This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/COGfYFhAcTUkMk2eY8rfEXv1t-E.roa File: COGfYFhAcTUkMk2eY8rfEXv1t-E.roa (raw, json) Hash identifier: 3umjbOLpLWjc9i4iHj0iPH0v5GXuL1DDPtCqMndja+I= Subject key identifier: 08:E1:9F:60:58:40:71:35:24:32:4D:9E:63:CA:DF:11:7B:F5:B7:E1 Certificate issuer: /CN=0548cedf17029ed98a108113c6c109ecaccd82ec Certificate serial: 019B797EB694B1423C7018DB7DA3C2A6CC0D Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/COGfYFhAcTUkMk2eY8rfEXv1t-E.roa Signing time: Thu 01 Jan 2026 12:18:25 +0000 ROA not before: Thu 01 Jan 2026 12:18:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41610 IP address blocks: 212.91.162.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.mft rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:b6:94:b1:42:3c:70:18:db:7d:a3:c2:a6:cc:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec Validity Not Before: Jan 1 12:18:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=08e19f605840713524324d9e63cadf117bf5b7e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:19:33:91:bb:da:83:17:44:37:d7:8b:18:1b: 8e:e3:e7:dd:d3:bd:78:ef:ac:c2:38:42:d0:63:0f: 6c:eb:9c:45:42:3c:d9:50:4f:28:6b:63:b0:ae:ef: b9:6a:28:bd:9a:6f:7a:0f:75:17:cc:68:33:3a:9c: d8:48:42:9e:8c:b7:52:62:17:b9:aa:97:32:eb:b9: 5b:ca:1e:dc:ce:9c:c1:dd:6d:9e:20:d7:95:27:a6: 24:93:a9:7b:71:fc:20:36:3a:23:a2:fa:f1:84:0b: 28:d7:ca:6e:07:13:1f:c8:e7:db:7b:99:63:24:47: 45:82:62:32:73:4c:32:8b:32:a0:d4:02:c9:4f:d6: 7c:7f:17:27:8b:f1:c5:fd:1d:61:bc:1d:49:ea:c2: 75:38:fb:ee:85:d9:63:07:f5:43:36:3f:4a:dd:56: 9a:5c:ef:15:7d:07:e0:03:e0:03:b8:ba:d8:04:c5: 0c:a8:7a:5d:61:df:e6:e9:9c:d8:7b:54:55:2b:02: 1e:41:b3:cf:5c:6b:6b:95:2b:7a:c7:1c:d0:c9:ba: f9:50:95:55:71:e1:2b:b7:d5:b2:68:24:54:60:8e: 56:16:fd:20:13:f9:fa:89:6f:7f:c2:a5:34:32:a5: af:0c:5b:a9:11:e6:43:74:f0:38:92:39:a1:fa:e6: ff:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:E1:9F:60:58:40:71:35:24:32:4D:9E:63:CA:DF:11:7B:F5:B7:E1 X509v3 Authority Key Identifier: keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/COGfYFhAcTUkMk2eY8rfEXv1t-E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.91.162.0/24 Signature Algorithm: sha256WithRSAEncryption 72:11:27:a3:3f:bf:eb:59:ee:29:26:73:9e:5c:af:01:a6:f0: c1:94:c1:43:b7:92:b9:cf:ba:3b:6a:44:4a:62:72:70:35:f6: 8e:e5:82:22:ad:59:79:a1:d8:25:e7:3d:c6:dd:f8:7d:1b:a9: 6b:12:07:05:75:ff:da:2f:d7:9a:bc:3c:c2:63:f7:62:56:97: 36:d7:6c:93:82:8f:07:3b:ed:8a:0e:7b:03:55:aa:96:44:76: 6b:2c:a7:c1:6a:7d:95:86:f7:3f:a1:65:4c:c6:34:44:5b:aa: 1f:74:48:ee:1b:ea:df:92:58:74:46:37:fb:02:0f:ec:d2:8a: 26:07:a8:f8:ba:45:bb:09:6c:57:e9:48:a2:f8:45:67:b1:e2: ad:4d:4f:ac:86:8e:7a:e2:78:11:24:41:76:0e:24:b2:98:12: 10:c9:9e:b5:d5:bc:30:1e:74:bf:be:67:7f:bc:3d:23:e4:3f: b3:ee:00:50:bd:e1:ed:42:57:ad:a6:e4:31:27:81:c9:a5:c2: ae:9c:c8:ac:47:48:a3:94:15:78:ff:89:43:b5:de:b6:81:77: de:72:01:d8:33:3d:8d:01:3c:ed:8d:7f:ad:1f:91:9e:a4:44: 44:f5:91:b0:a5:df:68:f1:25:3a:d6:c0:1b:82:4e:12:c0:8d: fb:fa:f4:41 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fraUsUI8cBjbfaPCpswNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1NDhjZWRmMTcwMjllZDk4YTEwODExM2M2YzEwOWVjYWNj ZDgyZWMwHhcNMjYwMTAxMTIxODI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwOGUxOWY2MDU4NDA3MTM1MjQzMjRkOWU2M2NhZGYxMTdiZjViN2UxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmBkzkbvagxdEN9eLGBuO4+fd0714 76zCOELQYw9s65xFQjzZUE8oa2Owru+5aii9mm96D3UXzGgzOpzYSEKejLdSYhe5 qpcy67lbyh7czpzB3W2eINeVJ6Ykk6l7cfwgNjojovrxhAso18puBxMfyOfbe5lj JEdFgmIyc0wyizKg1ALJT9Z8fxcni/HF/R1hvB1J6sJ1OPvuhdljB/VDNj9K3Vaa XO8VfQfgA+ADuLrYBMUMqHpdYd/m6ZzYe1RVKwIeQbPPXGtrlSt6xxzQybr5UJVV ceErt9WyaCRUYI5WFv0gE/n6iW9/wqU0MqWvDFupEeZDdPA4kjmh+ub/IQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAjhn2BYQHE1JDJNnmPK3xF79bfhMB8GA1UdIwQY MBaAFAVIzt8XAp7ZihCBE8bBCeyszYLsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlVqTzN4Y0NudG1LRUlFVHhzRUo3S3pOZ3V3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS81NDFjMDUtOGQ3ZC00MmI4LWFiMDAt N2ZiYmFlNmY5NDM3LzEvQ09HZllGaEFjVFVrTWsyZVk4cmZFWHYxdC1FLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS81NDFjMDUtOGQ3ZC00MmI4LWFiMDAtN2ZiYmFlNmY5NDM3 LzEvQlVqTzN4Y0NudG1LRUlFVHhzRUo3S3pOZ3V3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1FuiMA0G CSqGSIb3DQEBCwUAA4IBAQByESejP7/rWe4pJnOeXK8BpvDBlMFDt5K5z7o7akRK YnJwNfaO5YIirVl5odgl5z3G3fh9G6lrEgcFdf/aL9eavDzCY/diVpc212yTgo8H O+2KDnsDVaqWRHZrLKfBan2Vhvc/oWVMxjREW6ofdEjuG+rfklh0Rjf7Ag/s0oom B6j4ukW7CWxX6Uii+EVnseKtTU+sho564ngRJEF2DiSymBIQyZ611bwwHnS/vmd/ vD0j5D+z7gBQveHtQletpuQxJ4HJpcKunMisR0ijlBV4/4lDtd62gXfecgHYMz2N ATztjX+tH5GepERE9ZGwpd9o8SU61sAbgk4SwI37+vRB -----END CERTIFICATE-----Generated at Mon Jan 26 17:24:36 2026 by rpki-client