This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/fKKsc_JoSsRzKqXwdVmyumwVzH8.roa File: fKKsc_JoSsRzKqXwdVmyumwVzH8.roa (raw, json) Hash identifier: WJOhijs+m0NOJ1JLyUwutXO2ANZk3gYzdAekN+lMa3I= Subject key identifier: 7C:A2:AC:73:F2:68:4A:C4:73:2A:A5:F0:75:59:B2:BA:6C:15:CC:7F Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467 Certificate serial: 019B7C133BCA793FBAF3D92D383B5FD35698 Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/fKKsc_JoSsRzKqXwdVmyumwVzH8.roa Signing time: Fri 02 Jan 2026 00:19:53 +0000 ROA not before: Fri 02 Jan 2026 00:19:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 270175 IP address blocks: 45.80.83.0/24 maxlen: 24 185.216.128.0/23 maxlen: 23 185.216.128.0/24 maxlen: 24 185.216.129.0/24 maxlen: 24 201.77.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.mft rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 11:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:3b:ca:79:3f:ba:f3:d9:2d:38:3b:5f:d3:56:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467 Validity Not Before: Jan 2 00:19:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7ca2ac73f2684ac4732aa5f07559b2ba6c15cc7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:a2:11:70:50:7c:d1:c3:d2:71:2a:27:80:05: 22:aa:06:e4:78:c5:8d:d2:7e:15:59:f9:48:29:ab: e7:f4:54:f8:94:ee:29:eb:b6:43:ef:4f:5a:30:a1: 6c:f0:1a:61:60:68:4c:95:a9:4a:bc:98:e1:db:0b: 7b:e6:87:1d:6b:c3:38:f6:33:f6:ae:f2:c8:99:45: ce:b5:62:99:e0:94:ae:76:4d:f1:24:fa:b5:25:ea: 3e:04:65:cf:6d:e5:ad:97:46:8c:61:56:87:50:5e: 3d:c7:78:52:9f:28:4c:9d:a4:7b:d6:00:fe:82:78: 56:1b:23:db:e7:58:a6:17:62:a7:69:29:2c:0e:6c: 7b:10:9a:07:0e:07:c4:b3:cd:23:8b:f9:55:1d:bb: 61:2f:0e:fc:b9:a1:22:d0:44:c4:56:65:01:ab:7e: 05:fa:9a:e8:f9:aa:ea:a4:7b:6b:ce:0b:07:9b:41: 06:3f:e7:c4:de:4d:d0:bc:28:55:20:d7:2f:3e:3f: 3e:6d:a2:27:ff:15:6e:b8:79:36:15:ce:e0:e3:ad: dc:80:d0:84:fb:9c:32:a7:0d:2c:d8:da:b6:8a:17: 33:1b:e9:e2:81:2f:2a:d6:96:7b:45:b8:32:f0:7a: 19:c2:df:83:a7:d6:fe:6e:5d:67:96:b6:88:30:f8: 5c:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:A2:AC:73:F2:68:4A:C4:73:2A:A5:F0:75:59:B2:BA:6C:15:CC:7F X509v3 Authority Key Identifier: keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/fKKsc_JoSsRzKqXwdVmyumwVzH8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.80.83.0/24 185.216.128.0/23 201.77.56.0/24 Signature Algorithm: sha256WithRSAEncryption 32:fd:cb:68:5d:e2:aa:79:34:cb:2e:76:08:83:cd:34:d3:31: 44:b5:39:17:ae:eb:a4:a7:85:f1:c9:a3:14:f6:af:f2:c0:70: 87:9d:2c:cf:f6:b4:be:9d:0f:03:36:b3:06:c8:44:7b:59:ed: 70:10:b6:ee:c6:2d:c6:e6:2c:44:98:a3:08:fb:82:16:1c:31: 62:02:25:45:69:a8:a7:a4:9a:c1:f7:fe:0f:29:b2:07:e5:4f: 5e:0a:14:00:82:f4:48:88:e0:6a:64:75:06:06:22:0b:de:01: 34:3c:0b:fc:75:e9:e9:1e:fc:55:67:93:4b:1b:b8:e4:c6:64: 50:bb:98:56:54:67:97:f3:3a:dc:23:78:c9:a7:8c:1e:96:8a: 80:f7:90:8c:5f:08:42:a8:b1:cd:78:bf:a9:06:d2:76:2d:2b: fe:6f:e2:73:d3:8b:9b:48:1e:e8:d7:ca:8e:ab:6c:f5:11:f0: 98:f3:1a:61:f4:20:8f:f0:83:04:7c:ad:25:04:5b:65:88:06: d2:fe:31:b6:72:81:9e:ac:e2:43:c7:69:dd:69:43:ef:86:e9: 9a:69:15:a9:b0:23:6d:89:d0:50:34:a6:35:c0:90:3c:ae:45: df:57:6f:5c:66:ff:e6:ea:0e:23:07:7e:08:93:fd:fe:c4:fa: 44:3f:20:1f -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt8EzvKeT+689ktODtf01aYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1MzRjNDlmY2ZhOGE0NTA0MWQ5NWVkNGQ4ZDRmYzY5Yzcy N2E0NjcwHhcNMjYwMTAyMDAxOTUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3Y2EyYWM3M2YyNjg0YWM0NzMyYWE1ZjA3NTU5YjJiYTZjMTVjYzdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxKIRcFB80cPScSongAUiqgbkeMWN 0n4VWflIKavn9FT4lO4p67ZD709aMKFs8BphYGhMlalKvJjh2wt75ocda8M49jP2 rvLImUXOtWKZ4JSudk3xJPq1Jeo+BGXPbeWtl0aMYVaHUF49x3hSnyhMnaR71gD+ gnhWGyPb51imF2KnaSksDmx7EJoHDgfEs80ji/lVHbthLw78uaEi0ETEVmUBq34F +pro+arqpHtrzgsHm0EGP+fE3k3QvChVINcvPj8+baIn/xVuuHk2Fc7g463cgNCE +5wypw0s2Nq2ihczG+nigS8q1pZ7Rbgy8HoZwt+Dp9b+bl1nlraIMPhchwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFHyirHPyaErEcyql8HVZsrpsFcx/MB8GA1UdIwQY MBaAFAU0xJ/PqKRQQdle1NjU/GnHJ6RnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYt Y2Q3ZTA2Y2JiNTMxLzEvZktLc2NfSm9Tc1J6S3FYd2RWbXl1bXdWekg4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYtY2Q3ZTA2Y2JiNTMx LzEvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQALVBTAwQB udiAAwQAyU04MA0GCSqGSIb3DQEBCwUAA4IBAQAy/ctoXeKqeTTLLnYIg8000zFE tTkXruukp4XxyaMU9q/ywHCHnSzP9rS+nQ8DNrMGyER7We1wELbuxi3G5ixEmKMI +4IWHDFiAiVFaainpJrB9/4PKbIH5U9eChQAgvRIiOBqZHUGBiIL3gE0PAv8denp HvxVZ5NLG7jkxmRQu5hWVGeX8zrcI3jJp4weloqA95CMXwhCqLHNeL+pBtJ2LSv+ b+Jz04ubSB7o18qOq2z1EfCY8xph9CCP8IMEfK0lBFtliAbS/jG2coGerOJDx2nd aUPvhumaaRWpsCNtidBQNKY1wJA8rkXfV29cZv/m6g4jB34Ik/3+xPpEPyAf -----END CERTIFICATE-----Generated at Fri Jan 23 21:38:37 2026 by rpki-client