This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/nAGcswIDbBAI0XDOAYp1MTVbVEU.roa File: nAGcswIDbBAI0XDOAYp1MTVbVEU.roa (raw, json) Hash identifier: 3ee1dkfFcHQV0D8VVJPXzvT3m75xv/tLBxdcJEcBasQ= Subject key identifier: 9C:01:9C:B3:02:03:6C:10:08:D1:70:CE:01:8A:75:31:35:5B:54:45 Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467 Certificate serial: 019B7C132F920D191B0DAC760534455A5EAE Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/nAGcswIDbBAI0XDOAYp1MTVbVEU.roa Signing time: Fri 02 Jan 2026 00:19:50 +0000 ROA not before: Fri 02 Jan 2026 00:19:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206077 IP address blocks: 45.80.81.0/24 maxlen: 24 201.49.191.0/24 maxlen: 24 217.26.188.0/22 maxlen: 22 217.26.188.0/23 maxlen: 23 217.26.188.0/24 maxlen: 24 217.26.189.0/24 maxlen: 24 217.76.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.mft rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 18:47:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:2f:92:0d:19:1b:0d:ac:76:05:34:45:5a:5e:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467 Validity Not Before: Jan 2 00:19:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9c019cb302036c1008d170ce018a7531355b5445 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:09:99:4f:e2:1a:92:8b:49:ca:12:9d:ae:ac: 26:e4:d0:7e:c2:2b:04:44:de:ca:26:b0:57:e6:a3: 07:8a:64:e2:e0:ee:76:12:f2:ef:f7:e2:4d:95:a5: ea:3a:e3:df:84:c8:3b:a9:81:a8:b1:7a:ab:e1:d6: 6b:4b:b2:01:c3:e0:e4:36:a7:b8:9b:fe:f6:0b:52: 67:fa:62:1c:91:b4:6d:33:2f:9f:29:bc:ea:72:62: 74:70:46:51:8a:ca:b4:96:e0:b8:d2:53:d8:a9:8f: d0:f3:f2:c4:56:31:87:6d:57:80:6f:ea:34:9c:8c: 0b:cf:7c:a1:b4:2b:13:72:98:eb:83:68:79:57:88: 93:8d:02:a9:42:46:40:90:3c:75:5b:70:f3:fc:21: 9a:2f:11:c9:f0:46:6a:9e:cd:a0:7d:ce:ff:bd:c2: 00:8f:19:03:5b:81:6a:0a:89:e3:2b:e9:10:d5:34: bd:32:9b:21:92:d8:a0:bc:53:52:96:5a:5b:e7:64: c3:7f:eb:f3:61:a4:3f:5e:89:66:14:b6:9f:a1:28: fa:0b:34:dd:27:3c:e4:e0:0b:aa:01:16:ad:7e:21: 05:78:1b:ec:90:80:b4:33:86:22:ed:81:bd:0f:79: 02:68:0b:1b:f0:d0:db:8f:fe:b3:f3:89:fc:43:00: 1d:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:01:9C:B3:02:03:6C:10:08:D1:70:CE:01:8A:75:31:35:5B:54:45 X509v3 Authority Key Identifier: keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/nAGcswIDbBAI0XDOAYp1MTVbVEU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.80.81.0/24 201.49.191.0/24 217.26.188.0/22 217.76.252.0/24 Signature Algorithm: sha256WithRSAEncryption 29:18:04:b6:67:7a:c2:cf:60:6f:a2:23:80:1c:08:60:66:b1: 91:73:e6:c6:ad:28:7f:84:b5:ef:76:ad:2b:bf:24:83:4a:22: 75:68:bc:6e:b8:a8:7e:1c:50:84:8f:5c:07:85:11:87:62:22: 70:93:a5:20:01:31:0e:3f:a2:4f:eb:fa:22:4a:5f:5e:01:e3: 32:26:60:5f:99:1e:7b:f3:7d:a8:ab:92:ec:d3:51:48:a2:d4: 3d:2b:ee:be:39:02:57:63:65:c4:91:b4:86:16:cf:f8:46:f2: 31:d4:32:46:1f:be:15:40:fd:57:f4:f2:47:37:9e:da:c8:48: e5:2e:df:23:82:58:7a:bf:52:da:9b:f9:b0:64:b7:0a:9a:e8: ff:7f:29:e3:41:7d:97:99:5c:19:06:97:18:0b:87:fc:1f:07: b9:b2:32:e3:05:49:7d:77:81:6a:93:81:d8:5e:44:32:93:aa: f2:ac:fc:08:66:4f:e6:a9:cd:07:f7:5a:61:2d:9b:dd:45:89: 0f:7f:98:f5:65:14:4e:fe:f6:72:34:88:f9:da:53:cc:b4:04: 54:b9:9e:c1:5e:6f:6b:02:84:03:fe:f0:97:0c:9e:88:8f:a1: f7:00:86:5b:09:59:4c:73:69:e3:ad:08:75:c4:8e:33:74:76: 4d:05:34:b5 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt8Ey+SDRkbDax2BTRFWl6uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1MzRjNDlmY2ZhOGE0NTA0MWQ5NWVkNGQ4ZDRmYzY5Yzcy N2E0NjcwHhcNMjYwMTAyMDAxOTUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YzAxOWNiMzAyMDM2YzEwMDhkMTcwY2UwMThhNzUzMTM1NWI1NDQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxgmZT+IakotJyhKdrqwm5NB+wisE RN7KJrBX5qMHimTi4O52EvLv9+JNlaXqOuPfhMg7qYGosXqr4dZrS7IBw+DkNqe4 m/72C1Jn+mIckbRtMy+fKbzqcmJ0cEZRisq0luC40lPYqY/Q8/LEVjGHbVeAb+o0 nIwLz3yhtCsTcpjrg2h5V4iTjQKpQkZAkDx1W3Dz/CGaLxHJ8EZqns2gfc7/vcIA jxkDW4FqConjK+kQ1TS9MpshktigvFNSllpb52TDf+vzYaQ/XolmFLafoSj6CzTd Jzzk4AuqARatfiEFeBvskIC0M4Yi7YG9D3kCaAsb8NDbj/6z84n8QwAdmQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFJwBnLMCA2wQCNFwzgGKdTE1W1RFMB8GA1UdIwQY MBaAFAU0xJ/PqKRQQdle1NjU/GnHJ6RnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYt Y2Q3ZTA2Y2JiNTMxLzEvbkFHY3N3SURiQkFJMFhET0FZcDFNVFZiVkVVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYtY2Q3ZTA2Y2JiNTMx LzEvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQALVBRAwQA yTG/AwQC2Rq8AwQA2Uz8MA0GCSqGSIb3DQEBCwUAA4IBAQApGAS2Z3rCz2BvoiOA HAhgZrGRc+bGrSh/hLXvdq0rvySDSiJ1aLxuuKh+HFCEj1wHhRGHYiJwk6UgATEO P6JP6/oiSl9eAeMyJmBfmR57832oq5Ls01FIotQ9K+6+OQJXY2XEkbSGFs/4RvIx 1DJGH74VQP1X9PJHN57ayEjlLt8jglh6v1Lam/mwZLcKmuj/fynjQX2XmVwZBpcY C4f8Hwe5sjLjBUl9d4Fqk4HYXkQyk6ryrPwIZk/mqc0H91phLZvdRYkPf5j1ZRRO /vZyNIj52lPMtARUuZ7BXm9rAoQD/vCXDJ6Ij6H3AIZbCVlMc2njrQh1xI4zdHZN BTS1 -----END CERTIFICATE-----Generated at Fri Jan 23 21:37:13 2026 by rpki-client