This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/kX-pXgjofykezIdfhZ4JJ-XTU8g.roa File: kX-pXgjofykezIdfhZ4JJ-XTU8g.roa (raw, json) Hash identifier: 6vlcJQy2nhJ6qdtiCKdZ6jq5Fw3pBGEiowf6fCpfe7w= Subject key identifier: 91:7F:A9:5E:08:E8:7F:29:1E:CC:87:5F:85:9E:09:27:E5:D3:53:C8 Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467 Certificate serial: 019B7C1330A4991232668531AB3DA652B1B2 Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/kX-pXgjofykezIdfhZ4JJ-XTU8g.roa Signing time: Fri 02 Jan 2026 00:19:51 +0000 ROA not before: Fri 02 Jan 2026 00:19:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206833 IP address blocks: 46.29.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.mft rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 11:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:30:a4:99:12:32:66:85:31:ab:3d:a6:52:b1:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467 Validity Not Before: Jan 2 00:19:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=917fa95e08e87f291ecc875f859e0927e5d353c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:eb:05:23:64:c1:25:14:73:bb:e4:0f:7b:3b: 4d:f5:ae:1f:87:aa:94:31:00:53:38:61:39:3a:42: d3:85:4c:70:0e:a5:51:f4:4c:c3:6a:e5:b2:2e:86: 5a:0c:fc:10:52:45:10:f0:03:f6:dc:79:fc:6d:d9: 98:c7:91:41:ec:43:bc:94:30:1f:a4:4b:e2:81:90: 9a:aa:66:92:39:4e:ce:5f:5c:b3:13:2d:a2:4b:9c: 64:45:25:03:d9:b5:af:22:ba:bf:48:19:a7:65:52: 86:61:bb:68:ee:10:ad:cc:17:07:b1:cc:77:0f:c1: 63:2f:0c:02:6b:2e:71:c3:9a:66:a2:f4:48:a1:06: 86:64:74:02:5e:2d:a4:ad:02:17:64:4d:7e:20:15: 40:a4:80:66:f4:46:6f:7a:f5:37:f8:31:aa:0c:f6: 65:07:18:71:a9:23:24:96:76:8c:72:36:03:5d:50: 17:38:5d:3d:80:42:d2:53:e7:bb:5a:85:f2:14:16: 77:a9:b0:a8:6b:9b:eb:63:fb:28:16:8e:e3:57:65: 86:b3:2f:d2:b4:bd:36:cd:aa:82:fc:7b:79:1f:05: fa:9a:a7:78:bb:74:13:86:3a:43:4d:e6:73:2a:9e: 71:06:64:42:6e:0b:75:5d:b6:e0:21:f0:90:b1:ca: 22:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:7F:A9:5E:08:E8:7F:29:1E:CC:87:5F:85:9E:09:27:E5:D3:53:C8 X509v3 Authority Key Identifier: keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/kX-pXgjofykezIdfhZ4JJ-XTU8g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.29.31.0/24 Signature Algorithm: sha256WithRSAEncryption 11:37:ed:cf:0d:4a:9f:fc:4d:c7:73:8a:f7:57:dd:5e:2a:1e: 97:65:15:4a:c3:a2:fe:3f:bc:7e:7b:2b:ec:ee:ab:44:9e:bc: 2b:15:d8:96:d9:6c:d7:a8:3e:25:60:fc:a7:7d:54:f0:78:f9: 98:84:4a:a9:78:9f:ef:3d:bb:d1:e4:3b:f9:a4:0b:e7:9f:30: b5:88:8b:35:16:49:a9:2b:13:2c:12:13:3f:40:b0:b5:d9:bc: 51:b7:cd:1b:7b:39:0f:67:eb:f4:73:0e:2b:c8:4e:60:46:90: 91:70:9a:f6:da:db:52:ee:0b:a0:a8:f0:00:a7:9e:4f:b6:5f: 0c:70:bc:3d:03:de:f4:45:aa:af:7e:af:5d:67:c7:28:9d:c3: be:04:30:74:e9:06:57:a0:e9:e0:37:de:32:dc:fd:92:05:1d: 14:55:21:c1:8e:d8:91:3b:2d:1f:19:e0:95:56:8b:0a:e0:39: c6:57:1f:7a:27:12:76:b2:38:5d:7b:97:4e:9d:11:b6:5c:ae: e6:bb:7f:90:1e:00:e2:1a:27:b9:d1:f3:63:5d:54:be:74:fe: 78:56:99:f7:b2:cb:7f:d9:85:44:15:7a:17:a9:40:44:2b:43: c7:60:bc:bc:7b:56:02:e3:6a:e1:08:32:a6:a7:4e:79:62:e4: 46:f1:81:21 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8EzCkmRIyZoUxqz2mUrGyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1MzRjNDlmY2ZhOGE0NTA0MWQ5NWVkNGQ4ZDRmYzY5Yzcy N2E0NjcwHhcNMjYwMTAyMDAxOTUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MTdmYTk1ZTA4ZTg3ZjI5MWVjYzg3NWY4NTllMDkyN2U1ZDM1M2M4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvusFI2TBJRRzu+QPeztN9a4fh6qU MQBTOGE5OkLThUxwDqVR9EzDauWyLoZaDPwQUkUQ8AP23Hn8bdmYx5FB7EO8lDAf pEvigZCaqmaSOU7OX1yzEy2iS5xkRSUD2bWvIrq/SBmnZVKGYbto7hCtzBcHscx3 D8FjLwwCay5xw5pmovRIoQaGZHQCXi2krQIXZE1+IBVApIBm9EZvevU3+DGqDPZl BxhxqSMklnaMcjYDXVAXOF09gELSU+e7WoXyFBZ3qbCoa5vrY/soFo7jV2WGsy/S tL02zaqC/Ht5HwX6mqd4u3QThjpDTeZzKp5xBmRCbgt1XbbgIfCQscoiRQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJF/qV4I6H8pHsyHX4WeCSfl01PIMB8GA1UdIwQY MBaAFAU0xJ/PqKRQQdle1NjU/GnHJ6RnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYt Y2Q3ZTA2Y2JiNTMxLzEva1gtcFhnam9meWtleklkZmhaNEpKLVhUVThnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYtY2Q3ZTA2Y2JiNTMx LzEvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALh0fMA0G CSqGSIb3DQEBCwUAA4IBAQARN+3PDUqf/E3Hc4r3V91eKh6XZRVKw6L+P7x+eyvs 7qtEnrwrFdiW2WzXqD4lYPynfVTwePmYhEqpeJ/vPbvR5Dv5pAvnnzC1iIs1Fkmp KxMsEhM/QLC12bxRt80bezkPZ+v0cw4ryE5gRpCRcJr22ttS7gugqPAAp55Ptl8M cLw9A970Raqvfq9dZ8concO+BDB06QZXoOngN94y3P2SBR0UVSHBjtiROy0fGeCV VosK4DnGVx96JxJ2sjhde5dOnRG2XK7mu3+QHgDiGie50fNjXVS+dP54Vpn3sst/ 2YVEFXoXqUBEK0PHYLy8e1YC42rhCDKmp055YuRG8YEh -----END CERTIFICATE-----Generated at Fri Jan 23 21:38:55 2026 by rpki-client