This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/h5YHyc0MmzGvq4YgXx8Mpbt82CY.roa File: h5YHyc0MmzGvq4YgXx8Mpbt82CY.roa (raw, json) Hash identifier: hT18pU7cTeKJ68OyFrQNbEbvLKO/d8ePLsbG9hT8IJE= Subject key identifier: 87:96:07:C9:CD:0C:9B:31:AF:AB:86:20:5F:1F:0C:A5:BB:7C:D8:26 Certificate issuer: /CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd Certificate serial: 019B7E384AD57885EBB7FD6B3B2257EB4756 Authority key identifier: 09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/h5YHyc0MmzGvq4YgXx8Mpbt82CY.roa Signing time: Fri 02 Jan 2026 10:19:36 +0000 ROA not before: Fri 02 Jan 2026 10:19:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 5089 IP address blocks: 80.93.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 09:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:4a:d5:78:85:eb:b7:fd:6b:3b:22:57:eb:47:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd Validity Not Before: Jan 2 10:19:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=879607c9cd0c9b31afab86205f1f0ca5bb7cd826 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:12:84:e4:8c:e2:f4:05:6f:b1:2b:7a:fb:be: b6:0a:aa:07:ed:b0:9f:7b:29:42:8a:2c:d8:1d:1e: 8c:2b:b2:02:16:98:7a:60:03:9d:c2:f3:54:ae:6b: 17:ab:52:a9:e1:fd:22:26:49:b4:45:11:ce:4e:ca: da:99:bc:af:38:7a:f2:c7:56:e1:bd:55:46:32:ff: d7:ee:f9:82:e6:d6:7a:c9:7f:e0:22:bc:82:85:7f: 5d:74:e7:46:40:b6:1e:94:ea:3c:c1:59:11:21:e0: 13:a1:26:7b:78:e4:f3:5c:5e:14:f1:77:22:0b:2f: e7:68:9b:d9:ea:8d:4c:4b:77:ce:93:e5:2e:80:d5: 0f:7e:3c:87:d4:4f:6f:09:03:6c:0c:30:68:f8:c7: 55:8d:94:60:6b:e2:fc:51:f6:f4:a1:9a:ef:75:89: 6a:44:68:13:9f:b8:21:a0:75:c2:d9:e4:a1:e2:2b: 72:35:ec:c1:15:26:7d:29:9d:9c:6a:bc:e4:18:91: 83:8b:2b:cf:7b:52:78:87:77:9b:e5:2c:1c:0a:2c: 61:a7:de:0d:36:b9:1d:b4:be:f4:e8:d5:c6:ac:dd: cc:73:bd:2c:19:46:3d:c3:05:64:9a:68:d4:68:93: 71:f2:0d:eb:52:c6:cb:b1:fc:3a:61:23:0f:e6:6f: 8e:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:96:07:C9:CD:0C:9B:31:AF:AB:86:20:5F:1F:0C:A5:BB:7C:D8:26 X509v3 Authority Key Identifier: keyid:09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/h5YHyc0MmzGvq4YgXx8Mpbt82CY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.93.200.0/24 Signature Algorithm: sha256WithRSAEncryption 3c:5f:b2:02:a5:a8:5a:56:13:b1:1f:09:07:a4:33:9c:ef:c0: 7d:e1:15:ee:88:57:70:3f:ca:53:4b:3e:21:db:31:4d:01:3f: 72:25:3c:db:81:ef:1f:fb:41:4f:7c:c0:63:03:16:33:49:67: 86:77:8a:09:fe:e6:11:59:19:b1:54:5b:a0:f1:81:a1:7d:b0: be:0c:be:f7:29:3d:9a:78:ea:4e:59:a9:a1:0f:9d:13:97:f1: f7:65:cf:ff:42:d3:61:e0:66:74:e4:70:b4:67:c0:06:45:f5: e5:ab:0b:40:02:a1:4c:8e:66:20:52:f1:28:6f:7f:7d:35:c9: 4d:c6:46:f0:71:0f:4a:3c:bb:6c:85:6c:71:f1:9a:b0:98:5a: ef:f6:a7:59:ca:79:88:5f:37:be:b6:0f:ec:04:31:12:00:2b: ab:23:35:99:a7:53:18:20:a8:d5:69:ad:c8:07:05:20:32:cf: 4a:e8:b8:a2:37:9e:c8:1b:63:16:e4:bf:95:63:0d:12:77:a3: 8f:d5:36:99:52:05:1f:26:d2:96:a1:7c:68:d4:38:4d:29:7f: 6b:53:b2:48:33:40:5a:44:f1:a5:79:40:ef:a4:33:f7:6f:bf: c1:b8:68:a7:72:41:37:d0:ae:20:c6:56:b2:92:80:93:c2:cc: 9a:93:98:da -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OErVeIXrt/1rOyJX60dWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5OGY3YmEzNGJjNjU2N2JkMzYxNmQ1NzRmNzI4NWRkNzU1 NmRiZmQwHhcNMjYwMTAyMTAxOTM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4Nzk2MDdjOWNkMGM5YjMxYWZhYjg2MjA1ZjFmMGNhNWJiN2NkODI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoxKE5Izi9AVvsSt6+762CqoH7bCf eylCiizYHR6MK7ICFph6YAOdwvNUrmsXq1Kp4f0iJkm0RRHOTsrambyvOHryx1bh vVVGMv/X7vmC5tZ6yX/gIryChX9ddOdGQLYelOo8wVkRIeAToSZ7eOTzXF4U8Xci Cy/naJvZ6o1MS3fOk+UugNUPfjyH1E9vCQNsDDBo+MdVjZRga+L8Ufb0oZrvdYlq RGgTn7ghoHXC2eSh4ityNezBFSZ9KZ2carzkGJGDiyvPe1J4h3eb5SwcCixhp94N NrkdtL706NXGrN3Mc70sGUY9wwVkmmjUaJNx8g3rUsbLsfw6YSMP5m+OYwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIeWB8nNDJsxr6uGIF8fDKW7fNgmMB8GA1UdIwQY MBaAFAmPe6NLxlZ702FtV09yhd11Vtv9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1k5N28wdkdWbnZUWVcxWFQzS0YzWFZXMl8wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC8zOGM1YWMtYjdlNy00MGRkLTk4ZDMt ZTIxNjZhZDc0ZTNmLzEvaDVZSHljME1tekd2cTRZZ1h4OE1wYnQ4MkNZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC8zOGM1YWMtYjdlNy00MGRkLTk4ZDMtZTIxNjZhZDc0ZTNm LzEvQ1k5N28wdkdWbnZUWVcxWFQzS0YzWFZXMl8wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUF3IMA0G CSqGSIb3DQEBCwUAA4IBAQA8X7ICpahaVhOxHwkHpDOc78B94RXuiFdwP8pTSz4h 2zFNAT9yJTzbge8f+0FPfMBjAxYzSWeGd4oJ/uYRWRmxVFug8YGhfbC+DL73KT2a eOpOWamhD50Tl/H3Zc//QtNh4GZ05HC0Z8AGRfXlqwtAAqFMjmYgUvEob399NclN xkbwcQ9KPLtshWxx8ZqwmFrv9qdZynmIXze+tg/sBDESACurIzWZp1MYIKjVaa3I BwUgMs9K6LiiN57IG2MW5L+VYw0Sd6OP1TaZUgUfJtKWoXxo1DhNKX9rU7JIM0Ba RPGleUDvpDP3b7/BuGinckE30K4gxlaykoCTwsyak5ja -----END CERTIFICATE-----Generated at Thu Jan 8 14:19:46 2026 by rpki-client