This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/xMa5BFakv_YmOLdhQPJx3by5CRQ.roa File: xMa5BFakv_YmOLdhQPJx3by5CRQ.roa (raw, json) Hash identifier: b3fuT4LcB96JlJi+duKdBvlLHOo4p5Cid8tijdLGM38= Subject key identifier: C4:C6:B9:04:56:A4:BF:F6:26:38:B7:61:40:F2:71:DD:BC:B9:09:14 Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467 Certificate serial: 019B7C132C8C520DB8A7167804DED9307061 Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/xMa5BFakv_YmOLdhQPJx3by5CRQ.roa Signing time: Fri 02 Jan 2026 00:19:50 +0000 ROA not before: Fri 02 Jan 2026 00:19:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203068 IP address blocks: 185.71.29.0/24 maxlen: 24 185.71.30.0/24 maxlen: 24 185.241.120.0/23 maxlen: 23 185.242.173.0/24 maxlen: 24 185.242.174.0/24 maxlen: 24 185.244.232.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.mft rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 11:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:2c:8c:52:0d:b8:a7:16:78:04:de:d9:30:70:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467 Validity Not Before: Jan 2 00:19:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c4c6b90456a4bff62638b76140f271ddbcb90914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:2a:9c:0f:b7:e3:a8:ea:aa:89:0a:d0:2a:b9: 0e:88:02:bf:09:b7:b5:a6:5d:6a:c3:99:71:ad:d2: b7:e2:00:5b:d2:63:0c:b2:88:9e:f6:20:0a:b1:a0: e7:ea:e9:43:ca:b6:b3:52:f8:79:6e:5a:f4:d6:82: dc:65:d2:0b:cb:93:89:46:0a:02:cd:0a:bf:30:1c: 8f:33:63:bd:72:ff:79:76:d1:24:35:86:8a:cf:95: 55:2b:a8:6d:64:bc:a3:9c:8a:77:9c:48:07:04:35: 21:6d:6e:aa:c9:85:bd:22:e7:26:89:a5:9a:11:7b: 8a:a0:69:94:c8:2c:20:51:bc:ea:63:d5:4a:d4:78: ac:20:70:54:77:97:d4:ef:e8:79:91:b3:ca:9a:e4: 4b:f4:28:72:54:e0:91:52:a4:dc:c9:02:65:90:1f: 27:3a:2c:41:6f:f4:38:e5:59:e3:ce:79:6a:49:1e: 9b:eb:36:b9:16:8d:1d:9c:27:c8:13:ac:06:22:ad: 73:22:5b:44:bb:1b:10:74:5c:93:85:65:06:e1:f3: 60:ba:45:11:92:c3:6e:0f:29:d9:3d:c8:df:27:a7: 4e:1c:24:00:3e:dd:f9:42:47:86:43:45:66:16:14: b0:e3:49:b8:c0:4f:46:86:25:89:90:e9:bf:f8:a0: 4d:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:C6:B9:04:56:A4:BF:F6:26:38:B7:61:40:F2:71:DD:BC:B9:09:14 X509v3 Authority Key Identifier: keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/xMa5BFakv_YmOLdhQPJx3by5CRQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.71.29.0-185.71.30.255 185.241.120.0/23 185.242.173.0-185.242.174.255 185.244.232.0/23 Signature Algorithm: sha256WithRSAEncryption 58:35:92:5c:e2:29:56:df:3c:7b:40:83:58:a1:3b:53:08:7f: 14:c2:1e:33:e2:79:05:cf:dd:ee:0e:95:05:91:b6:f1:d2:03: 4e:63:f8:92:6a:05:5a:1e:77:79:4e:b0:8e:73:54:8c:12:8e: c3:e6:18:e1:3c:70:dd:21:60:eb:56:4f:83:81:a8:f9:eb:9c: 34:9e:66:3f:23:95:62:84:12:a0:84:6a:51:10:f3:7d:09:6c: db:e5:75:39:6f:6e:2c:f6:0c:06:1e:ee:92:fd:f8:d8:ac:39: 6a:a2:ef:b1:b9:76:f5:1d:49:2e:4f:fc:54:74:52:0d:df:84: 32:fe:d0:8a:12:7e:01:4a:9a:cf:c3:b6:d7:da:d0:be:56:b1: b1:bf:f0:f7:e6:b6:6a:16:92:9c:b2:44:89:31:95:ef:23:c5: 18:aa:73:3a:ad:12:c0:d5:86:ad:b7:83:d8:c4:f7:50:f3:ea: 84:89:3c:a6:e2:b6:75:82:ef:9c:8b:4a:34:73:b6:e7:ef:e7: 8d:54:55:3c:88:6a:21:25:48:b8:53:3e:cf:2f:b2:f5:cf:6d: 89:3f:2f:cd:e0:2c:ed:e7:b2:d4:11:1b:66:48:5b:85:27:3e: c2:38:23:52:48:2d:b9:0e:09:42:7c:99:8f:a5:4b:ac:29:d5: 18:10:9c:d3 -----BEGIN CERTIFICATE----- MIIFHzCCBAegAwIBAgISAZt8EyyMUg24pxZ4BN7ZMHBhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1MzRjNDlmY2ZhOGE0NTA0MWQ5NWVkNGQ4ZDRmYzY5Yzcy N2E0NjcwHhcNMjYwMTAyMDAxOTUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNGM2YjkwNDU2YTRiZmY2MjYzOGI3NjE0MGYyNzFkZGJjYjkwOTE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzCqcD7fjqOqqiQrQKrkOiAK/Cbe1 pl1qw5lxrdK34gBb0mMMsoie9iAKsaDn6ulDyrazUvh5blr01oLcZdILy5OJRgoC zQq/MByPM2O9cv95dtEkNYaKz5VVK6htZLyjnIp3nEgHBDUhbW6qyYW9IucmiaWa EXuKoGmUyCwgUbzqY9VK1HisIHBUd5fU7+h5kbPKmuRL9ChyVOCRUqTcyQJlkB8n OixBb/Q45VnjznlqSR6b6za5Fo0dnCfIE6wGIq1zIltEuxsQdFyThWUG4fNgukUR ksNuDynZPcjfJ6dOHCQAPt35QkeGQ0VmFhSw40m4wE9GhiWJkOm/+KBNywIDAQAB o4ICKzCCAicwHQYDVR0OBBYEFMTGuQRWpL/2Jji3YUDycd28uQkUMB8GA1UdIwQY MBaAFAU0xJ/PqKRQQdle1NjU/GnHJ6RnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYt Y2Q3ZTA2Y2JiNTMxLzEveE1hNUJGYWt2X1ltT0xkaFFQSngzYnk1Q1JRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYtY2Q3ZTA2Y2JiNTMx LzEvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEEGCCsGAQUFBwEHAQH/BDIwMDAuBAIAATAoMAwDBAC5Rx0D BAC5Rx4DBAG58XgwDAMEALnyrQMEALnyrgMEAbn06DANBgkqhkiG9w0BAQsFAAOC AQEAWDWSXOIpVt88e0CDWKE7Uwh/FMIeM+J5Bc/d7g6VBZG28dIDTmP4kmoFWh53 eU6wjnNUjBKOw+YY4Txw3SFg61ZPg4Go+eucNJ5mPyOVYoQSoIRqURDzfQls2+V1 OW9uLPYMBh7ukv342Kw5aqLvsbl29R1JLk/8VHRSDd+EMv7QihJ+AUqaz8O219rQ vlaxsb/w9+a2ahaSnLJEiTGV7yPFGKpzOq0SwNWGrbeD2MT3UPPqhIk8puK2dYLv nItKNHO25+/njVRVPIhqISVIuFM+zy+y9c9tiT8vzeAs7eey1BEbZkhbhSc+wjgj UkgtuQ4JQnyZj6VLrCnVGBCc0w== -----END CERTIFICATE-----Generated at Fri Jan 23 21:37:16 2026 by rpki-client