This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/ed8yDMGRECTMaD8k-df_wcQHSQA.roa File: ed8yDMGRECTMaD8k-df_wcQHSQA.roa (raw, json) Hash identifier: cwhw+g6gV0Cc1yz+CyTGqM6EEaAW5Bb5GiWG5Dbv1YY= Subject key identifier: 79:DF:32:0C:C1:91:10:24:CC:68:3F:24:F9:D7:FF:C1:C4:07:49:00 Certificate issuer: /CN=4456c14cd8724f9a909627b94e006cf69d12307b Certificate serial: 019B797EFB15EA0D7FF0351BF2462763BAE1 Authority key identifier: 44:56:C1:4C:D8:72:4F:9A:90:96:27:B9:4E:00:6C:F6:9D:12:30:7B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFbBTNhyT5qQlie5TgBs9p0SMHs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/ed8yDMGRECTMaD8k-df_wcQHSQA.roa Signing time: Thu 01 Jan 2026 12:18:43 +0000 ROA not before: Thu 01 Jan 2026 12:18:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209242 IP address blocks: 93.93.96.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/RFbBTNhyT5qQlie5TgBs9p0SMHs.crl rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/RFbBTNhyT5qQlie5TgBs9p0SMHs.mft rsync://rpki.ripe.net/repository/DEFAULT/RFbBTNhyT5qQlie5TgBs9p0SMHs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:fb:15:ea:0d:7f:f0:35:1b:f2:46:27:63:ba:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4456c14cd8724f9a909627b94e006cf69d12307b Validity Not Before: Jan 1 12:18:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=79df320cc1911024cc683f24f9d7ffc1c4074900 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:d8:bc:97:de:bf:9b:21:a6:70:5f:c5:02:64: 35:86:79:7f:5b:21:33:d8:54:b5:3b:62:dd:35:33: d2:1f:cd:23:9e:36:5e:34:eb:fc:ab:f9:ef:76:3c: 63:26:43:56:0a:0f:ba:bf:d1:6a:01:7f:20:5b:42: 72:90:be:3c:22:d8:9f:6c:86:c8:4d:7f:33:2f:9c: 20:ec:93:95:fb:04:f5:05:a0:c5:30:4b:41:6d:57: 92:a4:44:16:ec:63:7c:32:c7:da:0c:61:5d:1c:3d: 2a:21:4f:2b:6a:70:75:b3:bb:9c:ff:da:da:7d:a2: d5:d0:0c:2c:51:cb:02:8f:d1:df:3a:df:ae:b5:99: 07:a0:39:a0:df:37:4e:be:53:50:2f:0a:48:14:ce: 38:bd:e1:2a:e2:8e:6d:e2:10:88:bf:78:38:f1:62: bb:1e:10:71:14:4e:ef:8a:10:ea:9b:38:52:5d:d2: eb:53:01:ce:52:00:b2:8f:b4:ba:97:31:b4:72:c7: ab:96:e4:aa:95:5e:66:a0:9f:fb:2e:5a:d8:0f:ed: 6c:0f:fe:1d:04:36:d3:04:2e:ab:c4:ff:a0:bb:61: 40:61:3b:a7:8c:f3:8f:a3:ad:a5:e6:27:04:cd:8c: 3a:d8:e4:c7:83:c8:71:29:46:5f:ad:3e:7d:df:81: 39:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:DF:32:0C:C1:91:10:24:CC:68:3F:24:F9:D7:FF:C1:C4:07:49:00 X509v3 Authority Key Identifier: keyid:44:56:C1:4C:D8:72:4F:9A:90:96:27:B9:4E:00:6C:F6:9D:12:30:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFbBTNhyT5qQlie5TgBs9p0SMHs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/ed8yDMGRECTMaD8k-df_wcQHSQA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/RFbBTNhyT5qQlie5TgBs9p0SMHs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.93.96.0/21 Signature Algorithm: sha256WithRSAEncryption 17:7b:71:9a:f5:11:9e:85:cf:e0:91:66:b8:52:5a:2d:a5:ff: 26:57:ab:ce:99:b1:15:6e:d1:c4:5f:a6:c3:81:dd:97:04:e1: be:e5:e7:1d:40:e8:41:ff:f9:64:4e:74:7c:16:e0:d3:d1:8b: a8:d2:4f:23:a2:d0:1b:09:30:5c:d8:ca:a4:59:c6:76:9d:aa: 76:a0:46:9c:34:e4:b1:99:83:9c:ae:e9:a6:6a:07:7b:bc:f0: 52:ba:3e:e1:c3:18:0b:c8:8c:d8:d1:c0:74:68:de:cb:0b:9b: a3:18:93:94:64:df:23:93:fd:9b:ee:13:ad:0d:39:c3:4f:22: 1d:23:e2:25:53:57:1d:70:24:b1:a2:13:9c:3f:e1:99:20:14: 50:b8:71:fe:62:3a:b9:2c:8f:b7:a6:51:ba:5f:a3:8a:00:9a: 33:cc:ee:a2:79:65:ea:a6:4e:69:6f:26:cf:bb:af:2b:f7:69: ac:20:6f:69:24:c5:78:78:c8:16:c4:25:e4:7c:49:79:58:6e: 40:40:f5:9c:77:c9:01:0a:d7:44:ea:32:46:88:c7:71:6a:03: 7c:3b:d8:a2:da:9b:45:04:83:d7:be:5e:9e:59:1b:cc:28:d5: 2f:ee:66:6b:b9:2b:65:45:ce:1f:c5:d9:aa:c0:1e:09:d6:d6: e5:32:48:05 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fvsV6g1/8DUb8kYnY7rhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0NTZjMTRjZDg3MjRmOWE5MDk2MjdiOTRlMDA2Y2Y2OWQx MjMwN2IwHhcNMjYwMTAxMTIxODQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3OWRmMzIwY2MxOTExMDI0Y2M2ODNmMjRmOWQ3ZmZjMWM0MDc0OTAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ti8l96/myGmcF/FAmQ1hnl/WyEz 2FS1O2LdNTPSH80jnjZeNOv8q/nvdjxjJkNWCg+6v9FqAX8gW0JykL48ItifbIbI TX8zL5wg7JOV+wT1BaDFMEtBbVeSpEQW7GN8MsfaDGFdHD0qIU8ranB1s7uc/9ra faLV0AwsUcsCj9HfOt+utZkHoDmg3zdOvlNQLwpIFM44veEq4o5t4hCIv3g48WK7 HhBxFE7vihDqmzhSXdLrUwHOUgCyj7S6lzG0cserluSqlV5moJ/7LlrYD+1sD/4d BDbTBC6rxP+gu2FAYTunjPOPo62l5icEzYw62OTHg8hxKUZfrT5934E5lwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHnfMgzBkRAkzGg/JPnX/8HEB0kAMB8GA1UdIwQY MBaAFERWwUzYck+akJYnuU4AbPadEjB7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUkZiQlROaHlUNXFRbGllNVRnQnM5cDBTTUhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS81ZWNmYzItZGE3MC00MzMzLThmOTYt NWI4NzgyNWMwN2VlLzEvZWQ4eURNR1JFQ1RNYUQ4ay1kZl93Y1FIU1FBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS81ZWNmYzItZGE3MC00MzMzLThmOTYtNWI4NzgyNWMwN2Vl LzEvUkZiQlROaHlUNXFRbGllNVRnQnM5cDBTTUhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDXV1gMA0G CSqGSIb3DQEBCwUAA4IBAQAXe3Ga9RGehc/gkWa4Ulotpf8mV6vOmbEVbtHEX6bD gd2XBOG+5ecdQOhB//lkTnR8FuDT0Yuo0k8jotAbCTBc2MqkWcZ2nap2oEacNOSx mYOcrummagd7vPBSuj7hwxgLyIzY0cB0aN7LC5ujGJOUZN8jk/2b7hOtDTnDTyId I+IlU1cdcCSxohOcP+GZIBRQuHH+Yjq5LI+3plG6X6OKAJozzO6ieWXqpk5pbybP u68r92msIG9pJMV4eMgWxCXkfEl5WG5AQPWcd8kBCtdE6jJGiMdxagN8O9ii2ptF BIPXvl6eWRvMKNUv7mZruStlRc4fxdmqwB4J1tblMkgF -----END CERTIFICATE-----Generated at Sun Jan 25 09:18:48 2026 by rpki-client