This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fe3f3e-e187-4a12-aa9a-243c5f4e2e40/1/kJXa9fRydrgc3PEgKj6e_ZPgJOw.roa File: kJXa9fRydrgc3PEgKj6e_ZPgJOw.roa (raw, json) Hash identifier: vXw4a1fcUv1ExZN3oTfaxQy9guZhkfoKZDMFzMPNNx0= Subject key identifier: 90:95:DA:F5:F4:72:76:B8:1C:DC:F1:20:2A:3E:9E:FD:93:E0:24:EC Certificate issuer: /CN=a9a815be7547eb870eb5f641d30fe6963741c8e0 Certificate serial: 019B7F831CCBACCEAA85B6149466D8256453 Authority key identifier: A9:A8:15:BE:75:47:EB:87:0E:B5:F6:41:D3:0F:E6:96:37:41:C8:E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qagVvnVH64cOtfZB0w_mljdByOA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fe3f3e-e187-4a12-aa9a-243c5f4e2e40/1/kJXa9fRydrgc3PEgKj6e_ZPgJOw.roa Signing time: Fri 02 Jan 2026 16:20:57 +0000 ROA not before: Fri 02 Jan 2026 16:20:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44215 IP address blocks: 79.99.97.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/fe3f3e-e187-4a12-aa9a-243c5f4e2e40/1/qagVvnVH64cOtfZB0w_mljdByOA.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/fe3f3e-e187-4a12-aa9a-243c5f4e2e40/1/qagVvnVH64cOtfZB0w_mljdByOA.mft rsync://rpki.ripe.net/repository/DEFAULT/qagVvnVH64cOtfZB0w_mljdByOA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:1c:cb:ac:ce:aa:85:b6:14:94:66:d8:25:64:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a9a815be7547eb870eb5f641d30fe6963741c8e0 Validity Not Before: Jan 2 16:20:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9095daf5f47276b81cdcf1202a3e9efd93e024ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:2b:bd:ee:23:fa:5d:6a:bd:5f:e2:d4:06:2b: 58:f1:a6:6b:a7:4c:bb:a5:23:92:33:bc:90:f2:06: d6:41:79:ed:23:10:67:23:3c:45:fc:d6:c2:a3:96: 21:96:96:09:7c:02:da:07:3e:35:26:d1:4b:aa:62: ba:9d:bb:79:a8:35:d5:bb:55:c0:8f:4d:5f:d9:c4: 41:c3:88:8e:8e:2f:9c:8e:90:b9:32:1c:d7:19:26: 8a:2a:6b:74:3d:de:9e:17:7e:8f:2b:34:00:b6:01: 6d:8c:22:49:23:0d:a2:f5:8a:62:d5:f9:7d:68:99: a9:0d:36:1b:4b:99:17:44:cf:03:9b:1a:e5:0f:a3: 5b:cd:9a:de:84:f7:5c:06:71:53:f1:c0:df:87:68: f9:e7:f2:d0:e3:bc:b2:63:fa:7d:7f:8d:1a:a6:24: ac:6b:f8:a5:cd:e7:4b:41:2b:33:44:72:66:9b:52: 16:98:03:98:09:72:34:2b:0c:f7:0a:d7:34:00:b3: 43:cc:0b:f3:09:82:9a:0a:38:6c:1e:a7:9a:79:de: 7f:2b:d0:97:ab:09:1f:c0:65:47:b0:56:5e:bd:42: 3a:6a:8e:40:2b:f5:a3:f4:47:4d:60:70:4f:0c:90: 58:ae:2f:09:76:14:fe:68:6b:1f:de:f1:08:3a:91: 6f:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:95:DA:F5:F4:72:76:B8:1C:DC:F1:20:2A:3E:9E:FD:93:E0:24:EC X509v3 Authority Key Identifier: keyid:A9:A8:15:BE:75:47:EB:87:0E:B5:F6:41:D3:0F:E6:96:37:41:C8:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qagVvnVH64cOtfZB0w_mljdByOA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fe3f3e-e187-4a12-aa9a-243c5f4e2e40/1/kJXa9fRydrgc3PEgKj6e_ZPgJOw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fe3f3e-e187-4a12-aa9a-243c5f4e2e40/1/qagVvnVH64cOtfZB0w_mljdByOA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.99.97.0/24 Signature Algorithm: sha256WithRSAEncryption 24:87:fb:70:e1:91:61:ff:84:9b:2b:a6:e4:93:0f:f3:02:85: da:13:95:b9:2f:0e:52:b8:0e:e8:35:e1:15:e9:40:71:0c:09: 99:99:ed:16:1d:bd:5f:a7:39:eb:d2:ae:2b:a7:6e:77:32:34: 8d:9d:a0:56:4a:b2:37:29:c5:62:2c:47:02:16:95:5c:51:82: 97:ee:a7:e9:4a:d2:0b:ef:ef:ad:4a:4d:4a:35:94:69:f6:50: 26:5f:a3:89:de:e5:15:f3:b4:c4:c0:b9:27:6b:86:63:eb:63: 2b:e0:b2:59:c4:23:3c:33:d5:e3:e2:03:fd:88:b7:87:9d:08: 73:b0:86:2f:e8:51:58:eb:79:c4:a0:d2:95:6e:ab:3d:34:9b: 70:5c:84:64:09:05:d2:43:19:a5:bc:01:27:1a:39:26:d7:62: 32:8b:c9:9b:c5:17:87:f5:79:43:85:61:bd:d8:d6:71:5f:e0: 39:b4:c8:b7:b3:7d:b6:13:9c:fb:a5:c7:bf:83:9f:d1:5d:27: 2a:c6:ef:01:67:98:2f:b2:8e:47:42:51:5b:b2:12:c9:e8:f8: 64:e7:db:6d:71:12:5d:5c:c2:bc:b4:59:7f:29:6e:aa:98:f3: 33:6e:69:99:60:cb:5f:3d:aa:e7:75:a6:48:05:34:df:20:a1: 9c:d6:75:07 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/gxzLrM6qhbYUlGbYJWRTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE5YTgxNWJlNzU0N2ViODcwZWI1ZjY0MWQzMGZlNjk2Mzc0 MWM4ZTAwHhcNMjYwMTAyMTYyMDU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MDk1ZGFmNWY0NzI3NmI4MWNkY2YxMjAyYTNlOWVmZDkzZTAyNGVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0iu97iP6XWq9X+LUBitY8aZrp0y7 pSOSM7yQ8gbWQXntIxBnIzxF/NbCo5YhlpYJfALaBz41JtFLqmK6nbt5qDXVu1XA j01f2cRBw4iOji+cjpC5MhzXGSaKKmt0Pd6eF36PKzQAtgFtjCJJIw2i9Ypi1fl9 aJmpDTYbS5kXRM8DmxrlD6NbzZrehPdcBnFT8cDfh2j55/LQ47yyY/p9f40apiSs a/ilzedLQSszRHJmm1IWmAOYCXI0Kwz3Ctc0ALNDzAvzCYKaCjhsHqeaed5/K9CX qwkfwGVHsFZevUI6ao5AK/Wj9EdNYHBPDJBYri8JdhT+aGsf3vEIOpFvJwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJCV2vX0cna4HNzxICo+nv2T4CTsMB8GA1UdIwQY MBaAFKmoFb51R+uHDrX2QdMP5pY3QcjgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcWFnVnZuVkg2NGNPdGZaQjB3X21samRCeU9BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9mZTNmM2UtZTE4Ny00YTEyLWFhOWEt MjQzYzVmNGUyZTQwLzEva0pYYTlmUnlkcmdjM1BFZ0tqNmVfWlBnSk93LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS9mZTNmM2UtZTE4Ny00YTEyLWFhOWEtMjQzYzVmNGUyZTQw LzEvcWFnVnZuVkg2NGNPdGZaQjB3X21samRCeU9BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAT2NhMA0G CSqGSIb3DQEBCwUAA4IBAQAkh/tw4ZFh/4SbK6bkkw/zAoXaE5W5Lw5SuA7oNeEV 6UBxDAmZme0WHb1fpznr0q4rp253MjSNnaBWSrI3KcViLEcCFpVcUYKX7qfpStIL 7++tSk1KNZRp9lAmX6OJ3uUV87TEwLkna4Zj62Mr4LJZxCM8M9Xj4gP9iLeHnQhz sIYv6FFY63nEoNKVbqs9NJtwXIRkCQXSQxmlvAEnGjkm12Iyi8mbxReH9XlDhWG9 2NZxX+A5tMi3s322E5z7pce/g5/RXScqxu8BZ5gvso5HQlFbshLJ6Phk59ttcRJd XMK8tFl/KW6qmPMzbmmZYMtfParndaZIBTTfIKGc1nUH -----END CERTIFICATE-----Generated at Mon Feb 9 18:30:27 2026 by rpki-client