This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/ywUaJ5-i_WNZS3tI4DzVsKyN0Eg.roa File: ywUaJ5-i_WNZS3tI4DzVsKyN0Eg.roa (raw, json) Hash identifier: 9bLCfXMRiaexM4KppnAgfWdubkKpJM8es61chGsEs9E= Subject key identifier: CB:05:1A:27:9F:A2:FD:63:59:4B:7B:48:E0:3C:D5:B0:AC:8D:D0:48 Certificate issuer: /CN=0548cedf17029ed98a108113c6c109ecaccd82ec Certificate serial: 019B797EC8E0F59C36626F9FB979B7D4D64B Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/ywUaJ5-i_WNZS3tI4DzVsKyN0Eg.roa Signing time: Thu 01 Jan 2026 12:18:30 +0000 ROA not before: Thu 01 Jan 2026 12:18:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197184 IP address blocks: 88.203.248.0/24 maxlen: 24 88.203.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.mft rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:c8:e0:f5:9c:36:62:6f:9f:b9:79:b7:d4:d6:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec Validity Not Before: Jan 1 12:18:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cb051a279fa2fd63594b7b48e03cd5b0ac8dd048 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:5b:64:3a:08:0d:55:d8:dd:f0:b4:43:04:ca: 21:a5:8d:84:df:ed:ec:c4:0e:e3:1d:0a:6f:e8:08: 91:09:03:b9:b1:0b:95:23:ee:8b:a5:22:f9:6f:c3: 51:21:b3:53:87:a3:46:b6:bc:82:c0:6b:f8:11:cd: 32:7c:44:e1:fd:25:7b:b6:29:d0:da:f2:c9:65:12: bf:08:c8:c7:8e:9e:d7:6e:cf:1c:4b:3d:eb:27:8f: 15:ab:eb:52:3f:41:16:ec:84:64:0e:b8:dd:c5:65: fb:3e:6b:e0:e9:b1:f1:b3:9b:09:6b:bc:95:08:2f: e6:dd:f0:b7:d1:43:ee:82:b2:89:bb:53:d7:74:f7: af:60:6d:2b:28:d9:d3:b4:12:b0:db:20:cb:06:d7: 1c:67:10:02:18:a1:87:f5:9d:94:b4:d2:87:8e:d4: 57:73:92:95:5d:49:44:38:5f:01:d5:0f:66:1b:c9: a7:80:9f:88:8e:cf:a5:89:cd:85:25:74:02:17:01: 1c:13:bf:7d:c8:c1:f4:3d:7d:dc:a9:2c:56:5e:60: 19:a0:2f:77:5c:4e:19:26:ee:61:ab:9b:2e:94:65: 8c:64:d1:3f:73:f4:fe:da:28:f7:54:5f:34:26:66: 55:9d:94:5d:9b:2f:8c:b3:90:70:ed:f6:f5:ce:c5: e7:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:05:1A:27:9F:A2:FD:63:59:4B:7B:48:E0:3C:D5:B0:AC:8D:D0:48 X509v3 Authority Key Identifier: keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/ywUaJ5-i_WNZS3tI4DzVsKyN0Eg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 88.203.248.0/23 Signature Algorithm: sha256WithRSAEncryption 04:e4:de:3c:c7:49:ca:83:4c:cf:04:5e:75:fa:58:bf:82:ac: be:d3:66:b2:45:fe:db:52:d2:b2:87:f5:0e:1e:b0:c4:f9:35: be:52:fa:c2:3d:76:85:0e:f6:6c:26:6b:28:86:c1:38:82:57: 3c:41:ea:09:0d:52:4f:a5:86:3b:cb:17:d3:b2:13:01:fd:13: 7e:47:60:86:65:64:b9:ec:cb:61:cc:79:96:80:5f:44:16:a2: b5:ae:d7:b8:de:ce:b5:f6:e2:1d:d0:2e:c7:ce:bf:97:bc:e8: 0c:c7:ae:83:7c:20:3e:37:a2:d0:9f:cd:96:21:de:d2:04:7c: a9:1b:ab:23:9b:7a:c2:61:f2:6a:2b:a9:95:df:60:0d:f5:fe: 36:5a:8e:f8:af:a2:88:6e:bc:ee:59:ae:ab:2f:03:26:75:96: d1:62:84:81:98:e5:00:10:c9:af:b3:af:42:31:32:6c:4e:fe: 91:27:9c:78:f8:7c:b7:62:fa:06:17:17:86:b7:7c:f0:54:8b: 78:6b:76:be:4d:7c:42:d7:89:4e:06:86:77:87:50:a9:48:c1: 5f:74:ac:66:02:b9:3c:08:b3:c0:de:e1:c2:c3:0e:13:b5:e7: e6:9d:83:0e:7e:f5:82:26:b8:30:f1:89:42:16:6e:6f:a7:63: ed:68:b7:23 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fsjg9Zw2Ym+fuXm31NZLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1NDhjZWRmMTcwMjllZDk4YTEwODExM2M2YzEwOWVjYWNj ZDgyZWMwHhcNMjYwMTAxMTIxODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYjA1MWEyNzlmYTJmZDYzNTk0YjdiNDhlMDNjZDViMGFjOGRkMDQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoVtkOggNVdjd8LRDBMohpY2E3+3s xA7jHQpv6AiRCQO5sQuVI+6LpSL5b8NRIbNTh6NGtryCwGv4Ec0yfETh/SV7tinQ 2vLJZRK/CMjHjp7Xbs8cSz3rJ48Vq+tSP0EW7IRkDrjdxWX7Pmvg6bHxs5sJa7yV CC/m3fC30UPugrKJu1PXdPevYG0rKNnTtBKw2yDLBtccZxACGKGH9Z2UtNKHjtRX c5KVXUlEOF8B1Q9mG8mngJ+Ijs+lic2FJXQCFwEcE799yMH0PX3cqSxWXmAZoC93 XE4ZJu5hq5sulGWMZNE/c/T+2ij3VF80JmZVnZRdmy+Ms5Bw7fb1zsXn7wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMsFGiefov1jWUt7SOA81bCsjdBIMB8GA1UdIwQY MBaAFAVIzt8XAp7ZihCBE8bBCeyszYLsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlVqTzN4Y0NudG1LRUlFVHhzRUo3S3pOZ3V3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS81NDFjMDUtOGQ3ZC00MmI4LWFiMDAt N2ZiYmFlNmY5NDM3LzEveXdVYUo1LWlfV05aUzN0STREelZzS3lOMEVnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS81NDFjMDUtOGQ3ZC00MmI4LWFiMDAtN2ZiYmFlNmY5NDM3 LzEvQlVqTzN4Y0NudG1LRUlFVHhzRUo3S3pOZ3V3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBWMv4MA0G CSqGSIb3DQEBCwUAA4IBAQAE5N48x0nKg0zPBF51+li/gqy+02ayRf7bUtKyh/UO HrDE+TW+UvrCPXaFDvZsJmsohsE4glc8QeoJDVJPpYY7yxfTshMB/RN+R2CGZWS5 7MthzHmWgF9EFqK1rte43s619uId0C7Hzr+XvOgMx66DfCA+N6LQn82WId7SBHyp G6sjm3rCYfJqK6mV32AN9f42Wo74r6KIbrzuWa6rLwMmdZbRYoSBmOUAEMmvs69C MTJsTv6RJ5x4+Hy3YvoGFxeGt3zwVIt4a3a+TXxC14lOBoZ3h1CpSMFfdKxmArk8 CLPA3uHCww4TtefmnYMOfvWCJrgw8YlCFm5vp2PtaLcj -----END CERTIFICATE-----Generated at Mon Jan 26 08:39:02 2026 by rpki-client