This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/0y8Xd2-XR0egb2NEj2x1BLBS1Jc.roa File: 0y8Xd2-XR0egb2NEj2x1BLBS1Jc.roa (raw, json) Hash identifier: 1KFutfcVsIslUDiKB+2tb7wfGS9/UjsmYni15yYJjlE= Subject key identifier: D3:2F:17:77:6F:97:47:47:A0:6F:63:44:8F:6C:75:04:B0:52:D4:97 Certificate issuer: /CN=0548cedf17029ed98a108113c6c109ecaccd82ec Certificate serial: 019B797EC2D0A8442A0D17E385D86AC67A9F Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/0y8Xd2-XR0egb2NEj2x1BLBS1Jc.roa Signing time: Thu 01 Jan 2026 12:18:29 +0000 ROA not before: Thu 01 Jan 2026 12:18:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51660 IP address blocks: 92.247.100.0/24 maxlen: 24 92.247.101.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.mft rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:c2:d0:a8:44:2a:0d:17:e3:85:d8:6a:c6:7a:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec Validity Not Before: Jan 1 12:18:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d32f17776f974747a06f63448f6c7504b052d497 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:92:af:e3:72:88:b5:72:82:71:35:42:c7:58: a3:d7:6c:2a:83:a5:81:e3:f2:ab:8c:89:62:1a:3f: ed:f7:04:b7:3c:46:41:8d:fa:16:64:91:1d:fe:07: d7:28:5a:f2:df:ef:b0:43:1f:2e:32:a3:35:b6:ad: b7:9b:fe:bc:b1:21:bd:21:27:37:7d:ac:22:3c:16: e4:48:31:9a:d9:33:b4:52:92:3f:05:07:e1:aa:c2: fb:5c:d3:73:dc:1e:23:98:66:ad:81:1b:23:12:84: cb:f8:40:2a:25:a6:84:7e:33:6e:e1:ce:fb:14:08: 71:42:19:6d:0b:53:68:9f:c5:bc:9b:e2:09:c7:63: 54:16:a7:82:49:b7:3d:a9:cc:64:52:47:fb:8b:92: ce:ba:f0:12:6b:f1:91:18:0d:43:8b:df:89:17:bc: fe:68:eb:47:e9:fd:56:a8:d0:5c:99:4b:1e:a4:c6: 50:3a:df:a9:9c:f9:2b:37:fe:ff:7d:20:35:3e:c2: f6:ed:ee:33:9e:eb:d6:39:91:7b:7b:66:2f:37:ac: 38:f8:23:3c:9b:27:92:2e:47:0a:0c:b8:4d:c0:a7: b4:94:04:5c:d8:f4:05:64:49:51:95:9f:00:fd:54: bb:17:09:8a:5c:0d:68:66:5b:18:95:0b:e3:e0:74: 46:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:2F:17:77:6F:97:47:47:A0:6F:63:44:8F:6C:75:04:B0:52:D4:97 X509v3 Authority Key Identifier: keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/0y8Xd2-XR0egb2NEj2x1BLBS1Jc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.247.100.0/23 Signature Algorithm: sha256WithRSAEncryption 23:c0:9d:6d:c2:00:c2:ad:86:23:a8:3b:15:fe:a7:7d:0f:0a: a0:2f:c5:f5:b4:62:13:6c:f8:39:e8:47:14:93:d3:c3:f1:4e: 2c:76:91:ad:2a:91:48:5b:e4:12:07:a0:8d:8e:0f:e1:e9:ff: 9e:68:2a:6d:f8:e3:ff:85:36:0d:01:66:b1:6d:7d:f0:08:94: 82:a3:81:9f:72:79:8d:5a:8e:84:19:7b:d5:1d:d1:e1:5c:e0: 77:ff:21:7f:60:ce:6d:26:11:bf:f4:23:72:3a:d5:03:ff:f8: f4:b1:46:fe:81:70:7a:cb:49:91:7f:a8:31:f8:48:fa:80:df: e4:8a:32:08:32:1d:b7:37:a3:45:dc:0c:33:39:8a:ba:a3:c8: 28:d2:73:07:59:1d:ce:cf:c7:be:f2:e6:fe:f1:ab:12:23:6a: e8:ae:d3:92:d5:94:31:26:7c:2c:78:dc:91:9f:04:68:f3:5b: c7:20:e1:95:aa:86:04:af:fb:ad:48:ef:87:2e:97:e2:36:8b: 70:ad:f2:22:23:61:18:0e:39:a2:b3:85:a9:3c:0f:8a:b5:ab: 32:0c:3e:9c:98:d4:5d:14:19:10:61:fb:3a:bc:6e:eb:a6:33: ce:47:f9:01:68:0f:bd:a2:4b:58:0f:b1:e0:f4:6f:ac:7d:c1: 3c:ba:30:97 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fsLQqEQqDRfjhdhqxnqfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1NDhjZWRmMTcwMjllZDk4YTEwODExM2M2YzEwOWVjYWNj ZDgyZWMwHhcNMjYwMTAxMTIxODI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMzJmMTc3NzZmOTc0NzQ3YTA2ZjYzNDQ4ZjZjNzUwNGIwNTJkNDk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmpKv43KItXKCcTVCx1ij12wqg6WB 4/KrjIliGj/t9wS3PEZBjfoWZJEd/gfXKFry3++wQx8uMqM1tq23m/68sSG9ISc3 fawiPBbkSDGa2TO0UpI/BQfhqsL7XNNz3B4jmGatgRsjEoTL+EAqJaaEfjNu4c77 FAhxQhltC1Non8W8m+IJx2NUFqeCSbc9qcxkUkf7i5LOuvASa/GRGA1Di9+JF7z+ aOtH6f1WqNBcmUsepMZQOt+pnPkrN/7/fSA1PsL27e4znuvWOZF7e2YvN6w4+CM8 myeSLkcKDLhNwKe0lARc2PQFZElRlZ8A/VS7FwmKXA1oZlsYlQvj4HRGWQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNMvF3dvl0dHoG9jRI9sdQSwUtSXMB8GA1UdIwQY MBaAFAVIzt8XAp7ZihCBE8bBCeyszYLsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlVqTzN4Y0NudG1LRUlFVHhzRUo3S3pOZ3V3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS81NDFjMDUtOGQ3ZC00MmI4LWFiMDAt N2ZiYmFlNmY5NDM3LzEvMHk4WGQyLVhSMGVnYjJORWoyeDFCTEJTMUpjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS81NDFjMDUtOGQ3ZC00MmI4LWFiMDAtN2ZiYmFlNmY5NDM3 LzEvQlVqTzN4Y0NudG1LRUlFVHhzRUo3S3pOZ3V3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBXPdkMA0G CSqGSIb3DQEBCwUAA4IBAQAjwJ1twgDCrYYjqDsV/qd9DwqgL8X1tGITbPg56EcU k9PD8U4sdpGtKpFIW+QSB6CNjg/h6f+eaCpt+OP/hTYNAWaxbX3wCJSCo4GfcnmN Wo6EGXvVHdHhXOB3/yF/YM5tJhG/9CNyOtUD//j0sUb+gXB6y0mRf6gx+Ej6gN/k ijIIMh23N6NF3AwzOYq6o8go0nMHWR3Oz8e+8ub+8asSI2rortOS1ZQxJnwseNyR nwRo81vHIOGVqoYEr/utSO+HLpfiNotwrfIiI2EYDjmis4WpPA+KtasyDD6cmNRd FBkQYfs6vG7rpjPOR/kBaA+9oktYD7Hg9G+sfcE8ujCX -----END CERTIFICATE-----Generated at Sun Jan 25 21:57:49 2026 by rpki-client