This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/DqBz-XXbKJIObKUDDQ33l6jVLck.roa File: DqBz-XXbKJIObKUDDQ33l6jVLck.roa (raw, json) Hash identifier: Hha2whyaGy8+BUI5wMokj2tNW96gXutt3HJK0bYhGGM= Subject key identifier: 0E:A0:73:F9:75:DB:28:92:0E:6C:A5:03:0D:0D:F7:97:A8:D5:2D:C9 Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467 Certificate serial: 019B7C131842D33DAB71A9F8D2F675B4B696 Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/DqBz-XXbKJIObKUDDQ33l6jVLck.roa Signing time: Fri 02 Jan 2026 00:19:44 +0000 ROA not before: Fri 02 Jan 2026 00:19:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8903 IP address blocks: 45.83.50.0/23 maxlen: 23 45.83.50.0/24 maxlen: 24 45.83.51.0/24 maxlen: 24 80.66.112.0/23 maxlen: 23 80.66.114.0/24 maxlen: 24 80.66.115.0/24 maxlen: 24 80.66.117.0/24 maxlen: 24 80.66.118.0/24 maxlen: 24 80.66.119.0/24 maxlen: 24 80.66.120.0/23 maxlen: 23 80.66.120.0/24 maxlen: 24 80.66.121.0/24 maxlen: 24 80.66.122.0/24 maxlen: 24 80.66.123.0/24 maxlen: 24 80.66.124.0/24 maxlen: 24 80.66.125.0/24 maxlen: 24 80.66.126.0/24 maxlen: 24 80.66.127.0/24 maxlen: 24 85.209.72.0/22 maxlen: 22 89.42.70.0/24 maxlen: 24 89.44.150.0/24 maxlen: 24 89.44.151.0/24 maxlen: 24 89.45.208.0/24 maxlen: 24 91.132.28.0/23 maxlen: 23 91.132.31.0/24 maxlen: 24 94.198.47.0/24 maxlen: 24 178.19.34.0/24 maxlen: 24 178.19.35.0/24 maxlen: 24 178.19.44.0/24 maxlen: 24 178.19.45.0/24 maxlen: 24 178.19.46.0/23 maxlen: 23 178.19.47.0/24 maxlen: 24 185.71.28.0/24 maxlen: 24 185.203.20.0/22 maxlen: 22 185.203.20.0/24 maxlen: 24 185.203.21.0/24 maxlen: 24 185.203.22.0/24 maxlen: 24 185.203.23.0/24 maxlen: 24 185.229.215.0/24 maxlen: 24 185.242.175.0/24 maxlen: 24 193.178.212.0/24 maxlen: 24 193.178.218.0/24 maxlen: 24 193.186.1.0/24 maxlen: 24 193.186.11.0/24 maxlen: 24 194.15.140.0/24 maxlen: 24 194.15.146.0/24 maxlen: 24 194.15.182.0/24 maxlen: 24 194.15.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.mft rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 18:47:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:18:42:d3:3d:ab:71:a9:f8:d2:f6:75:b4:b6:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467 Validity Not Before: Jan 2 00:19:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0ea073f975db28920e6ca5030d0df797a8d52dc9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:af:cb:da:4f:2a:f4:b5:ed:16:89:9f:3e:8b: ef:85:72:06:4d:bf:12:bf:01:6a:75:e2:f2:8f:0b: fd:43:43:09:4e:6e:14:1d:d9:2c:a9:f0:1f:3f:61: d9:e5:56:55:fe:bd:7a:6f:23:1a:b4:36:b4:92:ee: bd:8d:4d:a6:c3:bc:1c:1c:60:be:4d:f5:26:7a:10: 12:23:9f:b7:a4:83:18:e6:99:f0:e7:b9:de:cc:c1: bd:75:68:5a:91:c3:ca:57:55:f1:31:c7:55:30:b2: c7:2e:66:b3:db:ba:1f:35:e0:3a:00:09:f1:94:7e: 39:93:60:46:a6:da:e8:e7:15:c7:53:22:81:60:2a: 6e:76:9a:d2:ec:d2:15:29:b3:21:e9:79:1e:8b:c8: 11:16:04:03:08:f3:92:4d:6b:75:6b:d4:2e:de:de: 83:c8:b8:59:82:e7:4c:d2:9f:89:7f:ad:9c:b0:77: 85:a1:0e:45:76:a7:ef:6e:91:20:f7:e7:ac:6a:4e: ca:ff:a1:ee:25:45:5c:e8:66:3b:65:d2:0e:00:88: e2:cc:db:40:ac:64:62:d7:65:e9:c7:2e:d5:b1:bd: 82:13:e9:1b:5d:86:11:e0:78:74:7f:4b:f9:4f:44: 58:74:c2:f1:6a:77:25:8f:5e:f1:9f:88:53:95:00: 6e:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:A0:73:F9:75:DB:28:92:0E:6C:A5:03:0D:0D:F7:97:A8:D5:2D:C9 X509v3 Authority Key Identifier: keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/DqBz-XXbKJIObKUDDQ33l6jVLck.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.83.50.0/23 80.66.112.0/22 80.66.117.0-80.66.127.255 85.209.72.0/22 89.42.70.0/24 89.44.150.0/23 89.45.208.0/24 91.132.28.0/23 91.132.31.0/24 94.198.47.0/24 178.19.34.0/23 178.19.44.0/22 185.71.28.0/24 185.203.20.0/22 185.229.215.0/24 185.242.175.0/24 193.178.212.0/24 193.178.218.0/24 193.186.1.0/24 193.186.11.0/24 194.15.140.0/24 194.15.146.0/24 194.15.182.0/24 194.15.195.0/24 Signature Algorithm: sha256WithRSAEncryption 36:78:27:fe:c1:54:ef:90:ed:a8:2b:2b:b8:0e:f7:fa:f7:b7: 10:b0:b0:3f:53:ed:90:cf:42:6f:55:59:30:8e:5b:04:32:cf: fc:4f:76:06:10:6b:cf:ae:00:1d:44:c7:00:50:9d:55:f1:c5: 32:a8:73:5f:79:71:8b:3c:48:e6:3a:fb:fc:f9:cd:84:9a:31: 46:12:67:cf:6c:01:c9:df:22:8d:1a:48:d0:d6:aa:4a:da:0e: 65:aa:5f:66:54:02:ae:cd:76:e8:10:5d:3b:e1:f5:91:5f:98: 38:2f:f6:76:8d:57:89:95:d2:90:ec:f8:48:b3:5e:c1:eb:b3: bb:28:8b:34:7f:77:b9:d8:28:23:5b:3f:4d:d6:2c:b9:8c:56: 79:cd:87:e4:3b:1c:2e:7c:71:aa:94:1a:f4:cb:78:62:a4:95: 6f:e2:fb:2f:be:10:ce:d2:20:ff:e8:69:27:d7:5c:f6:45:43: b7:66:bc:eb:ad:12:47:74:97:ae:bf:fb:f7:f8:63:10:b1:70: 74:56:91:81:ac:3e:9c:61:f5:84:75:88:e7:68:bd:f8:59:2d: 8f:9e:4f:b2:c1:69:7e:46:3c:3d:b6:79:6a:f9:3a:7f:2b:c6: 5c:35:e2:c0:b4:bc:1a:8a:39:a4:28:60:fb:a5:48:82:87:91: be:7d:8a:89 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt8ExhC0z2rcan40vZ1tLaWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1MzRjNDlmY2ZhOGE0NTA0MWQ5NWVkNGQ4ZDRmYzY5Yzcy N2E0NjcwHhcNMjYwMTAyMDAxOTQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZWEwNzNmOTc1ZGIyODkyMGU2Y2E1MDMwZDBkZjc5N2E4ZDUyZGM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxa/L2k8q9LXtFomfPovvhXIGTb8S vwFqdeLyjwv9Q0MJTm4UHdksqfAfP2HZ5VZV/r16byMatDa0ku69jU2mw7wcHGC+ TfUmehASI5+3pIMY5pnw57nezMG9dWhakcPKV1XxMcdVMLLHLmaz27ofNeA6AAnx lH45k2BGptro5xXHUyKBYCpudprS7NIVKbMh6Xkei8gRFgQDCPOSTWt1a9Qu3t6D yLhZgudM0p+Jf62csHeFoQ5FdqfvbpEg9+esak7K/6HuJUVc6GY7ZdIOAIjizNtA rGRi12Xpxy7Vsb2CE+kbXYYR4Hh0f0v5T0RYdMLxanclj17xn4hTlQBuuwIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFA6gc/l12yiSDmylAw0N95eo1S3JMB8GA1UdIwQY MBaAFAU0xJ/PqKRQQdle1NjU/GnHJ6RnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYt Y2Q3ZTA2Y2JiNTMxLzEvRHFCei1YWGJLSklPYktVRERRMzNsNmpWTGNrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYtY2Q3ZTA2Y2JiNTMx LzEvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIG1BggrBgEFBQcBBwEB/wSBpTCBojCBnwQCAAEwgZgDBAEt UzIDBAJQQnAwDAMEAFBCdQMEB1BCAAMEAlXRSAMEAFkqRgMEAVkslgMEAFkt0AME AVuEHAMEAFuEHwMEAF7GLwMEAbITIgMEArITLAMEALlHHAMEArnLFAMEALnl1wME ALnyrwMEAMGy1AMEAMGy2gMEAMG6AQMEAMG6CwMEAMIPjAMEAMIPkgMEAMIPtgME AMIPwzANBgkqhkiG9w0BAQsFAAOCAQEANngn/sFU75DtqCsruA73+ve3ELCwP1Pt kM9Cb1VZMI5bBDLP/E92BhBrz64AHUTHAFCdVfHFMqhzX3lxizxI5jr7/PnNhJox RhJnz2wByd8ijRpI0NaqStoOZapfZlQCrs126BBdO+H1kV+YOC/2do1XiZXSkOz4 SLNeweuzuyiLNH93udgoI1s/TdYsuYxWec2H5DscLnxxqpQa9Mt4YqSVb+L7L74Q ztIg/+hpJ9dc9kVDt2a8660SR3SXrr/79/hjELFwdFaRgaw+nGH1hHWI52i9+Fkt j55PssFpfkY8PbZ5avk6fyvGXDXiwLS8Goo5pChg+6VIgoeRvn2KiQ== -----END CERTIFICATE-----Generated at Fri Jan 23 21:37:05 2026 by rpki-client