This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/CsbaKm400EnOLjFfot8BRyWEVFM.roa File: CsbaKm400EnOLjFfot8BRyWEVFM.roa (raw, json) Hash identifier: tglJ6rOBbTYV2DuRYKuVRoyNs/q90rD9fakjWA6avTs= Subject key identifier: 0A:C6:DA:2A:6E:34:D0:49:CE:2E:31:5F:A2:DF:01:47:25:84:54:53 Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467 Certificate serial: 019BE1894E7CA10F2D635549C8251F9ACA88 Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/CsbaKm400EnOLjFfot8BRyWEVFM.roa Signing time: Wed 21 Jan 2026 17:10:30 +0000 ROA not before: Wed 21 Jan 2026 17:10:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209618 IP address blocks: 2a0a:e9c2::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.mft rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 11:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:e1:89:4e:7c:a1:0f:2d:63:55:49:c8:25:1f:9a:ca:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467 Validity Not Before: Jan 21 17:10:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0ac6da2a6e34d049ce2e315fa2df014725845453 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:51:26:24:4d:c9:bb:7e:74:25:48:ec:a6:49: 2c:38:59:52:13:46:ac:3c:f9:83:a1:a1:c3:27:48: 77:b5:1c:9c:60:10:69:5a:c7:94:c6:2b:df:46:34: 7f:fc:50:e5:2f:d4:72:4e:ba:30:21:6c:96:cb:ff: d3:55:a9:20:9e:30:d1:91:5f:ae:38:02:46:79:87: 2b:63:7b:8c:fb:b6:de:47:03:31:bd:2a:f1:52:44: 18:7f:75:5a:fd:15:b5:72:af:a0:16:12:13:4e:3b: b1:f9:e5:e3:fe:83:f2:41:e0:6e:d0:8e:8f:ed:0e: 41:50:58:c1:dd:a9:af:5c:74:97:fb:85:7d:e1:6a: b0:f9:4f:9e:07:77:83:bf:fa:eb:28:bc:da:99:ff: 72:0c:87:17:ac:f6:65:dc:0f:cc:c7:d3:26:11:fc: 5c:99:3b:20:68:49:05:c5:7c:1a:fc:45:7e:50:e4: 1f:55:eb:ca:77:a8:d7:25:0c:d5:21:14:3d:65:27: 7e:5c:b7:c7:b9:dd:99:47:9f:4b:29:00:a8:10:e2: 66:61:cd:ea:f6:d0:41:7c:40:4c:1b:9d:c0:ee:5a: 56:cd:82:0d:db:11:9f:fb:2e:39:46:99:68:64:5e: d5:cb:1a:df:c4:a7:7d:05:ed:5f:d0:47:11:99:44: 60:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:C6:DA:2A:6E:34:D0:49:CE:2E:31:5F:A2:DF:01:47:25:84:54:53 X509v3 Authority Key Identifier: keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/CsbaKm400EnOLjFfot8BRyWEVFM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:e9c2::/32 Signature Algorithm: sha256WithRSAEncryption 60:a8:35:e1:26:c5:af:53:1d:22:73:2b:88:df:23:ee:bf:d2: d7:50:b1:5d:a6:5b:33:14:63:6b:30:6b:d1:ec:e6:4c:0a:03: ac:e6:90:d3:6d:ba:05:3d:3e:78:b8:b0:30:82:15:56:04:6d: 17:22:23:08:57:45:50:1e:f3:89:0d:a7:3f:2c:0c:73:da:36: 70:36:12:7e:3c:30:ab:2e:e5:6d:32:bf:52:00:31:39:6c:a5: cc:2f:47:84:6d:4f:fb:50:76:08:d4:17:f7:c1:2a:fe:f2:5d: 94:93:04:c0:f7:48:fb:29:33:dd:60:06:d1:57:6b:45:11:1b: 68:0f:5a:d9:3d:2e:e0:90:cd:be:0b:0d:db:eb:3d:8d:3a:68: 87:ed:5a:00:42:f4:09:ed:fa:4e:6a:b7:ff:6f:a1:41:46:fa: 1b:0e:e6:53:ac:cc:f0:6f:e1:a2:15:29:fb:d5:c2:08:05:47: 9e:c6:45:ad:57:ea:f1:69:c5:37:30:19:fb:33:90:ca:ed:2a: 14:77:22:5e:0f:33:34:e1:b3:49:c6:8f:5c:e5:f5:bd:28:c6: 2c:f8:49:7e:8e:32:10:82:c9:d5:b7:75:3b:3b:3d:31:66:f0: 0b:b8:0e:45:45:2d:0e:5b:0d:62:6b:79:3b:39:3c:00:15:85: 79:37:89:a7 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZvhiU58oQ8tY1VJyCUfmsqIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1MzRjNDlmY2ZhOGE0NTA0MWQ5NWVkNGQ4ZDRmYzY5Yzcy N2E0NjcwHhcNMjYwMTIxMTcxMDMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYWM2ZGEyYTZlMzRkMDQ5Y2UyZTMxNWZhMmRmMDE0NzI1ODQ1NDUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtVEmJE3Ju350JUjspkksOFlSE0as PPmDoaHDJ0h3tRycYBBpWseUxivfRjR//FDlL9RyTrowIWyWy//TVakgnjDRkV+u OAJGeYcrY3uM+7beRwMxvSrxUkQYf3Va/RW1cq+gFhITTjux+eXj/oPyQeBu0I6P 7Q5BUFjB3amvXHSX+4V94Wqw+U+eB3eDv/rrKLzamf9yDIcXrPZl3A/Mx9MmEfxc mTsgaEkFxXwa/EV+UOQfVevKd6jXJQzVIRQ9ZSd+XLfHud2ZR59LKQCoEOJmYc3q 9tBBfEBMG53A7lpWzYIN2xGf+y45RploZF7VyxrfxKd9Be1f0EcRmURgYQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFArG2ipuNNBJzi4xX6LfAUclhFRTMB8GA1UdIwQY MBaAFAU0xJ/PqKRQQdle1NjU/GnHJ6RnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYt Y2Q3ZTA2Y2JiNTMxLzEvQ3NiYUttNDAwRW5PTGpGZm90OEJSeVdFVkZNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYtY2Q3ZTA2Y2JiNTMx LzEvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKgrpwjAN BgkqhkiG9w0BAQsFAAOCAQEAYKg14SbFr1MdInMriN8j7r/S11CxXaZbMxRjazBr 0ezmTAoDrOaQ0226BT0+eLiwMIIVVgRtFyIjCFdFUB7ziQ2nPywMc9o2cDYSfjww qy7lbTK/UgAxOWylzC9HhG1P+1B2CNQX98Eq/vJdlJMEwPdI+ykz3WAG0VdrRREb aA9a2T0u4JDNvgsN2+s9jTpoh+1aAEL0Ce36Tmq3/2+hQUb6Gw7mU6zM8G/hohUp +9XCCAVHnsZFrVfq8WnFNzAZ+zOQyu0qFHciXg8zNOGzScaPXOX1vSjGLPhJfo4y EILJ1bd1Ozs9MWbwC7gORUUtDlsNYmt5Ozk8ABWFeTeJpw== -----END CERTIFICATE-----Generated at Fri Jan 23 21:35:32 2026 by rpki-client