This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/_UjoyfoD1PRB3-E63eq5UQ-XoRk.roa File: _UjoyfoD1PRB3-E63eq5UQ-XoRk.roa (raw, json) Hash identifier: 2ohMSHlzDiKP4RYTGgVt5FJBaUX1XwI1wYVDtluL2tA= Subject key identifier: FD:48:E8:C9:FA:03:D4:F4:41:DF:E1:3A:DD:EA:B9:51:0F:97:A1:19 Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467 Certificate serial: 019B7C1319394EB9CB475F231E9DA7CD1D64 Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/_UjoyfoD1PRB3-E63eq5UQ-XoRk.roa Signing time: Fri 02 Jan 2026 00:19:44 +0000 ROA not before: Fri 02 Jan 2026 00:19:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 22411 IP address blocks: 185.241.122.0/24 maxlen: 24 185.241.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.mft rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:19:39:4e:b9:cb:47:5f:23:1e:9d:a7:cd:1d:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467 Validity Not Before: Jan 2 00:19:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fd48e8c9fa03d4f441dfe13addeab9510f97a119 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:de:fb:d7:34:f1:ed:97:44:28:9b:a1:aa:4a: 70:22:4b:73:1b:8b:4b:d7:96:99:ad:37:f7:b7:c4: da:59:9b:62:1c:75:70:30:9a:2b:c9:ca:2f:99:3a: bb:3b:4c:cb:3b:ab:3e:fd:48:5f:27:29:6d:12:b5: e7:e9:b0:97:8e:5c:49:1f:e1:dc:47:76:e3:ac:c9: 6d:36:cf:bf:55:21:75:fa:f8:38:8d:fd:96:d1:b3: 98:e9:e6:a9:36:28:11:73:16:67:51:5a:45:07:f4: 50:82:d1:d4:2a:39:d3:a0:42:52:e5:a3:88:47:aa: 15:62:33:20:54:69:95:5c:25:09:c3:9d:e4:6c:a7: 74:51:22:8d:bf:f1:8d:f8:26:97:0c:b2:77:f3:15: 2c:82:b5:25:65:a6:8d:dd:2d:ca:d7:93:8b:83:63: 6f:a8:9a:f5:a7:de:9a:9e:3c:b0:bc:2d:bd:27:57: f2:fb:3d:25:7d:8e:38:2b:6f:65:73:3f:a3:1a:9d: dc:4c:20:44:fb:e7:74:e6:aa:32:4f:73:86:b2:a8: 62:8d:2a:fc:68:85:4f:85:43:cc:32:30:2b:cf:c6: 73:1e:22:be:8e:14:58:2c:f5:f0:f1:76:ec:66:f2: 67:12:ff:54:e9:be:c4:99:70:d3:91:56:bb:69:d8: 0f:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:48:E8:C9:FA:03:D4:F4:41:DF:E1:3A:DD:EA:B9:51:0F:97:A1:19 X509v3 Authority Key Identifier: keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/_UjoyfoD1PRB3-E63eq5UQ-XoRk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.241.122.0/23 Signature Algorithm: sha256WithRSAEncryption 7e:8c:8a:6b:11:da:ef:3c:4c:e7:29:2b:fe:54:34:58:28:ea: f0:cb:0f:fa:ca:ec:53:ad:42:63:fe:4b:ef:6c:51:9d:e4:c7: 80:a4:45:38:66:46:91:55:62:7d:b1:77:38:f8:9c:15:0b:79: b0:11:33:7e:9e:27:ee:bf:03:fb:c6:ec:5d:23:59:a9:5e:c0: 02:da:7d:9a:d8:5b:f9:19:9c:48:6e:44:4a:f2:e8:68:e4:41: c5:67:84:7a:d9:86:38:d6:f9:c1:e8:c8:34:08:86:51:2c:7b: 72:e7:d7:0c:78:c3:71:31:e3:0c:14:13:57:09:29:ad:d5:65: fe:bc:ad:98:4d:2b:c0:ca:e0:fc:b1:0e:7e:61:db:2b:44:24: 22:ee:ff:ef:8b:60:1d:4c:07:c2:e0:b0:06:d1:83:a8:c2:c6: 92:0a:b3:26:06:46:48:7f:79:aa:fa:1b:f2:b2:55:ad:b2:79: 35:28:60:95:96:ea:b8:d4:b5:f9:b6:70:fb:1f:19:c7:e3:18: bb:d5:ba:0e:90:95:5f:f4:5c:f8:4c:86:73:83:87:3e:91:31: 25:f1:03:9a:55:f4:45:c7:2a:08:37:71:4b:63:46:a3:2f:f3: 2d:09:89:b0:f3:ea:d6:1c:0c:ea:e8:8c:6b:68:32:17:2b:2f: b5:99:0a:67 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8Exk5TrnLR18jHp2nzR1kMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1MzRjNDlmY2ZhOGE0NTA0MWQ5NWVkNGQ4ZDRmYzY5Yzcy N2E0NjcwHhcNMjYwMTAyMDAxOTQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZDQ4ZThjOWZhMDNkNGY0NDFkZmUxM2FkZGVhYjk1MTBmOTdhMTE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmd771zTx7ZdEKJuhqkpwIktzG4tL 15aZrTf3t8TaWZtiHHVwMJorycovmTq7O0zLO6s+/UhfJyltErXn6bCXjlxJH+Hc R3bjrMltNs+/VSF1+vg4jf2W0bOY6eapNigRcxZnUVpFB/RQgtHUKjnToEJS5aOI R6oVYjMgVGmVXCUJw53kbKd0USKNv/GN+CaXDLJ38xUsgrUlZaaN3S3K15OLg2Nv qJr1p96anjywvC29J1fy+z0lfY44K29lcz+jGp3cTCBE++d05qoyT3OGsqhijSr8 aIVPhUPMMjArz8ZzHiK+jhRYLPXw8XbsZvJnEv9U6b7EmXDTkVa7adgPWQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFP1I6Mn6A9T0Qd/hOt3quVEPl6EZMB8GA1UdIwQY MBaAFAU0xJ/PqKRQQdle1NjU/GnHJ6RnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYt Y2Q3ZTA2Y2JiNTMxLzEvX1Vqb3lmb0QxUFJCMy1FNjNlcTVVUS1Yb1JrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYtY2Q3ZTA2Y2JiNTMx LzEvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBufF6MA0G CSqGSIb3DQEBCwUAA4IBAQB+jIprEdrvPEznKSv+VDRYKOrwyw/6yuxTrUJj/kvv bFGd5MeApEU4ZkaRVWJ9sXc4+JwVC3mwETN+nifuvwP7xuxdI1mpXsAC2n2a2Fv5 GZxIbkRK8uho5EHFZ4R62YY41vnB6Mg0CIZRLHty59cMeMNxMeMMFBNXCSmt1WX+ vK2YTSvAyuD8sQ5+YdsrRCQi7v/vi2AdTAfC4LAG0YOowsaSCrMmBkZIf3mq+hvy slWtsnk1KGCVluq41LX5tnD7HxnH4xi71boOkJVf9Fz4TIZzg4c+kTEl8QOaVfRF xyoIN3FLY0ajL/MtCYmw8+rWHAzq6IxraDIXKy+1mQpn -----END CERTIFICATE-----Generated at Wed Jan 21 08:59:53 2026 by rpki-client