This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/6e51cb-517f-4cb1-a3a0-d721bd2e9d53/1/96-EzPJNO2K_r89WsSa8F4wKfII.roa File: 96-EzPJNO2K_r89WsSa8F4wKfII.roa (raw, json) Hash identifier: TgdBDufBqmIta91fueVV5ENNB6Zw3/BojYphtII6yZ8= Subject key identifier: F7:AF:84:CC:F2:4D:3B:62:BF:AF:CF:56:B1:26:BC:17:8C:0A:7C:82 Certificate issuer: /CN=d22f3bd0bae603ab790602a96bbbc42b5322e88f Certificate serial: 019B7A5B9306C7EA1230F827F15117512B2D Authority key identifier: D2:2F:3B:D0:BA:E6:03:AB:79:06:02:A9:6B:BB:C4:2B:53:22:E8:8F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0i870LrmA6t5BgKpa7vEK1Mi6I8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/6e51cb-517f-4cb1-a3a0-d721bd2e9d53/1/96-EzPJNO2K_r89WsSa8F4wKfII.roa Signing time: Thu 01 Jan 2026 16:19:40 +0000 ROA not before: Thu 01 Jan 2026 16:19:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 396982 IP address blocks: 194.38.4.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/6e51cb-517f-4cb1-a3a0-d721bd2e9d53/1/0i870LrmA6t5BgKpa7vEK1Mi6I8.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/6e51cb-517f-4cb1-a3a0-d721bd2e9d53/1/0i870LrmA6t5BgKpa7vEK1Mi6I8.mft rsync://rpki.ripe.net/repository/DEFAULT/0i870LrmA6t5BgKpa7vEK1Mi6I8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 21:02:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:93:06:c7:ea:12:30:f8:27:f1:51:17:51:2b:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d22f3bd0bae603ab790602a96bbbc42b5322e88f Validity Not Before: Jan 1 16:19:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f7af84ccf24d3b62bfafcf56b126bc178c0a7c82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:14:b4:88:87:20:8a:fe:12:10:7b:f2:71:d9: f8:54:c1:c0:7c:bf:69:19:48:fe:da:ac:63:9c:de: 4d:74:4d:3d:ca:96:9f:e3:30:22:8b:68:ce:80:98: 8f:fc:21:51:d9:f0:9e:15:27:c9:8c:96:22:14:bf: 8f:b0:b3:0f:61:ba:ae:1d:2a:e4:71:27:5c:2c:9b: 9d:8f:b7:fd:18:81:69:c3:a8:5a:78:d6:8a:45:50: 5b:a8:7f:e1:24:51:18:b9:ef:50:9d:14:bf:d8:f5: 64:45:2f:47:f9:b7:6b:6b:38:19:71:e5:9c:55:cf: 40:57:bf:25:ce:38:03:25:94:34:31:d7:a2:ad:2e: 26:ee:17:f7:87:0d:60:22:5d:27:13:42:f9:c8:17: 0a:81:40:5e:b9:ca:28:51:dd:4b:09:f3:00:cf:c2: 34:45:f6:97:bf:1a:de:41:4d:32:27:47:88:4c:53: 54:07:30:b5:5f:2a:eb:f5:b9:ff:2b:ce:16:c1:64: 1d:c6:7d:2c:97:ed:14:ec:cd:69:65:51:e8:1a:85: 98:30:5f:7f:84:a8:1f:4d:2d:ce:74:1a:dd:8f:5e: 74:f9:71:fc:a4:87:37:40:27:56:f3:37:f6:97:0d: f1:33:d9:a9:e5:0e:ad:25:48:a0:c1:0b:5a:89:1a: 11:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:AF:84:CC:F2:4D:3B:62:BF:AF:CF:56:B1:26:BC:17:8C:0A:7C:82 X509v3 Authority Key Identifier: keyid:D2:2F:3B:D0:BA:E6:03:AB:79:06:02:A9:6B:BB:C4:2B:53:22:E8:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0i870LrmA6t5BgKpa7vEK1Mi6I8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6e51cb-517f-4cb1-a3a0-d721bd2e9d53/1/96-EzPJNO2K_r89WsSa8F4wKfII.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6e51cb-517f-4cb1-a3a0-d721bd2e9d53/1/0i870LrmA6t5BgKpa7vEK1Mi6I8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.38.4.0/22 Signature Algorithm: sha256WithRSAEncryption 5b:f3:a2:72:dd:13:80:5c:66:a6:00:2b:32:65:88:ce:23:f5: 6f:d0:b1:06:3d:df:a1:26:1f:87:ab:c3:5f:ca:df:71:22:9b: 3a:1e:6c:4e:57:cb:a8:9f:7d:ac:42:01:52:1e:09:ef:f6:83: ed:93:4d:71:97:f1:b9:b8:47:27:b8:92:bc:49:b8:20:88:b0: 2e:4e:df:af:97:22:4a:64:fd:ec:46:04:58:d7:cc:d6:61:f4: 7b:ec:2a:48:dd:5b:39:c9:af:e6:56:ff:eb:ee:f3:59:ec:54: 9a:c7:4f:3b:5f:c0:2f:0c:36:a4:10:e5:fb:55:a5:48:1b:4d: 58:0b:c4:f5:bb:ba:5e:98:ca:c0:74:7d:2c:dc:04:1a:ed:7d: ce:26:b7:14:2e:f7:ad:75:d2:89:21:a8:d0:db:fb:05:2a:5a: 35:ec:bc:c9:ac:aa:65:ad:87:2c:cf:01:b2:54:e2:ad:d5:f0: 90:b9:5f:88:91:66:4a:1c:88:fe:d0:5a:3c:7d:cd:a1:bb:a1: 1f:ee:23:2b:dc:54:6e:b8:be:4f:17:12:dd:ba:7b:87:d8:fb: 08:01:2c:28:e6:ea:5d:37:ee:c4:e3:c9:8f:e8:2a:fc:74:5a: 42:a4:53:f6:36:ae:29:35:80:40:75:2e:42:86:97:fc:eb:50: e2:ee:38:5b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6W5MGx+oSMPgn8VEXUSstMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyMmYzYmQwYmFlNjAzYWI3OTA2MDJhOTZiYmJjNDJiNTMy MmU4OGYwHhcNMjYwMTAxMTYxOTQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmN2FmODRjY2YyNGQzYjYyYmZhZmNmNTZiMTI2YmMxNzhjMGE3YzgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAthS0iIcgiv4SEHvycdn4VMHAfL9p GUj+2qxjnN5NdE09ypaf4zAii2jOgJiP/CFR2fCeFSfJjJYiFL+PsLMPYbquHSrk cSdcLJudj7f9GIFpw6haeNaKRVBbqH/hJFEYue9QnRS/2PVkRS9H+bdrazgZceWc Vc9AV78lzjgDJZQ0MdeirS4m7hf3hw1gIl0nE0L5yBcKgUBeucooUd1LCfMAz8I0 RfaXvxreQU0yJ0eITFNUBzC1Xyrr9bn/K84WwWQdxn0sl+0U7M1pZVHoGoWYMF9/ hKgfTS3OdBrdj150+XH8pIc3QCdW8zf2lw3xM9mp5Q6tJUigwQtaiRoR0QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPevhMzyTTtiv6/PVrEmvBeMCnyCMB8GA1UdIwQY MBaAFNIvO9C65gOreQYCqWu7xCtTIuiPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGk4NzBMcm1BNnQ1QmdLcGE3dkVLMU1pNkk4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS82ZTUxY2ItNTE3Zi00Y2IxLWEzYTAt ZDcyMWJkMmU5ZDUzLzEvOTYtRXpQSk5PMktfcjg5V3NTYThGNHdLZklJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS82ZTUxY2ItNTE3Zi00Y2IxLWEzYTAtZDcyMWJkMmU5ZDUz LzEvMGk4NzBMcm1BNnQ1QmdLcGE3dkVLMU1pNkk4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwiYEMA0G CSqGSIb3DQEBCwUAA4IBAQBb86Jy3ROAXGamACsyZYjOI/Vv0LEGPd+hJh+Hq8Nf yt9xIps6HmxOV8uon32sQgFSHgnv9oPtk01xl/G5uEcnuJK8SbggiLAuTt+vlyJK ZP3sRgRY18zWYfR77CpI3Vs5ya/mVv/r7vNZ7FSax087X8AvDDakEOX7VaVIG01Y C8T1u7pemMrAdH0s3AQa7X3OJrcULvetddKJIajQ2/sFKlo17LzJrKplrYcszwGy VOKt1fCQuV+IkWZKHIj+0Fo8fc2hu6Ef7iMr3FRuuL5PFxLdunuH2PsIASwo5upd N+7E48mP6Cr8dFpCpFP2Nq4pNYBAdS5Chpf861Di7jhb -----END CERTIFICATE-----Generated at Fri Jan 9 06:24:35 2026 by rpki-client