This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/40e5d5-ed41-4dd3-9332-53d96099d7b1/1/kH2vVEZ7NeBnNJ25Bfzxs-l-m2Y.roa File: kH2vVEZ7NeBnNJ25Bfzxs-l-m2Y.roa (raw, json) Hash identifier: lUmva7T7suBnjlbuPKGwGSN8q5aV/viwDRe/Z9TY9sA= Subject key identifier: 90:7D:AF:54:46:7B:35:E0:67:34:9D:B9:05:FC:F1:B3:E9:7E:9B:66 Certificate issuer: /CN=9681fc8c7337c6a1d20b84800df862a27e5fdbd7 Certificate serial: 019B79113D19BA7CEFF542361A97983F3FFB Authority key identifier: 96:81:FC:8C:73:37:C6:A1:D2:0B:84:80:0D:F8:62:A2:7E:5F:DB:D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/loH8jHM3xqHSC4SADfhion5f29c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/40e5d5-ed41-4dd3-9332-53d96099d7b1/1/kH2vVEZ7NeBnNJ25Bfzxs-l-m2Y.roa Signing time: Thu 01 Jan 2026 10:18:51 +0000 ROA not before: Thu 01 Jan 2026 10:18:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 1257 IP address blocks: 195.8.98.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/40e5d5-ed41-4dd3-9332-53d96099d7b1/1/loH8jHM3xqHSC4SADfhion5f29c.crl rsync://rpki.ripe.net/repository/DEFAULT/97/40e5d5-ed41-4dd3-9332-53d96099d7b1/1/loH8jHM3xqHSC4SADfhion5f29c.mft rsync://rpki.ripe.net/repository/DEFAULT/loH8jHM3xqHSC4SADfhion5f29c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 19:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:3d:19:ba:7c:ef:f5:42:36:1a:97:98:3f:3f:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9681fc8c7337c6a1d20b84800df862a27e5fdbd7 Validity Not Before: Jan 1 10:18:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=907daf54467b35e067349db905fcf1b3e97e9b66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:6b:2a:9c:35:dd:4d:ee:b8:cf:f8:a4:f2:da: a5:5e:ee:bd:3b:3d:1a:40:0e:e2:ce:19:27:bb:5d: 39:2b:cd:24:cc:9b:1d:19:fb:3a:26:9b:3b:c2:67: 88:ec:ab:5f:2d:e4:d0:a3:3e:a3:2d:91:72:23:f5: 35:c5:ad:0e:23:98:5f:7a:de:11:c1:66:24:4f:69: 75:d9:7e:73:d1:d1:3d:13:9e:9a:8f:42:e5:91:da: a1:39:00:0e:fd:e4:86:c7:45:86:6d:92:7f:22:9b: a0:09:53:e0:64:26:7c:9e:c9:bf:0a:41:b2:01:d2: 63:0f:5d:33:b9:ff:22:34:ee:a7:2e:8a:f1:a7:99: 57:69:7c:89:26:54:1d:dd:37:75:d0:c5:5c:cc:c8: 06:65:13:46:cb:c2:1f:82:8f:c5:c0:08:eb:36:f4: 7d:3d:b0:32:06:85:ec:c5:f5:fb:0b:0b:8b:91:81: 4b:a2:eb:1c:6e:ae:6a:3f:bd:76:5b:3c:97:dc:a9: cb:14:62:83:80:34:0e:34:d8:7e:2c:19:33:ca:b0: 97:53:aa:63:d3:15:d4:4e:d6:b4:ec:fd:e3:22:44: 43:37:0a:af:71:11:aa:15:71:2b:b0:2f:1d:54:50: da:d5:25:c0:92:d3:58:5a:1c:26:a4:d8:4c:c3:47: f5:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:7D:AF:54:46:7B:35:E0:67:34:9D:B9:05:FC:F1:B3:E9:7E:9B:66 X509v3 Authority Key Identifier: keyid:96:81:FC:8C:73:37:C6:A1:D2:0B:84:80:0D:F8:62:A2:7E:5F:DB:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/loH8jHM3xqHSC4SADfhion5f29c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/40e5d5-ed41-4dd3-9332-53d96099d7b1/1/kH2vVEZ7NeBnNJ25Bfzxs-l-m2Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/97/40e5d5-ed41-4dd3-9332-53d96099d7b1/1/loH8jHM3xqHSC4SADfhion5f29c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.8.98.0/24 Signature Algorithm: sha256WithRSAEncryption 82:38:a2:da:87:20:2d:b1:40:2c:8b:c5:d5:4d:56:cf:2b:6e: 5e:39:f5:8f:bc:4c:de:78:a4:6a:3c:36:65:76:7b:4d:2f:e4: 1a:f9:dc:2e:69:f9:14:ef:43:1b:cd:d5:f4:ad:5c:dd:73:30: 6b:ca:3f:13:85:00:e7:e9:e0:93:ec:fe:4a:0f:87:73:72:9f: 72:0a:d8:58:30:7d:f7:21:e3:31:44:ad:df:ec:a6:5b:b1:bc: a7:97:46:bf:4b:d9:f7:38:7e:55:38:22:4f:92:7a:8a:af:2c: 09:c6:1d:90:91:ea:7d:12:56:ca:32:78:6e:db:3b:a2:ab:34: 6d:ac:98:13:b2:e9:d4:0b:9a:3f:b6:ea:36:22:72:cd:d7:12: ff:2f:64:b0:e5:98:3d:26:51:a0:70:6b:40:b3:0e:75:82:e8: 92:45:23:11:6d:7c:2c:51:d4:40:14:be:60:49:c4:a6:11:24: 77:0a:e1:2f:a1:0f:83:c3:89:6b:6a:e7:a5:78:4a:c8:ee:99: 25:35:a1:38:c6:bd:2e:fd:92:f6:f1:69:36:ad:2a:65:b2:65: 8d:a8:83:1b:07:af:fb:33:3a:99:9f:23:40:7f:ed:b8:ef:2e: 7c:26:c7:c3:e2:e4:16:f6:3c:73:4e:4c:7c:fc:05:da:b6:87: 4f:19:35:99 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5ET0Zunzv9UI2GpeYPz/7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2ODFmYzhjNzMzN2M2YTFkMjBiODQ4MDBkZjg2MmEyN2U1 ZmRiZDcwHhcNMjYwMTAxMTAxODUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MDdkYWY1NDQ2N2IzNWUwNjczNDlkYjkwNWZjZjFiM2U5N2U5YjY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApWsqnDXdTe64z/ik8tqlXu69Oz0a QA7izhknu105K80kzJsdGfs6Jps7wmeI7KtfLeTQoz6jLZFyI/U1xa0OI5hfet4R wWYkT2l12X5z0dE9E56aj0LlkdqhOQAO/eSGx0WGbZJ/IpugCVPgZCZ8nsm/CkGy AdJjD10zuf8iNO6nLorxp5lXaXyJJlQd3Td10MVczMgGZRNGy8Ifgo/FwAjrNvR9 PbAyBoXsxfX7CwuLkYFLouscbq5qP712WzyX3KnLFGKDgDQONNh+LBkzyrCXU6pj 0xXUTta07P3jIkRDNwqvcRGqFXErsC8dVFDa1SXAktNYWhwmpNhMw0f1YQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJB9r1RGezXgZzSduQX88bPpfptmMB8GA1UdIwQY MBaAFJaB/IxzN8ah0guEgA34YqJ+X9vXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbG9IOGpITTN4cUhTQzRTQURmaGlvbjVmMjljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny80MGU1ZDUtZWQ0MS00ZGQzLTkzMzIt NTNkOTYwOTlkN2IxLzEva0gydlZFWjdOZUJuTkoyNUJmenhzLWwtbTJZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ny80MGU1ZDUtZWQ0MS00ZGQzLTkzMzItNTNkOTYwOTlkN2Ix LzEvbG9IOGpITTN4cUhTQzRTQURmaGlvbjVmMjljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwwhiMA0G CSqGSIb3DQEBCwUAA4IBAQCCOKLahyAtsUAsi8XVTVbPK25eOfWPvEzeeKRqPDZl dntNL+Qa+dwuafkU70MbzdX0rVzdczBryj8ThQDn6eCT7P5KD4dzcp9yCthYMH33 IeMxRK3f7KZbsbynl0a/S9n3OH5VOCJPknqKrywJxh2Qkep9ElbKMnhu2zuiqzRt rJgTsunUC5o/tuo2InLN1xL/L2Sw5Zg9JlGgcGtAsw51guiSRSMRbXwsUdRAFL5g ScSmESR3CuEvoQ+Dw4lraueleErI7pklNaE4xr0u/ZL28Wk2rSplsmWNqIMbB6/7 MzqZnyNAf+247y58JsfD4uQW9jxzTkx8/AXatodPGTWZ -----END CERTIFICATE-----Generated at Mon Jan 26 04:50:29 2026 by rpki-client