This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/97nEgc4A4sVjs4YgAX5Sm9-LJbk.roa File: 97nEgc4A4sVjs4YgAX5Sm9-LJbk.roa (raw, json) Hash identifier: 3MLozR2LySFs3MSUPZHuRrx2i4ALDNqaZIuRMZWvSoQ= Subject key identifier: F7:B9:C4:81:CE:00:E2:C5:63:B3:86:20:01:7E:52:9B:DF:8B:25:B9 Certificate issuer: /CN=0837c99b2a4c062d5c20678f9dcf3207aefd5e78 Certificate serial: 019BBB7CD4766EFFAF8C1520BE9C3A5AA61C Authority key identifier: 08:37:C9:9B:2A:4C:06:2D:5C:20:67:8F:9D:CF:32:07:AE:FD:5E:78 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CDfJmypMBi1cIGePnc8yB679Xng.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/97nEgc4A4sVjs4YgAX5Sm9-LJbk.roa Signing time: Wed 14 Jan 2026 07:51:18 +0000 ROA not before: Wed 14 Jan 2026 07:51:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 1405 IP address blocks: 2a01:4244::/30 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.mft rsync://rpki.ripe.net/repository/DEFAULT/CDfJmypMBi1cIGePnc8yB679Xng.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:bb:7c:d4:76:6e:ff:af:8c:15:20:be:9c:3a:5a:a6:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0837c99b2a4c062d5c20678f9dcf3207aefd5e78 Validity Not Before: Jan 14 07:51:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f7b9c481ce00e2c563b38620017e529bdf8b25b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:b5:d1:04:c7:e0:19:8e:8d:a5:88:5d:a1:c5: 77:86:37:53:10:96:1a:c3:61:23:11:2b:3d:dd:0c: fe:91:1a:1d:56:d7:8c:8d:e2:8f:a5:54:d2:ba:bc: d9:e3:75:2e:1c:80:fe:12:94:c0:57:f6:be:16:da: 1b:e2:6a:3c:43:c1:f9:bd:ab:65:a7:14:c1:11:9c: 76:03:45:10:56:de:67:a4:16:1d:99:14:12:95:4e: 48:68:6d:13:c6:9d:b3:a7:f1:8a:54:6f:e7:48:3a: 0b:c5:73:10:df:ce:49:3c:c0:6e:84:8f:9a:e4:97: d8:66:82:3c:bb:06:4d:69:3a:f1:7f:8c:c2:4b:42: 8c:86:fd:fe:9d:f2:e7:9a:e9:a0:31:ec:3c:09:ec: 28:5e:fa:03:5b:b9:b9:17:c0:2e:e3:17:eb:f4:bf: 97:b3:9e:46:2d:49:8f:5a:f4:c6:1d:60:23:71:ab: b5:23:64:4b:70:b3:8e:ab:a4:9c:d4:d4:66:51:cd: a5:50:6b:ba:87:75:cd:81:89:80:aa:3f:38:c3:ac: 50:3e:01:07:f7:b5:3f:9a:c3:0a:35:95:d3:a3:3f: 14:04:4c:62:12:62:75:1e:e2:fd:62:78:7d:bd:5f: 41:79:52:47:ad:a4:21:8e:bb:8c:da:ec:57:a7:d3: fb:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:B9:C4:81:CE:00:E2:C5:63:B3:86:20:01:7E:52:9B:DF:8B:25:B9 X509v3 Authority Key Identifier: keyid:08:37:C9:9B:2A:4C:06:2D:5C:20:67:8F:9D:CF:32:07:AE:FD:5E:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDfJmypMBi1cIGePnc8yB679Xng.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/97nEgc4A4sVjs4YgAX5Sm9-LJbk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a01:4244::/30 Signature Algorithm: sha256WithRSAEncryption 6d:c4:56:a1:41:83:64:0f:30:7a:d0:d9:1e:b0:d5:f4:c1:e0: c2:ab:f6:17:c4:8f:38:32:b4:69:43:76:90:35:38:66:6c:b0: 64:6c:4f:fa:cb:76:7c:3b:92:7f:03:a0:5c:ed:e1:c8:6b:d5: a8:c5:df:54:bd:7f:53:3f:ce:10:02:30:03:bf:e8:90:23:67: 04:6f:b9:f8:05:a5:66:7e:e9:6c:63:88:25:3c:f6:a9:77:a3: e6:df:82:73:1c:4d:ee:94:5d:d7:c8:06:33:04:b3:43:42:85: d8:3f:14:29:61:6b:bb:74:88:f3:e8:76:2f:27:37:87:32:c6: 32:fa:0a:5e:e6:b8:ae:57:85:3e:c1:24:26:72:27:20:5c:85: 58:5f:f6:ab:c6:d9:bb:66:f3:9b:06:e5:6c:76:1b:8b:a3:4f: 7d:08:f1:64:b5:d6:78:66:6f:2b:d6:6a:aa:6f:e2:c8:56:d5: c5:fe:24:bc:cd:e5:9c:bd:02:81:4c:46:43:b0:6b:d7:df:ab: 05:6d:f4:6f:a1:0c:e4:15:57:0a:b0:ed:52:0e:62:30:16:ec: ff:0d:ae:b7:50:e9:63:7e:58:9e:60:7f:cb:f1:92:ee:a9:0a: 04:52:6e:6f:7c:90:25:57:42:7c:10:cd:01:4f:71:02:4e:0b: 88:d9:03:60 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZu7fNR2bv+vjBUgvpw6WqYcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4MzdjOTliMmE0YzA2MmQ1YzIwNjc4ZjlkY2YzMjA3YWVm ZDVlNzgwHhcNMjYwMTE0MDc1MTE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmN2I5YzQ4MWNlMDBlMmM1NjNiMzg2MjAwMTdlNTI5YmRmOGIyNWI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlrXRBMfgGY6NpYhdocV3hjdTEJYa w2EjESs93Qz+kRodVteMjeKPpVTSurzZ43UuHID+EpTAV/a+Ftob4mo8Q8H5vatl pxTBEZx2A0UQVt5npBYdmRQSlU5IaG0Txp2zp/GKVG/nSDoLxXMQ385JPMBuhI+a 5JfYZoI8uwZNaTrxf4zCS0KMhv3+nfLnmumgMew8CewoXvoDW7m5F8Au4xfr9L+X s55GLUmPWvTGHWAjcau1I2RLcLOOq6Sc1NRmUc2lUGu6h3XNgYmAqj84w6xQPgEH 97U/msMKNZXToz8UBExiEmJ1HuL9Ynh9vV9BeVJHraQhjruM2uxXp9P7+QIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPe5xIHOAOLFY7OGIAF+UpvfiyW5MB8GA1UdIwQY MBaAFAg3yZsqTAYtXCBnj53PMgeu/V54MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0RmSm15cE1CaTFjSUdlUG5jOHlCNjc5WG5nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS8wODk1ZDItYjc3OC00NmM0LWE2OTEt ZjEyMzdmNGM1Y2Y2LzEvOTduRWdjNEE0c1ZqczRZZ0FYNVNtOS1MSmJrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS8wODk1ZDItYjc3OC00NmM0LWE2OTEtZjEyMzdmNGM1Y2Y2 LzEvQ0RmSm15cE1CaTFjSUdlUG5jOHlCNjc5WG5nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUCKgFCRDAN BgkqhkiG9w0BAQsFAAOCAQEAbcRWoUGDZA8wetDZHrDV9MHgwqv2F8SPODK0aUN2 kDU4ZmywZGxP+st2fDuSfwOgXO3hyGvVqMXfVL1/Uz/OEAIwA7/okCNnBG+5+AWl Zn7pbGOIJTz2qXej5t+CcxxN7pRd18gGMwSzQ0KF2D8UKWFru3SI8+h2Lyc3hzLG MvoKXua4rleFPsEkJnInIFyFWF/2q8bZu2bzmwblbHYbi6NPfQjxZLXWeGZvK9Zq qm/iyFbVxf4kvM3lnL0CgUxGQ7Br19+rBW30b6EM5BVXCrDtUg5iMBbs/w2ut1Dp Y35YnmB/y/GS7qkKBFJub3yQJVdCfBDNAU9xAk4LiNkDYA== -----END CERTIFICATE-----Generated at Tue Jan 20 13:03:44 2026 by rpki-client