This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/ErtPsdEWLZo3xxQysELWKoaKTLQ.roa File: ErtPsdEWLZo3xxQysELWKoaKTLQ.roa (raw, json) Hash identifier: 3oiRzdbHyNUKW++oAnuiQdnEMBgxY5nYQuyOCgd4OkA= Subject key identifier: 12:BB:4F:B1:D1:16:2D:9A:37:C7:14:32:B0:42:D6:2A:86:8A:4C:B4 Certificate issuer: /CN=0548cedf17029ed98a108113c6c109ecaccd82ec Certificate serial: 019B797ECDF3091268D8045656100417D8EC Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/ErtPsdEWLZo3xxQysELWKoaKTLQ.roa Signing time: Thu 01 Jan 2026 12:18:31 +0000 ROA not before: Thu 01 Jan 2026 12:18:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198941 IP address blocks: 2a01:288:4008::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.mft rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:cd:f3:09:12:68:d8:04:56:56:10:04:17:d8:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec Validity Not Before: Jan 1 12:18:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=12bb4fb1d1162d9a37c71432b042d62a868a4cb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:05:51:3b:50:bd:c4:d5:95:76:e1:3c:d5:89: 85:9d:d0:ae:63:56:e9:19:5a:46:b8:78:1c:2b:39: 24:db:90:48:40:f2:01:a9:6c:88:9b:5c:91:2d:83: d4:5e:36:f3:c2:cb:9f:93:4e:67:01:47:87:53:00: c8:11:32:81:05:32:a1:55:a1:f4:6c:a0:d1:c8:a4: fa:c4:bf:30:af:a0:0f:e8:dc:7f:95:00:0f:7f:64: fc:59:e2:45:b7:00:b4:cf:87:a9:91:c4:84:72:c7: 24:46:82:63:71:92:00:e6:5f:29:a9:41:8a:78:70: 42:fc:9a:aa:72:6b:19:30:0a:f0:7f:fd:9d:c5:f9: 11:5d:75:3c:4c:33:35:18:8b:0c:36:cf:6f:ca:14: 78:d9:d4:fd:f3:b3:10:1d:a8:2a:72:83:88:1d:3c: 98:95:dc:ca:04:fb:5f:f3:6c:f9:fc:14:0d:59:88: 07:40:c5:81:3c:8b:56:56:16:bd:af:ac:3a:1f:41: ad:e1:f1:a0:15:b2:b4:20:76:15:f2:4e:d5:9e:9e: 2c:4a:86:ba:de:7a:ec:ce:2f:e1:c8:c3:71:e9:12: fd:b8:14:23:e1:bd:da:6d:2c:13:79:38:d4:ac:30: 46:db:97:f0:a8:eb:00:ea:c7:3e:7e:9b:d2:6e:37: 95:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:BB:4F:B1:D1:16:2D:9A:37:C7:14:32:B0:42:D6:2A:86:8A:4C:B4 X509v3 Authority Key Identifier: keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/ErtPsdEWLZo3xxQysELWKoaKTLQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a01:288:4008::/48 Signature Algorithm: sha256WithRSAEncryption 0c:55:d4:e1:02:89:1d:87:d7:96:4c:be:2a:c1:b0:d5:04:56: 77:3c:41:5d:f7:d2:06:f8:86:9b:8e:ba:be:e8:6c:84:a5:ae: 90:96:e3:f8:ef:ad:16:23:c4:12:fc:c1:17:13:8e:96:6f:cb: 7e:47:55:82:4b:09:a4:4d:84:89:70:72:99:0a:44:65:2f:72: 35:17:16:b2:45:6b:ea:62:ee:a4:1e:a0:04:33:c5:84:88:63: 50:3a:82:92:06:0a:01:40:b0:90:ab:77:8a:2b:ce:34:10:fd: 4e:89:a8:1d:e0:f2:70:50:04:7e:c1:88:86:ef:9a:50:80:35: 24:85:d0:5a:eb:b3:64:78:17:c5:48:17:9f:62:8e:45:56:b6: 0f:13:7d:ca:d1:e2:5a:4b:69:14:1d:3d:88:a9:d5:89:81:4c: 96:0f:57:7c:b9:61:ae:ab:43:bf:77:fc:cb:54:1e:24:9b:c8: b7:1a:a7:1c:b7:a5:b7:7f:dc:b4:e8:fb:14:05:13:a6:27:32: 31:7b:a2:3e:d8:03:dc:de:ce:96:20:ad:0f:93:6c:ac:07:b7: e0:38:b4:0d:e3:e8:c4:b9:f4:bb:fd:7b:b4:c3:c9:de:7d:c9: 43:40:4f:c9:20:27:2c:15:51:75:e5:69:69:14:69:d3:9a:6d: 31:94:3a:c9 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt5fs3zCRJo2ARWVhAEF9jsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1NDhjZWRmMTcwMjllZDk4YTEwODExM2M2YzEwOWVjYWNj ZDgyZWMwHhcNMjYwMTAxMTIxODMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMmJiNGZiMWQxMTYyZDlhMzdjNzE0MzJiMDQyZDYyYTg2OGE0Y2I0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApgVRO1C9xNWVduE81YmFndCuY1bp GVpGuHgcKzkk25BIQPIBqWyIm1yRLYPUXjbzwsufk05nAUeHUwDIETKBBTKhVaH0 bKDRyKT6xL8wr6AP6Nx/lQAPf2T8WeJFtwC0z4epkcSEcsckRoJjcZIA5l8pqUGK eHBC/JqqcmsZMArwf/2dxfkRXXU8TDM1GIsMNs9vyhR42dT987MQHagqcoOIHTyY ldzKBPtf82z5/BQNWYgHQMWBPItWVha9r6w6H0Gt4fGgFbK0IHYV8k7Vnp4sSoa6 3nrszi/hyMNx6RL9uBQj4b3abSwTeTjUrDBG25fwqOsA6sc+fpvSbjeVLwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFBK7T7HRFi2aN8cUMrBC1iqGiky0MB8GA1UdIwQY MBaAFAVIzt8XAp7ZihCBE8bBCeyszYLsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlVqTzN4Y0NudG1LRUlFVHhzRUo3S3pOZ3V3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS81NDFjMDUtOGQ3ZC00MmI4LWFiMDAt N2ZiYmFlNmY5NDM3LzEvRXJ0UHNkRVdMWm8zeHhReXNFTFdLb2FLVExRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS81NDFjMDUtOGQ3ZC00MmI4LWFiMDAtN2ZiYmFlNmY5NDM3 LzEvQlVqTzN4Y0NudG1LRUlFVHhzRUo3S3pOZ3V3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgECiEAI MA0GCSqGSIb3DQEBCwUAA4IBAQAMVdThAokdh9eWTL4qwbDVBFZ3PEFd99IG+Iab jrq+6GyEpa6QluP4760WI8QS/MEXE46Wb8t+R1WCSwmkTYSJcHKZCkRlL3I1Fxay RWvqYu6kHqAEM8WEiGNQOoKSBgoBQLCQq3eKK840EP1Oiagd4PJwUAR+wYiG75pQ gDUkhdBa67NkeBfFSBefYo5FVrYPE33K0eJaS2kUHT2IqdWJgUyWD1d8uWGuq0O/ d/zLVB4km8i3Gqcct6W3f9y06PsUBROmJzIxe6I+2APc3s6WIK0Pk2ysB7fgOLQN 4+jEufS7/Xu0w8nefclDQE/JICcsFVF15WlpFGnTmm0xlDrJ -----END CERTIFICATE-----Generated at Mon Jan 26 18:55:02 2026 by rpki-client