This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/as-Q4OZbHKkEJof9QvTpGmDpJmY.roa File: as-Q4OZbHKkEJof9QvTpGmDpJmY.roa (raw, json) Hash identifier: KnpyNCZhHcLYkZTsZ2y+OnGA4SN7itTDaUoncwpPaA8= Subject key identifier: 6A:CF:90:E0:E6:5B:1C:A9:04:26:87:FD:42:F4:E9:1A:60:E9:26:66 Certificate issuer: /CN=0548cedf17029ed98a108113c6c109ecaccd82ec Certificate serial: 019B797EC6008C8B06AC68A049C9BFE131CC Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/as-Q4OZbHKkEJof9QvTpGmDpJmY.roa Signing time: Thu 01 Jan 2026 12:18:29 +0000 ROA not before: Thu 01 Jan 2026 12:18:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60966 IP address blocks: 78.83.156.0/23 maxlen: 23 78.83.158.0/24 maxlen: 24 78.90.198.0/23 maxlen: 23 78.90.200.0/24 maxlen: 24 95.111.39.0/24 maxlen: 24 95.111.40.0/24 maxlen: 24 95.111.92.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.mft rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:c6:00:8c:8b:06:ac:68:a0:49:c9:bf:e1:31:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec Validity Not Before: Jan 1 12:18:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6acf90e0e65b1ca9042687fd42f4e91a60e92666 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:73:b7:50:b3:ae:45:3a:52:1c:ec:d1:9b:db: c5:89:e6:33:cc:c7:4d:56:56:27:a3:75:ba:7f:17: 95:d6:52:98:87:fa:0f:e5:34:e3:3d:05:f8:63:85: fc:dd:c7:a6:3b:18:24:b4:51:dd:dc:e2:89:34:86: 91:20:f0:ee:6a:0c:06:f6:22:4b:e2:3b:45:c2:99: e9:07:5b:31:0e:ee:01:36:59:45:7c:cf:f7:75:5b: c5:ff:ac:c8:ce:3e:c3:76:64:82:34:5a:16:58:a1: d5:11:71:22:1a:52:07:5a:6d:a0:ae:0d:f3:9a:e8: d1:d9:2a:2e:12:2c:0a:01:68:df:c0:f6:a2:bd:ce: 8d:4a:83:4e:10:c5:da:ff:f7:e0:b4:2b:67:08:ec: 44:0e:4f:0d:c5:e9:0f:69:32:8b:ac:5b:e2:89:cb: 22:02:5f:cc:71:a1:a4:e5:cb:12:62:f0:c4:b9:67: 2c:21:59:a5:36:31:36:97:53:7c:b7:49:fe:d4:7d: 43:1d:9f:ed:ce:39:69:3a:e2:64:fb:da:b9:02:67: 9b:de:59:db:b5:93:a7:da:a2:8b:02:49:5d:ee:f8: c2:f2:68:19:7a:49:b7:fa:ee:5b:e9:6b:38:79:30: 7b:c8:5e:99:b0:2e:4c:9d:8b:54:fb:86:1d:60:d1: ae:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:CF:90:E0:E6:5B:1C:A9:04:26:87:FD:42:F4:E9:1A:60:E9:26:66 X509v3 Authority Key Identifier: keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/as-Q4OZbHKkEJof9QvTpGmDpJmY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.83.156.0-78.83.158.255 78.90.198.0-78.90.200.255 95.111.39.0-95.111.40.255 95.111.92.0/24 Signature Algorithm: sha256WithRSAEncryption 94:2d:9c:66:e6:4d:76:e5:bc:8a:bc:d8:bd:b6:59:40:6b:67: 1f:54:4d:23:2d:43:3f:c0:e1:34:af:5a:47:55:3c:10:32:e5: 4b:57:5f:4d:f9:95:2c:81:e5:e7:8c:b4:ff:61:87:0a:12:04: 19:ac:af:3e:3a:0a:d9:60:6d:cb:49:e2:65:1e:62:d3:15:83: 09:4f:1f:78:18:ba:8e:6b:f3:3b:68:3b:23:84:3b:16:4f:8d: d9:34:05:1b:8e:7d:fa:8d:96:6d:49:fd:d3:d4:99:d7:fe:6a: 5f:81:0d:f2:a2:8d:77:6d:3d:28:d0:ba:94:0f:79:fe:a2:34: 62:ee:e6:17:22:70:19:2c:89:0d:21:e9:90:25:4d:ab:86:b1: 7d:9c:cd:a5:04:e8:c9:ea:7d:fb:b2:a7:82:c6:df:20:d7:d8: 46:2f:f9:0d:32:6c:25:b4:b0:ef:d0:78:8b:78:bc:70:28:1d: 32:31:03:af:0e:01:9c:0c:cf:e3:3f:0f:6b:0e:47:bd:a3:d9: 65:c5:61:ce:d7:0b:8c:0c:15:2c:75:b7:78:58:94:cd:c8:c8: 2e:fb:77:4c:1f:d6:2c:09:1a:ec:c2:a0:8d:2e:78:60:82:fc: ba:1d:0b:89:6d:80:8d:b5:9b:09:53:8f:75:0b:92:19:f8:02: 83:91:b4:13 -----BEGIN CERTIFICATE----- MIIFJzCCBA+gAwIBAgISAZt5fsYAjIsGrGigScm/4THMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1NDhjZWRmMTcwMjllZDk4YTEwODExM2M2YzEwOWVjYWNj ZDgyZWMwHhcNMjYwMTAxMTIxODI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YWNmOTBlMGU2NWIxY2E5MDQyNjg3ZmQ0MmY0ZTkxYTYwZTkyNjY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxXO3ULOuRTpSHOzRm9vFieYzzMdN VlYno3W6fxeV1lKYh/oP5TTjPQX4Y4X83cemOxgktFHd3OKJNIaRIPDuagwG9iJL 4jtFwpnpB1sxDu4BNllFfM/3dVvF/6zIzj7DdmSCNFoWWKHVEXEiGlIHWm2grg3z mujR2SouEiwKAWjfwPaivc6NSoNOEMXa//fgtCtnCOxEDk8NxekPaTKLrFviicsi Al/McaGk5csSYvDEuWcsIVmlNjE2l1N8t0n+1H1DHZ/tzjlpOuJk+9q5Ameb3lnb tZOn2qKLAkld7vjC8mgZekm3+u5b6Ws4eTB7yF6ZsC5MnYtU+4YdYNGuoQIDAQAB o4ICMzCCAi8wHQYDVR0OBBYEFGrPkODmWxypBCaH/UL06Rpg6SZmMB8GA1UdIwQY MBaAFAVIzt8XAp7ZihCBE8bBCeyszYLsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlVqTzN4Y0NudG1LRUlFVHhzRUo3S3pOZ3V3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS81NDFjMDUtOGQ3ZC00MmI4LWFiMDAt N2ZiYmFlNmY5NDM3LzEvYXMtUTRPWmJIS2tFSm9mOVF2VHBHbURwSm1ZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS81NDFjMDUtOGQ3ZC00MmI4LWFiMDAtN2ZiYmFlNmY5NDM3 LzEvQlVqTzN4Y0NudG1LRUlFVHhzRUo3S3pOZ3V3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwMAwDBAJOU5wD BABOU54wDAMEAU5axgMEAE5ayDAMAwQAX28nAwQAX28oAwQAX29cMA0GCSqGSIb3 DQEBCwUAA4IBAQCULZxm5k125byKvNi9tllAa2cfVE0jLUM/wOE0r1pHVTwQMuVL V19N+ZUsgeXnjLT/YYcKEgQZrK8+OgrZYG3LSeJlHmLTFYMJTx94GLqOa/M7aDsj hDsWT43ZNAUbjn36jZZtSf3T1JnX/mpfgQ3yoo13bT0o0LqUD3n+ojRi7uYXInAZ LIkNIemQJU2rhrF9nM2lBOjJ6n37sqeCxt8g19hGL/kNMmwltLDv0HiLeLxwKB0y MQOvDgGcDM/jPw9rDke9o9llxWHO1wuMDBUsdbd4WJTNyMgu+3dMH9YsCRrswqCN Lnhggvy6HQuJbYCNtZsJU491C5IZ+AKDkbQT -----END CERTIFICATE-----Generated at Mon Jan 26 18:55:04 2026 by rpki-client