This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/rvH0Zsh_F8tYjDlpuk7owtk_uuU.roa File: rvH0Zsh_F8tYjDlpuk7owtk_uuU.roa (raw, json) Hash identifier: ViFhufBwCYCmEaGbjX8i/bw4O4CmCjh3b+NvnaJUAz4= Subject key identifier: AE:F1:F4:66:C8:7F:17:CB:58:8C:39:69:BA:4E:E8:C2:D9:3F:BA:E5 Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722 Certificate serial: 019B7B356307428D8B492D103C1F79443D9A Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/rvH0Zsh_F8tYjDlpuk7owtk_uuU.roa Signing time: Thu 01 Jan 2026 20:17:34 +0000 ROA not before: Thu 01 Jan 2026 20:17:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25103 IP address blocks: 80.96.234.0/24 maxlen: 24 80.96.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:63:07:42:8d:8b:49:2d:10:3c:1f:79:44:3d:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722 Validity Not Before: Jan 1 20:17:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=aef1f466c87f17cb588c3969ba4ee8c2d93fbae5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:73:fa:38:23:34:0f:a4:99:2c:b6:d9:ec:35: 8a:a9:2b:30:d6:f3:07:69:40:60:a2:be:5c:ab:19: d9:cf:c2:55:95:d7:c3:8c:d4:1b:14:1d:de:0d:3e: 8c:fb:4a:08:e9:6f:7d:6a:93:3c:6b:a8:23:1b:3b: de:47:54:b7:f0:bc:a6:ff:cc:6b:0b:26:2b:bc:b6: 78:19:29:15:d6:f1:5a:fb:5c:9d:ef:84:5c:05:12: 51:09:36:5c:dc:8d:6a:b6:60:61:ad:e8:8e:a5:96: 46:80:e9:c8:ea:77:a2:17:f9:e6:12:37:dd:7b:37: 9a:08:f4:22:7e:a8:e8:ce:93:42:17:d7:6f:d1:a5: 98:49:e4:4e:ed:bb:d5:73:a6:64:08:e2:f4:0c:74: 36:9e:21:32:4e:a3:0f:21:80:0e:6e:b6:08:02:51: df:5c:2b:74:94:df:59:bf:1f:4e:66:97:eb:62:86: 87:e1:1f:44:25:2c:ce:62:f7:a2:fe:ee:4f:11:41: 3c:67:69:12:e0:22:08:ed:14:5b:78:a1:ac:1d:48: de:52:64:29:3b:10:97:2a:33:6d:ea:74:fa:63:af: 09:2a:b5:96:2f:92:75:3b:07:23:d1:df:4e:79:de: 7d:ae:99:09:f8:8e:f5:81:46:a9:79:8b:ba:0c:ce: 49:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:F1:F4:66:C8:7F:17:CB:58:8C:39:69:BA:4E:E8:C2:D9:3F:BA:E5 X509v3 Authority Key Identifier: keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/rvH0Zsh_F8tYjDlpuk7owtk_uuU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.96.234.0/24 80.96.247.0/24 Signature Algorithm: sha256WithRSAEncryption 4f:26:6e:ee:0d:3d:e8:9d:4c:77:45:64:48:fd:be:f8:9d:e9: 61:b6:d5:06:c0:49:10:5a:af:53:1a:f2:87:fa:6c:6d:73:4f: b8:75:bb:94:83:a6:d3:8b:ce:75:6c:16:88:61:df:b0:16:6f: 65:79:8c:3c:84:a8:02:78:ac:83:8f:de:4a:d0:2f:96:c7:d5: 8b:9b:46:2e:7e:9f:40:e6:2a:a0:8e:a8:6f:50:92:ac:a6:4a: bd:d0:24:f1:a2:a6:81:b1:78:42:df:16:7f:70:aa:af:73:5f: 9b:e0:0f:1a:dc:82:6a:96:0d:a3:cc:c1:e7:5e:ed:93:c1:00: 89:22:00:0d:49:c9:f1:bc:1d:cd:ef:2e:18:85:34:f8:4b:0c: 32:2a:ce:4e:19:00:d7:80:9e:18:df:30:6d:a4:f9:62:d7:f5: 81:77:de:6a:ff:f9:72:04:a0:ae:67:9d:81:49:08:d1:ba:7d: 76:39:11:a4:bb:94:dd:f9:78:e2:55:51:41:e7:34:b5:94:d2: 3e:c1:be:1a:7e:c6:f7:68:af:44:87:5b:73:92:43:8d:2a:40: 06:5f:78:4c:02:2f:6f:bf:3c:ad:05:97:0b:66:1a:de:33:70: 41:05:68:94:19:a1:ed:c5:5f:3b:53:23:c9:6b:6f:b5:cd:6a: 86:ec:63:d5 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt7NWMHQo2LSS0QPB95RD2aMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxODM3ODU5MTZjZDk4ZDdjNzcwZDY4NTE0NTQ5OWE4YTBh MTU3MjIwHhcNMjYwMTAxMjAxNzM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZWYxZjQ2NmM4N2YxN2NiNTg4YzM5NjliYTRlZThjMmQ5M2ZiYWU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAinP6OCM0D6SZLLbZ7DWKqSsw1vMH aUBgor5cqxnZz8JVldfDjNQbFB3eDT6M+0oI6W99apM8a6gjGzveR1S38Lym/8xr CyYrvLZ4GSkV1vFa+1yd74RcBRJRCTZc3I1qtmBhreiOpZZGgOnI6neiF/nmEjfd ezeaCPQifqjozpNCF9dv0aWYSeRO7bvVc6ZkCOL0DHQ2niEyTqMPIYAObrYIAlHf XCt0lN9Zvx9OZpfrYoaH4R9EJSzOYvei/u5PEUE8Z2kS4CII7RRbeKGsHUjeUmQp OxCXKjNt6nT6Y68JKrWWL5J1Owcj0d9Oed59rpkJ+I71gUapeYu6DM5JOQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFK7x9GbIfxfLWIw5abpO6MLZP7rlMB8GA1UdIwQY MBaAFDGDeFkWzZjXx3DWhRRUmaigoVciMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEt ZjUyYzQ3YzIyNWRiLzEvcnZIMFpzaF9GOHRZakRscHVrN293dGtfdXVVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEtZjUyYzQ3YzIyNWRi LzEvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAUGDqAwQA UGD3MA0GCSqGSIb3DQEBCwUAA4IBAQBPJm7uDT3onUx3RWRI/b74nelhttUGwEkQ Wq9TGvKH+mxtc0+4dbuUg6bTi851bBaIYd+wFm9leYw8hKgCeKyDj95K0C+Wx9WL m0Yufp9A5iqgjqhvUJKspkq90CTxoqaBsXhC3xZ/cKqvc1+b4A8a3IJqlg2jzMHn Xu2TwQCJIgANScnxvB3N7y4YhTT4SwwyKs5OGQDXgJ4Y3zBtpPli1/WBd95q//ly BKCuZ52BSQjRun12ORGku5Td+XjiVVFB5zS1lNI+wb4afsb3aK9Eh1tzkkONKkAG X3hMAi9vvzytBZcLZhreM3BBBWiUGaHtxV87UyPJa2+1zWqG7GPV -----END CERTIFICATE-----Generated at Tue Jan 20 02:49:06 2026 by rpki-client