This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/6483c2-3921-4c6e-9373-31a4da61d576/1/97B8Hc4bCQZgRuJkPCMl4qPb1Ok.roa File: 97B8Hc4bCQZgRuJkPCMl4qPb1Ok.roa (raw, json) Hash identifier: xJ7Id6kjvXsULsQ/zceu4XIQnNvHcYudEa21JYWOH88= Subject key identifier: F7:B0:7C:1D:CE:1B:09:06:60:46:E2:64:3C:23:25:E2:A3:DB:D4:E9 Certificate issuer: /CN=c90edd10e6d9062215bfd64e45b3bf8a6b996379 Certificate serial: 019B78346D11E992A5D7EA43CCC9FE610674 Authority key identifier: C9:0E:DD:10:E6:D9:06:22:15:BF:D6:4E:45:B3:BF:8A:6B:99:63:79 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yQ7dEObZBiIVv9ZORbO_imuZY3k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/6483c2-3921-4c6e-9373-31a4da61d576/1/97B8Hc4bCQZgRuJkPCMl4qPb1Ok.roa Signing time: Thu 01 Jan 2026 06:17:40 +0000 ROA not before: Thu 01 Jan 2026 06:17:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 0 IP address blocks: 23.239.128.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/6483c2-3921-4c6e-9373-31a4da61d576/1/yQ7dEObZBiIVv9ZORbO_imuZY3k.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/6483c2-3921-4c6e-9373-31a4da61d576/1/yQ7dEObZBiIVv9ZORbO_imuZY3k.mft rsync://rpki.ripe.net/repository/DEFAULT/yQ7dEObZBiIVv9ZORbO_imuZY3k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 12:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:6d:11:e9:92:a5:d7:ea:43:cc:c9:fe:61:06:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c90edd10e6d9062215bfd64e45b3bf8a6b996379 Validity Not Before: Jan 1 06:17:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f7b07c1dce1b09066046e2643c2325e2a3dbd4e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:e1:15:f5:b2:f9:04:63:c2:79:97:94:5a:d3: 20:84:b9:f8:a9:7c:82:8c:c7:41:0f:39:83:ea:3b: 1a:81:e7:0e:18:39:04:c0:42:e0:51:46:b8:a2:48: a2:90:cf:f4:37:c1:06:5a:e7:ec:61:63:46:28:43: a9:63:bc:e1:cd:d2:3b:57:e5:07:dc:c3:4c:d2:4d: b7:5b:6d:47:1c:be:7f:41:ab:eb:12:53:05:ca:b3: 22:6e:bb:81:dc:be:63:03:08:38:6c:49:54:95:35: 69:48:44:10:8e:34:72:c1:38:02:5d:81:6b:91:ae: 98:26:b3:8a:a9:d1:cf:fe:a7:2e:ca:36:42:b1:03: dd:e1:82:90:2e:ee:6e:e2:ed:10:b0:2c:90:fd:ba: bf:f3:fb:1f:ec:79:d6:7a:1f:3f:89:ff:2e:67:4c: 01:10:55:d9:c3:45:91:2c:27:94:e5:78:4c:bc:7d: d1:a5:51:06:d8:dc:97:7d:65:fc:fd:6f:1d:28:d8: bb:c0:bf:c8:c2:31:27:e2:e9:f0:41:d6:6a:3b:b3: f7:db:a9:cd:eb:14:28:d3:d5:d1:8c:8e:4d:c4:3b: f9:17:e1:60:f0:c7:92:71:c7:d8:84:2b:74:75:83: b0:c7:cf:6c:6b:20:a7:af:e6:7f:23:5a:80:d4:1a: cd:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:B0:7C:1D:CE:1B:09:06:60:46:E2:64:3C:23:25:E2:A3:DB:D4:E9 X509v3 Authority Key Identifier: keyid:C9:0E:DD:10:E6:D9:06:22:15:BF:D6:4E:45:B3:BF:8A:6B:99:63:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yQ7dEObZBiIVv9ZORbO_imuZY3k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/6483c2-3921-4c6e-9373-31a4da61d576/1/97B8Hc4bCQZgRuJkPCMl4qPb1Ok.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/6483c2-3921-4c6e-9373-31a4da61d576/1/yQ7dEObZBiIVv9ZORbO_imuZY3k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.239.128.0/19 Signature Algorithm: sha256WithRSAEncryption 29:b7:01:19:14:e1:94:84:21:44:76:5d:0c:28:20:e9:9a:13: fb:a1:e2:9b:58:30:dc:d0:df:dc:b9:42:0c:a6:87:a3:c3:b3: 35:39:85:4f:06:5f:86:c9:0b:f2:33:37:df:ea:0c:7c:03:21: 11:f9:9d:60:50:91:d7:01:e6:13:80:74:74:d8:b8:fc:48:16: 28:e6:35:5c:2c:7a:7b:bf:07:31:1e:2d:55:be:38:49:eb:f9: b7:df:f0:69:05:84:b5:06:e6:4a:35:9e:ec:3e:92:0a:fd:04: b8:4a:fc:17:d0:6e:59:96:35:16:49:48:95:8f:96:d2:23:bb: 2f:0b:62:29:70:70:09:d9:d1:68:90:d2:d4:8d:d1:f7:fa:d9: e9:5b:4c:d9:37:d7:f4:f0:e9:6d:9b:28:c7:63:57:4a:44:5e: 2e:52:f8:cc:7b:91:ba:d9:20:10:ae:8e:b5:e4:84:f2:6a:7f: 1f:f5:df:b5:dc:7d:21:fd:86:b4:f3:c4:68:52:5c:85:73:32: 07:14:f4:7f:60:ee:b9:6d:8a:21:42:df:db:c7:55:b8:e8:37: f4:39:16:41:60:26:b0:f5:3e:8d:6d:e0:b3:73:85:8b:72:d8: e7:fd:32:6a:41:8c:d8:0e:ee:8b:b9:c6:fb:d0:a0:57:e5:e8: 92:5e:85:9c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NG0R6ZKl1+pDzMn+YQZ0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5MGVkZDEwZTZkOTA2MjIxNWJmZDY0ZTQ1YjNiZjhhNmI5 OTYzNzkwHhcNMjYwMTAxMDYxNzQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmN2IwN2MxZGNlMWIwOTA2NjA0NmUyNjQzYzIzMjVlMmEzZGJkNGU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4OEV9bL5BGPCeZeUWtMghLn4qXyC jMdBDzmD6jsagecOGDkEwELgUUa4okiikM/0N8EGWufsYWNGKEOpY7zhzdI7V+UH 3MNM0k23W21HHL5/QavrElMFyrMibruB3L5jAwg4bElUlTVpSEQQjjRywTgCXYFr ka6YJrOKqdHP/qcuyjZCsQPd4YKQLu5u4u0QsCyQ/bq/8/sf7HnWeh8/if8uZ0wB EFXZw0WRLCeU5XhMvH3RpVEG2NyXfWX8/W8dKNi7wL/IwjEn4unwQdZqO7P326nN 6xQo09XRjI5NxDv5F+Fg8MeSccfYhCt0dYOwx89sayCnr+Z/I1qA1BrNOwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPewfB3OGwkGYEbiZDwjJeKj29TpMB8GA1UdIwQY MBaAFMkO3RDm2QYiFb/WTkWzv4prmWN5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveVE3ZEVPYlpCaUlWdjlaT1JiT19pbXVaWTNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS82NDgzYzItMzkyMS00YzZlLTkzNzMt MzFhNGRhNjFkNTc2LzEvOTdCOEhjNGJDUVpnUnVKa1BDTWw0cVBiMU9rLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS82NDgzYzItMzkyMS00YzZlLTkzNzMtMzFhNGRhNjFkNTc2 LzEveVE3ZEVPYlpCaUlWdjlaT1JiT19pbXVaWTNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFF++AMA0G CSqGSIb3DQEBCwUAA4IBAQAptwEZFOGUhCFEdl0MKCDpmhP7oeKbWDDc0N/cuUIM poejw7M1OYVPBl+GyQvyMzff6gx8AyER+Z1gUJHXAeYTgHR02Lj8SBYo5jVcLHp7 vwcxHi1VvjhJ6/m33/BpBYS1BuZKNZ7sPpIK/QS4SvwX0G5ZljUWSUiVj5bSI7sv C2IpcHAJ2dFokNLUjdH3+tnpW0zZN9f08OltmyjHY1dKRF4uUvjMe5G62SAQro61 5ITyan8f9d+13H0h/Ya088RoUlyFczIHFPR/YO65bYohQt/bx1W46Df0ORZBYCaw 9T6NbeCzc4WLctjn/TJqQYzYDu6Lucb70KBX5eiSXoWc -----END CERTIFICATE-----Generated at Fri Jan 9 17:06:57 2026 by rpki-client