This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/32441e-5e9b-4a32-8cc4-1eb75bb68233/1/CaPA7Wbe9cDl6wXe5894ncFK1jQ.roa File: CaPA7Wbe9cDl6wXe5894ncFK1jQ.roa (raw, json) Hash identifier: P8wfVUsJaZ53GQVWp0JenO6tbrEXgFSMeFb1uzEMGrE= Subject key identifier: 09:A3:C0:ED:66:DE:F5:C0:E5:EB:05:DE:E7:CF:78:9D:C1:4A:D6:34 Certificate issuer: /CN=f97f69ed26c2e4687dbab2e6c6cca88d17c4c332 Certificate serial: 019B7AC7FA2CAA1B30833FE10ABBF7B9D327 Authority key identifier: F9:7F:69:ED:26:C2:E4:68:7D:BA:B2:E6:C6:CC:A8:8D:17:C4:C3:32 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-X9p7SbC5Gh9urLmxsyojRfEwzI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/32441e-5e9b-4a32-8cc4-1eb75bb68233/1/CaPA7Wbe9cDl6wXe5894ncFK1jQ.roa Signing time: Thu 01 Jan 2026 18:18:04 +0000 ROA not before: Thu 01 Jan 2026 18:18:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47347 IP address blocks: 79.142.32.0/23 maxlen: 23 2a01:7b40::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/32441e-5e9b-4a32-8cc4-1eb75bb68233/1/1-X9p7SbC5Gh9urLmxsyojRfEwzI.crl rsync://rpki.ripe.net/repository/DEFAULT/66/32441e-5e9b-4a32-8cc4-1eb75bb68233/1/1-X9p7SbC5Gh9urLmxsyojRfEwzI.mft rsync://rpki.ripe.net/repository/DEFAULT/1-X9p7SbC5Gh9urLmxsyojRfEwzI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:fa:2c:aa:1b:30:83:3f:e1:0a:bb:f7:b9:d3:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f97f69ed26c2e4687dbab2e6c6cca88d17c4c332 Validity Not Before: Jan 1 18:18:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=09a3c0ed66def5c0e5eb05dee7cf789dc14ad634 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:12:9c:86:2f:d8:5b:87:d5:07:d3:0c:84:10: 88:27:5d:f2:ab:b6:88:4b:c3:f8:cd:62:6b:0e:09: 46:b4:12:ff:40:c4:e0:b3:6b:ea:48:00:48:c4:0a: 54:78:18:27:80:49:41:6e:df:67:25:af:c2:39:b0: fb:1c:d7:69:ed:ec:df:de:7b:c5:9d:b5:7c:45:aa: 96:83:b5:c7:e6:ea:30:06:ac:ce:6d:1a:e3:c5:57: af:0e:28:80:72:91:13:34:32:68:fe:86:e9:24:08: 66:1c:00:77:ca:92:39:98:8b:93:2a:e5:f9:d2:43: 31:4a:09:2a:3c:1f:d4:62:47:52:81:00:06:52:03: ea:ec:94:90:d7:5c:01:bb:56:30:65:b3:6c:1e:98: b4:41:38:b1:78:7c:61:72:41:d9:03:f2:f9:c8:73: 14:20:25:f0:9a:32:9f:ef:0f:6e:e1:49:83:b2:c0: ad:9c:28:91:23:39:20:00:ab:3d:02:dd:9e:2a:3a: b7:cc:a7:c9:29:21:c2:e9:b3:4e:d7:6d:e8:48:dd: 55:f0:a5:e6:b5:e9:74:7e:cd:00:f8:6e:df:a2:bc: f9:07:04:c6:8b:84:81:0a:4f:82:12:6c:96:f3:0d: 72:f0:4d:4c:c3:9b:12:bd:6a:78:b9:e2:05:46:11: e0:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:A3:C0:ED:66:DE:F5:C0:E5:EB:05:DE:E7:CF:78:9D:C1:4A:D6:34 X509v3 Authority Key Identifier: keyid:F9:7F:69:ED:26:C2:E4:68:7D:BA:B2:E6:C6:CC:A8:8D:17:C4:C3:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-X9p7SbC5Gh9urLmxsyojRfEwzI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/32441e-5e9b-4a32-8cc4-1eb75bb68233/1/CaPA7Wbe9cDl6wXe5894ncFK1jQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/32441e-5e9b-4a32-8cc4-1eb75bb68233/1/1-X9p7SbC5Gh9urLmxsyojRfEwzI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.142.32.0/23 IPv6: 2a01:7b40::/32 Signature Algorithm: sha256WithRSAEncryption 64:58:6f:da:67:c7:19:d2:ab:4c:9d:28:4a:79:13:74:67:b3: a9:34:7f:9e:ca:5d:c7:6c:7e:71:45:86:bf:74:25:d9:a8:34: cc:5c:bb:f8:64:5f:c7:63:3e:76:69:b8:e9:ba:51:8c:0b:2f: ce:d6:a7:7d:ce:fc:71:df:36:19:94:fb:22:72:25:97:df:20: 64:84:b0:1c:a4:7f:23:06:85:21:d1:a4:b4:1a:55:87:ca:06: 3b:cd:a1:56:b0:e0:1d:15:cd:45:3a:e3:6e:b0:1c:5f:ca:48: da:22:cd:96:08:e3:66:29:78:32:aa:06:76:ae:fc:2e:8b:15: 84:b8:2f:3e:a7:47:53:13:f9:5a:f4:95:88:8b:d5:6f:e8:8f: f0:c0:b9:2e:b1:0e:e6:e3:ae:c7:d4:27:08:8c:83:bb:5e:29: d9:dc:a0:8a:cd:f2:4d:02:f3:ca:27:bd:13:e6:d7:46:e8:a7: a1:ea:fb:3a:34:3b:00:84:c0:bc:3f:35:5a:d1:c5:b6:66:f5: 79:96:b7:61:68:67:53:86:fa:0c:70:54:89:b3:67:7b:ea:60: 16:90:7f:47:7e:8f:35:6f:eb:a3:f5:55:41:3e:46:a6:ea:44: b2:5b:44:9a:f1:3a:a9:59:ed:85:80:79:e3:d1:8f:26:73:7f: 70:b6:a6:fc -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt6x/osqhswgz/hCrv3udMnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY5N2Y2OWVkMjZjMmU0Njg3ZGJhYjJlNmM2Y2NhODhkMTdj NGMzMzIwHhcNMjYwMTAxMTgxODA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwOWEzYzBlZDY2ZGVmNWMwZTVlYjA1ZGVlN2NmNzg5ZGMxNGFkNjM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxRKchi/YW4fVB9MMhBCIJ13yq7aI S8P4zWJrDglGtBL/QMTgs2vqSABIxApUeBgngElBbt9nJa/CObD7HNdp7ezf3nvF nbV8RaqWg7XH5uowBqzObRrjxVevDiiAcpETNDJo/obpJAhmHAB3ypI5mIuTKuX5 0kMxSgkqPB/UYkdSgQAGUgPq7JSQ11wBu1YwZbNsHpi0QTixeHxhckHZA/L5yHMU ICXwmjKf7w9u4UmDssCtnCiRIzkgAKs9At2eKjq3zKfJKSHC6bNO123oSN1V8KXm tel0fs0A+G7forz5BwTGi4SBCk+CEmyW8w1y8E1Mw5sSvWp4ueIFRhHg5QIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFAmjwO1m3vXA5esF3ufPeJ3BStY0MB8GA1UdIwQY MBaAFPl/ae0mwuRofbqy5sbMqI0XxMMyMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1YOXA3U2JDNUdoOXVyTG14c3lvalJmRXd6SS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjYvMzI0NDFlLTVlOWItNGEzMi04Y2M0 LTFlYjc1YmI2ODIzMy8xL0NhUEE3V2JlOWNEbDZ3WGU1ODk0bmNGSzFqUS5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNjYvMzI0NDFlLTVlOWItNGEzMi04Y2M0LTFlYjc1YmI2ODIz My8xLzEtWDlwN1NiQzVHaDl1ckxteHN5b2pSZkV3ekkuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAFPjiAw DQQCAAIwBwMFACoBe0AwDQYJKoZIhvcNAQELBQADggEBAGRYb9pnxxnSq0ydKEp5 E3Rns6k0f57KXcdsfnFFhr90JdmoNMxcu/hkX8djPnZpuOm6UYwLL87Wp33O/HHf NhmU+yJyJZffIGSEsBykfyMGhSHRpLQaVYfKBjvNoVaw4B0VzUU6426wHF/KSNoi zZYI42YpeDKqBnau/C6LFYS4Lz6nR1MT+Vr0lYiL1W/oj/DAuS6xDubjrsfUJwiM g7teKdncoIrN8k0C88onvRPm10bop6Hq+zo0OwCEwLw/NVrRxbZm9XmWt2FoZ1OG +gxwVImzZ3vqYBaQf0d+jzVv66P1VUE+RqbqRLJbRJrxOqlZ7YWAeePRjyZzf3C2 pvw= -----END CERTIFICATE-----Generated at Mon Feb 9 21:01:34 2026 by rpki-client