This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/W9zDETJ7TwGqPyEgszqqtvk6d5A.roa File: W9zDETJ7TwGqPyEgszqqtvk6d5A.roa (raw, json) Hash identifier: DegXV3VLOQlsgZQKvShWskpgWOYld+TJcwcp8KEOmdo= Subject key identifier: 5B:DC:C3:11:32:7B:4F:01:AA:3F:21:20:B3:3A:AA:B6:F9:3A:77:90 Certificate issuer: /CN=0548cedf17029ed98a108113c6c109ecaccd82ec Certificate serial: 019B797ECEF910F028EE13C853494D3C4195 Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/W9zDETJ7TwGqPyEgszqqtvk6d5A.roa Signing time: Thu 01 Jan 2026 12:18:32 +0000 ROA not before: Thu 01 Jan 2026 12:18:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199898 IP address blocks: 92.247.164.0/22 maxlen: 22 217.79.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.mft rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:ce:f9:10:f0:28:ee:13:c8:53:49:4d:3c:41:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec Validity Not Before: Jan 1 12:18:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5bdcc311327b4f01aa3f2120b33aaab6f93a7790 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:87:dc:7d:5d:80:a5:7b:ea:66:dd:6e:96:02: ab:d6:e8:c8:44:85:20:93:a1:b4:69:15:b1:14:6b: 55:68:64:ab:f0:a4:bb:77:43:6a:47:ed:35:86:b7: 3a:75:5a:89:b1:6b:ea:4f:86:5e:25:53:aa:8e:5e: db:0a:40:13:d4:78:83:47:68:1d:75:77:b3:0b:68: 29:67:05:62:b3:73:59:f1:aa:b5:92:8c:f7:d2:81: 84:d4:e6:59:6a:2a:ca:81:29:65:41:8d:b2:b2:8b: 1e:59:b6:53:38:f0:a0:86:92:50:6e:ab:d6:84:ce: 90:8e:96:c1:30:a3:69:b5:ce:a5:d2:e9:a9:c0:dd: 16:b8:88:25:39:42:f3:99:e1:96:c4:13:a3:82:91: 32:c3:ee:44:16:de:b2:62:3d:cb:57:c8:83:98:90: ad:5e:97:a9:96:6a:7d:ae:da:3e:fe:6f:a6:e8:1c: ac:01:ae:55:d1:4c:ed:9b:1e:6a:09:d1:10:0a:ff: 63:97:8f:be:05:1a:f3:28:c6:41:3e:b1:77:9a:19: 91:d0:bc:ae:b8:59:c6:80:eb:c5:dd:71:59:e3:3d: 19:5b:2b:1a:95:00:7a:f7:94:39:41:57:44:17:aa: c3:60:ef:bc:a9:b1:99:a5:65:c2:db:55:1b:db:3e: eb:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:DC:C3:11:32:7B:4F:01:AA:3F:21:20:B3:3A:AA:B6:F9:3A:77:90 X509v3 Authority Key Identifier: keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/W9zDETJ7TwGqPyEgszqqtvk6d5A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.247.164.0/22 217.79.38.0/24 Signature Algorithm: sha256WithRSAEncryption 63:91:06:29:56:69:d2:15:ec:e6:87:6a:1e:66:87:1e:b8:c6: 9d:7e:a8:31:4e:42:6c:79:32:5f:be:0c:6f:0d:aa:62:e8:21: 41:33:f4:a0:2e:3f:83:7e:95:61:4e:69:f7:3a:a5:d6:0e:74: 17:75:f0:04:b2:4f:d9:34:d9:ab:3a:de:8c:34:8b:8e:5a:c5: 52:6e:e0:50:3c:1d:59:ae:9c:c9:9c:7d:92:8e:47:a7:f2:a8: f4:30:83:6d:b4:5f:b7:2a:27:d9:0f:6b:3a:29:8f:a9:68:66: 90:b9:be:e1:79:33:78:85:d2:85:bc:88:d9:e3:8f:3c:1a:3c: 9f:f5:bd:50:ab:a4:43:45:d0:2d:ea:6c:d0:f9:91:45:f6:1a: c1:b2:51:bb:7b:ed:9f:b7:87:16:e3:b3:df:3a:cf:4d:52:d4: 0b:fe:50:6f:5c:81:84:c6:80:a6:83:ef:94:10:b6:87:8b:db: d6:29:1e:d7:70:f4:74:97:c6:7b:d6:ae:3e:37:29:b0:a9:88: 57:38:17:18:6f:08:e3:91:72:15:c8:60:ce:97:3b:ec:27:df: 2c:bd:86:2e:49:f4:e9:59:76:fd:ff:8c:33:58:48:b1:71:b7: 8a:74:b0:ed:21:e0:8b:bd:22:bb:73:9e:8d:55:87:19:70:a5: b3:93:76:75 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt5fs75EPAo7hPIU0lNPEGVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1NDhjZWRmMTcwMjllZDk4YTEwODExM2M2YzEwOWVjYWNj ZDgyZWMwHhcNMjYwMTAxMTIxODMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YmRjYzMxMTMyN2I0ZjAxYWEzZjIxMjBiMzNhYWFiNmY5M2E3NzkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2YfcfV2ApXvqZt1ulgKr1ujIRIUg k6G0aRWxFGtVaGSr8KS7d0NqR+01hrc6dVqJsWvqT4ZeJVOqjl7bCkAT1HiDR2gd dXezC2gpZwVis3NZ8aq1koz30oGE1OZZairKgSllQY2ysoseWbZTOPCghpJQbqvW hM6QjpbBMKNptc6l0umpwN0WuIglOULzmeGWxBOjgpEyw+5EFt6yYj3LV8iDmJCt Xpeplmp9rto+/m+m6BysAa5V0Uztmx5qCdEQCv9jl4++BRrzKMZBPrF3mhmR0Lyu uFnGgOvF3XFZ4z0ZWysalQB695Q5QVdEF6rDYO+8qbGZpWXC21Ub2z7rbwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFFvcwxEye08Bqj8hILM6qrb5OneQMB8GA1UdIwQY MBaAFAVIzt8XAp7ZihCBE8bBCeyszYLsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlVqTzN4Y0NudG1LRUlFVHhzRUo3S3pOZ3V3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS81NDFjMDUtOGQ3ZC00MmI4LWFiMDAt N2ZiYmFlNmY5NDM3LzEvVzl6REVUSjdUd0dxUHlFZ3N6cXF0dms2ZDVBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS81NDFjMDUtOGQ3ZC00MmI4LWFiMDAtN2ZiYmFlNmY5NDM3 LzEvQlVqTzN4Y0NudG1LRUlFVHhzRUo3S3pOZ3V3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCXPekAwQA 2U8mMA0GCSqGSIb3DQEBCwUAA4IBAQBjkQYpVmnSFezmh2oeZoceuMadfqgxTkJs eTJfvgxvDapi6CFBM/SgLj+DfpVhTmn3OqXWDnQXdfAEsk/ZNNmrOt6MNIuOWsVS buBQPB1ZrpzJnH2Sjken8qj0MINttF+3KifZD2s6KY+paGaQub7heTN4hdKFvIjZ 4488Gjyf9b1Qq6RDRdAt6mzQ+ZFF9hrBslG7e+2ft4cW47PfOs9NUtQL/lBvXIGE xoCmg++UELaHi9vWKR7XcPR0l8Z71q4+NymwqYhXOBcYbwjjkXIVyGDOlzvsJ98s vYYuSfTpWXb9/4wzWEixcbeKdLDtIeCLvSK7c56NVYcZcKWzk3Z1 -----END CERTIFICATE-----Generated at Mon Jan 26 20:26:01 2026 by rpki-client