This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/996cee-0acb-4eb8-a77a-27f90b8d85e6/1/k97xiEPNhhSgqvtrR_5TEOjiPrM.roa File: k97xiEPNhhSgqvtrR_5TEOjiPrM.roa (raw, json) Hash identifier: ZH1DGUuXgshBEvHt5egPH/VHWGjZYucZ8h4th9PhsLk= Subject key identifier: 93:DE:F1:88:43:CD:86:14:A0:AA:FB:6B:47:FE:53:10:E8:E2:3E:B3 Certificate issuer: /CN=1dae474d79597db75d1f4d49901b52558bbf6af4 Certificate serial: 019B78A3466B83CD4715C4C18A977E441AE6 Authority key identifier: 1D:AE:47:4D:79:59:7D:B7:5D:1F:4D:49:90:1B:52:55:8B:BF:6A:F4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ha5HTXlZfbddH01JkBtSVYu_avQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/996cee-0acb-4eb8-a77a-27f90b8d85e6/1/k97xiEPNhhSgqvtrR_5TEOjiPrM.roa Signing time: Thu 01 Jan 2026 08:18:44 +0000 ROA not before: Thu 01 Jan 2026 08:18:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25091 IP address blocks: 79.110.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/996cee-0acb-4eb8-a77a-27f90b8d85e6/1/Ha5HTXlZfbddH01JkBtSVYu_avQ.crl rsync://rpki.ripe.net/repository/DEFAULT/69/996cee-0acb-4eb8-a77a-27f90b8d85e6/1/Ha5HTXlZfbddH01JkBtSVYu_avQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Ha5HTXlZfbddH01JkBtSVYu_avQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 14:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:46:6b:83:cd:47:15:c4:c1:8a:97:7e:44:1a:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1dae474d79597db75d1f4d49901b52558bbf6af4 Validity Not Before: Jan 1 08:18:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=93def18843cd8614a0aafb6b47fe5310e8e23eb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:aa:34:8c:0f:24:b0:15:f1:ad:29:7e:3c:eb: a2:89:5f:9f:66:09:52:1b:0c:c6:bb:a6:7e:57:39: f2:a4:32:5e:d6:78:76:6a:e8:23:d2:4d:d2:31:78: 5f:4d:1a:19:05:dd:c0:0d:c3:6b:f2:bd:13:a6:0e: 56:5e:75:65:50:ca:1e:9c:54:b3:7a:4f:72:c1:75: 46:82:dd:a4:42:b4:74:5d:e1:dd:a4:ef:e1:5f:8e: 77:b3:5d:47:d2:a7:1d:7f:f3:b0:61:79:82:32:58: ee:d5:59:fd:5f:df:3c:b0:6d:ce:a2:11:a3:58:4a: 00:19:c8:05:78:ef:e8:cd:18:4e:08:cc:52:35:e0: 8f:3c:0c:66:c1:75:32:13:94:11:eb:9b:e2:00:de: ed:23:9d:09:a4:0b:ea:11:bb:a0:6b:b0:2c:4e:aa: f2:0c:2b:53:85:51:f1:52:5f:46:cb:ed:41:48:aa: fb:78:10:f8:59:51:46:57:1d:20:75:c3:29:e4:55: f0:e6:f9:b1:86:70:55:69:cc:66:a8:a6:67:55:06: eb:6f:0b:db:f6:f5:06:8c:28:46:91:6c:50:8d:1c: 7e:32:09:ac:45:1c:a6:17:74:ee:2f:ec:0f:5d:39: e1:a0:4b:32:7d:a4:51:59:0c:46:90:72:e3:fb:26: 20:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:DE:F1:88:43:CD:86:14:A0:AA:FB:6B:47:FE:53:10:E8:E2:3E:B3 X509v3 Authority Key Identifier: keyid:1D:AE:47:4D:79:59:7D:B7:5D:1F:4D:49:90:1B:52:55:8B:BF:6A:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ha5HTXlZfbddH01JkBtSVYu_avQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/996cee-0acb-4eb8-a77a-27f90b8d85e6/1/k97xiEPNhhSgqvtrR_5TEOjiPrM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/996cee-0acb-4eb8-a77a-27f90b8d85e6/1/Ha5HTXlZfbddH01JkBtSVYu_avQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.110.235.0/24 Signature Algorithm: sha256WithRSAEncryption 00:d2:27:1e:67:c8:5d:93:5d:74:67:f9:49:60:79:ed:70:45: 16:83:df:46:00:90:c5:ae:53:22:f2:c3:a0:07:88:33:98:0c: 64:8b:4e:f7:84:99:4b:b0:c6:6b:2e:d6:b9:bd:ab:ea:d7:80: 8b:fd:59:03:66:b7:dc:38:3f:de:e0:bd:b3:e8:ee:0a:fc:8f: a8:71:17:db:4e:e8:58:ef:8c:3c:b3:04:43:a0:b3:15:74:81: 5a:6e:37:f2:26:a4:e0:0e:04:a5:1e:d4:74:d8:10:a4:02:4f: af:60:3d:5d:63:88:44:ef:8c:f5:da:2c:48:02:c9:3c:f4:fb: 83:b6:ec:46:d5:a4:c9:45:80:30:64:73:94:88:27:6d:96:7e: a2:bc:2d:66:88:2a:0c:09:64:16:d1:f9:da:cd:ea:69:00:42: 63:74:fc:20:19:68:08:78:a9:31:58:64:87:62:fd:02:94:3e: 14:80:e4:85:f4:cd:ea:5b:ed:29:1d:e0:03:40:6e:ad:82:c4: d5:d1:db:08:68:70:66:22:1f:55:8e:38:db:0a:13:54:d1:67: 88:02:c5:69:03:ff:3a:b6:5d:9f:7a:fe:6a:8b:e8:11:10:01: 42:28:2a:a1:1a:db:6d:49:b5:c5:66:69:13:08:09:28:f0:95: 59:98:46:07 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4o0Zrg81HFcTBipd+RBrmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFkYWU0NzRkNzk1OTdkYjc1ZDFmNGQ0OTkwMWI1MjU1OGJi ZjZhZjQwHhcNMjYwMTAxMDgxODQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5M2RlZjE4ODQzY2Q4NjE0YTBhYWZiNmI0N2ZlNTMxMGU4ZTIzZWIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArqo0jA8ksBXxrSl+POuiiV+fZglS GwzGu6Z+VznypDJe1nh2augj0k3SMXhfTRoZBd3ADcNr8r0Tpg5WXnVlUMoenFSz ek9ywXVGgt2kQrR0XeHdpO/hX453s11H0qcdf/OwYXmCMlju1Vn9X988sG3OohGj WEoAGcgFeO/ozRhOCMxSNeCPPAxmwXUyE5QR65viAN7tI50JpAvqEbuga7AsTqry DCtThVHxUl9Gy+1BSKr7eBD4WVFGVx0gdcMp5FXw5vmxhnBVacxmqKZnVQbrbwvb 9vUGjChGkWxQjRx+MgmsRRymF3TuL+wPXTnhoEsyfaRRWQxGkHLj+yYgTQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJPe8YhDzYYUoKr7a0f+UxDo4j6zMB8GA1UdIwQY MBaAFB2uR015WX23XR9NSZAbUlWLv2r0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSGE1SFRYbFpmYmRkSDAxSmtCdFNWWXVfYXZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS85OTZjZWUtMGFjYi00ZWI4LWE3N2Et MjdmOTBiOGQ4NWU2LzEvazk3eGlFUE5oaFNncXZ0clJfNVRFT2ppUHJNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS85OTZjZWUtMGFjYi00ZWI4LWE3N2EtMjdmOTBiOGQ4NWU2 LzEvSGE1SFRYbFpmYmRkSDAxSmtCdFNWWXVfYXZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAT27rMA0G CSqGSIb3DQEBCwUAA4IBAQAA0iceZ8hdk110Z/lJYHntcEUWg99GAJDFrlMi8sOg B4gzmAxki073hJlLsMZrLta5vavq14CL/VkDZrfcOD/e4L2z6O4K/I+ocRfbTuhY 74w8swRDoLMVdIFabjfyJqTgDgSlHtR02BCkAk+vYD1dY4hE74z12ixIAsk89PuD tuxG1aTJRYAwZHOUiCdtln6ivC1miCoMCWQW0fnazeppAEJjdPwgGWgIeKkxWGSH Yv0ClD4UgOSF9M3qW+0pHeADQG6tgsTV0dsIaHBmIh9VjjjbChNU0WeIAsVpA/86 tl2fev5qi+gREAFCKCqhGtttSbXFZmkTCAko8JVZmEYH -----END CERTIFICATE-----Generated at Sun Jan 18 20:54:01 2026 by rpki-client