This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/lRo7IecsGhO3xk6VeRmLVqNU3Mk.roa File: lRo7IecsGhO3xk6VeRmLVqNU3Mk.roa (raw, json) Hash identifier: Tfg3w7tUegTy04PdhgQ44jXT2Xita38fUJmOSh4lBhQ= Subject key identifier: 95:1A:3B:21:E7:2C:1A:13:B7:C6:4E:95:79:19:8B:56:A3:54:DC:C9 Certificate issuer: /CN=0548cedf17029ed98a108113c6c109ecaccd82ec Certificate serial: 019B797ED834201668D7E95635892F1F2462 Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/lRo7IecsGhO3xk6VeRmLVqNU3Mk.roa Signing time: Thu 01 Jan 2026 12:18:34 +0000 ROA not before: Thu 01 Jan 2026 12:18:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205526 IP address blocks: 213.169.37.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.mft rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:d8:34:20:16:68:d7:e9:56:35:89:2f:1f:24:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec Validity Not Before: Jan 1 12:18:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=951a3b21e72c1a13b7c64e9579198b56a354dcc9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:5a:1d:1e:66:61:18:84:e3:31:82:30:7d:2e: 93:65:ce:a0:a9:f1:62:df:c9:f2:cb:1a:77:2b:9d: 7c:b9:ef:2e:2d:1f:02:0c:5a:9a:10:e6:7d:70:8a: f7:00:71:6d:e8:5b:d5:3c:cc:7d:a6:71:b5:b7:32: c4:b0:ac:26:0b:76:5f:e7:23:ee:13:19:b0:04:1d: c2:06:4d:17:a0:e1:df:5d:a7:d6:ef:e1:89:7e:99: 47:d0:a9:12:84:d7:57:82:c6:6c:65:aa:45:0a:48: 4b:25:e2:61:a7:28:b1:6f:fc:3c:f1:77:9c:0e:a0: f7:59:ac:79:a0:5e:e0:8f:0b:cc:cc:a0:00:99:b1: ae:c7:f2:ee:9e:4a:7b:3e:41:7f:24:00:3c:8d:8b: 8a:b4:57:6e:52:51:1b:c1:2f:23:f7:0a:d9:be:d7: 6b:11:50:4c:6b:c6:54:7f:de:62:3c:a0:4f:ab:7a: 6d:3f:43:db:65:d5:90:1a:76:96:a1:4d:82:3d:6c: c2:d2:13:b5:5c:21:d9:3a:34:6e:55:8e:b9:32:09: e2:5a:35:3f:e8:c2:1d:00:e6:29:9c:1e:22:58:00: ec:f2:b4:34:d7:4d:3e:5b:7d:73:f1:f5:1f:85:56: f2:e7:48:d2:d7:86:57:2f:41:50:d4:12:0c:54:66: 70:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:1A:3B:21:E7:2C:1A:13:B7:C6:4E:95:79:19:8B:56:A3:54:DC:C9 X509v3 Authority Key Identifier: keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/lRo7IecsGhO3xk6VeRmLVqNU3Mk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.169.37.0/24 Signature Algorithm: sha256WithRSAEncryption 8e:6d:81:fb:b1:4c:77:50:79:7f:b3:0b:e9:a6:1c:29:cd:03: 24:3f:c1:93:f0:b3:39:56:ec:0e:57:c4:43:07:14:8a:72:53: a2:28:bb:d4:78:12:a5:44:30:8e:7d:88:5f:24:43:b5:d7:8c: b8:5d:1b:33:2d:99:fc:18:ca:b3:10:0b:3e:87:85:39:6a:b2: 0e:05:8d:61:32:db:7a:24:eb:38:25:83:28:b1:7e:2a:c5:8d: 9f:d3:ba:18:aa:69:39:04:91:bf:8e:9a:6b:95:ad:99:f7:ad: 92:d3:9c:b6:a0:88:e6:8a:59:36:78:29:69:4b:b6:e5:08:19: 66:39:d7:e4:2b:d1:e8:a1:36:0e:0f:c1:fe:b3:44:ca:36:49: 6b:41:ca:fe:3d:b9:6c:39:8a:e7:1a:2d:37:bf:71:1a:e4:ec: a9:24:67:c1:32:34:ed:66:6d:77:94:b6:33:e7:f6:4f:50:f3: a1:95:b0:07:35:e5:75:f8:5b:52:54:27:19:a1:05:32:39:14: 1e:48:42:8d:11:8d:55:85:6d:9b:31:c2:5f:f5:b0:ca:cc:c0: e5:2d:d4:a7:6b:58:81:b4:61:2c:e8:62:28:70:cb:ed:dc:eb: b8:71:73:7d:1e:e9:a2:5f:11:8a:9a:a3:b4:ae:23:65:8c:b2: 44:0a:36:ee -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5ftg0IBZo1+lWNYkvHyRiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1NDhjZWRmMTcwMjllZDk4YTEwODExM2M2YzEwOWVjYWNj ZDgyZWMwHhcNMjYwMTAxMTIxODM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NTFhM2IyMWU3MmMxYTEzYjdjNjRlOTU3OTE5OGI1NmEzNTRkY2M5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxlodHmZhGITjMYIwfS6TZc6gqfFi 38nyyxp3K518ue8uLR8CDFqaEOZ9cIr3AHFt6FvVPMx9pnG1tzLEsKwmC3Zf5yPu ExmwBB3CBk0XoOHfXafW7+GJfplH0KkShNdXgsZsZapFCkhLJeJhpyixb/w88Xec DqD3Wax5oF7gjwvMzKAAmbGux/Lunkp7PkF/JAA8jYuKtFduUlEbwS8j9wrZvtdr EVBMa8ZUf95iPKBPq3ptP0PbZdWQGnaWoU2CPWzC0hO1XCHZOjRuVY65MgniWjU/ 6MIdAOYpnB4iWADs8rQ0100+W31z8fUfhVby50jS14ZXL0FQ1BIMVGZw0wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJUaOyHnLBoTt8ZOlXkZi1ajVNzJMB8GA1UdIwQY MBaAFAVIzt8XAp7ZihCBE8bBCeyszYLsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlVqTzN4Y0NudG1LRUlFVHhzRUo3S3pOZ3V3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS81NDFjMDUtOGQ3ZC00MmI4LWFiMDAt N2ZiYmFlNmY5NDM3LzEvbFJvN0llY3NHaE8zeGs2VmVSbUxWcU5VM01rLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS81NDFjMDUtOGQ3ZC00MmI4LWFiMDAtN2ZiYmFlNmY5NDM3 LzEvQlVqTzN4Y0NudG1LRUlFVHhzRUo3S3pOZ3V3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1aklMA0G CSqGSIb3DQEBCwUAA4IBAQCObYH7sUx3UHl/swvpphwpzQMkP8GT8LM5VuwOV8RD BxSKclOiKLvUeBKlRDCOfYhfJEO114y4XRszLZn8GMqzEAs+h4U5arIOBY1hMtt6 JOs4JYMosX4qxY2f07oYqmk5BJG/jpprla2Z962S05y2oIjmilk2eClpS7blCBlm OdfkK9HooTYOD8H+s0TKNklrQcr+PblsOYrnGi03v3Ea5OypJGfBMjTtZm13lLYz 5/ZPUPOhlbAHNeV1+FtSVCcZoQUyORQeSEKNEY1VhW2bMcJf9bDKzMDlLdSna1iB tGEs6GIocMvt3Ou4cXN9HumiXxGKmqO0riNljLJECjbu -----END CERTIFICATE-----Generated at Mon Jan 26 17:25:26 2026 by rpki-client