This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/IrJU1oFqKTSdVHbrIetKTQSzVVo.roa File: IrJU1oFqKTSdVHbrIetKTQSzVVo.roa (raw, json) Hash identifier: ucq94ph6/uTBOMJEq98DTZGqj/Fp+Ss5Wwzz7I7LHzQ= Subject key identifier: 22:B2:54:D6:81:6A:29:34:9D:54:76:EB:21:EB:4A:4D:04:B3:55:5A Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467 Certificate serial: 019B7C131AA23BCAF89A90A419AC62DCDBA2 Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/IrJU1oFqKTSdVHbrIetKTQSzVVo.roa Signing time: Fri 02 Jan 2026 00:19:45 +0000 ROA not before: Fri 02 Jan 2026 00:19:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 27717 IP address blocks: 217.26.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.mft rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 18:47:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:1a:a2:3b:ca:f8:9a:90:a4:19:ac:62:dc:db:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467 Validity Not Before: Jan 2 00:19:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=22b254d6816a29349d5476eb21eb4a4d04b3555a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:c5:2a:25:4e:bf:bd:05:33:1e:6c:c4:3a:e6: 94:c8:43:1f:27:37:1d:d3:c6:29:a2:38:46:4c:c5: 80:93:42:0d:42:ab:0e:92:6e:ac:6e:6e:62:56:9d: 63:46:95:60:43:9c:72:8c:ed:a1:b7:f6:5b:c1:40: 62:e7:f6:4e:bb:13:1f:ed:c5:f1:e8:a7:30:31:ad: 19:1e:d2:b7:0b:6b:fd:5b:e8:79:87:be:93:db:b8: f0:46:a7:c2:fa:ec:46:75:6e:c1:01:e1:c7:5a:19: 88:58:a4:17:77:e8:58:a1:eb:6f:48:bb:01:c8:4c: f0:9d:9e:ad:cc:4d:1e:79:a7:88:88:f7:db:b9:3f: be:31:f1:87:f0:e3:1d:f7:f5:6b:b1:d7:ae:6c:fb: e5:b9:93:34:42:b2:05:c2:8c:61:21:f7:57:37:f1: d0:91:cf:72:94:72:a4:5a:cf:9b:e5:09:a9:7f:f4: 74:15:53:8c:77:4a:6e:03:27:df:bc:f0:04:e3:50: 5b:d9:73:b7:44:dd:1d:f0:6b:01:7f:cf:5a:8c:14: 96:c4:5b:12:6c:45:fb:33:e7:1d:19:07:08:9c:6d: f0:70:dc:5a:f2:2a:a4:52:a1:d8:c9:b9:9c:30:a5: f1:2c:f0:f1:3d:ab:47:63:16:b3:9d:c4:3b:2c:6e: c2:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:B2:54:D6:81:6A:29:34:9D:54:76:EB:21:EB:4A:4D:04:B3:55:5A X509v3 Authority Key Identifier: keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/IrJU1oFqKTSdVHbrIetKTQSzVVo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.26.191.0/24 Signature Algorithm: sha256WithRSAEncryption 93:9b:72:03:dc:35:bc:b3:c6:60:05:92:3d:18:0d:33:fa:2d: 24:b7:83:e3:d1:10:4e:a1:80:75:39:8e:23:78:8d:18:97:07: 9e:c0:31:5f:42:95:62:a5:bb:63:7a:3b:cc:9c:4e:c0:f4:23: a4:bc:04:ca:c0:d6:02:1b:f6:41:7e:d2:f3:ec:81:09:64:fd: 01:29:47:87:a5:67:0a:50:2c:09:ab:fe:00:fc:72:17:25:7d: 01:33:fb:d4:4f:ba:71:a1:b4:71:25:b2:b7:59:ae:45:41:70: 1b:a7:60:a4:c4:6a:ac:11:0e:43:77:7c:13:c7:47:9d:a5:08: 6a:ea:20:aa:9d:a2:12:a4:70:62:30:9e:b8:92:85:b6:79:8a: 1c:68:81:09:ac:91:41:30:6f:0d:b8:cf:f6:c1:74:78:8d:7b: e9:db:21:c6:ec:d3:d2:79:5f:27:34:fe:ae:99:df:4c:8b:af: a1:82:1d:d5:07:af:29:f0:1b:64:d3:38:b6:94:af:18:8e:12: e8:88:25:d8:26:ee:33:9c:90:e7:88:98:85:d9:5e:ec:e6:99: d5:f6:29:67:67:f1:a2:f7:f8:56:74:ad:09:fb:a5:19:65:7f: 22:a3:42:64:b4:74:47:d0:70:6e:6d:bc:95:69:86:e4:7f:81: 19:a3:dc:1d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8ExqiO8r4mpCkGaxi3NuiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1MzRjNDlmY2ZhOGE0NTA0MWQ5NWVkNGQ4ZDRmYzY5Yzcy N2E0NjcwHhcNMjYwMTAyMDAxOTQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMmIyNTRkNjgxNmEyOTM0OWQ1NDc2ZWIyMWViNGE0ZDA0YjM1NTVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAysUqJU6/vQUzHmzEOuaUyEMfJzcd 08YpojhGTMWAk0INQqsOkm6sbm5iVp1jRpVgQ5xyjO2ht/ZbwUBi5/ZOuxMf7cXx 6KcwMa0ZHtK3C2v9W+h5h76T27jwRqfC+uxGdW7BAeHHWhmIWKQXd+hYoetvSLsB yEzwnZ6tzE0eeaeIiPfbuT++MfGH8OMd9/VrsdeubPvluZM0QrIFwoxhIfdXN/HQ kc9ylHKkWs+b5Qmpf/R0FVOMd0puAyffvPAE41Bb2XO3RN0d8GsBf89ajBSWxFsS bEX7M+cdGQcInG3wcNxa8iqkUqHYybmcMKXxLPDxPatHYxazncQ7LG7CnwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCKyVNaBaik0nVR26yHrSk0Es1VaMB8GA1UdIwQY MBaAFAU0xJ/PqKRQQdle1NjU/GnHJ6RnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYt Y2Q3ZTA2Y2JiNTMxLzEvSXJKVTFvRnFLVFNkVkhicklldEtUUVN6VlZvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYtY2Q3ZTA2Y2JiNTMx LzEvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2Rq/MA0G CSqGSIb3DQEBCwUAA4IBAQCTm3ID3DW8s8ZgBZI9GA0z+i0kt4Pj0RBOoYB1OY4j eI0YlweewDFfQpVipbtjejvMnE7A9COkvATKwNYCG/ZBftLz7IEJZP0BKUeHpWcK UCwJq/4A/HIXJX0BM/vUT7pxobRxJbK3Wa5FQXAbp2CkxGqsEQ5Dd3wTx0edpQhq 6iCqnaISpHBiMJ64koW2eYocaIEJrJFBMG8NuM/2wXR4jXvp2yHG7NPSeV8nNP6u md9Mi6+hgh3VB68p8Btk0zi2lK8YjhLoiCXYJu4znJDniJiF2V7s5pnV9ilnZ/Gi 9/hWdK0J+6UZZX8io0JktHRH0HBubbyVaYbkf4EZo9wd -----END CERTIFICATE-----Generated at Fri Jan 23 21:37:15 2026 by rpki-client