This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/biZtI8fH_dED0_vwMZIilhP_L5I.roa File: biZtI8fH_dED0_vwMZIilhP_L5I.roa (raw, json) Hash identifier: 0kQX15Y31WSW1C3R96qqXE70JkBI2pweQCelzDdGPgA= Subject key identifier: 6E:26:6D:23:C7:C7:FD:D1:03:D3:FB:F0:31:92:22:96:13:FF:2F:92 Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467 Certificate serial: 019B7C133EA188043F40D8EDD39B82973565 Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/biZtI8fH_dED0_vwMZIilhP_L5I.roa Signing time: Fri 02 Jan 2026 00:19:54 +0000 ROA not before: Fri 02 Jan 2026 00:19:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 272400 IP address blocks: 217.76.241.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.mft rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 11:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:3e:a1:88:04:3f:40:d8:ed:d3:9b:82:97:35:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467 Validity Not Before: Jan 2 00:19:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6e266d23c7c7fdd103d3fbf03192229613ff2f92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:10:9b:59:8e:6a:c5:90:d4:bf:f2:2c:ae:f8: 39:e5:e2:83:aa:12:73:e9:d1:06:77:78:06:d1:81: 2e:b2:77:f7:5f:bb:9d:36:da:98:47:ac:af:e3:11: e2:4e:6e:15:28:33:ba:4b:17:85:be:45:3a:d3:1b: ad:f6:6d:1a:56:9b:50:f3:02:46:c7:33:24:47:0c: fb:f1:22:65:de:fd:de:8d:e3:84:98:a1:d7:78:7a: 7c:b7:0e:8e:2f:c6:ba:0f:49:80:a0:e7:cf:74:01: e3:b2:37:45:ef:80:f0:de:95:6f:72:ad:b8:39:9f: 30:4b:2e:06:09:c0:db:86:44:d9:4e:11:dd:2c:0b: 0f:56:c7:b1:b6:d8:1c:83:4f:ec:5c:0e:65:c1:d2: 23:47:97:e9:6e:e1:c5:86:7b:a3:fa:ef:44:36:af: 61:aa:a1:ef:d0:69:49:59:e9:e6:ad:76:a9:fa:4b: e1:2c:75:60:f9:77:2c:96:05:3d:76:cb:af:63:59: 8e:bb:fc:a5:10:4a:e9:56:cf:a9:9a:50:3e:a0:56: c6:6a:20:1e:c6:47:f8:92:51:8a:aa:e3:92:9b:df: 67:7c:77:1e:1b:bc:a3:de:72:04:c3:bc:8b:ca:aa: 8a:e3:83:7f:67:be:1e:46:e0:06:84:31:1c:79:8e: 97:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:26:6D:23:C7:C7:FD:D1:03:D3:FB:F0:31:92:22:96:13:FF:2F:92 X509v3 Authority Key Identifier: keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/biZtI8fH_dED0_vwMZIilhP_L5I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.76.241.0/24 Signature Algorithm: sha256WithRSAEncryption 09:ba:4d:c1:89:64:73:54:3b:a3:3c:b0:84:77:af:f5:f2:ff: ad:1c:40:8c:3b:a9:09:af:b6:e2:a5:e5:c9:84:ce:40:84:f7: 5a:44:cd:6e:12:80:e4:c3:c7:c5:15:25:1e:dc:60:ce:bb:9a: 22:e8:4d:90:4c:36:b7:97:a5:d1:59:4e:d6:c4:54:ab:06:02: 26:c3:81:36:bd:59:47:fa:8a:0b:b8:c4:63:8a:27:41:4d:89: 86:4b:7a:83:d3:83:96:e1:7a:5d:95:ba:a4:9a:74:df:b7:0b: 43:a9:91:27:16:11:3d:de:71:7e:2b:d6:85:16:b9:36:ab:d9: 38:21:dd:11:25:b3:0e:54:d2:58:ac:58:ea:a0:f4:bc:30:50: 2f:3a:2f:89:7d:7e:86:34:d3:a2:31:a0:7f:af:85:02:02:0b: dc:6d:2c:2a:49:4a:ca:28:4f:0d:b8:20:05:86:64:1f:59:a7: 72:f1:3a:13:81:8e:ac:82:d1:08:39:48:f5:dd:bc:d5:31:23: 3b:ee:1e:d5:7a:50:83:18:c9:64:8c:80:1b:e4:d0:27:35:0d: c5:b3:e8:e8:c7:00:16:e8:73:0f:bf:e4:69:eb:4c:39:ac:50: 76:18:8f:7c:4a:a7:9f:33:d8:85:40:31:50:8f:1b:8b:e1:fd: 6a:61:73:e3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8Ez6hiAQ/QNjt05uClzVlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1MzRjNDlmY2ZhOGE0NTA0MWQ5NWVkNGQ4ZDRmYzY5Yzcy N2E0NjcwHhcNMjYwMTAyMDAxOTU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZTI2NmQyM2M3YzdmZGQxMDNkM2ZiZjAzMTkyMjI5NjEzZmYyZjkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAshCbWY5qxZDUv/Isrvg55eKDqhJz 6dEGd3gG0YEusnf3X7udNtqYR6yv4xHiTm4VKDO6SxeFvkU60xut9m0aVptQ8wJG xzMkRwz78SJl3v3ejeOEmKHXeHp8tw6OL8a6D0mAoOfPdAHjsjdF74Dw3pVvcq24 OZ8wSy4GCcDbhkTZThHdLAsPVsexttgcg0/sXA5lwdIjR5fpbuHFhnuj+u9ENq9h qqHv0GlJWenmrXap+kvhLHVg+XcslgU9dsuvY1mOu/ylEErpVs+pmlA+oFbGaiAe xkf4klGKquOSm99nfHceG7yj3nIEw7yLyqqK44N/Z74eRuAGhDEceY6XaQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFG4mbSPHx/3RA9P78DGSIpYT/y+SMB8GA1UdIwQY MBaAFAU0xJ/PqKRQQdle1NjU/GnHJ6RnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYt Y2Q3ZTA2Y2JiNTMxLzEvYmladEk4ZkhfZEVEMF92d01aSWlsaFBfTDVJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYtY2Q3ZTA2Y2JiNTMx LzEvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2UzxMA0G CSqGSIb3DQEBCwUAA4IBAQAJuk3BiWRzVDujPLCEd6/18v+tHECMO6kJr7bipeXJ hM5AhPdaRM1uEoDkw8fFFSUe3GDOu5oi6E2QTDa3l6XRWU7WxFSrBgImw4E2vVlH +ooLuMRjiidBTYmGS3qD04OW4XpdlbqkmnTftwtDqZEnFhE93nF+K9aFFrk2q9k4 Id0RJbMOVNJYrFjqoPS8MFAvOi+JfX6GNNOiMaB/r4UCAgvcbSwqSUrKKE8NuCAF hmQfWady8ToTgY6sgtEIOUj13bzVMSM77h7VelCDGMlkjIAb5NAnNQ3Fs+joxwAW 6HMPv+Rp60w5rFB2GI98SqefM9iFQDFQjxuL4f1qYXPj -----END CERTIFICATE-----Generated at Fri Jan 23 21:37:06 2026 by rpki-client