This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/xKNleFCnf6Yx5ZBPFx2DShBdi2s.roa File: xKNleFCnf6Yx5ZBPFx2DShBdi2s.roa (raw, json) Hash identifier: fAhWC+o78bD4kMUbH/NAP4LjvG+5VTqeVQUAqcDHASo= Subject key identifier: C4:A3:65:78:50:A7:7F:A6:31:E5:90:4F:17:1D:83:4A:10:5D:8B:6B Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467 Certificate serial: 019B7C13409EC4131F15E9BA3B3BB5087D7D Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/xKNleFCnf6Yx5ZBPFx2DShBdi2s.roa Signing time: Fri 02 Jan 2026 00:19:55 +0000 ROA not before: Fri 02 Jan 2026 00:19:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 272916 IP address blocks: 141.136.61.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.mft rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 11:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:40:9e:c4:13:1f:15:e9:ba:3b:3b:b5:08:7d:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467 Validity Not Before: Jan 2 00:19:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c4a3657850a77fa631e5904f171d834a105d8b6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:08:b5:58:11:98:4a:5f:d7:16:07:70:cd:27: 62:f8:f6:30:ce:89:58:44:28:e6:bb:22:47:59:e4: ed:ff:50:52:ba:ce:3e:09:1f:48:8e:91:27:c0:3c: c1:69:7b:94:6d:48:ea:b4:16:6f:03:14:10:a8:ec: 18:a9:bd:ec:07:85:3c:77:7f:5a:08:47:9a:6f:ef: 3c:81:ff:2d:77:a0:c3:9b:9f:41:f0:e1:c7:b5:0f: 9e:b5:33:8a:5a:59:03:84:b9:1e:ad:71:77:63:e3: 39:d6:76:a2:6f:cb:e8:ed:eb:ae:90:8b:be:69:41: 64:c6:73:7b:f7:a0:bf:0f:82:c8:4d:3a:63:9b:48: 10:1d:8b:17:93:46:30:7d:c9:2e:c1:2f:d6:56:84: 3f:0c:6e:54:ac:47:3d:36:7a:ea:ea:3d:f4:17:1a: f9:4e:fb:8c:e7:88:c8:ee:1b:c6:0a:2f:c0:d7:93: 9f:24:83:ef:92:5b:d0:f8:87:a6:01:09:58:d3:4e: 0b:e6:5e:e3:f5:2c:54:05:c8:06:13:78:97:4d:1d: 29:a8:9e:35:f0:17:cd:74:9f:4a:ab:86:96:98:c8: bb:9c:77:7b:af:ff:fe:75:9d:bd:7b:2b:eb:4d:1a: 17:5b:8e:7b:04:24:8b:57:36:53:67:07:59:bd:77: d4:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:A3:65:78:50:A7:7F:A6:31:E5:90:4F:17:1D:83:4A:10:5D:8B:6B X509v3 Authority Key Identifier: keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/xKNleFCnf6Yx5ZBPFx2DShBdi2s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 141.136.61.0/24 Signature Algorithm: sha256WithRSAEncryption 8e:ff:76:9c:01:ce:41:af:fe:4d:81:50:af:c0:6f:0a:c1:0a: 4d:e2:b3:3d:45:f0:31:3a:8e:95:3e:b3:9d:4a:9c:d2:84:7b: 9c:e8:d1:e0:f2:b6:01:be:e1:c5:54:dc:21:17:cf:5a:a6:6d: f8:9a:7e:fb:fa:1d:7a:10:30:41:09:6b:00:da:1a:bd:3f:c8: 83:8e:7a:15:04:a5:3b:d1:37:e5:53:56:d3:e7:ca:26:1a:2d: d0:47:14:e7:1f:ea:09:4c:62:22:86:98:71:0f:86:d5:47:c3: d7:5d:57:b4:d3:51:e8:7e:af:46:eb:20:78:19:09:c1:24:8f: 41:42:12:1f:21:5a:db:e7:a5:bb:08:df:88:58:39:b4:3c:24: 79:fb:a8:d3:21:fb:1a:1c:49:52:0e:2f:0d:4e:da:58:a6:92: 04:b1:3e:6c:1c:b9:79:29:80:92:08:22:ba:c7:26:49:d7:ec: 34:af:74:8f:82:1d:84:43:93:b1:85:cf:c8:26:bb:0c:67:98: a0:d1:f8:ba:fe:95:92:4d:76:ee:7e:31:77:56:08:86:c5:e2: 07:07:e5:df:d3:33:34:a7:e9:67:34:6c:83:6c:8d:1f:86:b2: 34:5e:8c:32:55:fa:15:c8:a8:62:2c:cc:52:10:a2:4e:be:88: ce:f2:e4:e4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8E0CexBMfFem6Ozu1CH19MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1MzRjNDlmY2ZhOGE0NTA0MWQ5NWVkNGQ4ZDRmYzY5Yzcy N2E0NjcwHhcNMjYwMTAyMDAxOTU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNGEzNjU3ODUwYTc3ZmE2MzFlNTkwNGYxNzFkODM0YTEwNWQ4YjZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQi1WBGYSl/XFgdwzSdi+PYwzolY RCjmuyJHWeTt/1BSus4+CR9IjpEnwDzBaXuUbUjqtBZvAxQQqOwYqb3sB4U8d39a CEeab+88gf8td6DDm59B8OHHtQ+etTOKWlkDhLkerXF3Y+M51naib8vo7euukIu+ aUFkxnN796C/D4LITTpjm0gQHYsXk0YwfckuwS/WVoQ/DG5UrEc9Nnrq6j30Fxr5 TvuM54jI7hvGCi/A15OfJIPvklvQ+IemAQlY004L5l7j9SxUBcgGE3iXTR0pqJ41 8BfNdJ9Kq4aWmMi7nHd7r//+dZ29eyvrTRoXW457BCSLVzZTZwdZvXfUSwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMSjZXhQp3+mMeWQTxcdg0oQXYtrMB8GA1UdIwQY MBaAFAU0xJ/PqKRQQdle1NjU/GnHJ6RnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYt Y2Q3ZTA2Y2JiNTMxLzEveEtObGVGQ25mNll4NVpCUEZ4MkRTaEJkaTJzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYtY2Q3ZTA2Y2JiNTMx LzEvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjYg9MA0G CSqGSIb3DQEBCwUAA4IBAQCO/3acAc5Br/5NgVCvwG8KwQpN4rM9RfAxOo6VPrOd SpzShHuc6NHg8rYBvuHFVNwhF89apm34mn77+h16EDBBCWsA2hq9P8iDjnoVBKU7 0TflU1bT58omGi3QRxTnH+oJTGIihphxD4bVR8PXXVe001Hofq9G6yB4GQnBJI9B QhIfIVrb56W7CN+IWDm0PCR5+6jTIfsaHElSDi8NTtpYppIEsT5sHLl5KYCSCCK6 xyZJ1+w0r3SPgh2EQ5Oxhc/IJrsMZ5ig0fi6/pWSTXbufjF3VgiGxeIHB+Xf0zM0 p+lnNGyDbI0fhrI0XowyVfoVyKhiLMxSEKJOvojO8uTk -----END CERTIFICATE-----Generated at Fri Jan 23 21:37:06 2026 by rpki-client