This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/8a22f1-e4ff-4469-82eb-d30ea968bfa7/1/96LYOeOZrfhBfF0aYpvHmgR3_EI.roa File: 96LYOeOZrfhBfF0aYpvHmgR3_EI.roa (raw, json) Hash identifier: cZrj9IEY9V0hY5ejfic9+qWXj8uAu/BE+c5uGfFzBJY= Subject key identifier: F7:A2:D8:39:E3:99:AD:F8:41:7C:5D:1A:62:9B:C7:9A:04:77:FC:42 Certificate issuer: /CN=7e9360205b48af4954566314230e6b1296d9aec4 Certificate serial: 019BC56B406B7C2F0CEC550854ED9EAE9692 Authority key identifier: 7E:93:60:20:5B:48:AF:49:54:56:63:14:23:0E:6B:12:96:D9:AE:C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fpNgIFtIr0lUVmMUIw5rEpbZrsQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/8a22f1-e4ff-4469-82eb-d30ea968bfa7/1/96LYOeOZrfhBfF0aYpvHmgR3_EI.roa Signing time: Fri 16 Jan 2026 06:08:18 +0000 ROA not before: Fri 16 Jan 2026 06:08:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215463 IP address blocks: 193.138.97.0/24 maxlen: 24 217.70.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/8a22f1-e4ff-4469-82eb-d30ea968bfa7/1/fpNgIFtIr0lUVmMUIw5rEpbZrsQ.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/8a22f1-e4ff-4469-82eb-d30ea968bfa7/1/fpNgIFtIr0lUVmMUIw5rEpbZrsQ.mft rsync://rpki.ripe.net/repository/DEFAULT/fpNgIFtIr0lUVmMUIw5rEpbZrsQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:c5:6b:40:6b:7c:2f:0c:ec:55:08:54:ed:9e:ae:96:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e9360205b48af4954566314230e6b1296d9aec4 Validity Not Before: Jan 16 06:08:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f7a2d839e399adf8417c5d1a629bc79a0477fc42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:89:06:17:f0:12:3d:5c:6a:54:e3:3e:74:42: 76:6a:8f:38:b5:16:55:f3:3e:1c:7a:9a:c3:b5:8d: 97:58:96:c0:b6:3e:fc:2a:1d:b9:70:e3:2b:a6:ff: 28:4a:85:13:cf:99:75:d9:9b:f3:0b:81:48:cb:ef: ae:95:be:99:45:f8:85:d0:85:42:10:ec:24:40:b1: c2:bb:51:04:0c:27:fe:bf:1d:68:5c:0a:32:12:e3: 1e:86:76:f4:51:b5:0a:30:51:a0:0b:00:bb:81:2f: 5b:55:2c:6a:80:53:29:31:21:8f:ce:0b:79:d2:b0: 93:55:56:0c:19:0e:70:7a:90:57:ea:3a:a8:7f:03: 85:23:36:9f:f9:47:db:74:e6:92:ae:fa:70:5f:d8: 8f:6a:fd:56:33:cb:27:b3:87:df:a2:a0:b6:07:f7: 9c:42:5f:50:cf:13:99:80:3c:e6:21:d1:0f:1b:85: 8b:23:e0:53:f9:aa:31:ef:3c:24:5b:a3:88:64:52: 6f:0e:c9:91:39:c3:f8:8e:80:60:86:54:79:e7:f2: 0e:96:fb:64:f7:74:f3:ac:75:3c:e0:60:0a:0d:4f: 80:a6:8f:17:a6:d1:37:72:9a:bf:78:23:6c:0f:cb: f2:57:71:0a:97:01:a3:72:2f:db:d1:2a:9a:64:b8: 79:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:A2:D8:39:E3:99:AD:F8:41:7C:5D:1A:62:9B:C7:9A:04:77:FC:42 X509v3 Authority Key Identifier: keyid:7E:93:60:20:5B:48:AF:49:54:56:63:14:23:0E:6B:12:96:D9:AE:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fpNgIFtIr0lUVmMUIw5rEpbZrsQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/8a22f1-e4ff-4469-82eb-d30ea968bfa7/1/96LYOeOZrfhBfF0aYpvHmgR3_EI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/8a22f1-e4ff-4469-82eb-d30ea968bfa7/1/fpNgIFtIr0lUVmMUIw5rEpbZrsQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.138.97.0/24 217.70.4.0/24 Signature Algorithm: sha256WithRSAEncryption 06:9e:eb:95:57:05:8a:5a:5a:7a:6e:3b:e4:f9:6e:19:8b:c8: 79:9c:f6:28:5f:54:40:7e:43:c5:d4:d7:20:90:ce:14:de:10: 1b:9a:21:e1:14:70:31:78:df:d6:8e:53:f5:42:85:39:c6:df: 74:c4:11:3e:53:7f:d0:7f:ba:34:c1:e3:d6:64:7a:b4:d9:90: 30:1d:9e:f8:e9:4f:c9:c0:fd:cc:13:91:aa:5e:ed:c9:5e:e1: e1:d0:68:48:58:0c:41:ed:e3:84:68:e5:49:88:62:5b:6c:4d: 90:0d:1a:98:d0:4f:2a:36:d6:cc:58:9f:e3:3b:16:31:cd:35: 35:41:25:0b:30:d1:c7:b7:11:98:97:b5:b4:54:c3:f1:85:1b: 23:03:a9:9c:7c:de:04:67:70:18:86:42:dc:4b:fb:2e:02:cb: a0:ec:47:ee:81:47:d5:8f:d6:f0:f6:bd:c1:64:31:a4:ac:23: 3d:89:b3:69:ae:21:aa:2f:58:aa:09:4d:7c:b9:d2:fa:a4:cf: 15:d3:66:0a:17:d6:9f:d3:02:09:e6:85:75:ac:bb:0f:d1:5e: 52:8f:26:c2:7b:6b:43:78:b7:4e:82:2b:1c:26:77:32:6b:1b: 92:f7:fc:ec:0a:f5:b3:c8:9f:1e:b4:28:6f:cc:8c:0e:a8:a5: 56:65:17:80 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZvFa0BrfC8M7FUIVO2erpaSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlOTM2MDIwNWI0OGFmNDk1NDU2NjMxNDIzMGU2YjEyOTZk OWFlYzQwHhcNMjYwMTE2MDYwODE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmN2EyZDgzOWUzOTlhZGY4NDE3YzVkMWE2MjliYzc5YTA0NzdmYzQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz4kGF/ASPVxqVOM+dEJ2ao84tRZV 8z4ceprDtY2XWJbAtj78Kh25cOMrpv8oSoUTz5l12ZvzC4FIy++ulb6ZRfiF0IVC EOwkQLHCu1EEDCf+vx1oXAoyEuMehnb0UbUKMFGgCwC7gS9bVSxqgFMpMSGPzgt5 0rCTVVYMGQ5wepBX6jqofwOFIzaf+UfbdOaSrvpwX9iPav1WM8sns4ffoqC2B/ec Ql9QzxOZgDzmIdEPG4WLI+BT+aox7zwkW6OIZFJvDsmROcP4joBghlR55/IOlvtk 93TzrHU84GAKDU+Apo8XptE3cpq/eCNsD8vyV3EKlwGjci/b0SqaZLh56QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFPei2Dnjma34QXxdGmKbx5oEd/xCMB8GA1UdIwQY MBaAFH6TYCBbSK9JVFZjFCMOaxKW2a7EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZnBOZ0lGdElyMGxVVm1NVUl3NXJFcGJacnNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS84YTIyZjEtZTRmZi00NDY5LTgyZWIt ZDMwZWE5NjhiZmE3LzEvOTZMWU9lT1pyZmhCZkYwYVlwdkhtZ1IzX0VJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS84YTIyZjEtZTRmZi00NDY5LTgyZWItZDMwZWE5NjhiZmE3 LzEvZnBOZ0lGdElyMGxVVm1NVUl3NXJFcGJacnNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwYphAwQA 2UYEMA0GCSqGSIb3DQEBCwUAA4IBAQAGnuuVVwWKWlp6bjvk+W4Zi8h5nPYoX1RA fkPF1NcgkM4U3hAbmiHhFHAxeN/WjlP1QoU5xt90xBE+U3/Qf7o0wePWZHq02ZAw HZ746U/JwP3ME5GqXu3JXuHh0GhIWAxB7eOEaOVJiGJbbE2QDRqY0E8qNtbMWJ/j OxYxzTU1QSULMNHHtxGYl7W0VMPxhRsjA6mcfN4EZ3AYhkLcS/suAsug7EfugUfV j9bw9r3BZDGkrCM9ibNpriGqL1iqCU18udL6pM8V02YKF9af0wIJ5oV1rLsP0V5S jybCe2tDeLdOgiscJncyaxuS9/zsCvWzyJ8etChvzIwOqKVWZReA -----END CERTIFICATE-----Generated at Tue Feb 10 00:02:10 2026 by rpki-client