This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/vv0I_9PClUpsKdM3Ws5mpj_Dbv0.roa File: vv0I_9PClUpsKdM3Ws5mpj_Dbv0.roa (raw, json) Hash identifier: Adx+Z7kMAGiZBllXqmWexxHoAMFVLGtlGl9lUzeKx9M= Subject key identifier: BE:FD:08:FF:D3:C2:95:4A:6C:29:D3:37:5A:CE:66:A6:3F:C3:6E:FD Certificate issuer: /CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd Certificate serial: 019B7E384B64A124D9B26E3A0E23363D4CEC Authority key identifier: 09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/vv0I_9PClUpsKdM3Ws5mpj_Dbv0.roa Signing time: Fri 02 Jan 2026 10:19:37 +0000 ROA not before: Fri 02 Jan 2026 10:19:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9009 IP address blocks: 80.93.206.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 09:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:4b:64:a1:24:d9:b2:6e:3a:0e:23:36:3d:4c:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd Validity Not Before: Jan 2 10:19:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=befd08ffd3c2954a6c29d3375ace66a63fc36efd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:dc:d8:93:89:02:db:66:b5:26:bb:8f:52:20: e9:98:19:b5:11:68:f1:6d:e9:6a:cc:fd:b5:e7:56: 1c:8f:ca:68:e4:39:71:7c:c2:ea:0d:b9:5f:3d:e5: 8f:a2:b8:a1:79:b3:3d:8e:84:bc:dd:5c:c5:73:4a: a3:a8:f7:68:ba:4b:19:15:3d:82:5d:fe:59:82:1e: b5:e3:b2:48:80:3a:2b:e1:1b:4e:a1:47:31:38:28: d1:05:99:11:7f:5c:d6:52:10:3c:7f:f6:18:02:23: c6:8d:4e:ab:a0:88:7d:9e:0a:d2:ad:5c:ca:49:93: 57:47:fc:2c:95:c1:7a:45:f6:ea:15:08:a7:4f:4f: 6e:ca:a4:f6:43:46:47:74:eb:ab:08:97:e9:b0:81: bb:22:62:7a:44:fc:9d:bc:2a:0f:99:b1:10:32:22: b3:22:78:c0:76:55:5a:8f:35:eb:32:b9:a7:b0:d1: 08:59:ac:55:68:c8:2a:3f:44:a1:0b:41:ee:d2:08: ae:45:dc:e2:23:9d:f2:99:2f:4f:f1:08:e9:98:ca: 71:a9:cb:41:02:c0:3d:51:b5:c0:81:3e:c7:e2:0f: ee:63:01:cd:a0:75:28:12:dd:d4:a1:a4:1e:4d:0c: 5f:b4:dc:b9:72:d7:d0:38:b5:62:2b:5c:32:a0:70: b4:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:FD:08:FF:D3:C2:95:4A:6C:29:D3:37:5A:CE:66:A6:3F:C3:6E:FD X509v3 Authority Key Identifier: keyid:09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/vv0I_9PClUpsKdM3Ws5mpj_Dbv0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.93.206.0/24 Signature Algorithm: sha256WithRSAEncryption 2b:67:76:5b:d5:60:f2:06:d8:fd:94:4a:ad:8f:7b:fa:7d:44: 4e:60:32:c4:60:f2:15:d5:a2:9b:2d:41:80:a7:b3:c2:38:a8: cf:7c:4a:9b:0e:6c:28:8e:73:19:78:6d:84:cf:e8:97:4d:71: ae:ec:a3:03:73:bb:11:c2:5a:8a:ae:90:73:c6:12:8b:5c:a1: 80:bd:a1:10:92:49:54:b4:db:62:d5:67:10:42:ab:83:19:b3: 30:0d:c8:44:d2:8d:05:d7:df:6b:74:d8:2e:38:2c:bc:8b:99: 48:44:a5:c1:c7:68:33:9c:9e:18:88:3d:1f:47:af:f1:25:41: cc:4d:34:7f:02:51:59:ca:12:76:4e:00:04:70:0f:ab:6b:8f: b8:70:43:8e:7b:e1:6b:7b:29:0d:2d:f8:40:d7:07:db:9d:64: 3d:3a:0d:a0:0f:97:6d:4f:62:c3:13:98:38:9d:fc:06:8a:c8: 19:40:aa:57:20:4d:7c:35:47:7d:0f:53:1d:15:cf:75:c8:64: 80:f7:3a:63:0c:d4:e1:20:0f:93:dd:fa:75:e2:84:49:62:33: 8d:5b:39:b8:9c:c4:12:e8:2f:06:00:53:a6:6a:e3:4b:b3:12: fe:b0:49:3e:1b:83:a3:d6:cc:bd:cd:46:e4:31:aa:df:03:11: e3:3f:5f:28 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OEtkoSTZsm46DiM2PUzsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5OGY3YmEzNGJjNjU2N2JkMzYxNmQ1NzRmNzI4NWRkNzU1 NmRiZmQwHhcNMjYwMTAyMTAxOTM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZWZkMDhmZmQzYzI5NTRhNmMyOWQzMzc1YWNlNjZhNjNmYzM2ZWZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4tzYk4kC22a1JruPUiDpmBm1EWjx belqzP2151Ycj8po5DlxfMLqDblfPeWPorihebM9joS83VzFc0qjqPdouksZFT2C Xf5Zgh6147JIgDor4RtOoUcxOCjRBZkRf1zWUhA8f/YYAiPGjU6roIh9ngrSrVzK SZNXR/wslcF6RfbqFQinT09uyqT2Q0ZHdOurCJfpsIG7ImJ6RPydvCoPmbEQMiKz InjAdlVajzXrMrmnsNEIWaxVaMgqP0ShC0Hu0giuRdziI53ymS9P8QjpmMpxqctB AsA9UbXAgT7H4g/uYwHNoHUoEt3UoaQeTQxftNy5ctfQOLViK1wyoHC0hQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFL79CP/TwpVKbCnTN1rOZqY/w279MB8GA1UdIwQY MBaAFAmPe6NLxlZ702FtV09yhd11Vtv9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1k5N28wdkdWbnZUWVcxWFQzS0YzWFZXMl8wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC8zOGM1YWMtYjdlNy00MGRkLTk4ZDMt ZTIxNjZhZDc0ZTNmLzEvdnYwSV85UENsVXBzS2RNM1dzNW1wal9EYnYwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC8zOGM1YWMtYjdlNy00MGRkLTk4ZDMtZTIxNjZhZDc0ZTNm LzEvQ1k5N28wdkdWbnZUWVcxWFQzS0YzWFZXMl8wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUF3OMA0G CSqGSIb3DQEBCwUAA4IBAQArZ3Zb1WDyBtj9lEqtj3v6fUROYDLEYPIV1aKbLUGA p7PCOKjPfEqbDmwojnMZeG2Ez+iXTXGu7KMDc7sRwlqKrpBzxhKLXKGAvaEQkklU tNti1WcQQquDGbMwDchE0o0F199rdNguOCy8i5lIRKXBx2gznJ4YiD0fR6/xJUHM TTR/AlFZyhJ2TgAEcA+ra4+4cEOOe+FreykNLfhA1wfbnWQ9Og2gD5dtT2LDE5g4 nfwGisgZQKpXIE18NUd9D1MdFc91yGSA9zpjDNThIA+T3fp14oRJYjONWzm4nMQS 6C8GAFOmauNLsxL+sEk+G4Oj1sy9zUbkMarfAxHjP18o -----END CERTIFICATE-----Generated at Thu Jan 8 14:18:14 2026 by rpki-client