This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/jDUjxJ-1iM_cJdNQEPYXBKZc77w.roa File: jDUjxJ-1iM_cJdNQEPYXBKZc77w.roa (raw, json) Hash identifier: L0gOuWqtYXyvgSje7tynF7Wzfo5LWwu4mHjPPj6MSxQ= Subject key identifier: 8C:35:23:C4:9F:B5:88:CF:DC:25:D3:50:10:F6:17:04:A6:5C:EF:BC Certificate issuer: /CN=0548cedf17029ed98a108113c6c109ecaccd82ec Certificate serial: 019B797EC36674A5200704862B05E1C4F4B6 Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/jDUjxJ-1iM_cJdNQEPYXBKZc77w.roa Signing time: Thu 01 Jan 2026 12:18:29 +0000 ROA not before: Thu 01 Jan 2026 12:18:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51830 IP address blocks: 212.36.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.mft rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:c3:66:74:a5:20:07:04:86:2b:05:e1:c4:f4:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec Validity Not Before: Jan 1 12:18:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8c3523c49fb588cfdc25d35010f61704a65cefbc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:62:9c:92:39:d2:7b:99:c5:ba:bc:03:a6:57: ac:d8:c1:fd:fe:88:26:15:af:68:18:53:07:2e:a4: 40:36:20:09:80:ea:5e:07:0f:27:b4:47:80:5c:98: d0:b8:6a:4b:fd:0c:e0:88:27:91:ad:51:a0:9e:b7: e6:63:31:15:4d:a7:ed:df:c2:d3:a1:25:94:71:6d: 93:97:cd:20:52:4e:ff:40:03:5a:3f:64:99:02:b0: 23:e3:13:d3:2f:03:eb:d4:b9:da:4b:82:c3:cc:e9: ae:19:8a:81:0a:9e:5f:f5:14:21:15:6a:8a:d6:28: 3b:1c:e8:54:b0:88:09:06:31:08:eb:14:38:17:b0: a2:23:d5:4e:bf:6a:d6:9a:60:fd:4d:b1:8f:8e:3c: 51:7f:f4:f7:ab:f6:c3:e9:57:8b:fd:46:95:c9:c8: aa:d4:56:47:ed:1b:10:70:30:7a:73:57:c0:60:17: 5d:02:da:1e:d0:e9:b9:87:7c:65:a1:71:ca:b4:33: b0:f4:25:56:60:8f:5d:62:2e:54:a1:7c:b3:6d:ff: 4e:b0:86:7f:e7:77:d3:1d:f8:af:e2:3b:c7:08:ab: 92:10:b9:ec:79:d3:49:f2:a4:b6:1a:04:db:04:1a: 15:59:03:ea:02:83:a2:9e:fc:24:73:ba:5b:57:9d: 1d:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:35:23:C4:9F:B5:88:CF:DC:25:D3:50:10:F6:17:04:A6:5C:EF:BC X509v3 Authority Key Identifier: keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/jDUjxJ-1iM_cJdNQEPYXBKZc77w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.36.19.0/24 Signature Algorithm: sha256WithRSAEncryption 89:df:72:93:1a:00:84:72:02:d5:47:57:ca:0e:56:a2:5d:ea: 58:e9:46:84:f9:f6:c8:0c:28:75:f2:ed:62:06:7d:c6:25:c8: 45:b5:90:ff:05:a3:31:2e:6f:f5:8b:16:e1:ff:f8:54:f2:ba: 67:43:aa:ce:62:fc:9f:e5:4c:a6:10:e6:20:8a:a0:50:28:ea: 9a:e8:81:56:8a:56:88:31:6f:b9:fe:89:bc:da:05:72:3c:8a: 51:73:7c:0d:13:3d:3c:c0:e4:65:85:a2:ac:14:85:c5:2d:c2: d4:27:64:82:32:1d:43:53:fb:98:6f:93:10:6c:5a:75:fd:01: cd:42:1e:fc:10:ca:6a:41:05:71:08:fa:45:32:27:a0:d7:ad: d3:86:45:52:ec:10:23:52:44:9b:16:bd:82:01:44:0a:8c:2d: c5:ef:c8:41:5e:97:11:f1:b3:c1:a8:27:06:3e:38:ba:4e:68: c9:93:e1:11:e4:ab:8c:b7:6f:a2:3d:b4:49:a9:06:87:4e:b4: c2:c0:0d:65:6a:73:7e:a1:fc:35:d6:7e:a2:50:4b:e6:0e:d6: 11:92:9f:94:5e:8d:a3:59:d1:c6:75:cb:3e:34:c2:c6:fb:c3: 73:0d:4e:e2:9d:94:ea:ba:b6:2c:5e:d9:ef:6d:ce:fb:a1:fb: 34:b1:41:12 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fsNmdKUgBwSGKwXhxPS2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1NDhjZWRmMTcwMjllZDk4YTEwODExM2M2YzEwOWVjYWNj ZDgyZWMwHhcNMjYwMTAxMTIxODI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YzM1MjNjNDlmYjU4OGNmZGMyNWQzNTAxMGY2MTcwNGE2NWNlZmJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuWKckjnSe5nFurwDples2MH9/ogm Fa9oGFMHLqRANiAJgOpeBw8ntEeAXJjQuGpL/QzgiCeRrVGgnrfmYzEVTaft38LT oSWUcW2Tl80gUk7/QANaP2SZArAj4xPTLwPr1LnaS4LDzOmuGYqBCp5f9RQhFWqK 1ig7HOhUsIgJBjEI6xQ4F7CiI9VOv2rWmmD9TbGPjjxRf/T3q/bD6VeL/UaVyciq 1FZH7RsQcDB6c1fAYBddAtoe0Om5h3xloXHKtDOw9CVWYI9dYi5UoXyzbf9OsIZ/ 53fTHfiv4jvHCKuSELnsedNJ8qS2GgTbBBoVWQPqAoOinvwkc7pbV50dRwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIw1I8SftYjP3CXTUBD2FwSmXO+8MB8GA1UdIwQY MBaAFAVIzt8XAp7ZihCBE8bBCeyszYLsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlVqTzN4Y0NudG1LRUlFVHhzRUo3S3pOZ3V3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS81NDFjMDUtOGQ3ZC00MmI4LWFiMDAt N2ZiYmFlNmY5NDM3LzEvakRVanhKLTFpTV9jSmROUUVQWVhCS1pjNzd3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS81NDFjMDUtOGQ3ZC00MmI4LWFiMDAtN2ZiYmFlNmY5NDM3 LzEvQlVqTzN4Y0NudG1LRUlFVHhzRUo3S3pOZ3V3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1CQTMA0G CSqGSIb3DQEBCwUAA4IBAQCJ33KTGgCEcgLVR1fKDlaiXepY6UaE+fbIDCh18u1i Bn3GJchFtZD/BaMxLm/1ixbh//hU8rpnQ6rOYvyf5UymEOYgiqBQKOqa6IFWilaI MW+5/om82gVyPIpRc3wNEz08wORlhaKsFIXFLcLUJ2SCMh1DU/uYb5MQbFp1/QHN Qh78EMpqQQVxCPpFMieg163ThkVS7BAjUkSbFr2CAUQKjC3F78hBXpcR8bPBqCcG Pji6TmjJk+ER5KuMt2+iPbRJqQaHTrTCwA1lanN+ofw11n6iUEvmDtYRkp+UXo2j WdHGdcs+NMLG+8NzDU7inZTqurYsXtnvbc77ofs0sUES -----END CERTIFICATE-----Generated at Mon Jan 26 17:25:25 2026 by rpki-client