This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/iQPRgwP32Dv3sGX0A_SdfRTm2X8.roa File: iQPRgwP32Dv3sGX0A_SdfRTm2X8.roa (raw, json) Hash identifier: 91fm62oRAQigJv1j3T+SlX9DoJpBPLzvYnEdXVXM+lQ= Subject key identifier: 89:03:D1:83:03:F7:D8:3B:F7:B0:65:F4:03:F4:9D:7D:14:E6:D9:7F Certificate issuer: /CN=0548cedf17029ed98a108113c6c109ecaccd82ec Certificate serial: 019B797EAD93B33B139784FD7250202FB71C Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/iQPRgwP32Dv3sGX0A_SdfRTm2X8.roa Signing time: Thu 01 Jan 2026 12:18:23 +0000 ROA not before: Thu 01 Jan 2026 12:18:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3187 IP address blocks: 92.247.184.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.mft rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:ad:93:b3:3b:13:97:84:fd:72:50:20:2f:b7:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec Validity Not Before: Jan 1 12:18:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8903d18303f7d83bf7b065f403f49d7d14e6d97f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:19:8a:71:59:65:50:b6:c3:c9:74:c1:ea:77: 99:5c:c7:91:d4:69:ed:b8:af:79:3b:7c:03:e6:46: c3:64:40:e9:12:44:c1:ed:94:c7:d4:0d:93:62:03: d0:29:c0:33:ed:a2:0f:a5:20:9c:8a:3c:ac:3a:59: 75:0f:a4:45:32:e6:e3:ab:a1:26:68:9d:d5:bb:21: 9b:39:5d:5c:87:f6:9d:fa:4c:32:d3:d2:5d:0e:b0: ef:f3:4f:1f:6c:85:e1:b9:75:42:95:13:cd:43:05: 69:29:ee:12:d7:3b:68:e2:50:d0:05:85:27:46:ec: 5f:c1:f7:8f:1e:01:2d:34:5f:88:da:8a:50:7e:4f: e3:b6:cb:75:f9:ea:15:f3:86:01:4a:8c:8e:ce:51: 85:c0:72:7d:b4:c0:fb:b1:76:77:1e:4d:34:61:70: d1:4a:96:d2:d0:90:b8:b2:37:66:7a:63:d2:7f:8d: f9:7e:41:a7:e2:af:29:04:b7:cb:5a:c7:fb:9c:b9: b5:d9:35:96:18:b1:ff:2c:5e:3f:53:0e:81:8b:f8: 14:25:b4:27:95:15:60:2b:47:40:46:fa:33:e3:27: 5d:e9:6b:b5:5e:34:26:33:21:3a:e4:a8:45:33:21: aa:65:98:8d:ec:38:55:37:d6:b8:9c:b8:e6:b4:fb: 2c:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:03:D1:83:03:F7:D8:3B:F7:B0:65:F4:03:F4:9D:7D:14:E6:D9:7F X509v3 Authority Key Identifier: keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/iQPRgwP32Dv3sGX0A_SdfRTm2X8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.247.184.0/24 Signature Algorithm: sha256WithRSAEncryption 04:7e:b7:3b:54:6a:2e:00:d0:9e:15:d8:b5:2a:c2:de:1a:6d: 28:ba:62:81:a9:22:34:b8:82:10:90:2e:3d:f0:fe:0b:4d:fa: 1f:b2:a2:79:0c:96:57:3c:88:c6:34:03:6c:07:a1:62:b5:09: 78:ac:9f:3f:45:4a:ef:6a:a2:90:3c:05:e0:ce:0c:76:96:ac: 31:aa:1a:39:71:3b:52:0b:ec:24:19:1e:83:b4:2f:3f:20:88: 6a:9f:95:85:5e:30:9b:af:39:39:58:85:ba:97:22:14:e5:80: ab:03:6e:c3:d4:86:4d:54:4a:50:96:bb:40:0b:30:f6:df:90: 52:90:6c:7d:ff:1f:e6:86:21:ed:12:56:70:26:01:51:4f:43: 2d:a4:92:4b:46:61:e6:26:06:1f:c8:fb:be:52:7f:82:20:6b: ce:53:ad:a1:f7:b1:0e:49:75:9f:54:30:57:c7:6d:7b:71:15: 5f:04:80:46:1b:b3:8b:d6:5c:51:ed:20:25:dc:d7:66:a5:ac: 90:5c:c0:a0:e2:ca:c1:b6:e4:68:19:d8:5b:72:fd:15:97:e0: b7:8b:7a:20:f2:79:2f:68:37:61:f0:f1:66:21:9e:10:4a:4c: e3:45:49:aa:f6:fa:4d:66:f4:f3:70:f4:60:85:34:be:e1:98: 1a:c6:64:db -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fq2TszsTl4T9clAgL7ccMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1NDhjZWRmMTcwMjllZDk4YTEwODExM2M2YzEwOWVjYWNj ZDgyZWMwHhcNMjYwMTAxMTIxODIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4OTAzZDE4MzAzZjdkODNiZjdiMDY1ZjQwM2Y0OWQ3ZDE0ZTZkOTdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnRmKcVllULbDyXTB6neZXMeR1Gnt uK95O3wD5kbDZEDpEkTB7ZTH1A2TYgPQKcAz7aIPpSCcijysOll1D6RFMubjq6Em aJ3VuyGbOV1ch/ad+kwy09JdDrDv808fbIXhuXVClRPNQwVpKe4S1zto4lDQBYUn RuxfwfePHgEtNF+I2opQfk/jtst1+eoV84YBSoyOzlGFwHJ9tMD7sXZ3Hk00YXDR SpbS0JC4sjdmemPSf435fkGn4q8pBLfLWsf7nLm12TWWGLH/LF4/Uw6Bi/gUJbQn lRVgK0dARvoz4ydd6Wu1XjQmMyE65KhFMyGqZZiN7DhVN9a4nLjmtPssIQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIkD0YMD99g797Bl9AP0nX0U5tl/MB8GA1UdIwQY MBaAFAVIzt8XAp7ZihCBE8bBCeyszYLsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlVqTzN4Y0NudG1LRUlFVHhzRUo3S3pOZ3V3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS81NDFjMDUtOGQ3ZC00MmI4LWFiMDAt N2ZiYmFlNmY5NDM3LzEvaVFQUmd3UDMyRHYzc0dYMEFfU2RmUlRtMlg4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS81NDFjMDUtOGQ3ZC00MmI4LWFiMDAtN2ZiYmFlNmY5NDM3 LzEvQlVqTzN4Y0NudG1LRUlFVHhzRUo3S3pOZ3V3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXPe4MA0G CSqGSIb3DQEBCwUAA4IBAQAEfrc7VGouANCeFdi1KsLeGm0oumKBqSI0uIIQkC49 8P4LTfofsqJ5DJZXPIjGNANsB6FitQl4rJ8/RUrvaqKQPAXgzgx2lqwxqho5cTtS C+wkGR6DtC8/IIhqn5WFXjCbrzk5WIW6lyIU5YCrA27D1IZNVEpQlrtACzD235BS kGx9/x/mhiHtElZwJgFRT0MtpJJLRmHmJgYfyPu+Un+CIGvOU62h97EOSXWfVDBX x217cRVfBIBGG7OL1lxR7SAl3NdmpayQXMCg4srBtuRoGdhbcv0Vl+C3i3og8nkv aDdh8PFmIZ4QSkzjRUmq9vpNZvTzcPRghTS+4ZgaxmTb -----END CERTIFICATE-----Generated at Mon Jan 26 17:24:33 2026 by rpki-client