This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/93F83tT2Wunj2ibLPRWbOwsrgjw.roa File: 93F83tT2Wunj2ibLPRWbOwsrgjw.roa (raw, json) Hash identifier: JbaoQPD70k3GYUMe5PmYVrd4g7l0SgbWLphprt9qBGY= Subject key identifier: F7:71:7C:DE:D4:F6:5A:E9:E3:DA:26:CB:3D:15:9B:3B:0B:2B:82:3C Certificate issuer: /CN=297c508d23b38315bbf45b726d22050a46127b8c Certificate serial: 019B797EEEA49C6C8957B29AF889084F3E6D Authority key identifier: 29:7C:50:8D:23:B3:83:15:BB:F4:5B:72:6D:22:05:0A:46:12:7B:8C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KXxQjSOzgxW79FtybSIFCkYSe4w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/93F83tT2Wunj2ibLPRWbOwsrgjw.roa Signing time: Thu 01 Jan 2026 12:18:40 +0000 ROA not before: Thu 01 Jan 2026 12:18:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20926 IP address blocks: 79.98.16.0/21 maxlen: 24 80.74.64.0/20 maxlen: 24 84.239.64.0/18 maxlen: 24 141.101.56.0/22 maxlen: 24 185.10.176.0/22 maxlen: 24 185.47.240.0/22 maxlen: 24 2a00:6900::/44 maxlen: 48 2a00:6900:f0::/48 maxlen: 48 2a00:6901::/32 maxlen: 48 2a03:5d40::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/KXxQjSOzgxW79FtybSIFCkYSe4w.crl rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/KXxQjSOzgxW79FtybSIFCkYSe4w.mft rsync://rpki.ripe.net/repository/DEFAULT/KXxQjSOzgxW79FtybSIFCkYSe4w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 06:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:ee:a4:9c:6c:89:57:b2:9a:f8:89:08:4f:3e:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=297c508d23b38315bbf45b726d22050a46127b8c Validity Not Before: Jan 1 12:18:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f7717cded4f65ae9e3da26cb3d159b3b0b2b823c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:68:da:69:21:d8:f0:65:13:04:96:00:03:42: 7c:a7:3b:fb:4f:aa:3c:ca:78:64:d2:57:e7:d4:0a: 5c:21:06:2d:87:e9:a3:05:d1:f4:38:fd:cd:59:10: 52:22:29:92:af:43:fb:f2:98:3e:88:91:81:3c:38: dc:36:3f:61:7a:49:c9:60:47:12:c4:d5:e8:7b:d4: 26:40:1c:3a:ce:11:ca:28:7a:eb:30:82:ab:d8:ea: 3d:05:df:83:f7:4f:6b:e2:08:58:8c:9f:29:5b:a4: 49:40:4b:29:d0:c0:0b:37:db:d5:61:cd:e4:e6:f8: 87:8c:2a:d5:32:f8:5e:2d:cd:47:7f:30:d6:12:64: a7:c7:58:b0:19:c3:10:30:e3:74:9e:58:d8:89:66: f6:25:28:aa:33:18:6f:0b:95:e4:4c:fc:04:b7:c3: 06:d1:b9:dd:c4:dd:2d:bc:1d:0f:9e:b3:13:5e:cc: 5d:29:f4:0d:4c:98:5e:e6:a9:eb:3d:20:ab:c1:27: 31:9b:b1:b5:97:84:e7:f8:40:63:41:7d:55:95:dd: 91:11:79:a7:8a:5b:31:f6:a7:9e:70:9b:c1:35:79: f9:25:b6:cd:d0:00:01:c4:e3:74:4b:89:ba:25:90: b6:a8:d2:7e:18:f9:1d:34:23:68:31:10:85:1b:c7: d1:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:71:7C:DE:D4:F6:5A:E9:E3:DA:26:CB:3D:15:9B:3B:0B:2B:82:3C X509v3 Authority Key Identifier: keyid:29:7C:50:8D:23:B3:83:15:BB:F4:5B:72:6D:22:05:0A:46:12:7B:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXxQjSOzgxW79FtybSIFCkYSe4w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/93F83tT2Wunj2ibLPRWbOwsrgjw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/KXxQjSOzgxW79FtybSIFCkYSe4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.98.16.0/21 80.74.64.0/20 84.239.64.0/18 141.101.56.0/22 185.10.176.0/22 185.47.240.0/22 IPv6: 2a00:6900::/44 2a00:6900:f0::/48 2a00:6901::/32 2a03:5d40::/32 Signature Algorithm: sha256WithRSAEncryption 1a:5b:aa:8c:d0:a7:53:66:5a:4c:0d:55:4a:f8:5e:91:50:66: 9a:87:df:38:5f:3b:d3:b9:04:eb:0e:eb:18:ae:9f:32:db:7f: 16:5b:8d:62:7e:33:11:c9:94:2f:3e:3e:12:66:ef:cf:e0:8e: 29:a5:25:ca:1f:f8:09:e8:72:bb:9f:ed:64:25:fe:69:63:42: b5:48:6e:da:aa:65:3b:7b:81:8c:c3:a3:13:de:95:58:0a:7d: 3e:8b:67:3f:f9:09:32:6b:d9:c5:75:b9:7e:c9:b1:59:f4:2e: a0:9e:56:19:c7:5a:c2:e6:94:cc:3a:2b:18:1c:4d:9b:b8:8e: 30:4b:d8:76:c3:20:b3:61:c8:ed:6d:42:c4:f8:bc:e4:f0:2c: b6:37:eb:4d:62:b5:a8:4e:1e:a4:0f:6e:10:c1:77:1d:cc:63: ec:f6:bb:77:b0:f8:56:83:c3:c8:12:0a:f5:0a:28:f8:58:ff: d0:1e:53:51:65:41:2e:a3:b1:09:58:fc:02:04:d5:c9:c5:58: 2a:50:94:78:23:46:7d:bc:a2:2f:93:a0:60:29:f0:78:04:9b: ee:c1:b9:6d:8a:01:0d:e0:43:7b:2e:b4:38:79:dc:89:f9:18: 8e:90:12:0d:f2:c4:14:82:7c:a4:83:c7:aa:a5:59:80:03:bc: 89:75:3d:83 -----BEGIN CERTIFICATE----- MIIFQzCCBCugAwIBAgISAZt5fu6knGyJV7Ka+IkITz5tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5N2M1MDhkMjNiMzgzMTViYmY0NWI3MjZkMjIwNTBhNDYx MjdiOGMwHhcNMjYwMTAxMTIxODQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNzcxN2NkZWQ0ZjY1YWU5ZTNkYTI2Y2IzZDE1OWIzYjBiMmI4MjNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA42jaaSHY8GUTBJYAA0J8pzv7T6o8 ynhk0lfn1ApcIQYth+mjBdH0OP3NWRBSIimSr0P78pg+iJGBPDjcNj9heknJYEcS xNXoe9QmQBw6zhHKKHrrMIKr2Oo9Bd+D909r4ghYjJ8pW6RJQEsp0MALN9vVYc3k 5viHjCrVMvheLc1HfzDWEmSnx1iwGcMQMON0nljYiWb2JSiqMxhvC5XkTPwEt8MG 0bndxN0tvB0PnrMTXsxdKfQNTJhe5qnrPSCrwScxm7G1l4Tn+EBjQX1Vld2REXmn ilsx9qeecJvBNXn5JbbN0AABxON0S4m6JZC2qNJ+GPkdNCNoMRCFG8fRlQIDAQAB o4ICTzCCAkswHQYDVR0OBBYEFPdxfN7U9lrp49omyz0VmzsLK4I8MB8GA1UdIwQY MBaAFCl8UI0js4MVu/Rbcm0iBQpGEnuMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1h4UWpTT3pneFc3OUZ0eWJTSUZDa1lTZTR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC84YWJlZWQtZjUzYi00Nzc2LWE4ZTIt MzZlOWE3OWJkOTUwLzEvOTNGODN0VDJXdW5qMmliTFBSV2JPd3NyZ2p3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC84YWJlZWQtZjUzYi00Nzc2LWE4ZTItMzZlOWE3OWJkOTUw LzEvS1h4UWpTT3pneFc3OUZ0eWJTSUZDa1lTZTR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGUGCCsGAQUFBwEHAQH/BFYwVDAqBAIAATAkAwQDT2IQAwQE UEpAAwQGVO9AAwQCjWU4AwQCuQqwAwQCuS/wMCYEAgACMCADBwQqAGkAAAADBwAq AGkAAPADBQAqAGkBAwUAKgNdQDANBgkqhkiG9w0BAQsFAAOCAQEAGluqjNCnU2Za TA1VSvhekVBmmoffOF8707kE6w7rGK6fMtt/FluNYn4zEcmULz4+Embvz+COKaUl yh/4Cehyu5/tZCX+aWNCtUhu2qplO3uBjMOjE96VWAp9PotnP/kJMmvZxXW5fsmx WfQuoJ5WGcdawuaUzDorGBxNm7iOMEvYdsMgs2HI7W1CxPi85PAstjfrTWK1qE4e pA9uEMF3Hcxj7Pa7d7D4VoPDyBIK9Qoo+Fj/0B5TUWVBLqOxCVj8AgTVycVYKlCU eCNGfbyiL5OgYCnweASb7sG5bYoBDeBDey60OHncifkYjpASDfLEFIJ8pIPHqqVZ gAO8iXU9gw== -----END CERTIFICATE-----Generated at Mon Jan 26 13:44:38 2026 by rpki-client