This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/P-Ri1NoNnmhLCvEReka1svMUEcE.roa File: P-Ri1NoNnmhLCvEReka1svMUEcE.roa (raw, json) Hash identifier: bGKvX4aYafJWzXevE70OF8EJVziryODXr8/kqA6G/3o= Subject key identifier: 3F:E4:62:D4:DA:0D:9E:68:4B:0A:F1:11:7A:46:B5:B2:F3:14:11:C1 Certificate issuer: /CN=0548cedf17029ed98a108113c6c109ecaccd82ec Certificate serial: 019B797EBEF8292C6F039934E4C9A754990E Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/P-Ri1NoNnmhLCvEReka1svMUEcE.roa Signing time: Thu 01 Jan 2026 12:18:28 +0000 ROA not before: Thu 01 Jan 2026 12:18:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48064 IP address blocks: 212.50.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.mft rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:be:f8:29:2c:6f:03:99:34:e4:c9:a7:54:99:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec Validity Not Before: Jan 1 12:18:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3fe462d4da0d9e684b0af1117a46b5b2f31411c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:8e:83:d7:93:c4:65:fd:98:c1:95:f4:ec:e2: fd:24:e8:80:e3:47:d7:5f:97:03:57:67:3a:e9:04: e2:5d:bb:e3:22:c5:ac:e6:ea:23:de:8a:15:7e:9e: 76:3e:fd:8b:d4:e5:3f:70:93:6d:ac:70:d9:f7:a2: e4:96:12:2b:50:07:f3:bf:ba:58:3f:2b:31:2b:8f: 04:ac:7c:84:82:94:9d:93:e2:b6:ab:f2:21:85:bb: 89:5a:3f:17:df:77:59:9b:4d:23:0d:92:ef:85:6d: b8:7c:d4:c9:5b:33:86:1a:60:6f:3b:95:3d:72:65: e7:ea:0e:9f:a3:f2:96:75:54:1a:73:58:66:69:2a: 5b:91:96:0d:3f:8f:61:8e:1f:9d:1d:3c:b1:9d:db: 81:e7:5a:70:f4:1d:f1:f1:bd:9f:3a:82:1e:bb:7d: 7c:6f:df:c0:e0:51:6e:fb:63:cf:9e:3e:2d:f1:69: f0:5d:3f:43:cf:10:ba:58:1f:c8:f4:af:6a:de:df: b4:a1:07:05:1b:b3:33:2b:55:a7:c8:cf:43:2f:8a: 0e:28:40:89:b8:cd:e2:7b:fa:bb:1c:09:4c:03:98: 3e:6e:92:f3:92:4c:d1:c5:b2:8c:97:bb:32:ef:55: f5:00:24:b8:b9:e6:fb:75:3e:a8:c7:4b:a4:af:16: db:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:E4:62:D4:DA:0D:9E:68:4B:0A:F1:11:7A:46:B5:B2:F3:14:11:C1 X509v3 Authority Key Identifier: keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/P-Ri1NoNnmhLCvEReka1svMUEcE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.50.17.0/24 Signature Algorithm: sha256WithRSAEncryption 0f:44:55:8f:f9:15:35:43:09:76:3d:35:14:f6:4a:cd:31:6c: ca:02:a0:b3:da:e0:3c:ba:d3:22:59:be:7d:da:31:50:c8:21: 8b:40:fd:ac:8a:7c:bd:f3:b9:35:f5:8c:54:78:35:c4:d4:d8: 97:d7:d7:9a:90:85:78:6c:4d:d4:e3:22:aa:9e:50:4c:41:04: 07:a7:ee:eb:50:a5:28:98:ed:fc:4b:75:20:62:9e:20:73:6d: e4:0a:4a:3f:26:4e:19:9f:99:26:3a:18:14:03:18:bd:fd:89: e8:a1:74:e0:00:64:79:e0:0c:79:3d:3c:a1:39:ad:e6:1d:b6: 5a:cb:27:3a:17:f1:2f:6a:b9:cd:d7:96:79:8a:15:f0:08:d5: 0c:9c:97:13:7b:b0:4e:da:ce:84:6a:25:57:79:fd:bb:b5:11: c7:f9:ff:8c:ad:b5:3e:23:93:f6:42:d6:f1:f4:53:08:47:47: 5b:e6:c8:16:21:51:2a:19:a5:58:c5:6e:43:9b:2a:18:cf:91: 58:61:e0:bc:3b:a1:6a:92:7f:1b:fb:45:34:80:7c:51:f8:ab: 0e:f8:4a:a5:2e:4a:fd:b1:5a:11:2d:7c:87:e4:39:5f:f3:62: 21:16:ca:22:a8:f1:35:ec:d5:39:2a:1e:d2:fc:c8:b9:93:d1: 5f:94:c6:d5 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fr74KSxvA5k05MmnVJkOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1NDhjZWRmMTcwMjllZDk4YTEwODExM2M2YzEwOWVjYWNj ZDgyZWMwHhcNMjYwMTAxMTIxODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZmU0NjJkNGRhMGQ5ZTY4NGIwYWYxMTE3YTQ2YjViMmYzMTQxMWMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApY6D15PEZf2YwZX07OL9JOiA40fX X5cDV2c66QTiXbvjIsWs5uoj3ooVfp52Pv2L1OU/cJNtrHDZ96LklhIrUAfzv7pY PysxK48ErHyEgpSdk+K2q/IhhbuJWj8X33dZm00jDZLvhW24fNTJWzOGGmBvO5U9 cmXn6g6fo/KWdVQac1hmaSpbkZYNP49hjh+dHTyxnduB51pw9B3x8b2fOoIeu318 b9/A4FFu+2PPnj4t8WnwXT9DzxC6WB/I9K9q3t+0oQcFG7MzK1WnyM9DL4oOKECJ uM3ie/q7HAlMA5g+bpLzkkzRxbKMl7sy71X1ACS4ueb7dT6ox0ukrxbbhQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFD/kYtTaDZ5oSwrxEXpGtbLzFBHBMB8GA1UdIwQY MBaAFAVIzt8XAp7ZihCBE8bBCeyszYLsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlVqTzN4Y0NudG1LRUlFVHhzRUo3S3pOZ3V3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS81NDFjMDUtOGQ3ZC00MmI4LWFiMDAt N2ZiYmFlNmY5NDM3LzEvUC1SaTFOb05ubWhMQ3ZFUmVrYTFzdk1VRWNFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS81NDFjMDUtOGQ3ZC00MmI4LWFiMDAtN2ZiYmFlNmY5NDM3 LzEvQlVqTzN4Y0NudG1LRUlFVHhzRUo3S3pOZ3V3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1DIRMA0G CSqGSIb3DQEBCwUAA4IBAQAPRFWP+RU1Qwl2PTUU9krNMWzKAqCz2uA8utMiWb59 2jFQyCGLQP2siny987k19YxUeDXE1NiX19eakIV4bE3U4yKqnlBMQQQHp+7rUKUo mO38S3UgYp4gc23kCko/Jk4Zn5kmOhgUAxi9/YnooXTgAGR54Ax5PTyhOa3mHbZa yyc6F/EvarnN15Z5ihXwCNUMnJcTe7BO2s6EaiVXef27tRHH+f+MrbU+I5P2Qtbx 9FMIR0db5sgWIVEqGaVYxW5DmyoYz5FYYeC8O6Fqkn8b+0U0gHxR+KsO+EqlLkr9 sVoRLXyH5Dlf82IhFsoiqPE17NU5Kh7S/Mi5k9FflMbV -----END CERTIFICATE-----Generated at Mon Jan 26 17:24:36 2026 by rpki-client