This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/Hx_p9qf_v0IHQ7s1GgnWzv3lOQU.roa File: Hx_p9qf_v0IHQ7s1GgnWzv3lOQU.roa (raw, json) Hash identifier: DQSsFNU7R5wKz1VMw4dCPwP1l8pjHB85dclcVrYtK8A= Subject key identifier: 1F:1F:E9:F6:A7:FF:BF:42:07:43:BB:35:1A:09:D6:CE:FD:E5:39:05 Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467 Certificate serial: 019B7C131D085B31B4BA3A87D5D0DDA46062 Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/Hx_p9qf_v0IHQ7s1GgnWzv3lOQU.roa Signing time: Fri 02 Jan 2026 00:19:46 +0000 ROA not before: Fri 02 Jan 2026 00:19:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 28049 IP address blocks: 217.76.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.mft rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:1d:08:5b:31:b4:ba:3a:87:d5:d0:dd:a4:60:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467 Validity Not Before: Jan 2 00:19:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1f1fe9f6a7ffbf420743bb351a09d6cefde53905 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:94:a2:cf:af:0d:db:f9:1b:c3:03:34:67:35: ce:a1:7c:e4:07:e5:c2:42:ef:59:90:df:73:55:96: 7d:93:01:49:18:2b:46:fc:b8:9d:2c:a0:84:9f:47: df:29:73:50:a9:ae:58:4d:14:ba:ff:06:3c:02:17: d3:58:0a:d1:31:c6:b3:6c:2a:05:cb:a2:ee:53:41: 7f:d4:29:71:6b:dd:4a:f9:7d:4b:2a:21:9f:1b:5e: 2b:cf:33:0e:c4:d7:6b:ba:6f:17:59:64:79:a3:39: b5:d7:50:cd:8b:ac:63:7e:95:92:b1:64:21:ce:a6: 9e:2a:b2:c9:aa:b5:15:da:07:bd:33:da:2a:e4:44: e5:57:b6:20:fb:09:51:7a:df:ea:ae:b9:d7:89:df: 72:0d:94:c2:a7:fb:72:40:54:dc:8e:60:f4:4a:78: 8d:61:40:5f:d5:36:54:1b:6d:02:e2:20:67:25:30: 39:dd:f7:a9:7a:51:87:e6:d9:60:e4:31:91:2c:fb: 0d:da:a7:44:a4:c9:cd:ef:dd:ce:c6:fd:5e:fa:cd: 03:79:0d:13:70:3f:db:bc:47:c7:60:9c:44:0b:70: 4a:a5:dd:e1:b2:62:01:84:58:a8:f8:bd:de:c2:0b: a3:73:4a:14:60:f9:64:45:56:35:37:49:1f:82:b8: cb:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:1F:E9:F6:A7:FF:BF:42:07:43:BB:35:1A:09:D6:CE:FD:E5:39:05 X509v3 Authority Key Identifier: keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/Hx_p9qf_v0IHQ7s1GgnWzv3lOQU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.76.240.0/24 Signature Algorithm: sha256WithRSAEncryption 4d:b1:00:bd:d7:4f:cd:91:59:44:be:2d:6a:26:38:f2:73:9a: 4d:65:42:30:6d:35:86:15:aa:8d:6f:36:73:0e:8f:3d:c7:c7: 10:cf:d9:b0:3c:98:cd:76:19:df:50:db:26:62:07:1e:dc:96: 74:fe:a0:23:d7:29:e0:2d:f9:6e:3e:e5:ac:9c:fb:da:fc:51: 84:37:67:53:ec:f8:17:00:39:ca:86:c9:13:57:84:1f:18:a1: 7f:28:5f:9f:96:78:be:05:21:e8:dc:fb:e1:f0:f8:97:f7:9a: e6:50:99:9e:c4:7f:fc:e8:26:d5:d4:8b:ac:e7:63:96:a6:c7: af:8b:00:b0:b9:72:ea:27:49:bd:15:88:43:47:2b:1c:3a:dd: e9:65:6b:51:68:8c:03:69:85:dd:7b:ea:16:8e:81:a7:e9:b5: 54:31:e6:a5:48:2a:e8:4c:46:84:13:bb:61:0b:ba:b2:a3:28: cb:bd:07:57:94:30:29:6f:54:f6:23:ca:50:3a:b9:91:ae:bc: f0:27:d9:5d:12:e8:5c:06:bc:b0:c8:2c:bd:9d:87:a9:6b:d3: 97:2f:1c:ab:87:25:e5:af:b9:49:f8:d8:89:33:00:75:f2:da: 27:62:8d:db:a6:4b:9a:71:4d:a7:13:a3:d2:79:52:64:e0:37: 4a:36:ae:61 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8Ex0IWzG0ujqH1dDdpGBiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1MzRjNDlmY2ZhOGE0NTA0MWQ5NWVkNGQ4ZDRmYzY5Yzcy N2E0NjcwHhcNMjYwMTAyMDAxOTQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZjFmZTlmNmE3ZmZiZjQyMDc0M2JiMzUxYTA5ZDZjZWZkZTUzOTA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAppSiz68N2/kbwwM0ZzXOoXzkB+XC Qu9ZkN9zVZZ9kwFJGCtG/LidLKCEn0ffKXNQqa5YTRS6/wY8AhfTWArRMcazbCoF y6LuU0F/1Clxa91K+X1LKiGfG14rzzMOxNdrum8XWWR5ozm111DNi6xjfpWSsWQh zqaeKrLJqrUV2ge9M9oq5ETlV7Yg+wlRet/qrrnXid9yDZTCp/tyQFTcjmD0SniN YUBf1TZUG20C4iBnJTA53fepelGH5tlg5DGRLPsN2qdEpMnN793Oxv1e+s0DeQ0T cD/bvEfHYJxEC3BKpd3hsmIBhFio+L3ewgujc0oUYPlkRVY1N0kfgrjLOwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFB8f6fan/79CB0O7NRoJ1s795TkFMB8GA1UdIwQY MBaAFAU0xJ/PqKRQQdle1NjU/GnHJ6RnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYt Y2Q3ZTA2Y2JiNTMxLzEvSHhfcDlxZl92MElIUTdzMUdnbld6djNsT1FVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYtY2Q3ZTA2Y2JiNTMx LzEvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2UzwMA0G CSqGSIb3DQEBCwUAA4IBAQBNsQC910/NkVlEvi1qJjjyc5pNZUIwbTWGFaqNbzZz Do89x8cQz9mwPJjNdhnfUNsmYgce3JZ0/qAj1yngLfluPuWsnPva/FGEN2dT7PgX ADnKhskTV4QfGKF/KF+flni+BSHo3Pvh8PiX95rmUJmexH/86CbV1Ius52OWpsev iwCwuXLqJ0m9FYhDRyscOt3pZWtRaIwDaYXde+oWjoGn6bVUMealSCroTEaEE7th C7qyoyjLvQdXlDApb1T2I8pQOrmRrrzwJ9ldEuhcBrywyCy9nYepa9OXLxyrhyXl r7lJ+NiJMwB18tonYo3bpkuacU2nE6PSeVJk4DdKNq5h -----END CERTIFICATE-----Generated at Fri Jan 9 04:55:01 2026 by rpki-client