This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/FyW1xxtfRL62z-qvxGOydnlqU0Y.roa File: FyW1xxtfRL62z-qvxGOydnlqU0Y.roa (raw, json) Hash identifier: ZqKmIG1ofYAHb4gShOBG6H51jO15YDyML2R/A89iXvc= Subject key identifier: 17:25:B5:C7:1B:5F:44:BE:B6:CF:EA:AF:C4:63:B2:76:79:6A:53:46 Certificate issuer: /CN=0548cedf17029ed98a108113c6c109ecaccd82ec Certificate serial: 019B797EB1D786F9E892B1CFED5981F9BC46 Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/FyW1xxtfRL62z-qvxGOydnlqU0Y.roa Signing time: Thu 01 Jan 2026 12:18:24 +0000 ROA not before: Thu 01 Jan 2026 12:18:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 24964 IP address blocks: 82.103.126.0/24 maxlen: 24 82.103.127.0/24 maxlen: 24 195.34.123.0/24 maxlen: 24 212.91.184.0/24 maxlen: 24 212.91.185.0/24 maxlen: 24 212.91.186.0/24 maxlen: 24 212.91.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.mft rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:b1:d7:86:f9:e8:92:b1:cf:ed:59:81:f9:bc:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec Validity Not Before: Jan 1 12:18:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1725b5c71b5f44beb6cfeaafc463b276796a5346 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:64:6f:52:9e:0f:77:ca:21:3c:a3:55:fd:31: 31:9f:e3:c0:fb:c5:58:ab:ff:b9:c2:89:07:13:e0: a2:d5:1f:22:79:ae:2a:5b:ca:54:59:c2:a0:e8:8b: 64:ff:34:ed:dd:f2:85:b9:c4:70:12:3a:d5:e9:15: 39:f2:93:95:4c:e4:ec:c9:0f:4a:b1:ae:fb:24:e9: d0:53:ca:2b:d4:dc:52:6b:19:a3:bf:88:3b:34:17: dc:2e:24:8b:bd:63:86:19:38:74:2d:56:18:03:87: 60:55:b0:6e:68:87:51:35:09:c0:f1:ce:86:35:27: eb:19:83:64:42:f7:40:2a:4a:15:90:48:21:15:7f: 3c:53:a9:e9:ed:fa:4e:cf:89:25:17:27:4a:47:e4: a2:0b:e8:e0:3b:89:9b:fe:98:a5:b2:b7:8d:9f:2f: b4:b7:f4:9b:be:7a:b9:4a:9c:19:cd:bc:c8:11:c9: f4:f1:0d:99:95:b7:32:e6:02:cd:c6:7a:9a:0f:28: 64:6f:b9:93:a4:47:9d:f4:b5:86:1d:34:01:d1:a0: 9a:f5:9b:2d:94:ca:d3:eb:1a:80:0a:09:e7:fc:dc: 34:f9:37:33:c7:ef:8a:04:d4:55:23:82:fa:a7:1d: fa:7e:99:c8:27:1b:7d:dd:e2:27:a2:6e:08:a8:97: ec:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:25:B5:C7:1B:5F:44:BE:B6:CF:EA:AF:C4:63:B2:76:79:6A:53:46 X509v3 Authority Key Identifier: keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/FyW1xxtfRL62z-qvxGOydnlqU0Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.103.126.0/23 195.34.123.0/24 212.91.184.0/22 Signature Algorithm: sha256WithRSAEncryption 71:ca:89:0a:9c:ef:d3:ec:15:96:eb:39:f0:b2:db:85:a5:0b: 3a:36:51:94:33:60:f5:6f:e9:b8:d9:f4:79:ad:5f:dd:87:9a: 1e:7f:f3:4a:7b:70:02:af:06:cf:ca:df:52:c8:57:d9:da:5e: a1:c1:c5:95:3b:76:56:d9:9b:b2:ad:2b:e1:62:50:80:b1:13: af:70:8b:28:d2:2b:96:2e:40:1c:6b:16:d2:41:65:20:8b:32: 5a:2b:a2:61:3b:cf:27:76:bc:90:b2:c5:d5:25:d5:c6:8a:c0: 29:d5:5a:ef:57:95:19:48:78:3b:cf:bd:e2:32:63:2d:ac:32: b8:d0:e9:22:06:95:c1:0e:50:18:82:e7:b8:f4:19:a7:08:e2: 17:b5:34:c0:78:74:fe:a2:9e:68:94:8b:d6:b4:6b:ce:e1:b0: 87:7e:e4:d0:c7:6e:09:40:4a:e5:bc:24:ae:b1:9b:66:7c:ab: b1:0c:64:e6:ba:ab:f8:ca:3d:86:7f:2f:37:d7:ae:8b:6b:35: 06:e7:82:53:a1:7c:49:23:49:5f:5d:0f:c0:3f:1a:d9:c1:ed: b2:2a:f5:7d:cc:12:c1:4c:2c:a7:4d:12:bc:92:90:a7:cd:47: fa:46:51:ce:da:14:bd:bf:7f:05:db:e2:e1:ae:30:6d:a3:41: c3:f1:a9:66 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt5frHXhvnokrHP7VmB+bxGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1NDhjZWRmMTcwMjllZDk4YTEwODExM2M2YzEwOWVjYWNj ZDgyZWMwHhcNMjYwMTAxMTIxODI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNzI1YjVjNzFiNWY0NGJlYjZjZmVhYWZjNDYzYjI3Njc5NmE1MzQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4WRvUp4Pd8ohPKNV/TExn+PA+8VY q/+5wokHE+Ci1R8iea4qW8pUWcKg6Itk/zTt3fKFucRwEjrV6RU58pOVTOTsyQ9K sa77JOnQU8or1NxSaxmjv4g7NBfcLiSLvWOGGTh0LVYYA4dgVbBuaIdRNQnA8c6G NSfrGYNkQvdAKkoVkEghFX88U6np7fpOz4klFydKR+SiC+jgO4mb/pilsreNny+0 t/Sbvnq5SpwZzbzIEcn08Q2Zlbcy5gLNxnqaDyhkb7mTpEed9LWGHTQB0aCa9Zst lMrT6xqACgnn/Nw0+Tczx++KBNRVI4L6px36fpnIJxt93eInom4IqJfsCwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFBcltccbX0S+ts/qr8RjsnZ5alNGMB8GA1UdIwQY MBaAFAVIzt8XAp7ZihCBE8bBCeyszYLsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlVqTzN4Y0NudG1LRUlFVHhzRUo3S3pOZ3V3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS81NDFjMDUtOGQ3ZC00MmI4LWFiMDAt N2ZiYmFlNmY5NDM3LzEvRnlXMXh4dGZSTDYyei1xdnhHT3lkbmxxVTBZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS81NDFjMDUtOGQ3ZC00MmI4LWFiMDAtN2ZiYmFlNmY5NDM3 LzEvQlVqTzN4Y0NudG1LRUlFVHhzRUo3S3pOZ3V3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBUmd+AwQA wyJ7AwQC1Fu4MA0GCSqGSIb3DQEBCwUAA4IBAQBxyokKnO/T7BWW6znwstuFpQs6 NlGUM2D1b+m42fR5rV/dh5oef/NKe3ACrwbPyt9SyFfZ2l6hwcWVO3ZW2ZuyrSvh YlCAsROvcIso0iuWLkAcaxbSQWUgizJaK6JhO88ndryQssXVJdXGisAp1VrvV5UZ SHg7z73iMmMtrDK40OkiBpXBDlAYgue49BmnCOIXtTTAeHT+op5olIvWtGvO4bCH fuTQx24JQErlvCSusZtmfKuxDGTmuqv4yj2Gfy83166LazUG54JToXxJI0lfXQ/A PxrZwe2yKvV9zBLBTCynTRK8kpCnzUf6RlHO2hS9v38F2+LhrjBto0HD8alm -----END CERTIFICATE-----Generated at Mon Jan 26 17:25:23 2026 by rpki-client