This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/xVt_k9ITU0kXftUeCSqv6hMiEYo.roa File: xVt_k9ITU0kXftUeCSqv6hMiEYo.roa (raw, json) Hash identifier: r5OcX4Kp71daYNTXSVx7wzlTm8at6NzP+OLFTvQdX24= Subject key identifier: C5:5B:7F:93:D2:13:53:49:17:7E:D5:1E:09:2A:AF:EA:13:22:11:8A Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467 Certificate serial: 019B7C132BC5E03024D52693E841CBFFF7C8 Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/xVt_k9ITU0kXftUeCSqv6hMiEYo.roa Signing time: Fri 02 Jan 2026 00:19:49 +0000 ROA not before: Fri 02 Jan 2026 00:19:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202766 IP address blocks: 45.83.50.0/23 maxlen: 23 45.83.50.0/24 maxlen: 24 45.83.51.0/24 maxlen: 24 80.66.112.0/20 maxlen: 20 80.66.112.0/23 maxlen: 23 80.66.114.0/24 maxlen: 24 80.66.115.0/24 maxlen: 24 80.66.117.0/24 maxlen: 24 80.66.118.0/24 maxlen: 24 80.66.119.0/24 maxlen: 24 80.66.120.0/23 maxlen: 23 80.66.120.0/24 maxlen: 24 80.66.121.0/24 maxlen: 24 80.66.122.0/24 maxlen: 24 80.66.123.0/24 maxlen: 24 80.66.124.0/24 maxlen: 24 80.66.125.0/24 maxlen: 24 80.66.126.0/24 maxlen: 24 80.66.127.0/24 maxlen: 24 89.42.70.0/24 maxlen: 24 89.44.150.0/24 maxlen: 24 89.44.151.0/24 maxlen: 24 91.132.28.0/23 maxlen: 23 91.132.31.0/24 maxlen: 24 94.198.47.0/24 maxlen: 24 178.19.44.0/24 maxlen: 24 178.19.47.0/24 maxlen: 24 185.203.20.0/22 maxlen: 22 185.203.20.0/24 maxlen: 24 185.203.21.0/24 maxlen: 24 185.203.22.0/24 maxlen: 24 185.203.23.0/24 maxlen: 24 185.229.212.0/24 maxlen: 24 185.229.213.0/24 maxlen: 24 185.229.214.0/24 maxlen: 24 185.229.215.0/24 maxlen: 24 185.242.175.0/24 maxlen: 24 193.178.212.0/24 maxlen: 24 193.178.218.0/24 maxlen: 24 193.186.1.0/24 maxlen: 24 193.186.11.0/24 maxlen: 24 194.15.146.0/24 maxlen: 24 194.15.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.mft rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 11:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:2b:c5:e0:30:24:d5:26:93:e8:41:cb:ff:f7:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467 Validity Not Before: Jan 2 00:19:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c55b7f93d2135349177ed51e092aafea1322118a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:47:b7:e1:0b:14:6f:23:f7:92:65:12:c8:c8: ab:94:18:d9:d5:04:c2:f1:22:18:8c:58:0c:5b:ac: 07:22:10:a7:67:4c:a8:a6:41:33:9b:c7:30:ca:e5: 6c:ab:f9:13:48:d4:bc:4a:23:b5:32:a3:2d:45:d8: cb:1f:00:b4:d6:47:aa:d5:5b:ca:a8:13:58:c8:c8: 5c:7e:0c:79:f8:97:d4:ec:9b:2b:6e:83:18:75:29: d0:a9:1d:59:21:39:d7:d6:c6:bc:75:58:54:0c:ea: d8:86:ee:a3:ac:9b:78:e7:78:c1:30:81:b1:7e:cc: 0b:19:52:2a:69:92:9a:a9:84:86:41:e9:94:16:5c: 4b:a3:0d:bd:30:ed:72:bf:8a:fb:7d:9d:56:0f:aa: 02:72:c6:86:00:69:1c:c3:de:71:62:a9:6a:16:61: cd:2f:f9:c7:7c:21:63:07:c2:e1:dd:08:38:c8:ec: cc:9d:c1:70:d1:88:45:ee:23:43:c5:43:3e:8b:80: b3:ec:45:b7:74:7a:b4:89:6b:fd:95:63:54:95:1f: 1c:aa:9a:29:93:71:41:3e:d0:c5:5f:4a:d9:65:cc: 9d:be:65:f1:82:25:70:38:da:af:0e:0c:10:f9:95: a5:97:c7:e1:fb:83:d7:38:11:d0:96:ad:d4:4d:26: 00:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:5B:7F:93:D2:13:53:49:17:7E:D5:1E:09:2A:AF:EA:13:22:11:8A X509v3 Authority Key Identifier: keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/xVt_k9ITU0kXftUeCSqv6hMiEYo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.83.50.0/23 80.66.112.0/20 89.42.70.0/24 89.44.150.0/23 91.132.28.0/23 91.132.31.0/24 94.198.47.0/24 178.19.44.0/24 178.19.47.0/24 185.203.20.0/22 185.229.212.0/22 185.242.175.0/24 193.178.212.0/24 193.178.218.0/24 193.186.1.0/24 193.186.11.0/24 194.15.146.0/24 194.15.195.0/24 Signature Algorithm: sha256WithRSAEncryption 12:a3:20:a3:3c:dd:f7:40:d6:41:51:33:ee:54:d3:54:24:1c: 7f:3a:7a:21:19:8a:74:3b:5f:76:cb:33:a5:11:16:8e:31:26: 90:f5:55:89:7e:a5:59:1b:f7:02:a4:6f:ae:6b:fa:76:77:02: e4:86:fd:10:c0:37:96:5a:6e:4d:54:73:7c:2a:53:9f:64:c9: 4b:37:b6:39:79:63:37:c2:cc:b8:45:37:20:a5:80:49:0c:30: 9f:ef:ad:74:f1:db:ce:2c:a2:51:83:24:05:b3:09:7c:22:d5: aa:71:1a:3f:9e:d9:b0:32:0a:c3:49:09:72:f9:b7:e5:09:91: 0b:d5:c7:95:26:45:a5:39:50:02:40:2e:6d:b3:ca:2e:e2:e6: b5:a8:cb:c2:94:2f:8c:e0:3e:a8:da:71:ce:13:42:1b:6d:46: 39:74:80:cd:7c:ab:07:5c:a5:d0:08:c5:9e:68:f8:ea:4c:52: f6:91:fe:67:11:1f:a4:6b:d7:ae:91:de:be:6e:55:b6:e8:c2: 8a:97:8a:c1:f7:09:06:3a:ca:e1:9b:40:86:4d:05:59:4f:eb: 78:38:e3:80:62:40:5a:89:e5:41:db:0d:77:07:af:f3:d5:5a: f6:c9:7d:eb:77:7b:31:19:da:98:37:57:e2:92:50:aa:81:b1: 6e:aa:b6:19 -----BEGIN CERTIFICATE----- MIIFZDCCBEygAwIBAgISAZt8EyvF4DAk1SaT6EHL//fIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1MzRjNDlmY2ZhOGE0NTA0MWQ5NWVkNGQ4ZDRmYzY5Yzcy N2E0NjcwHhcNMjYwMTAyMDAxOTQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNTViN2Y5M2QyMTM1MzQ5MTc3ZWQ1MWUwOTJhYWZlYTEzMjIxMThhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv0e34QsUbyP3kmUSyMirlBjZ1QTC 8SIYjFgMW6wHIhCnZ0yopkEzm8cwyuVsq/kTSNS8SiO1MqMtRdjLHwC01keq1VvK qBNYyMhcfgx5+JfU7JsrboMYdSnQqR1ZITnX1sa8dVhUDOrYhu6jrJt453jBMIGx fswLGVIqaZKaqYSGQemUFlxLow29MO1yv4r7fZ1WD6oCcsaGAGkcw95xYqlqFmHN L/nHfCFjB8Lh3Qg4yOzMncFw0YhF7iNDxUM+i4Cz7EW3dHq0iWv9lWNUlR8cqpop k3FBPtDFX0rZZcydvmXxgiVwONqvDgwQ+ZWll8fh+4PXOBHQlq3UTSYAEQIDAQAB o4ICcDCCAmwwHQYDVR0OBBYEFMVbf5PSE1NJF37VHgkqr+oTIhGKMB8GA1UdIwQY MBaAFAU0xJ/PqKRQQdle1NjU/GnHJ6RnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYt Y2Q3ZTA2Y2JiNTMxLzEveFZ0X2s5SVRVMGtYZnRVZUNTcXY2aE1pRVlvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYtY2Q3ZTA2Y2JiNTMx LzEvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGFBggrBgEFBQcBBwEB/wR2MHQwcgQCAAEwbAMEAS1TMgME BFBCcAMEAFkqRgMEAVkslgMEAVuEHAMEAFuEHwMEAF7GLwMEALITLAMEALITLwME ArnLFAMEArnl1AMEALnyrwMEAMGy1AMEAMGy2gMEAMG6AQMEAMG6CwMEAMIPkgME AMIPwzANBgkqhkiG9w0BAQsFAAOCAQEAEqMgozzd90DWQVEz7lTTVCQcfzp6IRmK dDtfdsszpREWjjEmkPVViX6lWRv3AqRvrmv6dncC5Ib9EMA3llpuTVRzfCpTn2TJ Sze2OXljN8LMuEU3IKWASQwwn++tdPHbziyiUYMkBbMJfCLVqnEaP57ZsDIKw0kJ cvm35QmRC9XHlSZFpTlQAkAubbPKLuLmtajLwpQvjOA+qNpxzhNCG21GOXSAzXyr B1yl0AjFnmj46kxS9pH+ZxEfpGvXrpHevm5VtujCipeKwfcJBjrK4ZtAhk0FWU/r eDjjgGJAWonlQdsNdwev89Va9sl963d7MRnamDdX4pJQqoGxbqq2GQ== -----END CERTIFICATE-----Generated at Fri Jan 23 21:36:19 2026 by rpki-client