This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/97SNWyMUYRiDeG9n1N95AncRQnk.roa File: 97SNWyMUYRiDeG9n1N95AncRQnk.roa (raw, json) Hash identifier: nI2lxusT43e2HGHQlJ+OS4ZlLDLuDOW3fSKQ9vYde5w= Subject key identifier: F7:B4:8D:5B:23:14:61:18:83:78:6F:67:D4:DF:79:02:77:11:42:79 Certificate issuer: /CN=1e9fdc7fb39ebbbed4ee54f703d3ac6153ddee69 Certificate serial: 019B7AC80EE8E18DFD4031BF6101FB31A54C Authority key identifier: 1E:9F:DC:7F:B3:9E:BB:BE:D4:EE:54:F7:03:D3:AC:61:53:DD:EE:69 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/97SNWyMUYRiDeG9n1N95AncRQnk.roa Signing time: Thu 01 Jan 2026 18:18:09 +0000 ROA not before: Thu 01 Jan 2026 18:18:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216127 IP address blocks: 185.221.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.crl rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.mft rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 12:01:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:0e:e8:e1:8d:fd:40:31:bf:61:01:fb:31:a5:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e9fdc7fb39ebbbed4ee54f703d3ac6153ddee69 Validity Not Before: Jan 1 18:18:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f7b48d5b2314611883786f67d4df790277114279 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:12:c8:d8:ae:2d:5b:83:0a:40:f4:bf:f2:f6: 15:9f:dc:74:df:73:db:91:70:75:ec:2a:71:21:7c: 28:4a:d2:97:0d:13:78:93:51:b0:15:bb:0b:56:1a: 84:4a:d9:f1:13:73:bf:40:a4:c3:89:18:65:6a:0d: 54:73:e3:d1:a1:3f:8f:ed:6d:cd:fb:27:2f:c1:ae: 36:be:80:19:e2:11:d8:bd:04:5f:c8:a9:c3:62:45: 8c:d3:b2:ba:37:5a:dc:2f:07:8e:40:f5:b3:5d:71: e1:fb:e7:20:74:29:34:7c:ab:5d:5c:fc:f4:54:c7: db:76:e8:60:b6:f5:e8:dd:77:8e:37:dd:52:07:74: 36:f9:40:d9:fe:c8:10:86:16:b0:13:b6:3c:4e:8b: 56:35:2e:26:b4:29:57:ca:4d:96:81:7b:48:d2:ae: ff:ca:a7:a8:6f:2c:0c:e6:ae:5a:22:53:df:ed:d5: 96:3f:f3:b3:03:2c:62:13:ea:21:cb:dc:81:b1:55: aa:f3:34:8b:32:eb:a6:49:05:6d:53:a3:0d:b3:f9: 6d:7c:f8:9a:f4:65:77:f2:7a:2d:a7:c2:de:f4:28: e3:f7:76:08:9a:d8:06:95:d1:e7:9a:17:93:f5:6e: d9:c9:df:f5:21:77:13:a6:e8:8e:0e:4b:71:3e:31: 59:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:B4:8D:5B:23:14:61:18:83:78:6F:67:D4:DF:79:02:77:11:42:79 X509v3 Authority Key Identifier: keyid:1E:9F:DC:7F:B3:9E:BB:BE:D4:EE:54:F7:03:D3:AC:61:53:DD:EE:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/97SNWyMUYRiDeG9n1N95AncRQnk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.221.198.0/24 Signature Algorithm: sha256WithRSAEncryption 13:ad:78:d4:73:0c:ef:9a:7b:49:c4:6a:d5:67:8d:06:ee:d4: 4f:62:13:e4:ab:1f:88:49:f5:43:b1:7c:2e:98:a3:b7:fc:e2: e0:69:8b:d5:6d:8b:b4:a0:f4:33:08:45:bc:0d:47:58:fe:d3: 2e:76:9a:59:88:68:49:28:87:4b:ae:91:8b:1b:79:70:a8:be: c8:8b:93:80:61:cd:4c:e4:0f:62:7e:f5:d5:e1:44:51:f8:07: d4:15:50:50:3c:3e:a4:69:80:af:38:4e:c8:ba:cf:1c:b5:77: 0e:82:a1:36:e8:58:eb:6f:5a:74:7a:c3:f4:13:f3:18:f9:77: e0:a7:64:f6:2f:be:0e:89:78:fc:27:2d:87:1f:4a:b5:e9:48: 1c:ad:7b:05:18:4d:77:cb:09:5f:11:6a:e4:54:aa:ee:c6:df: e6:18:ce:0b:9a:6c:a0:a8:72:fb:84:d1:c9:0b:e4:95:d3:f1: 0a:bb:5e:82:b9:a7:a2:ab:0f:71:ee:50:fb:05:32:c4:c9:b0: 60:ad:f4:f0:ec:11:16:dd:d1:31:1f:38:1b:4b:3b:7d:f2:99: 6a:47:d5:f8:30:b3:49:d8:55:a3:01:68:85:6e:4a:3b:70:d3: b9:30:c3:cc:39:82:8d:ff:75:5f:ba:7b:d1:fd:26:cb:f1:2d: 58:0a:88:99 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yA7o4Y39QDG/YQH7MaVMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlOWZkYzdmYjM5ZWJiYmVkNGVlNTRmNzAzZDNhYzYxNTNk ZGVlNjkwHhcNMjYwMTAxMTgxODA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmN2I0OGQ1YjIzMTQ2MTE4ODM3ODZmNjdkNGRmNzkwMjc3MTE0Mjc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjRLI2K4tW4MKQPS/8vYVn9x033Pb kXB17CpxIXwoStKXDRN4k1GwFbsLVhqEStnxE3O/QKTDiRhlag1Uc+PRoT+P7W3N +ycvwa42voAZ4hHYvQRfyKnDYkWM07K6N1rcLweOQPWzXXHh++cgdCk0fKtdXPz0 VMfbduhgtvXo3XeON91SB3Q2+UDZ/sgQhhawE7Y8TotWNS4mtClXyk2WgXtI0q7/ yqeobywM5q5aIlPf7dWWP/OzAyxiE+ohy9yBsVWq8zSLMuumSQVtU6MNs/ltfPia 9GV38notp8Le9Cjj93YImtgGldHnmheT9W7Zyd/1IXcTpuiODktxPjFZfwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPe0jVsjFGEYg3hvZ9TfeQJ3EUJ5MB8GA1UdIwQY MBaAFB6f3H+znru+1O5U9wPTrGFT3e5pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSHBfY2Y3T2V1NzdVN2xUM0E5T3NZVlBkN21rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS80MGZkZDEtMTA5Mi00ZjY5LWI2NDgt NjkxZmY1YjQ0YjAxLzEvOTdTTld5TVVZUmlEZUc5bjFOOTVBbmNSUW5rLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS80MGZkZDEtMTA5Mi00ZjY5LWI2NDgtNjkxZmY1YjQ0YjAx LzEvSHBfY2Y3T2V1NzdVN2xUM0E5T3NZVlBkN21rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAud3GMA0G CSqGSIb3DQEBCwUAA4IBAQATrXjUcwzvmntJxGrVZ40G7tRPYhPkqx+ISfVDsXwu mKO3/OLgaYvVbYu0oPQzCEW8DUdY/tMudppZiGhJKIdLrpGLG3lwqL7Ii5OAYc1M 5A9ifvXV4URR+AfUFVBQPD6kaYCvOE7Ius8ctXcOgqE26Fjrb1p0esP0E/MY+Xfg p2T2L74OiXj8Jy2HH0q16UgcrXsFGE13ywlfEWrkVKruxt/mGM4LmmygqHL7hNHJ C+SV0/EKu16Cuaeiqw9x7lD7BTLEybBgrfTw7BEW3dExHzgbSzt98plqR9X4MLNJ 2FWjAWiFbko7cNO5MMPMOYKN/3VfunvR/SbL8S1YCoiZ -----END CERTIFICATE-----Generated at Tue Jan 20 17:24:52 2026 by rpki-client