This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/SV9q8qOenCpWfyZ_KmzmoZ8gOso.roa File: SV9q8qOenCpWfyZ_KmzmoZ8gOso.roa (raw, json) Hash identifier: 316dq0EbdTMXN9J+sZt1LaGvCQCGOGhyEJsLNYpVENg= Subject key identifier: 49:5F:6A:F2:A3:9E:9C:2A:56:7F:26:7F:2A:6C:E6:A1:9F:20:3A:CA Certificate issuer: /CN=380099a81b346f9abcaf26056f5b77094d1cf113 Certificate serial: 019B7E392F6709A7E4AED876713087FD4535 Authority key identifier: 38:00:99:A8:1B:34:6F:9A:BC:AF:26:05:6F:5B:77:09:4D:1C:F1:13 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OACZqBs0b5q8ryYFb1t3CU0c8RM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/SV9q8qOenCpWfyZ_KmzmoZ8gOso.roa Signing time: Fri 02 Jan 2026 10:20:35 +0000 ROA not before: Fri 02 Jan 2026 10:20:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44270 IP address blocks: 79.173.112.0/20 maxlen: 21 94.243.240.0/20 maxlen: 21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/OACZqBs0b5q8ryYFb1t3CU0c8RM.crl rsync://rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/OACZqBs0b5q8ryYFb1t3CU0c8RM.mft rsync://rpki.ripe.net/repository/DEFAULT/OACZqBs0b5q8ryYFb1t3CU0c8RM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:2f:67:09:a7:e4:ae:d8:76:71:30:87:fd:45:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=380099a81b346f9abcaf26056f5b77094d1cf113 Validity Not Before: Jan 2 10:20:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=495f6af2a39e9c2a567f267f2a6ce6a19f203aca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:be:86:00:b4:57:b7:c7:8d:b5:70:0d:84:d6: 44:20:c2:a8:cb:3c:12:a1:78:1d:bc:3d:ff:3b:4f: f6:bf:7a:91:e1:c0:8b:54:28:d4:0f:11:4b:25:bb: 9e:45:4b:00:35:45:20:d0:9f:0b:81:04:f1:1c:9a: 13:26:f0:aa:c8:7c:51:e5:bb:d4:39:ef:6b:2f:ec: 8d:62:29:1b:f8:e1:dd:1d:b8:ba:76:e1:d7:06:35: e2:a3:e4:d2:b6:89:96:c3:61:e9:2c:2e:7e:36:68: 97:94:4f:39:9b:6c:7e:96:9d:7f:14:a3:00:86:76: d4:1d:7e:7e:8b:36:a1:32:e4:0e:e3:39:57:5a:80: 01:31:d2:11:36:f1:21:27:87:67:78:d6:1c:f9:80: 2b:b7:33:83:4b:e5:03:fb:73:c7:89:f0:41:1c:59: a8:d9:33:a8:fc:df:1a:0a:2e:00:5d:25:5b:6a:dd: dd:53:81:43:1b:75:4b:d8:ae:0a:a3:b2:d0:fb:d1: c4:dc:b7:20:be:7b:5b:a7:01:4c:51:c5:e8:52:ef: 35:6a:d3:75:ef:89:fc:8b:da:45:9b:e3:b2:61:b0: 40:04:e5:83:8a:f6:ee:f8:e4:b8:16:00:ac:f6:12: 8d:13:6e:82:4f:2d:92:fd:65:f8:5d:8b:a6:f5:4b: 64:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:5F:6A:F2:A3:9E:9C:2A:56:7F:26:7F:2A:6C:E6:A1:9F:20:3A:CA X509v3 Authority Key Identifier: keyid:38:00:99:A8:1B:34:6F:9A:BC:AF:26:05:6F:5B:77:09:4D:1C:F1:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OACZqBs0b5q8ryYFb1t3CU0c8RM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/SV9q8qOenCpWfyZ_KmzmoZ8gOso.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/OACZqBs0b5q8ryYFb1t3CU0c8RM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.173.112.0/20 94.243.240.0/20 Signature Algorithm: sha256WithRSAEncryption 88:41:4a:fb:91:2a:65:93:80:64:af:41:7b:99:07:f5:46:07: de:32:f7:11:82:ae:b0:78:da:21:45:80:98:db:2c:47:70:a4: e8:43:4e:00:d9:b7:ef:21:86:21:37:b7:03:23:13:ec:a5:ba: 63:19:4f:23:39:a3:41:5c:f3:57:47:c9:21:c7:c6:07:6e:cc: 8c:98:20:6d:a9:95:82:b0:4a:82:ba:4b:36:15:f3:55:68:29: f2:a1:ef:78:a7:a9:c8:2b:d6:4b:9c:50:0e:88:d7:0f:ee:3e: 14:b8:ab:e2:bb:56:ce:35:79:30:cb:61:22:34:21:f9:ec:a6: 98:6e:3d:00:fb:cb:1f:ea:1c:dd:02:a5:6e:8e:8d:cc:2a:f8: d2:56:35:cc:cf:c2:98:c6:08:6a:36:32:49:06:b3:b6:8a:0f: db:b7:a7:d9:1a:5f:fc:37:26:7f:69:2f:a9:74:61:9b:25:28: 08:16:4e:1b:10:bb:7a:17:61:2d:12:67:3a:31:e6:ff:73:e1: ed:e5:9f:64:2f:db:36:f2:a4:73:af:df:1f:63:74:4d:77:ac: ac:33:09:fb:fe:fc:04:2d:fe:ee:d5:4f:fa:f0:9b:a1:99:70: 06:c3:c9:c5:41:cd:38:f9:b2:ac:b7:16:89:90:3d:ed:ab:fa: 29:61:35:b4 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt+OS9nCafkrth2cTCH/UU1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4MDA5OWE4MWIzNDZmOWFiY2FmMjYwNTZmNWI3NzA5NGQx Y2YxMTMwHhcNMjYwMTAyMTAyMDM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0OTVmNmFmMmEzOWU5YzJhNTY3ZjI2N2YyYTZjZTZhMTlmMjAzYWNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvb6GALRXt8eNtXANhNZEIMKoyzwS oXgdvD3/O0/2v3qR4cCLVCjUDxFLJbueRUsANUUg0J8LgQTxHJoTJvCqyHxR5bvU Oe9rL+yNYikb+OHdHbi6duHXBjXio+TStomWw2HpLC5+NmiXlE85m2x+lp1/FKMA hnbUHX5+izahMuQO4zlXWoABMdIRNvEhJ4dneNYc+YArtzODS+UD+3PHifBBHFmo 2TOo/N8aCi4AXSVbat3dU4FDG3VL2K4Ko7LQ+9HE3LcgvntbpwFMUcXoUu81atN1 74n8i9pFm+OyYbBABOWDivbu+OS4FgCs9hKNE26CTy2S/WX4XYum9UtkMwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFElfavKjnpwqVn8mfyps5qGfIDrKMB8GA1UdIwQY MBaAFDgAmagbNG+avK8mBW9bdwlNHPETMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0FDWnFCczBiNXE4cnlZRmIxdDNDVTBjOFJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My84ZTUwMWQtYzA4OC00ODk1LWFlZTMt NDUwZmUzMzU5NWQxLzEvU1Y5cThxT2VuQ3BXZnlaX0ttem1vWjhnT3NvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83My84ZTUwMWQtYzA4OC00ODk1LWFlZTMtNDUwZmUzMzU5NWQx LzEvT0FDWnFCczBiNXE4cnlZRmIxdDNDVTBjOFJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQET61wAwQE XvPwMA0GCSqGSIb3DQEBCwUAA4IBAQCIQUr7kSplk4Bkr0F7mQf1RgfeMvcRgq6w eNohRYCY2yxHcKToQ04A2bfvIYYhN7cDIxPspbpjGU8jOaNBXPNXR8khx8YHbsyM mCBtqZWCsEqCuks2FfNVaCnyoe94p6nIK9ZLnFAOiNcP7j4UuKviu1bONXkwy2Ei NCH57KaYbj0A+8sf6hzdAqVujo3MKvjSVjXMz8KYxghqNjJJBrO2ig/bt6fZGl/8 NyZ/aS+pdGGbJSgIFk4bELt6F2EtEmc6Meb/c+Ht5Z9kL9s28qRzr98fY3RNd6ys Mwn7/vwELf7u1U/68JuhmXAGw8nFQc04+bKstxaJkD3tq/opYTW0 -----END CERTIFICATE-----Generated at Sun Jan 25 19:02:43 2026 by rpki-client