This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/_-bT5xpEIOpgsNqbTcY3Qid6jXA.roa File: _-bT5xpEIOpgsNqbTcY3Qid6jXA.roa (raw, json) Hash identifier: xVWt3WVTDnL3wnpVOF5eiHW5dR+n+5i4UjPFRxcNvMA= Subject key identifier: FF:E6:D3:E7:1A:44:20:EA:60:B0:DA:9B:4D:C6:37:42:27:7A:8D:70 Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467 Certificate serial: 019B7C133CFF518EBC99A71CFF200608DD66 Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/_-bT5xpEIOpgsNqbTcY3Qid6jXA.roa Signing time: Fri 02 Jan 2026 00:19:54 +0000 ROA not before: Fri 02 Jan 2026 00:19:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 272330 IP address blocks: 2.59.194.0/24 maxlen: 24 45.142.40.0/24 maxlen: 24 178.19.33.0/24 maxlen: 24 185.231.186.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.mft rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 11:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:3c:ff:51:8e:bc:99:a7:1c:ff:20:06:08:dd:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467 Validity Not Before: Jan 2 00:19:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ffe6d3e71a4420ea60b0da9b4dc63742277a8d70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:2d:99:25:49:07:3f:47:43:07:c0:6c:be:81: 11:00:c7:6e:81:a4:4a:24:5b:9f:8a:53:06:32:b5: 21:75:c3:31:7a:47:25:45:14:6c:60:16:4b:7d:e7: 40:c5:4b:25:d1:e5:e7:47:0a:79:19:05:0f:cf:b5: 9b:f4:22:fe:2b:a7:92:d0:b2:3d:3b:10:f4:43:32: 6c:7d:93:47:23:ca:57:2c:db:dd:f8:67:24:98:72: b9:db:ec:8a:a7:a5:a4:a4:44:ba:28:d5:d8:9f:20: be:2e:fc:f2:54:8e:bb:ac:89:8f:f8:56:38:35:b2: 51:b1:f6:d4:bd:c8:6c:ef:e8:5d:60:cc:b9:b1:cd: e5:94:85:59:cd:a4:b1:52:1f:2b:1d:7c:29:dc:7b: c6:ca:7b:c4:fa:57:5f:72:d9:49:b1:f4:61:53:6a: 9d:04:c4:42:46:31:07:82:a6:a8:91:53:fb:d8:9e: 36:7a:88:6d:0a:64:23:b7:7f:4a:d9:7c:e9:57:f2: d1:5d:00:37:1a:4a:6a:ee:60:71:15:3b:10:09:f6: 7f:e0:22:30:b1:d2:3d:a0:3b:01:15:cb:40:66:71: 0d:74:1c:d6:55:11:07:41:66:2c:f8:0e:40:c0:8e: 4e:01:4b:d7:7d:60:1c:27:e5:90:c2:c2:c2:b2:a4: 69:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:E6:D3:E7:1A:44:20:EA:60:B0:DA:9B:4D:C6:37:42:27:7A:8D:70 X509v3 Authority Key Identifier: keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/_-bT5xpEIOpgsNqbTcY3Qid6jXA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.59.194.0/24 45.142.40.0/24 178.19.33.0/24 185.231.186.0/24 Signature Algorithm: sha256WithRSAEncryption 42:e2:87:64:f4:cc:e3:55:06:2b:1a:97:86:ae:75:bf:65:e6: d0:dd:6a:6d:bf:25:f1:4d:77:f7:a0:97:53:39:48:06:f8:94: 61:bc:83:d4:bb:7c:b3:44:9c:73:7c:da:44:ad:11:39:2d:ba: 6a:19:92:28:dc:a1:f5:1a:4e:18:a8:77:39:53:15:d4:71:ad: aa:45:1b:f7:3d:fb:98:6e:4b:7f:ab:fc:e7:38:bf:75:bd:76: 9f:1a:d0:a6:c7:bf:09:2f:f5:fc:b2:ce:ed:e5:da:53:12:96: b2:ae:fe:ea:b2:b4:1e:01:8f:3a:6c:83:49:fc:03:34:bf:8c: a5:41:20:e4:f0:a3:2c:55:17:6c:96:e7:3d:19:30:ab:83:d1: af:24:bd:e1:10:5b:a7:fe:69:52:d3:3c:11:e8:80:0a:ac:e3: e8:68:21:61:92:26:2c:87:2a:86:b0:a1:b1:aa:3c:97:73:da: 4c:53:56:3a:36:88:80:e5:58:ab:45:94:db:62:c4:83:d5:2c: 78:05:e6:aa:78:ee:60:1a:86:41:6f:f7:51:b8:ea:19:13:bc: cc:8a:0d:42:df:25:8a:a8:1d:f1:60:c4:37:7b:8f:b9:f9:e8: 93:98:28:73:66:6d:78:6c:17:09:d6:9b:77:55:40:67:26:82: 1d:c8:7e:a3 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt8Ezz/UY68macc/yAGCN1mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1MzRjNDlmY2ZhOGE0NTA0MWQ5NWVkNGQ4ZDRmYzY5Yzcy N2E0NjcwHhcNMjYwMTAyMDAxOTU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZmU2ZDNlNzFhNDQyMGVhNjBiMGRhOWI0ZGM2Mzc0MjI3N2E4ZDcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuy2ZJUkHP0dDB8BsvoERAMdugaRK JFufilMGMrUhdcMxekclRRRsYBZLfedAxUsl0eXnRwp5GQUPz7Wb9CL+K6eS0LI9 OxD0QzJsfZNHI8pXLNvd+GckmHK52+yKp6WkpES6KNXYnyC+LvzyVI67rImP+FY4 NbJRsfbUvchs7+hdYMy5sc3llIVZzaSxUh8rHXwp3HvGynvE+ldfctlJsfRhU2qd BMRCRjEHgqaokVP72J42eohtCmQjt39K2XzpV/LRXQA3Gkpq7mBxFTsQCfZ/4CIw sdI9oDsBFctAZnENdBzWVREHQWYs+A5AwI5OAUvXfWAcJ+WQwsLCsqRpWwIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFP/m0+caRCDqYLDam03GN0Ineo1wMB8GA1UdIwQY MBaAFAU0xJ/PqKRQQdle1NjU/GnHJ6RnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYt Y2Q3ZTA2Y2JiNTMxLzEvXy1iVDV4cEVJT3Bnc05xYlRjWTNRaWQ2alhBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYtY2Q3ZTA2Y2JiNTMx LzEvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAAjvCAwQA LY4oAwQAshMhAwQAuee6MA0GCSqGSIb3DQEBCwUAA4IBAQBC4odk9MzjVQYrGpeG rnW/ZebQ3WptvyXxTXf3oJdTOUgG+JRhvIPUu3yzRJxzfNpErRE5LbpqGZIo3KH1 Gk4YqHc5UxXUca2qRRv3PfuYbkt/q/znOL91vXafGtCmx78JL/X8ss7t5dpTEpay rv7qsrQeAY86bINJ/AM0v4ylQSDk8KMsVRdsluc9GTCrg9GvJL3hEFun/mlS0zwR 6IAKrOPoaCFhkiYshyqGsKGxqjyXc9pMU1Y6NoiA5VirRZTbYsSD1Sx4BeaqeO5g GoZBb/dRuOoZE7zMig1C3yWKqB3xYMQ3e4+5+eiTmChzZm14bBcJ1pt3VUBnJoId yH6j -----END CERTIFICATE-----Generated at Fri Jan 23 21:36:20 2026 by rpki-client