This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/fb279c-bd1e-43bd-a497-c953a88bbfa3/1/hZfrHQXQ9gJ1CBuZbvb4HTnn7x8.roa File: hZfrHQXQ9gJ1CBuZbvb4HTnn7x8.roa (raw, json) Hash identifier: s7Q9n6FVyTwioyvvcuH0Je0WpF9fajbCSSnTwOxPywE= Subject key identifier: 85:97:EB:1D:05:D0:F6:02:75:08:1B:99:6E:F6:F8:1D:39:E7:EF:1F Certificate issuer: /CN=5fab019d98b88c585d5f016204113c839ae067d1 Certificate serial: 019B7FF1FEDA055C6786531910F90285A165 Authority key identifier: 5F:AB:01:9D:98:B8:8C:58:5D:5F:01:62:04:11:3C:83:9A:E0:67:D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X6sBnZi4jFhdXwFiBBE8g5rgZ9E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/fb279c-bd1e-43bd-a497-c953a88bbfa3/1/hZfrHQXQ9gJ1CBuZbvb4HTnn7x8.roa Signing time: Fri 02 Jan 2026 18:22:04 +0000 ROA not before: Fri 02 Jan 2026 18:22:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205367 IP address blocks: 81.30.97.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/fb279c-bd1e-43bd-a497-c953a88bbfa3/1/X6sBnZi4jFhdXwFiBBE8g5rgZ9E.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/fb279c-bd1e-43bd-a497-c953a88bbfa3/1/X6sBnZi4jFhdXwFiBBE8g5rgZ9E.mft rsync://rpki.ripe.net/repository/DEFAULT/X6sBnZi4jFhdXwFiBBE8g5rgZ9E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:fe:da:05:5c:67:86:53:19:10:f9:02:85:a1:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5fab019d98b88c585d5f016204113c839ae067d1 Validity Not Before: Jan 2 18:22:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8597eb1d05d0f60275081b996ef6f81d39e7ef1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:e7:f0:ce:dc:ee:f7:56:7a:7c:1d:e9:78:b3: ce:16:29:f2:d7:dc:1f:f3:21:ad:43:6b:4b:78:6f: be:3f:3f:26:53:a6:0d:d7:e2:c4:52:d6:c2:73:38: 30:7e:37:cc:39:a5:7d:fc:fd:09:93:c1:9a:e4:2f: 6f:53:5a:80:3f:ce:7e:89:85:24:0a:03:9b:32:45: 2e:2d:11:50:ce:2a:a8:38:37:de:6e:fc:23:a8:0d: 88:99:d1:76:96:0f:e6:85:ce:d1:fe:a6:6e:6a:d8: 9f:82:ca:f4:73:28:f5:0b:21:87:f1:f0:dc:38:3a: 3a:3d:ec:85:e1:59:13:fc:db:b3:03:60:64:0e:ad: 9f:d7:b4:77:70:3d:93:dd:0f:a3:e1:22:fc:4b:f5: e4:8c:18:38:95:ed:dd:5d:f4:42:7c:fe:0d:1f:e4: 89:04:ad:26:ef:a3:a7:14:57:ea:c9:77:c2:18:cb: b1:2d:1d:1f:44:5d:04:e7:29:0a:ae:73:94:87:85: a0:d4:3a:7e:73:76:5b:35:1e:f6:5a:7c:02:aa:71: ee:b0:58:9b:2f:e7:c8:4b:33:79:7d:ee:ff:4c:8a: 92:a8:82:b0:89:d8:56:c6:0d:a8:b1:11:66:56:47: f8:9b:b0:60:3c:bf:0e:f4:a8:50:fe:94:cc:b1:3d: dc:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:97:EB:1D:05:D0:F6:02:75:08:1B:99:6E:F6:F8:1D:39:E7:EF:1F X509v3 Authority Key Identifier: keyid:5F:AB:01:9D:98:B8:8C:58:5D:5F:01:62:04:11:3C:83:9A:E0:67:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X6sBnZi4jFhdXwFiBBE8g5rgZ9E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/fb279c-bd1e-43bd-a497-c953a88bbfa3/1/hZfrHQXQ9gJ1CBuZbvb4HTnn7x8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/fb279c-bd1e-43bd-a497-c953a88bbfa3/1/X6sBnZi4jFhdXwFiBBE8g5rgZ9E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.30.97.0/24 Signature Algorithm: sha256WithRSAEncryption b2:49:05:55:d9:e4:a5:92:16:82:00:9c:91:7d:53:ad:2a:40: 59:86:cd:ec:6b:35:c1:ed:fd:5d:4a:82:b1:f1:ed:8b:bc:43: 98:84:42:f4:f3:71:8f:cd:ba:aa:ec:a3:c6:51:27:f2:96:9f: 50:42:c8:16:f6:52:a9:a1:b8:a4:bb:e4:20:2f:95:47:6c:4b: 3e:45:81:f8:8f:0c:25:85:3b:01:4a:e3:40:39:1a:0f:34:db: 9c:3d:ab:10:4f:3a:01:d8:e7:39:e7:c5:4b:c9:37:3c:96:6b: a0:40:4e:3c:d6:25:2e:3d:6d:15:ff:9d:ab:91:d4:5c:c1:71: e9:2b:38:04:33:b1:e5:ce:df:0f:1e:2b:56:fd:9a:3c:88:24: 47:24:41:b3:a6:1c:44:cd:70:39:3f:04:43:30:bd:a8:2a:c7: 6a:17:76:5c:a3:0f:89:40:bf:b0:ac:56:08:ea:b9:b9:63:c5: a3:a4:6f:cc:61:db:0f:25:37:36:80:b6:9f:b1:25:42:8f:04: 66:67:66:88:b4:e0:2e:46:a9:92:b9:a2:19:91:71:0f:85:20: 48:51:d7:76:64:51:7b:1e:aa:82:f3:43:b2:39:67:0e:85:ee: 79:b9:8c:70:d2:16:e6:04:a7:6f:a3:e5:38:eb:de:f0:27:52: c4:5b:eb:6a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/8f7aBVxnhlMZEPkChaFlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmYWIwMTlkOThiODhjNTg1ZDVmMDE2MjA0MTEzYzgzOWFl MDY3ZDEwHhcNMjYwMTAyMTgyMjA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NTk3ZWIxZDA1ZDBmNjAyNzUwODFiOTk2ZWY2ZjgxZDM5ZTdlZjFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkufwztzu91Z6fB3peLPOFiny19wf 8yGtQ2tLeG++Pz8mU6YN1+LEUtbCczgwfjfMOaV9/P0Jk8Ga5C9vU1qAP85+iYUk CgObMkUuLRFQziqoODfebvwjqA2ImdF2lg/mhc7R/qZuatifgsr0cyj1CyGH8fDc ODo6PeyF4VkT/NuzA2BkDq2f17R3cD2T3Q+j4SL8S/XkjBg4le3dXfRCfP4NH+SJ BK0m76OnFFfqyXfCGMuxLR0fRF0E5ykKrnOUh4Wg1Dp+c3ZbNR72WnwCqnHusFib L+fISzN5fe7/TIqSqIKwidhWxg2osRFmVkf4m7BgPL8O9KhQ/pTMsT3cEwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIWX6x0F0PYCdQgbmW72+B055+8fMB8GA1UdIwQY MBaAFF+rAZ2YuIxYXV8BYgQRPIOa4GfRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWDZzQm5aaTRqRmhkWHdGaUJCRThnNXJnWjlFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9mYjI3OWMtYmQxZS00M2JkLWE0OTct Yzk1M2E4OGJiZmEzLzEvaFpmckhRWFE5Z0oxQ0J1WmJ2YjRIVG5uN3g4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy9mYjI3OWMtYmQxZS00M2JkLWE0OTctYzk1M2E4OGJiZmEz LzEvWDZzQm5aaTRqRmhkWHdGaUJCRThnNXJnWjlFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUR5hMA0G CSqGSIb3DQEBCwUAA4IBAQCySQVV2eSlkhaCAJyRfVOtKkBZhs3sazXB7f1dSoKx 8e2LvEOYhEL083GPzbqq7KPGUSfylp9QQsgW9lKpobiku+QgL5VHbEs+RYH4jwwl hTsBSuNAORoPNNucPasQTzoB2Oc558VLyTc8lmugQE481iUuPW0V/52rkdRcwXHp KzgEM7Hlzt8PHitW/Zo8iCRHJEGzphxEzXA5PwRDML2oKsdqF3Zcow+JQL+wrFYI 6rm5Y8WjpG/MYdsPJTc2gLafsSVCjwRmZ2aItOAuRqmSuaIZkXEPhSBIUdd2ZFF7 HqqC80OyOWcOhe55uYxw0hbmBKdvo+U4697wJ1LEW+tq -----END CERTIFICATE-----Generated at Tue Feb 10 01:14:02 2026 by rpki-client