This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/ix8cxtvpp07EW0iuxxaagq4SYTw.roa File: ix8cxtvpp07EW0iuxxaagq4SYTw.roa (raw, json) Hash identifier: DyC/NBwdRCno3JHjc7G5xwrknfIcETt8JRg/TUOYIlQ= Subject key identifier: 8B:1F:1C:C6:DB:E9:A7:4E:C4:5B:48:AE:C7:16:9A:82:AE:12:61:3C Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467 Certificate serial: 019B7C13361E35DF4C725B7010E6B3C97B2F Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/ix8cxtvpp07EW0iuxxaagq4SYTw.roa Signing time: Fri 02 Jan 2026 00:19:52 +0000 ROA not before: Fri 02 Jan 2026 00:19:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216135 IP address blocks: 217.76.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.mft rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 18:47:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:36:1e:35:df:4c:72:5b:70:10:e6:b3:c9:7b:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467 Validity Not Before: Jan 2 00:19:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8b1f1cc6dbe9a74ec45b48aec7169a82ae12613c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:b3:32:e1:eb:b5:fa:fd:fc:b8:24:ef:92:8f: 1d:99:41:cc:39:23:95:ee:d9:e7:74:94:9e:fa:e5: fb:7f:6f:54:36:3c:97:79:e5:e2:94:33:9b:de:da: 8e:9a:f4:39:4f:96:46:49:f5:42:76:d1:56:6f:6e: e8:99:0c:08:a2:cc:3e:66:47:11:35:dd:70:ea:41: 72:f3:aa:7b:5a:0b:6a:75:59:a8:bd:a7:ac:cc:0d: e1:f4:1e:9f:ce:a5:ba:6d:52:44:48:27:9f:8a:05: d2:61:12:43:81:72:f5:b9:2f:2c:12:b9:59:1c:c8: ea:18:0f:82:8a:16:38:b8:85:30:0d:77:04:78:f2: 07:d4:e5:b5:d9:a5:21:e0:b6:34:b8:9d:71:4a:d9: 96:78:1b:ab:32:7b:c2:db:9b:32:9a:bc:af:fc:c4: 96:1e:2b:cf:7c:c5:9f:e4:49:42:6f:3c:11:5d:12: a5:16:e1:b3:2f:1d:8e:6a:6f:d7:b4:78:91:9c:e5: b9:27:25:12:54:82:55:46:d9:b7:a7:db:f3:2a:11: 7f:c8:57:7a:9c:0d:3b:49:ea:86:62:1a:36:4f:ce: 54:eb:73:ce:4e:dd:20:73:e1:2e:22:77:4c:2d:3e: bc:f8:ae:0a:af:11:a0:39:01:fd:72:be:9b:2f:d2: 54:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:1F:1C:C6:DB:E9:A7:4E:C4:5B:48:AE:C7:16:9A:82:AE:12:61:3C X509v3 Authority Key Identifier: keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/ix8cxtvpp07EW0iuxxaagq4SYTw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.76.255.0/24 Signature Algorithm: sha256WithRSAEncryption 94:5f:5d:00:3f:28:1a:79:6b:13:b2:80:d0:6e:20:fd:24:b8: f8:b9:dd:be:31:90:16:61:b1:96:4a:44:16:12:e1:d7:74:01: ee:ba:ee:bc:7b:05:98:6a:de:21:80:ab:cb:2d:41:4e:5a:d2: a3:25:93:6e:a0:e0:cf:57:f2:50:39:1c:7f:f9:3d:6a:14:30: 22:08:a3:68:0a:02:66:87:dc:5d:8c:25:2d:ba:ab:0e:fb:6a: b5:02:f1:5f:34:fe:5b:45:7e:c5:6e:5a:59:04:42:1e:f8:66: 58:86:31:65:d3:09:8e:17:1d:37:cd:3f:a2:ef:92:35:ea:9a: 69:82:65:8d:1d:5b:5f:59:dd:2e:8d:47:b4:32:c6:7b:e6:ba: e2:8e:b2:f4:b9:eb:66:40:10:bf:e3:56:02:73:aa:3e:72:2c: 2d:57:7e:9d:10:f7:3e:d3:54:29:b9:c4:04:aa:0f:a0:ec:6b: ed:6e:58:00:05:f5:df:21:1a:94:08:fc:58:53:c2:59:5c:7b: 00:35:de:cc:54:87:77:b7:d4:25:2c:87:08:3f:3e:b1:8b:c5: 8f:b2:79:68:b1:a8:f6:d2:b5:53:e8:fc:c3:19:71:d4:48:fe: 03:7c:68:df:87:f5:02:64:e8:5b:fc:d8:fd:1c:15:aa:33:c5: e7:4e:1c:8f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8EzYeNd9McltwEOazyXsvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1MzRjNDlmY2ZhOGE0NTA0MWQ5NWVkNGQ4ZDRmYzY5Yzcy N2E0NjcwHhcNMjYwMTAyMDAxOTUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YjFmMWNjNmRiZTlhNzRlYzQ1YjQ4YWVjNzE2OWE4MmFlMTI2MTNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjbMy4eu1+v38uCTvko8dmUHMOSOV 7tnndJSe+uX7f29UNjyXeeXilDOb3tqOmvQ5T5ZGSfVCdtFWb27omQwIosw+ZkcR Nd1w6kFy86p7WgtqdVmovaeszA3h9B6fzqW6bVJESCefigXSYRJDgXL1uS8sErlZ HMjqGA+CihY4uIUwDXcEePIH1OW12aUh4LY0uJ1xStmWeBurMnvC25symryv/MSW HivPfMWf5ElCbzwRXRKlFuGzLx2Oam/XtHiRnOW5JyUSVIJVRtm3p9vzKhF/yFd6 nA07SeqGYho2T85U63POTt0gc+EuIndMLT68+K4KrxGgOQH9cr6bL9JUdQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIsfHMbb6adOxFtIrscWmoKuEmE8MB8GA1UdIwQY MBaAFAU0xJ/PqKRQQdle1NjU/GnHJ6RnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYt Y2Q3ZTA2Y2JiNTMxLzEvaXg4Y3h0dnBwMDdFVzBpdXh4YWFncTRTWVR3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYtY2Q3ZTA2Y2JiNTMx LzEvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2Uz/MA0G CSqGSIb3DQEBCwUAA4IBAQCUX10APygaeWsTsoDQbiD9JLj4ud2+MZAWYbGWSkQW EuHXdAHuuu68ewWYat4hgKvLLUFOWtKjJZNuoODPV/JQORx/+T1qFDAiCKNoCgJm h9xdjCUtuqsO+2q1AvFfNP5bRX7FblpZBEIe+GZYhjFl0wmOFx03zT+i75I16ppp gmWNHVtfWd0ujUe0MsZ75rrijrL0uetmQBC/41YCc6o+ciwtV36dEPc+01QpucQE qg+g7GvtblgABfXfIRqUCPxYU8JZXHsANd7MVId3t9QlLIcIPz6xi8WPsnlosaj2 0rVT6PzDGXHUSP4DfGjfh/UCZOhb/Nj9HBWqM8XnThyP -----END CERTIFICATE-----Generated at Fri Jan 23 21:37:07 2026 by rpki-client