This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/oqz2d3EX5oVO8yYazOedRfUaD5I.roa File: oqz2d3EX5oVO8yYazOedRfUaD5I.roa (raw, json) Hash identifier: uEpO/sxyoT0cQ1UBAT5XkgF7ywiiGn4XQx+pY4qywds= Subject key identifier: A2:AC:F6:77:71:17:E6:85:4E:F3:26:1A:CC:E7:9D:45:F5:1A:0F:92 Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467 Certificate serial: 019BE4E4124D0385415E159F5CFE95AC2B62 Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/oqz2d3EX5oVO8yYazOedRfUaD5I.roa Signing time: Thu 22 Jan 2026 08:48:30 +0000 ROA not before: Thu 22 Jan 2026 08:48:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 27882 IP address blocks: 49.0.184.0/21 maxlen: 21 49.0.184.0/22 maxlen: 22 49.0.184.0/23 maxlen: 23 49.0.184.0/24 maxlen: 24 49.0.185.0/24 maxlen: 24 49.0.186.0/23 maxlen: 23 49.0.186.0/24 maxlen: 24 49.0.187.0/24 maxlen: 24 49.0.188.0/22 maxlen: 22 49.0.188.0/23 maxlen: 23 49.0.188.0/24 maxlen: 24 49.0.189.0/24 maxlen: 24 49.0.190.0/23 maxlen: 23 49.0.190.0/24 maxlen: 24 49.0.191.0/24 maxlen: 24 181.41.144.0/21 maxlen: 21 181.41.144.0/22 maxlen: 24 181.41.144.0/23 maxlen: 23 181.41.144.0/24 maxlen: 24 181.41.145.0/24 maxlen: 24 181.41.146.0/23 maxlen: 23 181.41.146.0/24 maxlen: 24 181.41.147.0/24 maxlen: 24 181.41.148.0/22 maxlen: 22 181.41.148.0/23 maxlen: 23 181.41.148.0/24 maxlen: 24 181.41.149.0/24 maxlen: 24 181.41.150.0/23 maxlen: 23 181.41.150.0/24 maxlen: 24 181.41.151.0/24 maxlen: 24 181.41.158.0/23 maxlen: 23 181.41.158.0/24 maxlen: 24 181.41.159.0/24 maxlen: 24 189.28.64.0/19 maxlen: 19 189.28.64.0/20 maxlen: 20 189.28.64.0/21 maxlen: 21 189.28.64.0/22 maxlen: 22 189.28.64.0/23 maxlen: 23 189.28.64.0/24 maxlen: 24 189.28.65.0/24 maxlen: 24 189.28.66.0/23 maxlen: 23 189.28.66.0/24 maxlen: 24 189.28.67.0/24 maxlen: 24 189.28.68.0/22 maxlen: 22 189.28.68.0/23 maxlen: 23 189.28.68.0/24 maxlen: 24 189.28.69.0/24 maxlen: 24 189.28.70.0/23 maxlen: 23 189.28.70.0/24 maxlen: 24 189.28.71.0/24 maxlen: 24 189.28.72.0/21 maxlen: 21 189.28.72.0/22 maxlen: 22 189.28.72.0/23 maxlen: 23 189.28.72.0/24 maxlen: 24 189.28.73.0/24 maxlen: 24 189.28.74.0/23 maxlen: 23 189.28.74.0/24 maxlen: 24 189.28.75.0/24 maxlen: 24 189.28.76.0/22 maxlen: 22 189.28.76.0/23 maxlen: 23 189.28.76.0/24 maxlen: 24 189.28.77.0/24 maxlen: 24 189.28.78.0/23 maxlen: 23 189.28.78.0/24 maxlen: 24 189.28.79.0/24 maxlen: 24 189.28.80.0/20 maxlen: 20 189.28.80.0/21 maxlen: 21 189.28.80.0/22 maxlen: 22 189.28.80.0/23 maxlen: 23 189.28.80.0/24 maxlen: 24 189.28.81.0/24 maxlen: 24 189.28.82.0/23 maxlen: 23 189.28.82.0/24 maxlen: 24 189.28.83.0/24 maxlen: 24 189.28.84.0/22 maxlen: 22 189.28.84.0/23 maxlen: 23 189.28.84.0/24 maxlen: 24 189.28.85.0/24 maxlen: 24 189.28.86.0/23 maxlen: 23 189.28.86.0/24 maxlen: 24 189.28.87.0/24 maxlen: 24 189.28.88.0/21 maxlen: 21 189.28.88.0/22 maxlen: 22 189.28.88.0/23 maxlen: 23 189.28.88.0/24 maxlen: 24 189.28.89.0/24 maxlen: 24 189.28.90.0/23 maxlen: 23 189.28.90.0/24 maxlen: 24 189.28.91.0/24 maxlen: 24 189.28.92.0/22 maxlen: 22 189.28.92.0/23 maxlen: 23 189.28.92.0/24 maxlen: 24 189.28.93.0/24 maxlen: 24 189.28.94.0/23 maxlen: 23 189.28.94.0/24 maxlen: 24 189.28.95.0/24 maxlen: 24 203.88.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.mft rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 11:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:e4:e4:12:4d:03:85:41:5e:15:9f:5c:fe:95:ac:2b:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467 Validity Not Before: Jan 22 08:48:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a2acf6777117e6854ef3261acce79d45f51a0f92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:c2:c1:2b:b2:96:ac:75:be:a3:59:46:87:59: d8:a5:88:1a:4c:0a:78:ab:34:68:b8:5d:16:93:78: 1b:be:36:ae:f2:79:17:b2:4e:a3:6e:2e:29:ca:9d: b0:4c:37:78:5c:5f:61:db:68:91:8b:7a:2d:1b:2e: 29:4a:29:61:03:fd:2f:18:b4:f3:f2:4e:3b:17:7c: fe:c9:41:a4:86:ee:07:1e:01:74:ee:0a:eb:0c:5c: 56:2f:2e:5c:8c:ab:48:91:49:0c:01:3d:a5:84:64: 9b:d3:c3:2b:c2:b0:a1:cc:9d:00:ea:47:cc:ea:6e: 01:a8:76:eb:d7:63:67:34:21:0a:5b:b0:d6:13:f5: f9:a1:85:8f:b5:45:cb:61:a5:6e:81:83:00:1b:5d: 2a:6a:e0:13:00:bb:ad:cd:20:31:b7:1b:27:27:fa: 72:75:d7:44:1b:6e:35:a7:48:db:21:f4:ed:1d:3a: df:a0:2b:8e:fa:45:a4:f2:4b:ea:ed:04:f8:ff:21: 01:32:26:a1:82:93:d8:0e:c4:2f:d8:22:04:97:e3: be:ca:54:32:71:66:a0:fe:52:c1:f0:0e:3e:d7:8a: 46:9f:0c:da:45:bd:e7:01:11:bf:4c:9c:2f:6d:e5: 7d:45:ed:7a:58:d7:e0:26:d4:b6:f9:bf:81:4b:f7: 04:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:AC:F6:77:71:17:E6:85:4E:F3:26:1A:CC:E7:9D:45:F5:1A:0F:92 X509v3 Authority Key Identifier: keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/oqz2d3EX5oVO8yYazOedRfUaD5I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 49.0.184.0/21 181.41.144.0/21 181.41.158.0/23 189.28.64.0/19 203.88.99.0/24 Signature Algorithm: sha256WithRSAEncryption bd:b0:f6:64:0e:ba:12:96:e4:48:12:ad:6e:17:30:54:a2:86: ce:fa:0c:6c:30:65:d4:41:88:2f:e4:b3:f7:f7:71:0d:81:c3: 7b:ab:1d:d9:23:3c:28:0d:26:20:87:ad:56:ec:6c:5a:b9:a6: 08:67:2a:fd:dc:83:b1:cc:c7:a1:52:4e:39:e5:65:b5:8f:07: 9a:a9:4a:67:e7:14:77:ff:86:42:3d:44:a7:cd:ad:45:98:27: 1c:97:a8:cf:71:20:22:ca:6c:6c:7f:8d:f0:5a:72:99:6d:64: 76:ad:c9:d5:40:60:bb:8d:31:f6:46:0e:20:83:7e:53:4a:52: c1:ea:bb:64:c0:05:b2:27:a0:b9:92:be:bd:92:c0:f6:c3:de: a7:a3:24:7a:8a:9b:7e:4f:94:3a:dc:37:56:57:79:cf:f5:35: 78:e0:16:bf:d4:af:bf:cf:65:d0:1e:be:77:2a:b4:9d:2c:0c: e8:ae:7e:b5:1d:81:9e:6a:f7:a4:b5:4f:6b:b5:fd:1e:9f:88: 17:2a:b8:cd:27:70:3f:78:8d:9a:ff:0f:77:a6:d2:3c:ad:f2: dc:29:43:44:74:61:9a:df:13:9d:18:6f:81:f9:fb:2e:e8:b6: 90:7c:4e:12:6a:75:11:62:4f:30:c1:38:5b:26:cc:6a:13:08: b3:8b:7a:f8 -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZvk5BJNA4VBXhWfXP6VrCtiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1MzRjNDlmY2ZhOGE0NTA0MWQ5NWVkNGQ4ZDRmYzY5Yzcy N2E0NjcwHhcNMjYwMTIyMDg0ODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMmFjZjY3NzcxMTdlNjg1NGVmMzI2MWFjY2U3OWQ0NWY1MWEwZjkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwsLBK7KWrHW+o1lGh1nYpYgaTAp4 qzRouF0Wk3gbvjau8nkXsk6jbi4pyp2wTDd4XF9h22iRi3otGy4pSilhA/0vGLTz 8k47F3z+yUGkhu4HHgF07grrDFxWLy5cjKtIkUkMAT2lhGSb08MrwrChzJ0A6kfM 6m4BqHbr12NnNCEKW7DWE/X5oYWPtUXLYaVugYMAG10qauATALutzSAxtxsnJ/py dddEG241p0jbIfTtHTrfoCuO+kWk8kvq7QT4/yEBMiahgpPYDsQv2CIEl+O+ylQy cWag/lLB8A4+14pGnwzaRb3nARG/TJwvbeV9Re16WNfgJtS2+b+BS/cEiwIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFKKs9ndxF+aFTvMmGsznnUX1Gg+SMB8GA1UdIwQY MBaAFAU0xJ/PqKRQQdle1NjU/GnHJ6RnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYt Y2Q3ZTA2Y2JiNTMxLzEvb3F6MmQzRVg1b1ZPOHlZYXpPZWRSZlVhRDVJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYtY2Q3ZTA2Y2JiNTMx LzEvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQDMQC4AwQD tSmQAwQBtSmeAwQFvRxAAwQAy1hjMA0GCSqGSIb3DQEBCwUAA4IBAQC9sPZkDroS luRIEq1uFzBUoobO+gxsMGXUQYgv5LP393ENgcN7qx3ZIzwoDSYgh61W7GxauaYI Zyr93IOxzMehUk455WW1jweaqUpn5xR3/4ZCPUSnza1FmCccl6jPcSAiymxsf43w WnKZbWR2rcnVQGC7jTH2Rg4gg35TSlLB6rtkwAWyJ6C5kr69ksD2w96noyR6ipt+ T5Q63DdWV3nP9TV44Ba/1K+/z2XQHr53KrSdLAzorn61HYGeavektU9rtf0en4gX KrjNJ3A/eI2a/w93ptI8rfLcKUNEdGGa3xOdGG+B+fsu6LaQfE4SanURYk8wwThb JsxqEwizi3r4 -----END CERTIFICATE-----Generated at Fri Jan 23 21:38:22 2026 by rpki-client