This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9aaf24-5346-4480-bbf3-a6410919e898/1/98w4EMI8QkhWIDJ_tUXvrrCXD2w.roa File: 98w4EMI8QkhWIDJ_tUXvrrCXD2w.roa (raw, json) Hash identifier: fm9WJHd48Zrl9TNehwCEgvrHjrg07KinzQkYGEQj/xw= Subject key identifier: F7:CC:38:10:C2:3C:42:48:56:20:32:7F:B5:45:EF:AE:B0:97:0F:6C Certificate issuer: /CN=0b2ce7fd2f5b1b79757c8973ae3f7b0be686385b Certificate serial: 019B7BA347F1A474DB0E85FFB1674E3DD684 Authority key identifier: 0B:2C:E7:FD:2F:5B:1B:79:75:7C:89:73:AE:3F:7B:0B:E6:86:38:5B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cyzn_S9bG3l1fIlzrj97C-aGOFs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9aaf24-5346-4480-bbf3-a6410919e898/1/98w4EMI8QkhWIDJ_tUXvrrCXD2w.roa Signing time: Thu 01 Jan 2026 22:17:36 +0000 ROA not before: Thu 01 Jan 2026 22:17:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202921 IP address blocks: 147.161.24.0/22 maxlen: 22 147.161.24.0/24 maxlen: 24 147.161.25.0/24 maxlen: 24 147.161.26.0/24 maxlen: 24 147.161.27.0/24 maxlen: 24 185.148.212.0/22 maxlen: 22 185.148.212.0/24 maxlen: 24 185.148.213.0/24 maxlen: 24 185.148.214.0/24 maxlen: 24 185.148.215.0/24 maxlen: 24 212.69.128.0/22 maxlen: 22 212.69.128.0/24 maxlen: 24 212.69.129.0/24 maxlen: 24 212.69.130.0/24 maxlen: 24 212.69.131.0/24 maxlen: 24 2a0d:f780::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/9aaf24-5346-4480-bbf3-a6410919e898/1/Cyzn_S9bG3l1fIlzrj97C-aGOFs.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/9aaf24-5346-4480-bbf3-a6410919e898/1/Cyzn_S9bG3l1fIlzrj97C-aGOFs.mft rsync://rpki.ripe.net/repository/DEFAULT/Cyzn_S9bG3l1fIlzrj97C-aGOFs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:47:f1:a4:74:db:0e:85:ff:b1:67:4e:3d:d6:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b2ce7fd2f5b1b79757c8973ae3f7b0be686385b Validity Not Before: Jan 1 22:17:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f7cc3810c23c42485620327fb545efaeb0970f6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:8b:6e:0f:58:3e:b0:48:25:a2:80:b0:1e:fb: a9:ad:88:5b:ca:ea:71:f5:b0:58:c6:bc:0d:ff:a3: f8:f8:d9:e7:ad:c6:ff:e2:f2:18:f8:0b:4c:c7:e0: f5:36:49:3f:9b:3b:e1:59:7b:08:bb:88:7c:d4:59: 24:f1:6d:9c:3e:9e:c1:5b:a6:24:28:b8:af:76:95: c3:e1:3e:90:d9:6d:da:f2:bf:6d:18:b2:3d:e8:96: 1e:41:f2:ca:85:c5:f5:db:0d:f1:d8:6a:8a:9b:5d: 82:c0:20:d6:fc:04:ed:05:73:2b:05:a5:3d:b4:59: c8:d4:a3:12:2d:cc:ec:b2:45:b2:f1:3b:59:f4:d9: fd:32:bf:bf:23:34:ac:bd:06:3f:35:0b:e9:be:f0: 30:80:0a:c6:92:f2:ec:10:19:57:52:ec:f9:c0:58: 0e:ff:b8:7d:c2:82:ae:81:eb:a0:c6:f5:56:01:d6: 16:9a:d0:1d:4e:d0:c8:b1:6b:94:5c:e1:5b:04:d6: 78:bf:a2:d4:b9:89:0f:83:38:ab:55:4a:53:3e:47: 99:97:48:1c:4e:90:b8:4b:ef:9f:29:b2:a3:c7:28: 83:41:35:a7:1d:38:b0:77:ab:26:b0:44:7a:c1:8d: b8:ae:4b:af:07:66:65:da:01:18:2c:eb:52:dc:bf: 23:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:CC:38:10:C2:3C:42:48:56:20:32:7F:B5:45:EF:AE:B0:97:0F:6C X509v3 Authority Key Identifier: keyid:0B:2C:E7:FD:2F:5B:1B:79:75:7C:89:73:AE:3F:7B:0B:E6:86:38:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cyzn_S9bG3l1fIlzrj97C-aGOFs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9aaf24-5346-4480-bbf3-a6410919e898/1/98w4EMI8QkhWIDJ_tUXvrrCXD2w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9aaf24-5346-4480-bbf3-a6410919e898/1/Cyzn_S9bG3l1fIlzrj97C-aGOFs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.161.24.0/22 185.148.212.0/22 212.69.128.0/22 IPv6: 2a0d:f780::/29 Signature Algorithm: sha256WithRSAEncryption 20:af:0e:f1:50:7c:00:df:6e:da:70:f3:4d:b0:5b:46:aa:35: 78:8c:00:f1:59:99:c3:2d:cc:39:dd:41:0b:36:bc:6d:41:ad: 39:97:75:ce:5b:86:a2:fe:b6:c0:d0:1f:37:40:30:07:ef:2a: c1:19:9f:81:73:2e:87:ca:6e:21:ff:42:68:7b:ca:1a:3a:a7: 2f:1c:41:75:af:ff:c8:87:92:10:bf:1d:c6:5e:4c:9c:c3:5c: 2d:a6:84:a3:3c:af:35:5b:26:18:c7:6b:78:52:9a:f3:4d:6a: af:d3:ab:c8:10:57:2f:66:56:4f:4b:6a:55:61:15:c8:4a:21: c8:d3:d6:9e:7d:e9:82:4b:60:e1:58:2f:d7:71:25:51:0b:69: 59:b8:f1:92:8f:43:63:73:c7:1f:58:36:5d:4b:81:63:d8:44: 81:ef:20:9f:39:97:83:28:0a:d8:f9:be:1b:f0:34:6d:3d:92: da:22:a0:25:f3:20:7c:b5:3d:81:e7:8a:56:1a:e5:f9:1f:b1: 74:a9:1c:bc:4a:1c:62:9f:96:4a:8a:7f:6f:fc:2c:fc:dd:20: 95:18:bb:94:63:a2:ae:bb:1d:ef:6b:32:d8:6e:46:8e:17:22: 06:8d:c0:78:59:39:9b:47:5e:63:92:e4:bc:ce:e1:a8:6d:8a: bc:9e:bc:1f -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt7o0fxpHTbDoX/sWdOPdaEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiMmNlN2ZkMmY1YjFiNzk3NTdjODk3M2FlM2Y3YjBiZTY4 NjM4NWIwHhcNMjYwMTAxMjIxNzM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmN2NjMzgxMGMyM2M0MjQ4NTYyMDMyN2ZiNTQ1ZWZhZWIwOTcwZjZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz4tuD1g+sEglooCwHvuprYhbyupx 9bBYxrwN/6P4+Nnnrcb/4vIY+AtMx+D1Nkk/mzvhWXsIu4h81Fkk8W2cPp7BW6Yk KLivdpXD4T6Q2W3a8r9tGLI96JYeQfLKhcX12w3x2GqKm12CwCDW/ATtBXMrBaU9 tFnI1KMSLczsskWy8TtZ9Nn9Mr+/IzSsvQY/NQvpvvAwgArGkvLsEBlXUuz5wFgO /7h9woKugeugxvVWAdYWmtAdTtDIsWuUXOFbBNZ4v6LUuYkPgzirVUpTPkeZl0gc TpC4S++fKbKjxyiDQTWnHTiwd6smsER6wY24rkuvB2Zl2gEYLOtS3L8jBQIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFPfMOBDCPEJIViAyf7VF766wlw9sMB8GA1UdIwQY MBaAFAss5/0vWxt5dXyJc64/ewvmhjhbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ3l6bl9TOWJHM2wxZklsenJqOTdDLWFHT0ZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy85YWFmMjQtNTM0Ni00NDgwLWJiZjMt YTY0MTA5MTllODk4LzEvOTh3NEVNSThRa2hXSURKX3RVWHZyckNYRDJ3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy85YWFmMjQtNTM0Ni00NDgwLWJiZjMtYTY0MTA5MTllODk4 LzEvQ3l6bl9TOWJHM2wxZklsenJqOTdDLWFHT0ZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQCk6EYAwQC uZTUAwQC1EWAMA0EAgACMAcDBQMqDfeAMA0GCSqGSIb3DQEBCwUAA4IBAQAgrw7x UHwA327acPNNsFtGqjV4jADxWZnDLcw53UELNrxtQa05l3XOW4ai/rbA0B83QDAH 7yrBGZ+Bcy6Hym4h/0Joe8oaOqcvHEF1r//Ih5IQvx3GXkycw1wtpoSjPK81WyYY x2t4UprzTWqv06vIEFcvZlZPS2pVYRXISiHI09aefemCS2DhWC/XcSVRC2lZuPGS j0Njc8cfWDZdS4Fj2ESB7yCfOZeDKArY+b4b8DRtPZLaIqAl8yB8tT2B54pWGuX5 H7F0qRy8Shxin5ZKin9v/Cz83SCVGLuUY6Kuux3vazLYbkaOFyIGjcB4WTmbR15j kuS8zuGobYq8nrwf -----END CERTIFICATE-----Generated at Mon Feb 9 22:37:06 2026 by rpki-client