This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/Rco1dm2ooOTWer4IpaSAO_8bw58.roa File: Rco1dm2ooOTWer4IpaSAO_8bw58.roa (raw, json) Hash identifier: ChrGLBskGsDyKp81lcqiBZY0Z9BtwWA3kpWDFLHVVKA= Subject key identifier: 45:CA:35:76:6D:A8:A0:E4:D6:7A:BE:08:A5:A4:80:3B:FF:1B:C3:9F Certificate issuer: /CN=0548cedf17029ed98a108113c6c109ecaccd82ec Certificate serial: 019B797EBF9A46640B9FAE5DE78D11AB75D9 Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/Rco1dm2ooOTWer4IpaSAO_8bw58.roa Signing time: Thu 01 Jan 2026 12:18:28 +0000 ROA not before: Thu 01 Jan 2026 12:18:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48458 IP address blocks: 217.79.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.mft rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 21:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:bf:9a:46:64:0b:9f:ae:5d:e7:8d:11:ab:75:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec Validity Not Before: Jan 1 12:18:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=45ca35766da8a0e4d67abe08a5a4803bff1bc39f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:50:98:8b:0e:af:51:af:7b:a3:2b:ff:e5:51: 70:08:55:4e:e2:61:c2:47:ed:b3:e1:b0:cc:51:dd: db:08:84:43:0a:90:a8:29:87:33:1e:6b:88:d6:1b: a8:8a:60:c6:7e:ae:2b:ca:e5:22:5a:09:a2:25:c2: 25:42:1d:15:62:ee:46:52:e8:97:00:10:04:99:bc: b1:21:c3:63:a4:67:91:fe:d8:02:dc:02:d1:b1:37: 51:09:c9:0b:38:af:08:40:45:01:ee:61:fc:e5:fb: c3:74:77:82:11:a1:f4:f0:3b:37:e3:72:a8:d3:3b: 86:f8:12:7a:c2:50:e8:be:65:f0:3f:24:91:8a:91: fa:67:65:55:b0:3d:ce:68:73:27:55:39:ce:e0:1a: 38:bc:c4:45:13:d4:6a:79:aa:ac:b1:02:e0:f4:b8: 62:5a:dd:a9:da:09:73:88:bf:46:4d:61:9a:83:1b: 76:54:93:c1:11:d2:f5:23:de:84:f1:3d:dd:62:c5: 53:32:e8:72:50:42:89:15:f8:b6:a3:a9:9c:8c:e5: a1:14:84:8f:5a:aa:0e:f4:be:92:aa:f6:b0:8c:f1: 6d:d3:67:97:a0:3a:b8:f5:44:29:02:00:3c:b8:f4: 1f:c3:06:05:c1:d4:f5:40:1d:4e:a5:f4:c7:32:72: 6e:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:CA:35:76:6D:A8:A0:E4:D6:7A:BE:08:A5:A4:80:3B:FF:1B:C3:9F X509v3 Authority Key Identifier: keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/Rco1dm2ooOTWer4IpaSAO_8bw58.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.79.39.0/24 Signature Algorithm: sha256WithRSAEncryption 06:3f:57:a2:37:6e:7a:92:2a:ed:99:95:e8:b6:0f:e8:2a:af: 46:29:28:0c:0b:99:83:6e:09:91:d9:e3:01:3d:2c:c0:f0:21: ab:b8:be:10:65:06:53:bc:0a:d6:78:5c:8f:98:bc:24:3a:4c: b0:76:a2:7f:7e:cd:83:ae:40:b0:c9:ec:aa:b9:b3:34:45:7e: db:d6:f0:9d:80:59:41:ec:d9:e3:66:0c:e5:6b:1a:a0:7a:7e: 11:0b:50:96:22:38:ed:d5:fd:82:d6:e3:45:06:42:72:6d:5a: 3f:bb:19:f4:84:94:84:11:3d:06:61:d1:5a:ac:2f:9d:1b:cf: 82:93:66:0b:09:78:18:f3:23:c1:9e:78:91:3a:ac:8e:eb:ad: e6:3e:65:ee:34:08:19:3f:12:80:5f:2a:59:31:10:ae:1b:38: bb:88:a4:2e:30:44:23:ae:b0:b0:99:cc:df:7c:03:6a:48:10: cb:ab:83:0c:e8:4b:97:30:53:0c:9c:ad:b9:ca:1b:60:49:47: 4d:b2:c6:94:84:f7:ae:1e:2f:16:d4:33:d8:ef:1d:76:65:31: 31:63:2b:73:eb:65:73:09:da:4e:ff:fd:29:05:e7:dc:90:15: d3:cf:4b:e8:5b:b2:4a:0d:38:94:b7:e0:6d:d0:dc:d8:9a:c7: a7:c2:d1:d9 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fr+aRmQLn65d540Rq3XZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1NDhjZWRmMTcwMjllZDk4YTEwODExM2M2YzEwOWVjYWNj ZDgyZWMwHhcNMjYwMTAxMTIxODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NWNhMzU3NjZkYThhMGU0ZDY3YWJlMDhhNWE0ODAzYmZmMWJjMzlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj1CYiw6vUa97oyv/5VFwCFVO4mHC R+2z4bDMUd3bCIRDCpCoKYczHmuI1huoimDGfq4ryuUiWgmiJcIlQh0VYu5GUuiX ABAEmbyxIcNjpGeR/tgC3ALRsTdRCckLOK8IQEUB7mH85fvDdHeCEaH08Ds343Ko 0zuG+BJ6wlDovmXwPySRipH6Z2VVsD3OaHMnVTnO4Bo4vMRFE9RqeaqssQLg9Lhi Wt2p2glziL9GTWGagxt2VJPBEdL1I96E8T3dYsVTMuhyUEKJFfi2o6mcjOWhFISP WqoO9L6SqvawjPFt02eXoDq49UQpAgA8uPQfwwYFwdT1QB1OpfTHMnJuGwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEXKNXZtqKDk1nq+CKWkgDv/G8OfMB8GA1UdIwQY MBaAFAVIzt8XAp7ZihCBE8bBCeyszYLsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlVqTzN4Y0NudG1LRUlFVHhzRUo3S3pOZ3V3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS81NDFjMDUtOGQ3ZC00MmI4LWFiMDAt N2ZiYmFlNmY5NDM3LzEvUmNvMWRtMm9vT1RXZXI0SXBhU0FPXzhidzU4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS81NDFjMDUtOGQ3ZC00MmI4LWFiMDAtN2ZiYmFlNmY5NDM3 LzEvQlVqTzN4Y0NudG1LRUlFVHhzRUo3S3pOZ3V3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2U8nMA0G CSqGSIb3DQEBCwUAA4IBAQAGP1eiN256kirtmZXotg/oKq9GKSgMC5mDbgmR2eMB PSzA8CGruL4QZQZTvArWeFyPmLwkOkywdqJ/fs2DrkCwyeyqubM0RX7b1vCdgFlB 7NnjZgzlaxqgen4RC1CWIjjt1f2C1uNFBkJybVo/uxn0hJSEET0GYdFarC+dG8+C k2YLCXgY8yPBnniROqyO663mPmXuNAgZPxKAXypZMRCuGzi7iKQuMEQjrrCwmczf fANqSBDLq4MM6EuXMFMMnK25yhtgSUdNssaUhPeuHi8W1DPY7x12ZTExYytz62Vz CdpO//0pBefckBXTz0voW7JKDTiUt+Bt0NzYmsenwtHZ -----END CERTIFICATE-----Generated at Mon Jan 26 06:17:39 2026 by rpki-client