This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/97914b-eb62-46d1-a9d4-05bf81b4298b/1/h6jOEDYxDLUoVsCN3vmFzWvRbqY.roa File: h6jOEDYxDLUoVsCN3vmFzWvRbqY.roa (raw, json) Hash identifier: Dq8fSfxaD+7+r7IpW+mP/VEW9T3C/oyoQfLuLak8VuQ= Subject key identifier: 87:A8:CE:10:36:31:0C:B5:28:56:C0:8D:DE:F9:85:CD:6B:D1:6E:A6 Certificate issuer: /CN=93656fb5860c9d3cfcb35658540c7230a0ba1e8d Certificate serial: 019B7C8030A19E4348D8939C73C04D765856 Authority key identifier: 93:65:6F:B5:86:0C:9D:3C:FC:B3:56:58:54:0C:72:30:A0:BA:1E:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2VvtYYMnTz8s1ZYVAxyMKC6Ho0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/97914b-eb62-46d1-a9d4-05bf81b4298b/1/h6jOEDYxDLUoVsCN3vmFzWvRbqY.roa Signing time: Fri 02 Jan 2026 02:18:54 +0000 ROA not before: Fri 02 Jan 2026 02:18:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51342 IP address blocks: 176.124.96.0/21 maxlen: 24 195.128.166.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/97914b-eb62-46d1-a9d4-05bf81b4298b/1/k2VvtYYMnTz8s1ZYVAxyMKC6Ho0.crl rsync://rpki.ripe.net/repository/DEFAULT/83/97914b-eb62-46d1-a9d4-05bf81b4298b/1/k2VvtYYMnTz8s1ZYVAxyMKC6Ho0.mft rsync://rpki.ripe.net/repository/DEFAULT/k2VvtYYMnTz8s1ZYVAxyMKC6Ho0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 17:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:30:a1:9e:43:48:d8:93:9c:73:c0:4d:76:58:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=93656fb5860c9d3cfcb35658540c7230a0ba1e8d Validity Not Before: Jan 2 02:18:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=87a8ce1036310cb52856c08ddef985cd6bd16ea6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:52:bb:df:73:62:5e:a6:9f:47:3a:6f:2c:c6: 91:5c:12:51:32:fe:d8:0b:94:ef:9e:4d:29:0d:b8: e0:98:f2:a0:2a:75:e5:c6:d9:5f:99:52:e9:fe:d2: 22:50:c7:04:20:4e:97:08:c3:a5:b9:ae:8f:c4:cc: d8:35:0c:2d:24:ae:25:59:e2:41:d3:cc:e1:43:af: 69:82:0f:b4:12:5a:94:c9:e4:9b:f9:f6:d1:af:93: 68:0c:c7:f4:9a:3d:fa:42:0e:54:cb:2c:64:b0:6f: 10:72:29:66:52:f8:1b:a4:ef:3a:33:a1:c8:e1:35: 14:6b:88:d2:da:e0:79:72:6d:e2:75:a6:80:42:0e: 21:6b:61:f0:a1:6b:93:97:60:bc:17:1f:ec:a9:5e: 43:70:0c:d6:02:6b:25:89:f6:dd:3b:61:ca:c5:ca: 83:ba:2b:88:f5:d3:f2:1e:c5:f7:6e:7b:c4:47:ab: bd:f5:d7:aa:f7:53:66:81:ae:78:fb:96:1e:d8:9a: f7:02:5a:b4:5f:b8:15:09:f9:5d:37:b6:a4:1c:75: 7d:34:a6:80:06:21:ec:42:b5:a6:42:f1:27:80:22: 52:e0:b0:f0:94:1d:12:b6:ca:a0:e1:19:b2:49:8e: 1e:de:48:06:79:0d:4a:a3:28:bd:38:70:b1:13:a5: cc:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:A8:CE:10:36:31:0C:B5:28:56:C0:8D:DE:F9:85:CD:6B:D1:6E:A6 X509v3 Authority Key Identifier: keyid:93:65:6F:B5:86:0C:9D:3C:FC:B3:56:58:54:0C:72:30:A0:BA:1E:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2VvtYYMnTz8s1ZYVAxyMKC6Ho0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/97914b-eb62-46d1-a9d4-05bf81b4298b/1/h6jOEDYxDLUoVsCN3vmFzWvRbqY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/83/97914b-eb62-46d1-a9d4-05bf81b4298b/1/k2VvtYYMnTz8s1ZYVAxyMKC6Ho0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.124.96.0/21 195.128.166.0/23 Signature Algorithm: sha256WithRSAEncryption 44:a4:10:7b:74:10:2b:e1:e8:cd:20:b6:fb:b6:9e:24:9f:d7: a3:bb:63:dd:56:db:97:d2:5d:d6:bc:36:cd:30:de:5f:21:61: ca:5e:40:07:cd:d4:80:2e:eb:4b:22:f0:d0:f7:08:5d:60:2c: 3b:53:a5:96:a4:9f:30:aa:19:99:b6:60:9f:08:69:c0:ce:6c: 1e:78:2f:d0:02:c9:e3:0b:29:5a:f1:e6:1c:0f:e2:74:80:78: a8:d1:1d:83:14:f5:d2:fc:a9:8a:b2:4c:3e:f3:39:74:cc:6f: fa:f6:4a:6e:9f:4a:f8:fa:be:84:1e:92:86:f1:97:6a:b0:5d: 36:05:1f:5c:73:d1:37:78:75:3d:6a:51:7a:c3:4d:e1:58:be: 88:50:b7:95:52:a4:63:85:64:d6:c2:66:41:00:57:ea:74:c7: 85:cd:1e:90:db:47:4a:b8:75:b3:3f:72:71:54:07:b4:7d:9a: c3:19:38:8b:d3:e8:6f:07:e1:95:5b:7c:26:3b:66:ed:49:c9: ea:a4:df:dc:88:de:5a:95:6c:9b:c3:b3:12:6c:e7:cf:ee:b4: 8f:42:31:ae:46:e7:61:a7:da:a6:f4:a1:b1:44:cc:52:8c:aa: 9a:6e:dd:bc:64:4f:5d:96:43:c4:84:e6:79:40:85:f2:1f:4a: 4c:a9:80:e1 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt8gDChnkNI2JOcc8BNdlhWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzNjU2ZmI1ODYwYzlkM2NmY2IzNTY1ODU0MGM3MjMwYTBi YTFlOGQwHhcNMjYwMTAyMDIxODU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4N2E4Y2UxMDM2MzEwY2I1Mjg1NmMwOGRkZWY5ODVjZDZiZDE2ZWE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqlK733NiXqafRzpvLMaRXBJRMv7Y C5Tvnk0pDbjgmPKgKnXlxtlfmVLp/tIiUMcEIE6XCMOlua6PxMzYNQwtJK4lWeJB 08zhQ69pgg+0ElqUyeSb+fbRr5NoDMf0mj36Qg5UyyxksG8QcilmUvgbpO86M6HI 4TUUa4jS2uB5cm3idaaAQg4ha2HwoWuTl2C8Fx/sqV5DcAzWAmslifbdO2HKxcqD uiuI9dPyHsX3bnvER6u99deq91Nmga54+5Ye2Jr3Alq0X7gVCfldN7akHHV9NKaA BiHsQrWmQvEngCJS4LDwlB0Stsqg4RmySY4e3kgGeQ1Koyi9OHCxE6XMdQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFIeozhA2MQy1KFbAjd75hc1r0W6mMB8GA1UdIwQY MBaAFJNlb7WGDJ08/LNWWFQMcjCguh6NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazJWdnRZWU1uVHo4czFaWVZBeHlNS0M2SG8wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My85NzkxNGItZWI2Mi00NmQxLWE5ZDQt MDViZjgxYjQyOThiLzEvaDZqT0VEWXhETFVvVnNDTjN2bUZ6V3ZSYnFZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84My85NzkxNGItZWI2Mi00NmQxLWE5ZDQtMDViZjgxYjQyOThi LzEvazJWdnRZWU1uVHo4czFaWVZBeHlNS0M2SG8wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDsHxgAwQB w4CmMA0GCSqGSIb3DQEBCwUAA4IBAQBEpBB7dBAr4ejNILb7tp4kn9eju2PdVtuX 0l3WvDbNMN5fIWHKXkAHzdSALutLIvDQ9whdYCw7U6WWpJ8wqhmZtmCfCGnAzmwe eC/QAsnjCyla8eYcD+J0gHio0R2DFPXS/KmKskw+8zl0zG/69kpun0r4+r6EHpKG 8ZdqsF02BR9cc9E3eHU9alF6w03hWL6IULeVUqRjhWTWwmZBAFfqdMeFzR6Q20dK uHWzP3JxVAe0fZrDGTiL0+hvB+GVW3wmO2btScnqpN/ciN5alWybw7MSbOfP7rSP QjGuRudhp9qm9KGxRMxSjKqabt28ZE9dlkPEhOZ5QIXyH0pMqYDh -----END CERTIFICATE-----Generated at Tue Feb 10 03:11:11 2026 by rpki-client