This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/lS0fCYifHQv_nUEXv0Mgl615PUw.roa File: lS0fCYifHQv_nUEXv0Mgl615PUw.roa (raw, json) Hash identifier: CE4tsc1IxbGjvB5HhNaQgKTKm+MLt6IznUp1ebQfxwE= Subject key identifier: 95:2D:1F:09:88:9F:1D:0B:FF:9D:41:17:BF:43:20:97:AD:79:3D:4C Certificate issuer: /CN=0548cedf17029ed98a108113c6c109ecaccd82ec Certificate serial: 019B797ED6D51B6F331436FA78A354CD78F4 Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/lS0fCYifHQv_nUEXv0Mgl615PUw.roa Signing time: Thu 01 Jan 2026 12:18:34 +0000 ROA not before: Thu 01 Jan 2026 12:18:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203578 IP address blocks: 212.36.26.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.mft rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:d6:d5:1b:6f:33:14:36:fa:78:a3:54:cd:78:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec Validity Not Before: Jan 1 12:18:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=952d1f09889f1d0bff9d4117bf432097ad793d4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:10:19:67:2b:a6:48:14:86:8b:cf:79:16:7a: c1:c3:db:ed:12:4f:c3:28:56:bd:d1:2d:42:99:cc: 55:e4:b8:18:73:8d:3a:df:d9:93:99:13:06:ca:66: 7a:a9:02:0e:0b:14:e8:9b:a2:fa:eb:ec:40:a9:51: 3c:83:a8:4f:b9:2c:8b:1b:e7:76:50:cd:10:66:eb: e1:c4:4c:79:f3:60:7c:06:52:08:f4:67:0d:50:d1: a9:1d:89:e9:77:75:e4:d6:1d:f1:e1:67:18:b5:86: 60:5b:a9:08:3d:89:61:52:a4:9b:39:78:5e:48:9a: 73:e9:c7:19:e8:c5:cc:e6:d6:4a:0f:f4:32:c1:46: ea:b8:41:cd:d0:dd:00:00:88:3f:4f:e9:6f:68:7d: d0:b6:be:3d:35:66:10:09:87:df:41:ee:ba:d3:c6: 7a:2b:93:9d:cc:c3:b6:30:77:35:ea:22:a3:3d:7c: 54:71:f4:d4:3e:47:73:60:58:a4:52:88:f0:5b:01: 52:a5:3b:21:46:2d:44:94:f7:fd:51:6f:e8:9e:4b: e9:c8:cf:71:ca:87:f4:a3:a9:fa:60:54:57:e3:78: 79:68:93:28:e5:ae:5a:b6:15:2d:f7:bf:0b:5b:e4: 80:6e:cf:58:6f:01:e1:b5:98:a4:fb:be:a1:22:55: 08:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:2D:1F:09:88:9F:1D:0B:FF:9D:41:17:BF:43:20:97:AD:79:3D:4C X509v3 Authority Key Identifier: keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/lS0fCYifHQv_nUEXv0Mgl615PUw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.36.26.0/24 Signature Algorithm: sha256WithRSAEncryption 2d:b4:fa:ae:83:fe:53:42:08:eb:30:c7:50:7d:78:51:78:37: a9:10:64:79:21:fa:c5:d2:a7:bb:42:d3:25:31:c8:9d:4d:6b: 97:2b:aa:3b:d1:05:de:ce:8b:db:90:2a:4e:7e:cc:97:6b:a0: 52:dc:5b:91:89:19:50:6c:f5:08:63:6d:7e:84:24:c3:dc:65: 33:20:19:48:01:e9:36:31:a5:94:04:29:0e:f2:45:d7:f5:8a: bd:ae:97:1a:7b:f8:de:0c:78:20:25:e8:98:31:c3:97:17:75: a7:de:61:37:63:3a:76:46:b7:85:ba:9c:be:33:22:8c:4d:4c: 9b:65:16:5f:9a:cd:ae:66:12:09:78:98:90:dd:a1:74:47:58: fe:f3:f6:cc:62:ae:ba:3a:09:56:21:ec:1b:b0:7b:50:5e:9e: 70:5a:3f:d9:3b:86:73:ea:f1:e0:31:d5:9a:47:93:46:2b:b7: ec:0c:22:3d:64:79:56:e0:c1:20:be:12:1d:47:c0:df:df:a5: 75:b6:01:f1:27:ad:f1:08:54:06:2e:f1:ca:85:ca:73:b9:21: 93:07:dd:4e:15:33:fa:67:b5:a7:93:d4:8e:f4:90:25:08:3d: ae:fc:04:b9:df:a3:71:eb:93:00:d4:0d:b3:c9:58:ae:87:bb: c6:b0:00:37 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5ftbVG28zFDb6eKNUzXj0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1NDhjZWRmMTcwMjllZDk4YTEwODExM2M2YzEwOWVjYWNj ZDgyZWMwHhcNMjYwMTAxMTIxODM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NTJkMWYwOTg4OWYxZDBiZmY5ZDQxMTdiZjQzMjA5N2FkNzkzZDRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqxAZZyumSBSGi895FnrBw9vtEk/D KFa90S1CmcxV5LgYc40639mTmRMGymZ6qQIOCxTom6L66+xAqVE8g6hPuSyLG+d2 UM0QZuvhxEx582B8BlII9GcNUNGpHYnpd3Xk1h3x4WcYtYZgW6kIPYlhUqSbOXhe SJpz6ccZ6MXM5tZKD/QywUbquEHN0N0AAIg/T+lvaH3Qtr49NWYQCYffQe6608Z6 K5OdzMO2MHc16iKjPXxUcfTUPkdzYFikUojwWwFSpTshRi1ElPf9UW/onkvpyM9x yof0o6n6YFRX43h5aJMo5a5athUt978LW+SAbs9YbwHhtZik+76hIlUInQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJUtHwmInx0L/51BF79DIJeteT1MMB8GA1UdIwQY MBaAFAVIzt8XAp7ZihCBE8bBCeyszYLsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlVqTzN4Y0NudG1LRUlFVHhzRUo3S3pOZ3V3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS81NDFjMDUtOGQ3ZC00MmI4LWFiMDAt N2ZiYmFlNmY5NDM3LzEvbFMwZkNZaWZIUXZfblVFWHYwTWdsNjE1UFV3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS81NDFjMDUtOGQ3ZC00MmI4LWFiMDAtN2ZiYmFlNmY5NDM3 LzEvQlVqTzN4Y0NudG1LRUlFVHhzRUo3S3pOZ3V3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1CQaMA0G CSqGSIb3DQEBCwUAA4IBAQAttPqug/5TQgjrMMdQfXhReDepEGR5IfrF0qe7QtMl McidTWuXK6o70QXezovbkCpOfsyXa6BS3FuRiRlQbPUIY21+hCTD3GUzIBlIAek2 MaWUBCkO8kXX9Yq9rpcae/jeDHggJeiYMcOXF3Wn3mE3Yzp2RreFupy+MyKMTUyb ZRZfms2uZhIJeJiQ3aF0R1j+8/bMYq66OglWIewbsHtQXp5wWj/ZO4Zz6vHgMdWa R5NGK7fsDCI9ZHlW4MEgvhIdR8Df36V1tgHxJ63xCFQGLvHKhcpzuSGTB91OFTP6 Z7Wnk9SO9JAlCD2u/AS536Nx65MA1A2zyViuh7vGsAA3 -----END CERTIFICATE-----Generated at Mon Jan 26 18:54:05 2026 by rpki-client