This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/8yDzqalVZeBa0sMuVuS_igUuzP4.roa File: 8yDzqalVZeBa0sMuVuS_igUuzP4.roa (raw, json) Hash identifier: Tvpdm5bF6LiQnkMPBbOPdpXSifk28qAzzA16uV9uaPI= Subject key identifier: F3:20:F3:A9:A9:55:65:E0:5A:D2:C3:2E:56:E4:BF:8A:05:2E:CC:FE Certificate issuer: /CN=0548cedf17029ed98a108113c6c109ecaccd82ec Certificate serial: 019B797EBE05AAFE7FF948D6FE349DCF035D Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/8yDzqalVZeBa0sMuVuS_igUuzP4.roa Signing time: Thu 01 Jan 2026 12:18:27 +0000 ROA not before: Thu 01 Jan 2026 12:18:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43944 IP address blocks: 217.79.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.mft rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:be:05:aa:fe:7f:f9:48:d6:fe:34:9d:cf:03:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec Validity Not Before: Jan 1 12:18:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f320f3a9a95565e05ad2c32e56e4bf8a052eccfe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:a3:7b:e1:b8:84:6c:4e:54:b0:db:03:2e:b6: 23:3a:df:f0:5b:b1:29:37:8a:05:bc:cb:02:00:f2: 4f:f3:52:f5:b4:f8:a4:b7:df:60:f5:cd:8b:4d:79: ad:e1:8f:73:91:d5:54:2e:f4:e6:6c:1c:87:a7:c6: 4d:87:3d:c7:97:6c:e0:5a:ef:68:c9:eb:31:26:ba: 15:3e:0c:4a:ab:b2:eb:f3:5d:86:63:b5:5b:e8:85: c1:02:c9:72:da:35:88:be:bb:8a:61:e0:46:2c:97: 01:cf:e8:ee:23:ef:77:27:e6:9d:07:d1:20:3a:bd: bd:3f:f7:d0:d7:9c:e9:e9:98:70:75:07:9f:cb:7c: e4:f9:9c:b2:50:7c:6b:5e:24:ef:b5:7e:87:e6:8c: da:31:65:ef:83:94:5d:ae:ad:13:d9:a7:a9:5c:61: 56:6c:33:d1:41:bf:09:74:51:ef:f1:29:a0:b9:2a: d0:f8:fb:ed:43:4f:84:62:f5:7f:a9:fa:05:93:4a: d5:2b:55:dc:f3:2c:0e:2d:eb:8e:d0:71:9a:c9:2c: 63:42:0c:69:ef:21:c5:eb:93:2c:d6:ee:d1:db:76: d5:05:1e:01:50:97:4a:0e:c6:84:7c:4e:32:0d:54: 36:66:2f:23:e4:97:19:13:ef:07:aa:9c:3c:4c:fe: 30:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:20:F3:A9:A9:55:65:E0:5A:D2:C3:2E:56:E4:BF:8A:05:2E:CC:FE X509v3 Authority Key Identifier: keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/8yDzqalVZeBa0sMuVuS_igUuzP4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.79.40.0/24 Signature Algorithm: sha256WithRSAEncryption 19:95:86:9a:bf:ce:5f:19:8f:3d:08:49:bf:d1:15:70:db:72: b0:29:b0:87:22:c1:2e:fc:89:00:ed:3e:69:95:0e:3c:20:15: 09:19:ed:c7:cf:8d:e1:14:94:5d:9a:cf:5f:3e:25:e8:71:05: 73:ec:21:43:18:ac:62:79:02:45:53:5f:a5:69:e8:cc:e9:f4: 38:cd:5c:0e:e6:e0:2c:75:ce:90:97:a8:03:30:90:1c:1e:d3: e4:0b:93:2b:ff:25:ba:2a:0a:22:20:00:c2:32:01:e9:59:5c: 00:5f:55:83:7d:50:41:32:fd:c7:93:3c:c9:68:fd:d9:8f:9c: a9:03:33:84:ca:e4:89:0d:41:03:53:ed:ae:49:c1:af:4b:8b: 77:9a:6c:c8:91:e7:c3:37:e1:ce:90:17:30:db:49:5a:7d:f8: a9:42:70:9d:d3:b9:87:64:80:c2:f2:b0:bc:8e:ce:81:0c:b5: 6f:25:c9:ea:4f:ab:3d:3d:2a:10:3a:1e:2b:04:a5:df:33:bd: e9:3f:f9:38:dc:c8:ab:02:69:3f:36:26:57:a1:f0:82:58:bc: c8:54:e7:ae:1c:0a:1c:e8:a1:86:47:88:a4:4d:b2:ca:ee:fe: 36:7f:4e:09:9a:b3:35:13:55:f6:c0:61:01:97:85:ff:39:c0: 60:e1:68:a1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fr4Fqv5/+UjW/jSdzwNdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1NDhjZWRmMTcwMjllZDk4YTEwODExM2M2YzEwOWVjYWNj ZDgyZWMwHhcNMjYwMTAxMTIxODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMzIwZjNhOWE5NTU2NWUwNWFkMmMzMmU1NmU0YmY4YTA1MmVjY2ZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApKN74biEbE5UsNsDLrYjOt/wW7Ep N4oFvMsCAPJP81L1tPikt99g9c2LTXmt4Y9zkdVULvTmbByHp8ZNhz3Hl2zgWu9o yesxJroVPgxKq7Lr812GY7Vb6IXBAsly2jWIvruKYeBGLJcBz+juI+93J+adB9Eg Or29P/fQ15zp6ZhwdQefy3zk+ZyyUHxrXiTvtX6H5ozaMWXvg5Rdrq0T2aepXGFW bDPRQb8JdFHv8SmguSrQ+PvtQ0+EYvV/qfoFk0rVK1Xc8ywOLeuO0HGaySxjQgxp 7yHF65Ms1u7R23bVBR4BUJdKDsaEfE4yDVQ2Zi8j5JcZE+8Hqpw8TP4wPwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPMg86mpVWXgWtLDLlbkv4oFLsz+MB8GA1UdIwQY MBaAFAVIzt8XAp7ZihCBE8bBCeyszYLsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlVqTzN4Y0NudG1LRUlFVHhzRUo3S3pOZ3V3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS81NDFjMDUtOGQ3ZC00MmI4LWFiMDAt N2ZiYmFlNmY5NDM3LzEvOHlEenFhbFZaZUJhMHNNdVZ1U19pZ1V1elA0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS81NDFjMDUtOGQ3ZC00MmI4LWFiMDAtN2ZiYmFlNmY5NDM3 LzEvQlVqTzN4Y0NudG1LRUlFVHhzRUo3S3pOZ3V3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2U8oMA0G CSqGSIb3DQEBCwUAA4IBAQAZlYaav85fGY89CEm/0RVw23KwKbCHIsEu/IkA7T5p lQ48IBUJGe3Hz43hFJRdms9fPiXocQVz7CFDGKxieQJFU1+laejM6fQ4zVwO5uAs dc6Ql6gDMJAcHtPkC5Mr/yW6KgoiIADCMgHpWVwAX1WDfVBBMv3HkzzJaP3Zj5yp AzOEyuSJDUEDU+2uScGvS4t3mmzIkefDN+HOkBcw20laffipQnCd07mHZIDC8rC8 js6BDLVvJcnqT6s9PSoQOh4rBKXfM73pP/k43MirAmk/NiZXofCCWLzIVOeuHAoc 6KGGR4ikTbLK7v42f04JmrM1E1X2wGEBl4X/OcBg4Wih -----END CERTIFICATE-----Generated at Sun Jan 25 20:48:52 2026 by rpki-client