This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/rRpya61F6cq8CmFiDIoPfvxLOgA.roa File: rRpya61F6cq8CmFiDIoPfvxLOgA.roa (raw, json) Hash identifier: LSZ8yHHgENMm1WPbaaU2V9pWFnxkBcFxpXlJfF1MtFw= Subject key identifier: AD:1A:72:6B:AD:45:E9:CA:BC:0A:61:62:0C:8A:0F:7E:FC:4B:3A:00 Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467 Certificate serial: 019B7C133745FA7674B25D2BBADCD50503F0 Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/rRpya61F6cq8CmFiDIoPfvxLOgA.roa Signing time: Fri 02 Jan 2026 00:19:52 +0000 ROA not before: Fri 02 Jan 2026 00:19:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 265561 IP address blocks: 178.19.32.0/24 maxlen: 24 201.77.59.0/24 maxlen: 24 201.77.60.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.mft rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 18:47:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:37:45:fa:76:74:b2:5d:2b:ba:dc:d5:05:03:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467 Validity Not Before: Jan 2 00:19:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ad1a726bad45e9cabc0a61620c8a0f7efc4b3a00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:44:25:61:f5:18:97:2a:57:d1:19:dc:5d:cd: 21:9a:d7:51:4d:9f:61:71:d2:c7:63:53:57:67:91: eb:2d:69:b4:1b:94:04:aa:19:3c:7d:98:59:f4:6b: 19:a5:c8:96:51:d3:4f:2b:d3:e0:db:31:7b:18:93: be:5b:88:2d:f1:da:9b:1a:34:77:33:70:98:ae:72: 1d:40:ac:22:3b:6a:7e:4b:b9:f6:92:09:a9:c5:9e: 66:55:5b:18:ea:46:f0:1e:38:09:a8:d1:3c:6d:63: 5e:4e:29:e8:00:98:a8:f6:a5:63:96:2f:aa:cd:35: 2c:39:0f:a8:a6:a0:81:f3:3f:44:79:cb:68:a4:1b: 6b:44:ff:a6:6d:1b:14:76:78:bc:43:30:4d:37:f8: bd:3c:f5:90:18:9b:22:5c:ee:10:ec:f1:30:8d:5a: 73:03:04:9b:2f:06:1b:d1:e2:7c:69:f4:f3:8f:71: 7e:bb:8d:ef:cd:c6:b0:2b:6d:c5:9a:05:78:07:83: f1:1e:84:f3:76:bf:c6:04:ad:97:1f:ec:c3:7a:1d: 39:31:59:f7:19:cd:9e:00:17:eb:31:6a:1e:a7:23: ca:76:d8:25:4a:40:91:af:da:6f:4f:ed:5f:e1:74: c5:e0:58:fd:b8:d9:46:96:f5:ab:50:14:dd:5d:e5: ac:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:1A:72:6B:AD:45:E9:CA:BC:0A:61:62:0C:8A:0F:7E:FC:4B:3A:00 X509v3 Authority Key Identifier: keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/rRpya61F6cq8CmFiDIoPfvxLOgA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.19.32.0/24 201.77.59.0-201.77.60.255 Signature Algorithm: sha256WithRSAEncryption 5e:0f:2a:22:39:96:56:95:06:2d:78:28:b1:f0:f6:d9:45:03: 14:d5:43:9b:d4:bd:00:66:a6:b8:22:d4:e6:72:45:ae:d4:9a: 39:e6:ec:49:b5:93:a8:d8:d9:5d:ce:89:f1:36:02:e0:88:61: ec:92:96:b7:e8:6d:14:ca:b2:ae:e5:b1:9b:b1:6a:12:e6:93: 67:d7:f6:bf:3b:eb:93:75:ae:a4:6b:37:00:4e:a3:7d:95:2f: e2:3c:4c:3d:e2:5e:f9:6e:c8:6e:c6:8f:7e:2f:f4:df:7f:0b: ee:a6:22:d9:0b:87:a9:70:21:ef:97:74:79:16:52:dc:52:aa: a2:c0:46:dd:98:8f:6e:06:b8:1a:d0:fa:68:34:19:65:9f:c7: 32:32:fb:26:29:c1:55:f5:bf:c1:b2:17:7f:41:f7:6e:3d:77: bb:c0:eb:7f:e0:d4:d9:6a:ae:56:3c:9b:75:88:3f:46:e1:a7: af:d7:81:0a:75:e4:f6:af:55:29:a4:8b:b3:da:cb:77:85:3e: bf:58:30:18:86:47:13:98:ea:12:28:b5:06:fc:c6:b1:f3:8b: 9d:3f:9d:f9:d8:48:43:7c:b1:f8:e7:c6:24:15:87:5f:b6:ca: bd:f3:28:12:73:29:64:ee:99:6b:2a:40:9b:12:e0:f2:b1:7e: 08:f2:85:c9 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt8EzdF+nZ0sl0rutzVBQPwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1MzRjNDlmY2ZhOGE0NTA0MWQ5NWVkNGQ4ZDRmYzY5Yzcy N2E0NjcwHhcNMjYwMTAyMDAxOTUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZDFhNzI2YmFkNDVlOWNhYmMwYTYxNjIwYzhhMGY3ZWZjNGIzYTAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2UQlYfUYlypX0RncXc0hmtdRTZ9h cdLHY1NXZ5HrLWm0G5QEqhk8fZhZ9GsZpciWUdNPK9Pg2zF7GJO+W4gt8dqbGjR3 M3CYrnIdQKwiO2p+S7n2kgmpxZ5mVVsY6kbwHjgJqNE8bWNeTinoAJio9qVjli+q zTUsOQ+opqCB8z9EectopBtrRP+mbRsUdni8QzBNN/i9PPWQGJsiXO4Q7PEwjVpz AwSbLwYb0eJ8afTzj3F+u43vzcawK23FmgV4B4PxHoTzdr/GBK2XH+zDeh05MVn3 Gc2eABfrMWoepyPKdtglSkCRr9pvT+1f4XTF4Fj9uNlGlvWrUBTdXeWsKwIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFK0acmutRenKvAphYgyKD378SzoAMB8GA1UdIwQY MBaAFAU0xJ/PqKRQQdle1NjU/GnHJ6RnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYt Y2Q3ZTA2Y2JiNTMxLzEvclJweWE2MUY2Y3E4Q21GaURJb1BmdnhMT2dBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYtY2Q3ZTA2Y2JiNTMx LzEvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQAshMgMAwD BADJTTsDBADJTTwwDQYJKoZIhvcNAQELBQADggEBAF4PKiI5llaVBi14KLHw9tlF AxTVQ5vUvQBmprgi1OZyRa7Umjnm7Em1k6jY2V3OifE2AuCIYeySlrfobRTKsq7l sZuxahLmk2fX9r8765N1rqRrNwBOo32VL+I8TD3iXvluyG7Gj34v9N9/C+6mItkL h6lwIe+XdHkWUtxSqqLARt2Yj24GuBrQ+mg0GWWfxzIy+yYpwVX1v8GyF39B9249 d7vA63/g1NlqrlY8m3WIP0bhp6/XgQp15PavVSmki7Pay3eFPr9YMBiGRxOY6hIo tQb8xrHzi50/nfnYSEN8sfjnxiQVh1+2yr3zKBJzKWTumWsqQJsS4PKxfgjyhck= -----END CERTIFICATE-----Generated at Fri Jan 23 21:36:12 2026 by rpki-client