This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/a6ec71-16e5-4163-a042-317db4232f3b/1/98vr8W__XpPfxKb3oWjSNeB9O4g.roa File: 98vr8W__XpPfxKb3oWjSNeB9O4g.roa (raw, json) Hash identifier: HfCtLcixn47JEXRyfpP8IgjT4+bHM16DwTuzO5zQzKk= Subject key identifier: F7:CB:EB:F1:6F:FF:5E:93:DF:C4:A6:F7:A1:68:D2:35:E0:7D:3B:88 Certificate issuer: /CN=c172e7b96252eea8732633d3ba51a9b05583a7b3 Certificate serial: 019B7F13858EDDBBF36D833B2264044B71D2 Authority key identifier: C1:72:E7:B9:62:52:EE:A8:73:26:33:D3:BA:51:A9:B0:55:83:A7:B3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wXLnuWJS7qhzJjPTulGpsFWDp7M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/a6ec71-16e5-4163-a042-317db4232f3b/1/98vr8W__XpPfxKb3oWjSNeB9O4g.roa Signing time: Fri 02 Jan 2026 14:19:04 +0000 ROA not before: Fri 02 Jan 2026 14:19:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31420 IP address blocks: 193.151.80.0/22 maxlen: 22 193.151.80.0/24 maxlen: 24 193.151.81.0/24 maxlen: 24 193.151.82.0/24 maxlen: 24 193.151.83.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/a6ec71-16e5-4163-a042-317db4232f3b/1/wXLnuWJS7qhzJjPTulGpsFWDp7M.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/a6ec71-16e5-4163-a042-317db4232f3b/1/wXLnuWJS7qhzJjPTulGpsFWDp7M.mft rsync://rpki.ripe.net/repository/DEFAULT/wXLnuWJS7qhzJjPTulGpsFWDp7M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 14:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:13:85:8e:dd:bb:f3:6d:83:3b:22:64:04:4b:71:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c172e7b96252eea8732633d3ba51a9b05583a7b3 Validity Not Before: Jan 2 14:19:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f7cbebf16fff5e93dfc4a6f7a168d235e07d3b88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:80:0b:ab:d6:0c:69:d9:38:e9:88:60:08:f8: 94:2b:75:d4:d5:5e:da:6f:a7:4b:0b:8a:b0:73:e8: 4d:c1:b7:11:8d:32:09:cd:95:70:9c:6a:b3:27:bb: 6c:dd:cb:54:25:a5:33:aa:7c:eb:43:5a:05:91:63: e9:74:64:3d:8a:1b:0d:eb:5f:a6:ad:9e:9a:8a:fd: b4:b4:0e:63:1f:0d:d0:ad:9f:b7:62:96:66:ed:27: 41:bd:9b:7e:21:50:5d:06:33:7a:28:e5:88:9b:d4: 75:30:ad:e1:f0:ab:42:90:e1:89:15:13:e8:de:99: df:e1:f4:95:27:99:56:3d:88:a1:33:33:c8:c2:4b: 0e:a9:42:ac:d9:9b:9f:6e:6c:d0:c9:ef:59:c4:ce: 6d:fa:bb:b7:a3:7b:7a:ec:f8:8e:b7:6d:78:71:27: b5:3c:32:cc:b9:5e:a7:82:21:fb:d1:e8:7e:45:f1: fd:8e:ce:25:b9:98:c4:74:86:4f:a4:cc:20:2e:02: 80:20:6a:fb:59:86:9e:be:b5:ae:4f:f4:0a:0d:3a: cf:1b:df:06:df:08:c2:77:c8:f9:53:53:c0:86:ae: 51:d7:76:b3:1c:63:24:fb:98:86:d7:cd:0f:d0:b1: 14:ac:fb:e4:df:53:2e:76:8b:b4:5f:75:ba:66:8e: 79:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:CB:EB:F1:6F:FF:5E:93:DF:C4:A6:F7:A1:68:D2:35:E0:7D:3B:88 X509v3 Authority Key Identifier: keyid:C1:72:E7:B9:62:52:EE:A8:73:26:33:D3:BA:51:A9:B0:55:83:A7:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wXLnuWJS7qhzJjPTulGpsFWDp7M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a6ec71-16e5-4163-a042-317db4232f3b/1/98vr8W__XpPfxKb3oWjSNeB9O4g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a6ec71-16e5-4163-a042-317db4232f3b/1/wXLnuWJS7qhzJjPTulGpsFWDp7M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.151.80.0/22 Signature Algorithm: sha256WithRSAEncryption a3:32:b5:6e:52:ef:7e:c3:5b:86:af:19:f1:f1:91:02:b3:60: 82:83:10:bc:3c:3a:fa:a8:fb:69:72:ea:41:3d:52:d8:64:19: 45:8c:5d:f7:6c:8e:d5:9f:13:c4:b1:78:3b:ca:40:4c:81:73: 2b:e1:b1:30:83:a8:bd:42:45:55:b0:9d:84:f5:26:4f:53:34: 14:ee:c0:a6:db:82:4e:f8:7a:31:01:63:99:db:2d:ef:52:90: 81:5d:ee:c7:92:12:00:f5:48:7d:34:f3:48:3b:55:d6:f0:22: b4:cc:30:3a:f7:21:bf:40:95:32:4f:ea:c0:e9:e3:41:ab:45: 8f:1f:94:9d:d2:4d:69:a5:65:77:f7:bc:b6:1d:39:1d:82:b9: 7d:e8:75:49:19:c0:d0:dd:ee:b8:3b:fa:ca:78:29:7a:fd:59: fa:6b:0a:78:2c:61:29:df:21:0c:01:16:05:e9:99:00:93:9e: 26:08:98:14:23:20:31:51:b9:7f:ca:ae:b6:2f:93:79:aa:d3: 09:68:1f:da:bc:64:79:8d:21:16:8f:29:d5:74:2d:21:5b:ef: 8c:c5:dd:ae:3a:e2:e4:74:a9:4d:33:6d:ee:1e:7d:74:98:9b: 05:86:31:82:58:41:a9:0f:8b:bf:88:33:b4:04:c4:1d:3e:f4: 28:3f:51:a5 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/E4WO3bvzbYM7ImQES3HSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxNzJlN2I5NjI1MmVlYTg3MzI2MzNkM2JhNTFhOWIwNTU4 M2E3YjMwHhcNMjYwMTAyMTQxOTA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmN2NiZWJmMTZmZmY1ZTkzZGZjNGE2ZjdhMTY4ZDIzNWUwN2QzYjg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs4ALq9YMadk46YhgCPiUK3XU1V7a b6dLC4qwc+hNwbcRjTIJzZVwnGqzJ7ts3ctUJaUzqnzrQ1oFkWPpdGQ9ihsN61+m rZ6aiv20tA5jHw3QrZ+3YpZm7SdBvZt+IVBdBjN6KOWIm9R1MK3h8KtCkOGJFRPo 3pnf4fSVJ5lWPYihMzPIwksOqUKs2ZufbmzQye9ZxM5t+ru3o3t67PiOt214cSe1 PDLMuV6ngiH70eh+RfH9js4luZjEdIZPpMwgLgKAIGr7WYaevrWuT/QKDTrPG98G 3wjCd8j5U1PAhq5R13azHGMk+5iG180P0LEUrPvk31Mudou0X3W6Zo55LQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPfL6/Fv/16T38Sm96Fo0jXgfTuIMB8GA1UdIwQY MBaAFMFy57liUu6ocyYz07pRqbBVg6ezMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd1hMbnVXSlM3cWh6SmpQVHVsR3BzRldEcDdNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9hNmVjNzEtMTZlNS00MTYzLWEwNDIt MzE3ZGI0MjMyZjNiLzEvOTh2cjhXX19YcFBmeEtiM29XalNOZUI5TzRnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi9hNmVjNzEtMTZlNS00MTYzLWEwNDItMzE3ZGI0MjMyZjNi LzEvd1hMbnVXSlM3cWh6SmpQVHVsR3BzRldEcDdNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwZdQMA0G CSqGSIb3DQEBCwUAA4IBAQCjMrVuUu9+w1uGrxnx8ZECs2CCgxC8PDr6qPtpcupB PVLYZBlFjF33bI7VnxPEsXg7ykBMgXMr4bEwg6i9QkVVsJ2E9SZPUzQU7sCm24JO +HoxAWOZ2y3vUpCBXe7HkhIA9Uh9NPNIO1XW8CK0zDA69yG/QJUyT+rA6eNBq0WP H5Sd0k1ppWV397y2HTkdgrl96HVJGcDQ3e64O/rKeCl6/Vn6awp4LGEp3yEMARYF 6ZkAk54mCJgUIyAxUbl/yq62L5N5qtMJaB/avGR5jSEWjynVdC0hW++Mxd2uOuLk dKlNM23uHn10mJsFhjGCWEGpD4u/iDO0BMQdPvQoP1Gl -----END CERTIFICATE-----Generated at Fri Jan 23 21:35:27 2026 by rpki-client