This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/H96_Qc9SsITA0naiCSVL6y7VEJM.roa File: H96_Qc9SsITA0naiCSVL6y7VEJM.roa (raw, json) Hash identifier: Rixat+/GKfD+/Qc5Q1rAIKjAt7zVyl2ONWoiw+w/7aY= Subject key identifier: 1F:DE:BF:41:CF:52:B0:84:C0:D2:76:A2:09:25:4B:EB:2E:D5:10:93 Certificate issuer: /CN=5d88e4f7a302412c316a3bb599cdd2042b5ff485 Certificate serial: 019B79ECB788FAC02E62F88F7D2D65B58F11 Authority key identifier: 5D:88:E4:F7:A3:02:41:2C:31:6A:3B:B5:99:CD:D2:04:2B:5F:F4:85 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XYjk96MCQSwxaju1mc3SBCtf9IU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/H96_Qc9SsITA0naiCSVL6y7VEJM.roa Signing time: Thu 01 Jan 2026 14:18:35 +0000 ROA not before: Thu 01 Jan 2026 14:18:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57840 IP address blocks: 37.209.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/XYjk96MCQSwxaju1mc3SBCtf9IU.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/XYjk96MCQSwxaju1mc3SBCtf9IU.mft rsync://rpki.ripe.net/repository/DEFAULT/XYjk96MCQSwxaju1mc3SBCtf9IU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:b7:88:fa:c0:2e:62:f8:8f:7d:2d:65:b5:8f:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d88e4f7a302412c316a3bb599cdd2042b5ff485 Validity Not Before: Jan 1 14:18:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1fdebf41cf52b084c0d276a209254beb2ed51093 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:9f:84:fd:09:b7:d5:ad:3c:5f:10:47:8c:89: 66:98:9a:54:bc:85:9c:15:18:c0:eb:c0:71:6f:fc: 8d:83:b6:ca:d0:9f:bf:af:63:a1:51:0c:4e:5b:7b: c0:1a:35:7b:f5:49:a9:3a:09:f7:ee:63:05:22:f1: b2:f3:fb:d4:61:c8:66:97:71:36:84:39:d4:8c:b1: 3c:1c:21:61:68:79:e5:1a:ae:f8:c8:63:7c:2f:44: 5d:8d:80:e2:10:da:54:86:28:90:ef:77:e8:02:bb: 73:95:99:0e:2d:3e:c3:d1:63:2c:3b:77:e4:29:81: d2:fb:41:0c:c2:f0:7d:89:a5:86:97:a2:ad:2d:26: 82:1e:a8:15:e8:88:28:24:68:de:e5:ad:c0:3a:1e: 7a:4d:17:0c:73:d2:b6:dc:bf:07:67:60:13:fc:f1: 89:8d:ab:e5:3b:71:52:75:58:a6:9f:99:59:50:e9: 1d:c9:00:a9:a7:24:96:a6:37:77:5f:75:55:b3:77: d3:fa:74:04:0b:1f:6b:67:d1:71:47:6e:61:c9:c8: 13:4a:ce:14:cd:f0:25:01:27:c6:e7:1e:66:12:65: 92:43:2d:3e:5f:70:35:d1:7b:bf:9d:7c:35:77:68: 80:83:a4:8e:b0:79:6c:13:cd:a1:f8:1a:3e:14:2b: a7:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:DE:BF:41:CF:52:B0:84:C0:D2:76:A2:09:25:4B:EB:2E:D5:10:93 X509v3 Authority Key Identifier: keyid:5D:88:E4:F7:A3:02:41:2C:31:6A:3B:B5:99:CD:D2:04:2B:5F:F4:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XYjk96MCQSwxaju1mc3SBCtf9IU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/H96_Qc9SsITA0naiCSVL6y7VEJM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/XYjk96MCQSwxaju1mc3SBCtf9IU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.209.175.0/24 Signature Algorithm: sha256WithRSAEncryption 07:f2:d3:6f:a5:ae:d2:2e:b3:5f:35:f4:f1:5a:6e:6b:73:8a: 0c:6a:67:a1:e8:50:97:cf:ae:15:21:ee:bc:f8:4a:8b:28:fa: 2c:d3:59:6b:5e:14:a3:38:bb:2c:18:83:6e:4d:a3:8c:93:9d: 21:62:d8:64:6d:3f:72:70:75:8b:82:f7:96:98:f5:7c:48:ec: 92:62:86:68:bd:99:a5:43:69:1b:7e:e2:15:11:2d:c5:f3:91: dc:83:64:e4:f9:c5:92:89:99:b2:64:5c:70:22:b0:09:03:21: 4c:71:27:6c:46:ee:63:a1:8b:2c:d1:af:e0:fb:1d:82:79:b5: 31:1d:41:6a:02:f5:b9:f2:f2:9a:da:50:4f:d2:4a:91:4d:2e: 90:ad:f5:bb:4d:7a:e1:3a:3d:b5:fd:9e:66:21:90:e7:2e:bd: cb:14:86:73:d4:e6:b8:a0:2c:5c:04:34:cc:63:06:06:48:7f: ea:9d:39:c9:28:15:83:65:87:8c:47:ce:61:25:27:bb:5f:92: de:7e:95:36:9d:4b:46:07:b1:bc:78:be:22:4d:e4:dd:8f:f6: a4:0f:82:0c:cd:a3:0f:6f:0e:f4:0b:8d:10:35:1f:72:3d:f5: bc:47:6f:ba:c9:17:0c:7b:e8:c6:3a:1d:46:0e:54:75:8c:49: 69:2a:0e:c6 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57LeI+sAuYviPfS1ltY8RMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkODhlNGY3YTMwMjQxMmMzMTZhM2JiNTk5Y2RkMjA0MmI1 ZmY0ODUwHhcNMjYwMTAxMTQxODM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZmRlYmY0MWNmNTJiMDg0YzBkMjc2YTIwOTI1NGJlYjJlZDUxMDkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs5+E/Qm31a08XxBHjIlmmJpUvIWc FRjA68Bxb/yNg7bK0J+/r2OhUQxOW3vAGjV79UmpOgn37mMFIvGy8/vUYchml3E2 hDnUjLE8HCFhaHnlGq74yGN8L0RdjYDiENpUhiiQ73foArtzlZkOLT7D0WMsO3fk KYHS+0EMwvB9iaWGl6KtLSaCHqgV6IgoJGje5a3AOh56TRcMc9K23L8HZ2AT/PGJ javlO3FSdVimn5lZUOkdyQCppySWpjd3X3VVs3fT+nQECx9rZ9FxR25hycgTSs4U zfAlASfG5x5mEmWSQy0+X3A10Xu/nXw1d2iAg6SOsHlsE82h+Bo+FCunEQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFB/ev0HPUrCEwNJ2ogklS+su1RCTMB8GA1UdIwQY MBaAFF2I5PejAkEsMWo7tZnN0gQrX/SFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWFlqazk2TUNRU3d4YWp1MW1jM1NCQ3RmOUlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi83NjBjMGYtMTJhYi00ODNkLThjZGIt NTdlMWQ1YjcyYjJkLzEvSDk2X1FjOVNzSVRBMG5haUNTVkw2eTdWRUpNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi83NjBjMGYtMTJhYi00ODNkLThjZGItNTdlMWQ1YjcyYjJk LzEvWFlqazk2TUNRU3d4YWp1MW1jM1NCQ3RmOUlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJdGvMA0G CSqGSIb3DQEBCwUAA4IBAQAH8tNvpa7SLrNfNfTxWm5rc4oMameh6FCXz64VIe68 +EqLKPos01lrXhSjOLssGINuTaOMk50hYthkbT9ycHWLgveWmPV8SOySYoZovZml Q2kbfuIVES3F85Hcg2Tk+cWSiZmyZFxwIrAJAyFMcSdsRu5joYss0a/g+x2CebUx HUFqAvW58vKa2lBP0kqRTS6QrfW7TXrhOj21/Z5mIZDnLr3LFIZz1Oa4oCxcBDTM YwYGSH/qnTnJKBWDZYeMR85hJSe7X5LefpU2nUtGB7G8eL4iTeTdj/akD4IMzaMP bw70C40QNR9yPfW8R2+6yRcMe+jGOh1GDlR1jElpKg7G -----END CERTIFICATE-----Generated at Mon Jan 26 10:23:22 2026 by rpki-client