This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fe3f3e-e187-4a12-aa9a-243c5f4e2e40/1/HyQmJzqnKNsyI3fs8wsXXo5JYlA.roa File: HyQmJzqnKNsyI3fs8wsXXo5JYlA.roa (raw, json) Hash identifier: K4YLNNf5d2hU3VOcsfWG70mXY/0b7/Wb9z62jzKngps= Subject key identifier: 1F:24:26:27:3A:A7:28:DB:32:23:77:EC:F3:0B:17:5E:8E:49:62:50 Certificate issuer: /CN=a9a815be7547eb870eb5f641d30fe6963741c8e0 Certificate serial: 019B7F831C8A775C0955D13AB93E5D937573 Authority key identifier: A9:A8:15:BE:75:47:EB:87:0E:B5:F6:41:D3:0F:E6:96:37:41:C8:E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qagVvnVH64cOtfZB0w_mljdByOA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fe3f3e-e187-4a12-aa9a-243c5f4e2e40/1/HyQmJzqnKNsyI3fs8wsXXo5JYlA.roa Signing time: Fri 02 Jan 2026 16:20:57 +0000 ROA not before: Fri 02 Jan 2026 16:20:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44156 IP address blocks: 79.99.96.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/fe3f3e-e187-4a12-aa9a-243c5f4e2e40/1/qagVvnVH64cOtfZB0w_mljdByOA.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/fe3f3e-e187-4a12-aa9a-243c5f4e2e40/1/qagVvnVH64cOtfZB0w_mljdByOA.mft rsync://rpki.ripe.net/repository/DEFAULT/qagVvnVH64cOtfZB0w_mljdByOA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:1c:8a:77:5c:09:55:d1:3a:b9:3e:5d:93:75:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a9a815be7547eb870eb5f641d30fe6963741c8e0 Validity Not Before: Jan 2 16:20:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1f2426273aa728db322377ecf30b175e8e496250 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:ca:d2:11:20:d6:03:3c:e6:f2:ff:c5:fa:57: 3c:7f:02:a7:74:b3:72:76:dc:b3:91:81:a0:a3:da: e1:ef:70:a0:db:61:ac:d1:e2:ed:11:18:e7:99:be: 48:77:f1:6e:62:53:14:df:3f:32:34:6e:af:32:8e: 11:71:ef:12:49:81:64:ed:36:aa:05:f6:db:49:74: 18:f4:ae:10:09:cd:b6:7e:3f:6e:15:45:59:e0:6c: 0b:d7:56:7d:65:de:8c:87:47:e3:95:8f:62:fe:40: b9:87:1e:84:11:fb:21:cf:72:81:4c:b5:38:29:28: 97:1b:0e:78:c3:d6:bc:75:34:46:c5:0b:60:88:84: cb:15:e1:f6:1e:e6:3b:d9:f2:b8:d6:bd:a3:ef:e7: 67:67:fa:99:b4:d8:a8:69:59:7c:50:c0:29:d7:f4: e8:c4:69:e3:56:1b:bb:53:10:92:31:47:0b:f1:3d: 11:66:fe:7c:aa:d3:ba:7f:3d:50:b3:ea:7f:58:63: 32:44:5f:33:49:38:6e:e7:83:27:5b:03:c2:d0:be: 22:b2:21:db:4c:1a:57:6e:da:78:99:ea:06:7f:7c: ac:bd:f5:bc:d9:73:a7:64:7e:53:e9:4c:b7:84:24: 16:fe:1e:b9:ce:dc:20:11:67:b8:a5:44:02:a6:98: d8:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:24:26:27:3A:A7:28:DB:32:23:77:EC:F3:0B:17:5E:8E:49:62:50 X509v3 Authority Key Identifier: keyid:A9:A8:15:BE:75:47:EB:87:0E:B5:F6:41:D3:0F:E6:96:37:41:C8:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qagVvnVH64cOtfZB0w_mljdByOA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fe3f3e-e187-4a12-aa9a-243c5f4e2e40/1/HyQmJzqnKNsyI3fs8wsXXo5JYlA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fe3f3e-e187-4a12-aa9a-243c5f4e2e40/1/qagVvnVH64cOtfZB0w_mljdByOA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.99.96.0/21 Signature Algorithm: sha256WithRSAEncryption 7e:0b:d9:4e:97:f4:26:7e:9d:dc:fc:de:0f:57:fb:f9:da:76: 92:63:ed:10:dd:d7:58:fc:b8:38:8b:ad:99:aa:be:29:8a:e0: 2e:d7:a6:be:ee:49:ed:7b:00:4e:1d:0b:90:63:22:ea:ee:bc: 28:93:81:49:81:e9:7a:70:73:f2:c4:32:0b:02:0c:db:c4:b5: 88:0e:40:be:92:c9:f6:d6:02:9e:e4:eb:31:d6:94:19:65:c1: a2:05:1d:17:b0:4e:3f:cd:90:34:03:78:f5:1b:d2:ce:9d:0d: b0:b7:2c:38:4a:ed:0f:dc:9a:bc:64:cd:3d:ff:c1:3f:a5:33: 72:c5:90:72:0e:13:1c:b3:10:c1:38:a4:f0:cf:da:f0:e3:92: 14:36:f2:77:12:01:58:f3:0d:5d:42:55:c0:bd:c3:7b:d2:17: 68:1a:9f:cd:e9:99:c8:66:f0:20:28:1e:7d:ef:b3:c6:84:02: 1f:b7:67:90:a5:9b:bf:fb:f3:84:f4:75:1b:ea:ba:dc:19:91: 77:50:23:64:80:4c:ef:df:12:42:a5:19:8a:a7:0f:29:fd:75: be:71:c2:7c:02:07:be:2f:e2:62:8b:fd:32:17:b5:7c:33:83: 5d:36:ca:29:b0:3a:25:59:39:dc:37:f1:9d:70:5b:eb:b2:f2: c3:9b:c3:7c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/gxyKd1wJVdE6uT5dk3VzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE5YTgxNWJlNzU0N2ViODcwZWI1ZjY0MWQzMGZlNjk2Mzc0 MWM4ZTAwHhcNMjYwMTAyMTYyMDU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZjI0MjYyNzNhYTcyOGRiMzIyMzc3ZWNmMzBiMTc1ZThlNDk2MjUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAucrSESDWAzzm8v/F+lc8fwKndLNy dtyzkYGgo9rh73Cg22Gs0eLtERjnmb5Id/FuYlMU3z8yNG6vMo4Rce8SSYFk7Taq BfbbSXQY9K4QCc22fj9uFUVZ4GwL11Z9Zd6Mh0fjlY9i/kC5hx6EEfshz3KBTLU4 KSiXGw54w9a8dTRGxQtgiITLFeH2HuY72fK41r2j7+dnZ/qZtNioaVl8UMAp1/To xGnjVhu7UxCSMUcL8T0RZv58qtO6fz1Qs+p/WGMyRF8zSThu54MnWwPC0L4isiHb TBpXbtp4meoGf3ysvfW82XOnZH5T6Uy3hCQW/h65ztwgEWe4pUQCppjYGQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFB8kJic6pyjbMiN37PMLF16OSWJQMB8GA1UdIwQY MBaAFKmoFb51R+uHDrX2QdMP5pY3QcjgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcWFnVnZuVkg2NGNPdGZaQjB3X21samRCeU9BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9mZTNmM2UtZTE4Ny00YTEyLWFhOWEt MjQzYzVmNGUyZTQwLzEvSHlRbUp6cW5LTnN5STNmczh3c1hYbzVKWWxBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS9mZTNmM2UtZTE4Ny00YTEyLWFhOWEtMjQzYzVmNGUyZTQw LzEvcWFnVnZuVkg2NGNPdGZaQjB3X21samRCeU9BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDT2NgMA0G CSqGSIb3DQEBCwUAA4IBAQB+C9lOl/Qmfp3c/N4PV/v52naSY+0Q3ddY/Lg4i62Z qr4piuAu16a+7kntewBOHQuQYyLq7rwok4FJgel6cHPyxDILAgzbxLWIDkC+ksn2 1gKe5Osx1pQZZcGiBR0XsE4/zZA0A3j1G9LOnQ2wtyw4Su0P3Jq8ZM09/8E/pTNy xZByDhMcsxDBOKTwz9rw45IUNvJ3EgFY8w1dQlXAvcN70hdoGp/N6ZnIZvAgKB59 77PGhAIft2eQpZu/+/OE9HUb6rrcGZF3UCNkgEzv3xJCpRmKpw8p/XW+ccJ8Age+ L+Jii/0yF7V8M4NdNsopsDolWTncN/GdcFvrsvLDm8N8 -----END CERTIFICATE-----Generated at Mon Feb 9 18:30:22 2026 by rpki-client