This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/mIsvZPBZ45OicDsX4sNR0QITho8.roa File: mIsvZPBZ45OicDsX4sNR0QITho8.roa (raw, json) Hash identifier: ZGNZiE56Gban5u3cY+uw0CPz455O32XCq3scCGtc06k= Subject key identifier: 98:8B:2F:64:F0:59:E3:93:A2:70:3B:17:E2:C3:51:D1:02:13:86:8F Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467 Certificate serial: 019B7C1342D5FAECDA75FF954C3AF5E687BB Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/mIsvZPBZ45OicDsX4sNR0QITho8.roa Signing time: Fri 02 Jan 2026 00:19:55 +0000 ROA not before: Fri 02 Jan 2026 00:19:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 273140 IP address blocks: 171.22.165.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.mft rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 18:47:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:42:d5:fa:ec:da:75:ff:95:4c:3a:f5:e6:87:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467 Validity Not Before: Jan 2 00:19:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=988b2f64f059e393a2703b17e2c351d10213868f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:cc:88:b6:ae:3d:51:a2:65:06:84:b7:37:0e: c3:eb:0c:8f:ca:ba:1a:e2:6b:51:66:5b:45:66:02: 69:34:36:d8:ec:89:78:d4:08:2c:04:8d:cf:bc:29: 8d:c1:99:91:00:69:22:44:52:8b:c1:0a:f0:6b:06: 69:5e:c5:60:1a:c1:6c:b2:12:94:25:27:59:7c:67: b9:60:01:d8:73:a9:65:84:72:2b:dc:cb:02:28:bb: 27:b8:86:b0:95:7a:6f:14:7b:46:b4:c9:db:5e:f6: 25:6e:49:15:a0:90:4d:ac:b6:19:ef:5b:9c:39:e8: c0:f9:e0:ec:72:6f:ce:90:f6:eb:ef:95:c0:69:67: 8d:95:b6:54:e0:50:39:9b:aa:5c:98:bd:f5:b7:50: d8:49:be:be:34:88:50:e3:45:e5:a1:e2:78:28:fe: 97:ff:2c:db:12:1a:d2:99:45:5b:ff:b2:90:56:ee: 02:5e:36:16:16:71:85:ac:77:89:a9:0f:10:40:68: f7:9d:da:cc:ab:d9:66:78:dc:16:95:be:5a:39:ac: 28:19:a9:e4:46:4c:67:9c:d8:7c:02:d5:81:6d:f7: c8:93:11:9e:07:ee:b5:b6:d2:2f:aa:4e:df:a2:61: 97:bb:d3:17:0f:2e:52:1a:f3:e1:7a:d2:e5:a8:81: c2:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:8B:2F:64:F0:59:E3:93:A2:70:3B:17:E2:C3:51:D1:02:13:86:8F X509v3 Authority Key Identifier: keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/mIsvZPBZ45OicDsX4sNR0QITho8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 171.22.165.0/24 Signature Algorithm: sha256WithRSAEncryption 50:9d:9d:0b:61:86:be:01:c4:99:0b:14:92:ad:94:20:e4:ae: c6:33:f4:3d:97:4f:6d:48:0a:c4:b1:e5:2b:b7:db:fc:10:71: f9:19:90:1d:e9:13:34:13:aa:2c:84:5c:10:e7:08:9f:ab:75: f2:0e:03:73:4e:d5:ad:a7:73:af:63:a9:2d:d0:fe:da:0d:a3: 91:62:40:53:86:27:a4:87:c8:96:03:be:ae:13:45:f6:a4:f2: 15:25:19:1a:d3:b4:00:7f:a1:44:6e:c0:4a:25:c8:6a:09:f5: f1:5b:ae:bd:fa:86:6e:4b:75:1e:5b:0d:d3:07:ca:19:19:f7: ec:8c:f3:ac:24:b8:32:37:39:fb:4c:23:04:fe:e1:08:48:3d: 03:b9:03:e4:9e:58:c0:b8:dd:dc:81:9a:6c:29:69:b0:64:9a: a8:34:16:0a:25:51:bb:3a:19:90:f0:2e:a5:f9:6b:e4:3b:45: 4f:0d:db:7b:2a:ba:04:de:26:d4:78:87:15:be:9b:29:9e:54: 47:f3:ef:c8:59:62:86:76:87:c4:a6:6f:2c:3c:36:87:4d:11: 3b:86:6c:e9:6d:8c:9f:ce:76:53:df:3f:83:16:81:8b:ef:d9: 37:ba:c6:42:57:fc:8b:9f:47:53:49:a2:a5:f2:5c:39:94:b8: c6:25:09:46 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8E0LV+uzadf+VTDr15oe7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1MzRjNDlmY2ZhOGE0NTA0MWQ5NWVkNGQ4ZDRmYzY5Yzcy N2E0NjcwHhcNMjYwMTAyMDAxOTU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ODhiMmY2NGYwNTllMzkzYTI3MDNiMTdlMmMzNTFkMTAyMTM4NjhmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxcyItq49UaJlBoS3Nw7D6wyPyroa 4mtRZltFZgJpNDbY7Il41AgsBI3PvCmNwZmRAGkiRFKLwQrwawZpXsVgGsFsshKU JSdZfGe5YAHYc6llhHIr3MsCKLsnuIawlXpvFHtGtMnbXvYlbkkVoJBNrLYZ71uc OejA+eDscm/OkPbr75XAaWeNlbZU4FA5m6pcmL31t1DYSb6+NIhQ40XloeJ4KP6X /yzbEhrSmUVb/7KQVu4CXjYWFnGFrHeJqQ8QQGj3ndrMq9lmeNwWlb5aOawoGank RkxnnNh8AtWBbffIkxGeB+61ttIvqk7fomGXu9MXDy5SGvPhetLlqIHC1QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJiLL2TwWeOTonA7F+LDUdECE4aPMB8GA1UdIwQY MBaAFAU0xJ/PqKRQQdle1NjU/GnHJ6RnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYt Y2Q3ZTA2Y2JiNTMxLzEvbUlzdlpQQlo0NU9pY0RzWDRzTlIwUUlUaG84LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYtY2Q3ZTA2Y2JiNTMx LzEvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqxalMA0G CSqGSIb3DQEBCwUAA4IBAQBQnZ0LYYa+AcSZCxSSrZQg5K7GM/Q9l09tSArEseUr t9v8EHH5GZAd6RM0E6oshFwQ5wifq3XyDgNzTtWtp3OvY6kt0P7aDaORYkBThiek h8iWA76uE0X2pPIVJRka07QAf6FEbsBKJchqCfXxW669+oZuS3UeWw3TB8oZGffs jPOsJLgyNzn7TCME/uEISD0DuQPknljAuN3cgZpsKWmwZJqoNBYKJVG7OhmQ8C6l +WvkO0VPDdt7KroE3ibUeIcVvpspnlRH8+/IWWKGdofEpm8sPDaHTRE7hmzpbYyf znZT3z+DFoGL79k3usZCV/yLn0dTSaKl8lw5lLjGJQlG -----END CERTIFICATE-----Generated at Fri Jan 23 21:38:22 2026 by rpki-client