b9:a9:44:6b:a2:c6:e3:3c: 5b:e8:75:dd:b2:3f:be:a4:80:bd:be:6d:33:2f:a1:57:bb:fd: e2:a9:8a:3d:72:2d:10:82:09:aa:8d:8d:5c:07:04:9d:68:9e: 31:2d:da:7f:e2:2a:d6:5f:a7:54:77:d8:36:68:a7:0d:bf:ff: e0:e9:d9:e0:21:86:f7:f0:f2:1c:3c:1f:20:1a:31:b5:9e:71: d4:d7:d7:86:1b:d2:c2:2d:b6:24:56:1b:17:04:b1:8c:f3:a7: 87:4e:e2:23:9a:67:d3:94:0a:11:73:fd:5b:f2:f2:4a:44:42: f7:b9:6e:ee -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8E02MCel9S4WbItJthW2KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1MzRjNDlmY2ZhOGE0NTA0MWQ5NWVkNGQ4ZDRmYzY5Yzcy N2E0NjcwHhcNMjYwMTAyMDAxOTU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwODhhNGExZTM4NTU2NThmNTQ4ZTBmNjk2YWQ2MzEzNWZkYzNhOWFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvMomFaMuIATv0JhqgFE8K/UXG1Ch HiaBldklpIhNxpe5f2sPiUi3STn4qUnaeaPf6ZgdIMP4JsONMDc5mRf9+tS0Jv/d zYUGJyqyd5OZmZ9lDVac0rxUW1973G/bcshxa5yw3PqL1t8OmMPApxKemJIAmlch Z3NrjLsqrZwM7rJ1seXSxS2BWvkmS45D/AxAk7hA5uPeEynPcgVuuPH9ljA9lLyv XqzFh8WSBZvPR5b2FjcmJZDTVcVGH2A12PNpmnSv2hL0A0c4PIBrDG//Zjqs1J0G 1RataGTdT/eU4QkBq+pF4BK7y9Gov7kENjkCIHChljqWB0L3Hm5oMINhuwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAiKSh44VWWPVI4PaWrWMTX9w6mrMB8GA1UdIwQY MBaAFAU0xJ/PqKRQQdle1NjU/GnHJ6RnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYt Y2Q3ZTA2Y2JiNTMxLzEvQ0lwS0hqaFZaWTlVamc5cGF0WXhOZjNEcWFzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYtY2Q3ZTA2Y2JiNTMx LzEvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2Rq+MA0G CSqGSIb3DQEBCwUAA4IBAQAWmyENoKdPGLPHtmkomaRJyFsjMBgrougBVIkLmhr2 Ia75WQeOgrCX+KTR6E58BobVXK3/WxWO+z3FyrJdP2c0RYI30fUMoWj2OuF6wMSm psDDBXOUCHnjbSjM1OhINs6d+7+yqQm+WSdulwrUORsPUdiws2HoGWFdhw9/SW8H MsP8HrBa/yCGualEa6LG4zxb6HXdsj++pIC9vm0zL6FXu/3iqYo9ci0QggmqjY1c BwSdaJ4xLdp/4irWX6dUd9g2aKcNv//g6dngIYb38PIcPB8gGjG1nnHU19eGG9LC LbYkVhsXBLGM86eHTuIjmmfTlAoRc/1b8vJKREL3uW7u -----END CERTIFICATE-----Generated at Fri Jan 23 21:38:54 2026 by rpki-client