This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/Ts0rbHmza-h8mkr6ZZqxtSwkBO4.roa File: Ts0rbHmza-h8mkr6ZZqxtSwkBO4.roa (raw, json) Hash identifier: F4T+TScg3RxTIJXEFI5t3P1OWRR2hmK1sZVTC4K1XqU= Subject key identifier: 4E:CD:2B:6C:79:B3:6B:E8:7C:9A:4A:FA:65:9A:B1:B5:2C:24:04:EE Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467 Certificate serial: 019B7C133E2A29AFF82A707BCCC8F3135E01 Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/Ts0rbHmza-h8mkr6ZZqxtSwkBO4.roa Signing time: Fri 02 Jan 2026 00:19:54 +0000 ROA not before: Fri 02 Jan 2026 00:19:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 272368 IP address blocks: 141.136.62.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.mft rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 11:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:3e:2a:29:af:f8:2a:70:7b:cc:c8:f3:13:5e:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467 Validity Not Before: Jan 2 00:19:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4ecd2b6c79b36be87c9a4afa659ab1b52c2404ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:a6:a3:85:79:be:75:8f:e4:5e:c6:01:b4:98: 97:24:d9:4d:b6:d0:1b:55:bc:01:d9:d1:68:9c:e2: 7a:83:0a:63:14:15:d8:2c:8f:b9:1d:8d:2c:7f:b6: c4:7f:93:ee:9d:83:23:4d:07:fb:85:7d:ec:46:b9: 1e:66:53:eb:7c:61:c5:2d:d3:20:bd:c9:70:67:17: 6c:ed:3b:18:df:3d:96:fa:e6:e8:b4:49:c3:54:6f: e0:56:2a:f6:9c:60:42:40:e3:81:97:00:40:f7:f1: 4d:44:c8:13:24:33:98:38:d5:a7:a3:59:55:c3:ed: 39:8d:e5:32:92:13:c6:ed:e8:62:fb:c4:ce:a4:44: 76:b6:5b:92:c9:c1:d4:85:be:c6:aa:35:3c:19:46: a8:e8:e7:78:0e:06:b1:41:7c:18:17:3d:d5:51:59: 79:c8:7b:a7:ad:3a:ad:2d:6b:7b:fa:59:84:06:80: b4:60:cc:6c:e8:47:42:7a:78:43:93:e2:65:af:8a: 81:e2:27:2c:bb:04:81:bf:a3:1f:8a:42:e9:e0:c5: 9d:33:8c:d0:18:d1:cb:ab:c7:13:a1:c9:b3:53:5f: 2e:5c:15:dc:0f:fc:f6:7d:18:24:6c:7f:f5:de:4e: 82:21:32:16:92:a9:25:8d:d7:7a:60:50:5f:b1:bf: ae:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:CD:2B:6C:79:B3:6B:E8:7C:9A:4A:FA:65:9A:B1:B5:2C:24:04:EE X509v3 Authority Key Identifier: keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/Ts0rbHmza-h8mkr6ZZqxtSwkBO4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 141.136.62.0/24 Signature Algorithm: sha256WithRSAEncryption a1:f0:3a:f7:db:e7:c3:bd:7c:27:c5:3d:68:e8:cd:1a:25:a8: 35:08:4f:24:e9:59:41:d9:b7:d0:75:49:b2:11:ce:8d:ab:22: ee:94:f8:99:1b:46:d1:e5:fe:f1:ae:fd:d1:99:0b:5f:52:2e: 01:44:26:2f:d0:95:c0:df:2c:d4:61:42:84:ef:39:c4:f4:68: 7b:7b:69:a3:13:7b:3b:53:c2:6c:de:6d:dd:d3:93:15:ac:ef: b7:6e:2c:16:92:ea:be:97:e5:43:6b:b4:55:b6:19:e3:9e:7e: d0:97:fe:96:be:d1:a8:4d:21:cb:13:aa:2b:dc:ee:ce:85:57: 01:e9:dc:9d:9c:70:da:41:f1:de:d2:ea:d8:9c:15:dc:27:34: 8e:3e:84:be:30:6b:8c:97:d8:9f:d2:2a:bd:64:a9:38:f6:8c: 4c:f3:ea:9b:98:96:87:fd:b8:4a:ea:ca:5e:4d:49:d2:67:23: e1:e9:07:1b:0a:e1:c0:21:8c:43:ff:3e:7f:cc:ed:60:49:ad: a7:99:91:54:22:74:3d:d5:91:b4:e1:3a:1d:46:a7:f6:29:7c: 0e:89:25:be:91:65:9e:92:dd:81:f2:2e:e4:82:41:cc:d4:b2: b9:2a:0a:0b:2a:8d:c9:39:b0:a9:bd:84:6f:78:51:ae:95:eb: cf:20:d1:61 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8Ez4qKa/4KnB7zMjzE14BMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1MzRjNDlmY2ZhOGE0NTA0MWQ5NWVkNGQ4ZDRmYzY5Yzcy N2E0NjcwHhcNMjYwMTAyMDAxOTU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZWNkMmI2Yzc5YjM2YmU4N2M5YTRhZmE2NTlhYjFiNTJjMjQwNGVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsaajhXm+dY/kXsYBtJiXJNlNttAb VbwB2dFonOJ6gwpjFBXYLI+5HY0sf7bEf5PunYMjTQf7hX3sRrkeZlPrfGHFLdMg vclwZxds7TsY3z2W+ubotEnDVG/gVir2nGBCQOOBlwBA9/FNRMgTJDOYONWno1lV w+05jeUykhPG7ehi+8TOpER2tluSycHUhb7GqjU8GUao6Od4DgaxQXwYFz3VUVl5 yHunrTqtLWt7+lmEBoC0YMxs6EdCenhDk+Jlr4qB4icsuwSBv6MfikLp4MWdM4zQ GNHLq8cTocmzU18uXBXcD/z2fRgkbH/13k6CITIWkqkljdd6YFBfsb+u5QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFE7NK2x5s2vofJpK+mWasbUsJATuMB8GA1UdIwQY MBaAFAU0xJ/PqKRQQdle1NjU/GnHJ6RnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYt Y2Q3ZTA2Y2JiNTMxLzEvVHMwcmJIbXphLWg4bWtyNlpacXh0U3drQk80LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYtY2Q3ZTA2Y2JiNTMx LzEvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjYg+MA0G CSqGSIb3DQEBCwUAA4IBAQCh8Dr32+fDvXwnxT1o6M0aJag1CE8k6VlB2bfQdUmy Ec6NqyLulPiZG0bR5f7xrv3RmQtfUi4BRCYv0JXA3yzUYUKE7znE9Gh7e2mjE3s7 U8Js3m3d05MVrO+3biwWkuq+l+VDa7RVthnjnn7Ql/6WvtGoTSHLE6or3O7OhVcB 6dydnHDaQfHe0urYnBXcJzSOPoS+MGuMl9if0iq9ZKk49oxM8+qbmJaH/bhK6spe TUnSZyPh6QcbCuHAIYxD/z5/zO1gSa2nmZFUInQ91ZG04TodRqf2KXwOiSW+kWWe kt2B8i7kgkHM1LK5KgoLKo3JObCpvYRveFGulevPINFh -----END CERTIFICATE-----Generated at Fri Jan 23 21:37:18 2026 by rpki-client