This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/t8awGw5HCCg9b4gOUiZndFbvxmc.roa File: t8awGw5HCCg9b4gOUiZndFbvxmc.roa (raw, json) Hash identifier: DHnk9hmo4mPXRQ4o6MRwSZM6j6MOBfHA8oBJZVhUHDM= Subject key identifier: B7:C6:B0:1B:0E:47:08:28:3D:6F:88:0E:52:26:67:74:56:EF:C6:67 Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467 Certificate serial: 019B7C13281D77175AE2429A1FE74025CF1C Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/t8awGw5HCCg9b4gOUiZndFbvxmc.roa Signing time: Fri 02 Jan 2026 00:19:48 +0000 ROA not before: Fri 02 Jan 2026 00:19:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 52468 IP address blocks: 31.15.0.0/24 maxlen: 24 45.10.107.0/24 maxlen: 24 45.130.160.0/24 maxlen: 24 45.130.161.0/24 maxlen: 24 45.150.85.0/24 maxlen: 24 45.150.86.0/24 maxlen: 24 45.150.87.0/24 maxlen: 24 46.29.28.0/24 maxlen: 24 94.125.137.0/24 maxlen: 24 201.77.48.0/24 maxlen: 24 201.77.53.0/24 maxlen: 24 201.77.55.0/24 maxlen: 24 217.76.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.mft rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 18:47:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:28:1d:77:17:5a:e2:42:9a:1f:e7:40:25:cf:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467 Validity Not Before: Jan 2 00:19:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b7c6b01b0e4708283d6f880e5226677456efc667 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:13:ce:1c:de:85:db:ae:9e:e6:df:03:d8:04: f9:a7:4e:7f:ea:83:da:18:c0:7c:ec:3e:3f:bc:e0: 59:bb:1c:d2:66:73:1f:29:9a:c5:31:bb:aa:50:26: db:44:c9:77:6e:1a:7b:6d:08:fd:0f:1f:1f:82:04: 2c:e1:f1:ba:81:3c:90:90:40:f4:36:4e:e8:ee:09: 66:26:17:97:6c:a9:58:35:99:aa:78:99:6e:78:69: 53:98:0d:df:35:d5:07:25:73:88:9d:4f:55:d5:43: 7c:3e:95:0b:bc:4f:a1:72:a4:33:74:3f:09:06:7a: b7:9d:c2:58:f3:88:19:4f:ba:db:6d:55:98:a7:5a: 11:50:0b:a1:e0:ee:45:f2:ef:1e:0a:43:ff:1c:13: e2:46:5f:3b:3d:15:5f:20:4b:d6:c7:77:df:24:56: 27:3e:ca:31:c4:2e:ab:c3:3e:c5:1e:2c:16:ca:c9: d4:a3:37:b0:5d:65:22:ad:42:24:3d:2c:87:47:79: 5a:6c:f0:b6:c7:f0:4b:38:c9:00:bd:91:d2:11:c8: e1:cc:10:61:4e:17:55:68:6d:73:03:5e:58:b5:6e: d5:1f:22:3f:45:cf:da:32:02:80:97:ef:20:80:bc: a0:50:a6:98:40:c5:48:01:87:22:f4:f6:6c:36:77: 1f:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:C6:B0:1B:0E:47:08:28:3D:6F:88:0E:52:26:67:74:56:EF:C6:67 X509v3 Authority Key Identifier: keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/t8awGw5HCCg9b4gOUiZndFbvxmc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.15.0.0/24 45.10.107.0/24 45.130.160.0/23 45.150.85.0-45.150.87.255 46.29.28.0/24 94.125.137.0/24 201.77.48.0/24 201.77.53.0/24 201.77.55.0/24 217.76.240.0/24 Signature Algorithm: sha256WithRSAEncryption ba:7a:86:a6:0e:41:5e:b0:5d:63:4c:0a:2b:dd:bf:ed:03:64: 4e:1b:9e:fd:74:3d:0e:87:a5:c7:b1:1c:ed:dd:7d:02:94:36: 0a:20:f1:b4:2d:83:69:03:88:3b:b2:e6:95:a9:f4:5a:c3:ad: 2c:38:28:fd:61:12:c1:be:d0:f9:6f:14:bd:df:26:e2:06:6c: 35:29:c9:2d:d1:c8:7b:32:eb:fb:83:7f:50:83:cd:3e:83:aa: 3e:68:46:6b:7a:9f:81:a7:66:2f:3d:18:4f:91:5c:8e:16:66: c8:49:31:e2:85:17:c0:b5:2c:d3:0f:fa:7c:a0:ee:49:f6:da: ce:13:e6:0b:ad:a4:e7:97:47:b6:da:86:a9:09:a8:c9:c5:ab: 79:cb:5d:83:e9:10:1f:05:3e:01:81:96:45:ed:43:ad:19:23: 22:7d:1e:2d:a6:58:4c:e0:8b:2c:e3:e6:72:14:87:b1:bb:20: d1:35:0a:50:ab:03:61:33:56:b7:a1:90:df:75:90:f2:ea:ad: 47:cf:a9:5b:6b:a5:6e:18:d6:0d:f1:8a:49:de:7c:f2:b8:88: a2:cc:c5:01:48:21:c2:0a:0c:98:80:bf:9a:e6:60:8d:45:3a: 85:6b:9f:86:4d:c7:db:dc:af:39:6f:dc:ea:d6:00:ca:48:b8: ca:5f:e9:b9 -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgISAZt8Eygddxda4kKaH+dAJc8cMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1MzRjNDlmY2ZhOGE0NTA0MWQ5NWVkNGQ4ZDRmYzY5Yzcy N2E0NjcwHhcNMjYwMTAyMDAxOTQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiN2M2YjAxYjBlNDcwODI4M2Q2Zjg4MGU1MjI2Njc3NDU2ZWZjNjY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3RPOHN6F266e5t8D2AT5p05/6oPa GMB87D4/vOBZuxzSZnMfKZrFMbuqUCbbRMl3bhp7bQj9Dx8fggQs4fG6gTyQkED0 Nk7o7glmJheXbKlYNZmqeJlueGlTmA3fNdUHJXOInU9V1UN8PpULvE+hcqQzdD8J Bnq3ncJY84gZT7rbbVWYp1oRUAuh4O5F8u8eCkP/HBPiRl87PRVfIEvWx3ffJFYn PsoxxC6rwz7FHiwWysnUozewXWUirUIkPSyHR3labPC2x/BLOMkAvZHSEcjhzBBh ThdVaG1zA15YtW7VHyI/Rc/aMgKAl+8ggLygUKaYQMVIAYci9PZsNncfJwIDAQAB o4ICRzCCAkMwHQYDVR0OBBYEFLfGsBsORwgoPW+IDlImZ3RW78ZnMB8GA1UdIwQY MBaAFAU0xJ/PqKRQQdle1NjU/GnHJ6RnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYt Y2Q3ZTA2Y2JiNTMxLzEvdDhhd0d3NUhDQ2c5YjRnT1VpWm5kRmJ2eG1jLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYtY2Q3ZTA2Y2JiNTMx LzEvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMF0GCCsGAQUFBwEHAQH/BE4wTDBKBAIAATBEAwQAHw8AAwQA LQprAwQBLYKgMAwDBAAtllUDBAMtllADBAAuHRwDBABefYkDBADJTTADBADJTTUD BADJTTcDBADZTPAwDQYJKoZIhvcNAQELBQADggEBALp6hqYOQV6wXWNMCivdv+0D ZE4bnv10PQ6HpcexHO3dfQKUNgog8bQtg2kDiDuy5pWp9FrDrSw4KP1hEsG+0Plv FL3fJuIGbDUpyS3RyHsy6/uDf1CDzT6Dqj5oRmt6n4GnZi89GE+RXI4WZshJMeKF F8C1LNMP+nyg7kn22s4T5gutpOeXR7bahqkJqMnFq3nLXYPpEB8FPgGBlkXtQ60Z IyJ9Hi2mWEzgiyzj5nIUh7G7INE1ClCrA2EzVrehkN91kPLqrUfPqVtrpW4Y1g3x iknefPK4iKLMxQFIIcIKDJiAv5rmYI1FOoVrn4ZNx9vcrzlv3OrWAMpIuMpf6bk= -----END CERTIFICATE-----Generated at Fri Jan 23 21:36:13 2026 by rpki-client