This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/d_rxJJRdc6lxglOZm6MPcxsRKVk.roa File: d_rxJJRdc6lxglOZm6MPcxsRKVk.roa (raw, json) Hash identifier: 09cxzd1TQUa9YcSDbUPMORsaaMIR6hUWI/wpDIjuvuY= Subject key identifier: 77:FA:F1:24:94:5D:73:A9:71:82:53:99:9B:A3:0F:73:1B:11:29:59 Certificate issuer: /CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd Certificate serial: 019BB7D5B35A989F5633E9D24B729EEF99F7 Authority key identifier: 09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/d_rxJJRdc6lxglOZm6MPcxsRKVk.roa Signing time: Tue 13 Jan 2026 14:49:54 +0000 ROA not before: Tue 13 Jan 2026 14:49:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 834 IP address blocks: 80.93.192.0/24 maxlen: 24 80.93.194.0/24 maxlen: 24 80.93.195.0/24 maxlen: 24 80.93.196.0/24 maxlen: 24 80.93.206.0/24 maxlen: 24 80.93.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 16 Jan 2026 08:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b7:d5:b3:5a:98:9f:56:33:e9:d2:4b:72:9e:ef:99:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd Validity Not Before: Jan 13 14:49:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=77faf124945d73a9718253999ba30f731b112959 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:bf:1b:a8:b8:b5:f3:25:20:a4:6e:d8:51:5c: 33:3b:31:06:04:af:e0:64:5d:77:12:1b:a8:df:47: ec:2a:88:58:d4:61:a0:16:a6:2f:a7:e8:bc:80:93: 47:e5:da:57:3f:6d:96:a9:e1:31:2f:7d:3e:06:bd: 03:9c:31:81:e8:9b:1b:a6:71:0a:fc:9a:a7:3b:fb: 98:64:77:a4:10:0e:f4:e7:f9:05:b3:c4:1a:d9:07: 45:07:03:35:cc:ac:2d:e5:e1:71:23:b9:3e:45:58: 91:4b:23:88:44:fd:2b:20:77:76:f6:75:5d:44:23: 74:f9:fe:d7:03:e0:35:0d:12:b2:40:fb:43:d1:36: 4f:dc:d7:18:bc:e9:d1:d6:f7:e1:7b:f6:92:3f:4d: cd:36:63:24:0c:d9:24:55:83:3d:59:59:51:18:5f: a3:fd:a7:0f:a9:87:78:96:2c:4c:b6:6e:be:55:6f: aa:62:8f:aa:53:4c:39:6e:2c:98:2c:3d:a9:72:71: 72:29:47:0e:71:d2:db:d8:28:b7:a5:87:71:94:57: 2c:57:06:b9:d8:e7:52:89:f1:e1:28:69:27:e1:a9: b5:64:39:bb:a4:0a:b0:f8:4e:03:44:a5:35:e0:0e: 06:b7:49:a9:72:8c:62:3d:87:ef:de:7e:ac:23:c8: 2e:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:FA:F1:24:94:5D:73:A9:71:82:53:99:9B:A3:0F:73:1B:11:29:59 X509v3 Authority Key Identifier: keyid:09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/d_rxJJRdc6lxglOZm6MPcxsRKVk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.93.192.0/24 80.93.194.0-80.93.196.255 80.93.206.0/23 Signature Algorithm: sha256WithRSAEncryption 14:74:8f:8f:59:f0:ac:c3:27:fd:51:7d:0d:d7:f0:f8:a0:7e: 69:ae:e1:7e:bd:05:ad:ba:a7:d5:e0:9a:12:5f:24:98:de:00: bb:a9:df:1c:75:4a:6e:2c:d2:7c:75:42:1b:b3:8e:30:1b:86: 92:05:db:a5:fd:24:f2:2c:e0:03:66:e9:63:b3:49:6f:ec:67: 69:35:8b:e0:6e:71:46:ad:ca:99:28:4b:1a:72:c8:f8:cb:3a: 75:b9:16:78:96:fa:34:64:e9:4b:bf:70:da:ca:f0:54:bf:bb: 53:9b:1d:f5:b0:62:43:8e:7c:a7:b2:34:36:08:6e:56:48:5f: 0c:28:0c:b9:a8:1f:29:48:81:49:72:72:58:59:f2:cc:25:3a: 54:e0:32:4e:bf:23:a4:72:b2:c1:cb:3c:03:99:d9:89:ce:6a: e2:b7:4b:8d:54:3a:4c:e9:64:e6:6e:32:26:ab:5c:c8:f6:c7: 3a:44:4f:0d:a8:51:3d:5d:39:fa:0c:60:d0:74:37:08:c0:59: 8c:76:b2:dd:3d:3c:c8:c4:5a:a3:2c:f4:24:6a:5c:9d:58:16: da:be:e5:e6:b2:c1:8d:f8:ad:74:bb:7c:e9:f1:84:ba:e2:d7: 6f:db:d6:da:0e:2a:ff:f0:b8:a7:39:1e:5b:91:90:1a:e4:6f: 3d:4b:9d:61 -----BEGIN CERTIFICATE----- MIIFETCCA/mgAwIBAgISAZu31bNamJ9WM+nSS3Ke75n3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5OGY3YmEzNGJjNjU2N2JkMzYxNmQ1NzRmNzI4NWRkNzU1 NmRiZmQwHhcNMjYwMTEzMTQ0OTU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3N2ZhZjEyNDk0NWQ3M2E5NzE4MjUzOTk5YmEzMGY3MzFiMTEyOTU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2L8bqLi18yUgpG7YUVwzOzEGBK/g ZF13Ehuo30fsKohY1GGgFqYvp+i8gJNH5dpXP22WqeExL30+Br0DnDGB6JsbpnEK /JqnO/uYZHekEA705/kFs8Qa2QdFBwM1zKwt5eFxI7k+RViRSyOIRP0rIHd29nVd RCN0+f7XA+A1DRKyQPtD0TZP3NcYvOnR1vfhe/aSP03NNmMkDNkkVYM9WVlRGF+j /acPqYd4lixMtm6+VW+qYo+qU0w5biyYLD2pcnFyKUcOcdLb2Ci3pYdxlFcsVwa5 2OdSifHhKGkn4am1ZDm7pAqw+E4DRKU14A4Gt0mpcoxiPYfv3n6sI8guewIDAQAB o4ICHTCCAhkwHQYDVR0OBBYEFHf68SSUXXOpcYJTmZujD3MbESlZMB8GA1UdIwQY MBaAFAmPe6NLxlZ702FtV09yhd11Vtv9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1k5N28wdkdWbnZUWVcxWFQzS0YzWFZXMl8wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC8zOGM1YWMtYjdlNy00MGRkLTk4ZDMt ZTIxNjZhZDc0ZTNmLzEvZF9yeEpKUmRjNmx4Z2xPWm02TVBjeHNSS1ZrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC8zOGM1YWMtYjdlNy00MGRkLTk4ZDMtZTIxNjZhZDc0ZTNm LzEvQ1k5N28wdkdWbnZUWVcxWFQzS0YzWFZXMl8wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQAUF3AMAwD BAFQXcIDBABQXcQDBAFQXc4wDQYJKoZIhvcNAQELBQADggEBABR0j49Z8KzDJ/1R fQ3X8Pigfmmu4X69Ba26p9XgmhJfJJjeALup3xx1Sm4s0nx1QhuzjjAbhpIF26X9 JPIs4ANm6WOzSW/sZ2k1i+BucUatypkoSxpyyPjLOnW5FniW+jRk6Uu/cNrK8FS/ u1ObHfWwYkOOfKeyNDYIblZIXwwoDLmoHylIgUlyclhZ8swlOlTgMk6/I6RyssHL PAOZ2YnOauK3S41UOkzpZOZuMiarXMj2xzpETw2oUT1dOfoMYNB0NwjAWYx2st09 PMjEWqMs9CRqXJ1YFtq+5eaywY34rXS7fOnxhLri12/b1toOKv/wuKc5HluRkBrk bz1LnWE= -----END CERTIFICATE-----Generated at Thu Jan 15 16:42:54 2026 by rpki-client