This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/hsR5t6N5DNHocGXR6Yie8ybeeN0.roa File: hsR5t6N5DNHocGXR6Yie8ybeeN0.roa (raw, json) Hash identifier: m/l4IAb1PVMXn+0e0VhtioxQibz/KUqRz+YRiZJcSMI= Subject key identifier: 86:C4:79:B7:A3:79:0C:D1:E8:70:65:D1:E9:88:9E:F3:26:DE:78:DD Certificate issuer: /CN=0548cedf17029ed98a108113c6c109ecaccd82ec Certificate serial: 019B797EC648360AF4AAFF5E2E2B7AA4C02C Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/hsR5t6N5DNHocGXR6Yie8ybeeN0.roa Signing time: Thu 01 Jan 2026 12:18:30 +0000 ROA not before: Thu 01 Jan 2026 12:18:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61321 IP address blocks: 92.247.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.mft rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:c6:48:36:0a:f4:aa:ff:5e:2e:2b:7a:a4:c0:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec Validity Not Before: Jan 1 12:18:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=86c479b7a3790cd1e87065d1e9889ef326de78dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:f2:7c:5e:06:7d:63:45:09:9d:80:10:6e:98: a6:04:d9:a3:86:38:19:b4:45:59:8c:91:26:76:a1: c6:e4:67:af:00:72:37:8f:18:23:a6:0d:16:7c:5e: 1f:13:cc:d2:36:36:7e:18:39:b4:b2:84:be:38:55: 14:a8:d9:48:c7:29:42:84:0a:62:28:79:2a:c6:a5: 8a:23:cf:0b:ca:cc:d4:6a:14:69:0f:9d:ee:ab:da: 90:73:20:ff:ed:b1:1f:ee:8c:e8:0a:7d:d3:60:2a: e6:7e:d8:d6:9c:96:27:07:fc:81:f0:63:64:c5:c7: 69:00:d3:52:2a:59:1e:cd:68:6b:f4:d9:b0:83:ce: d2:6e:94:17:d0:bc:71:71:94:3e:16:69:c3:5c:8e: 91:30:9c:9d:da:3e:14:4a:83:49:b5:57:c3:d1:c5: c9:71:9f:70:a2:c2:11:fd:e3:bd:36:56:47:f7:6c: ba:ce:1e:20:33:89:e5:e9:62:a0:9f:66:74:e8:ea: 35:aa:bf:5c:69:8c:b2:44:98:10:4d:8e:5b:25:8c: b3:b6:47:a9:08:16:68:de:ca:1a:d5:6a:d2:dc:4c: f1:1d:2a:09:66:25:17:8e:d4:24:97:c2:e7:7f:b4: ab:e9:9c:3c:7c:f8:34:6c:1b:31:72:91:c3:5f:90: 17:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:C4:79:B7:A3:79:0C:D1:E8:70:65:D1:E9:88:9E:F3:26:DE:78:DD X509v3 Authority Key Identifier: keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/hsR5t6N5DNHocGXR6Yie8ybeeN0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.247.109.0/24 Signature Algorithm: sha256WithRSAEncryption 03:71:00:cd:36:ef:02:d1:f5:7d:c2:f3:c2:6e:88:a1:21:d6: 91:4e:51:ef:98:2c:d2:94:d4:6f:48:9a:50:dc:3e:e5:01:78: b5:f5:ba:3e:3b:48:08:f0:47:d1:68:9e:5a:6c:a2:d1:56:32: bf:1b:a7:5f:75:98:b6:01:05:05:d4:2e:3d:ab:0d:19:7c:5c: e0:89:99:db:cc:b1:18:4c:82:cd:74:92:d3:8c:08:bb:3d:98: 10:56:58:1c:1a:29:d8:49:96:f5:a2:51:d9:93:98:48:48:ed: 34:96:9e:0b:c4:d7:30:f1:29:40:95:c6:be:a6:8a:2d:43:73: 6b:d0:41:11:3e:90:7f:20:b0:06:f5:a9:20:2c:aa:2f:bd:22: 93:81:cc:34:d9:b9:d8:8b:09:ae:be:b8:70:dc:1b:f5:c3:03: 79:65:d2:71:c4:fa:5c:33:56:18:2f:91:6c:b5:11:24:6e:e6: d0:a6:bc:93:58:08:53:78:97:4f:82:d9:dc:ce:e5:25:80:18: e3:4f:3f:9f:bc:00:3c:95:50:01:c2:43:b6:aa:7d:96:85:a6: 08:65:c5:d8:fe:0c:2a:26:18:53:29:9a:cb:5e:dd:28:d3:11: 25:9d:91:e3:3a:b0:9b:05:42:bd:bb:7b:74:7b:e6:f9:f9:8e: f4:a0:e9:30 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fsZINgr0qv9eLit6pMAsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1NDhjZWRmMTcwMjllZDk4YTEwODExM2M2YzEwOWVjYWNj ZDgyZWMwHhcNMjYwMTAxMTIxODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NmM0NzliN2EzNzkwY2QxZTg3MDY1ZDFlOTg4OWVmMzI2ZGU3OGRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1PJ8XgZ9Y0UJnYAQbpimBNmjhjgZ tEVZjJEmdqHG5GevAHI3jxgjpg0WfF4fE8zSNjZ+GDm0soS+OFUUqNlIxylChApi KHkqxqWKI88LyszUahRpD53uq9qQcyD/7bEf7ozoCn3TYCrmftjWnJYnB/yB8GNk xcdpANNSKlkezWhr9Nmwg87SbpQX0LxxcZQ+FmnDXI6RMJyd2j4USoNJtVfD0cXJ cZ9wosIR/eO9NlZH92y6zh4gM4nl6WKgn2Z06Oo1qr9caYyyRJgQTY5bJYyztkep CBZo3soa1WrS3EzxHSoJZiUXjtQkl8Lnf7Sr6Zw8fPg0bBsxcpHDX5AXKwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIbEebejeQzR6HBl0emInvMm3njdMB8GA1UdIwQY MBaAFAVIzt8XAp7ZihCBE8bBCeyszYLsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlVqTzN4Y0NudG1LRUlFVHhzRUo3S3pOZ3V3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS81NDFjMDUtOGQ3ZC00MmI4LWFiMDAt N2ZiYmFlNmY5NDM3LzEvaHNSNXQ2TjVETkhvY0dYUjZZaWU4eWJlZU4wLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS81NDFjMDUtOGQ3ZC00MmI4LWFiMDAtN2ZiYmFlNmY5NDM3 LzEvQlVqTzN4Y0NudG1LRUlFVHhzRUo3S3pOZ3V3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXPdtMA0G CSqGSIb3DQEBCwUAA4IBAQADcQDNNu8C0fV9wvPCboihIdaRTlHvmCzSlNRvSJpQ 3D7lAXi19bo+O0gI8EfRaJ5abKLRVjK/G6dfdZi2AQUF1C49qw0ZfFzgiZnbzLEY TILNdJLTjAi7PZgQVlgcGinYSZb1olHZk5hISO00lp4LxNcw8SlAlca+pootQ3Nr 0EERPpB/ILAG9akgLKovvSKTgcw02bnYiwmuvrhw3Bv1wwN5ZdJxxPpcM1YYL5Fs tREkbubQpryTWAhTeJdPgtnczuUlgBjjTz+fvAA8lVABwkO2qn2WhaYIZcXY/gwq JhhTKZrLXt0o0xElnZHjOrCbBUK9u3t0e+b5+Y70oOkw -----END CERTIFICATE-----Generated at Mon Jan 26 17:25:28 2026 by rpki-client