This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/1aa69f-db55-4fba-bce9-c1ebe61549cc/1/98fyEBb-PIBiroCj51bzkd-V_i4.roa File: 98fyEBb-PIBiroCj51bzkd-V_i4.roa (raw, json) Hash identifier: 2RN0v3XP/euGb82/ECdLfjWteqkCXDXBbJynvO0cBWE= Subject key identifier: F7:C7:F2:10:16:FE:3C:80:62:AE:80:A3:E7:56:F3:91:DF:95:FE:2E Certificate issuer: /CN=cc40d96242b082efe5b4f2258820b3059396198d Certificate serial: 019B783469E6E505E8A6389B55625D798297 Authority key identifier: CC:40:D9:62:42:B0:82:EF:E5:B4:F2:25:88:20:B3:05:93:96:19:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zEDZYkKwgu_ltPIliCCzBZOWGY0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/1aa69f-db55-4fba-bce9-c1ebe61549cc/1/98fyEBb-PIBiroCj51bzkd-V_i4.roa Signing time: Thu 01 Jan 2026 06:17:39 +0000 ROA not before: Thu 01 Jan 2026 06:17:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39210 IP address blocks: 185.235.148.0/22 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/1aa69f-db55-4fba-bce9-c1ebe61549cc/1/zEDZYkKwgu_ltPIliCCzBZOWGY0.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/1aa69f-db55-4fba-bce9-c1ebe61549cc/1/zEDZYkKwgu_ltPIliCCzBZOWGY0.mft rsync://rpki.ripe.net/repository/DEFAULT/zEDZYkKwgu_ltPIliCCzBZOWGY0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 09:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:69:e6:e5:05:e8:a6:38:9b:55:62:5d:79:82:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc40d96242b082efe5b4f2258820b3059396198d Validity Not Before: Jan 1 06:17:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f7c7f21016fe3c8062ae80a3e756f391df95fe2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:5d:50:d1:e6:48:78:97:af:f9:8f:d4:21:84: 46:85:5c:52:f0:67:18:3d:7f:f0:44:e5:32:58:1c: cd:c1:34:c0:9a:43:c0:4e:ee:8e:15:e7:6e:0e:7c: 37:15:40:dd:25:82:57:22:e5:e8:58:c4:fc:1d:bc: 1b:40:3b:4e:3f:f1:b4:99:a7:83:2d:e5:9c:06:0f: 76:c3:14:93:22:60:31:4a:76:ed:6b:a0:f8:cd:d2: 8d:14:6a:9f:91:1d:41:33:e5:5b:09:87:1a:ba:1a: bb:df:69:d2:16:ce:f9:67:7b:86:f9:1a:94:df:d7: 79:0b:dc:f8:97:fa:cd:62:99:f4:57:03:27:24:94: f6:a8:1b:b0:29:e8:ce:64:61:15:4e:43:3b:ef:3b: 76:87:61:49:f8:5c:12:48:2f:0c:ed:60:3e:12:a9: 29:62:11:65:50:2b:b4:60:ce:9f:c5:57:fb:b7:30: 57:2c:6a:4f:c9:24:3d:44:4f:88:ad:b2:7d:98:a9: 20:7b:92:77:94:51:e8:2c:2b:dd:38:6e:24:a1:cf: 6e:6f:13:85:5f:ef:26:c4:49:06:68:f6:db:a7:90: a8:fa:fb:52:1a:a8:91:b4:81:59:26:66:53:33:4f: 83:50:a0:1d:e6:f7:da:ed:28:2a:a6:9c:01:56:71: e2:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:C7:F2:10:16:FE:3C:80:62:AE:80:A3:E7:56:F3:91:DF:95:FE:2E X509v3 Authority Key Identifier: keyid:CC:40:D9:62:42:B0:82:EF:E5:B4:F2:25:88:20:B3:05:93:96:19:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zEDZYkKwgu_ltPIliCCzBZOWGY0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1aa69f-db55-4fba-bce9-c1ebe61549cc/1/98fyEBb-PIBiroCj51bzkd-V_i4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1aa69f-db55-4fba-bce9-c1ebe61549cc/1/zEDZYkKwgu_ltPIliCCzBZOWGY0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.235.148.0/22 Signature Algorithm: sha256WithRSAEncryption 6e:0f:95:d2:b9:20:3c:3d:5e:69:da:91:58:6f:ba:5e:ba:47: 72:d5:82:9b:79:6a:4c:2e:e5:a4:d7:67:75:44:29:5b:19:13: fb:f7:ba:dd:99:bc:75:63:7a:da:01:40:d9:c1:21:1f:fe:e1: 66:56:36:d0:c5:75:5f:bb:10:78:7d:93:79:12:dc:e2:72:a5: e0:07:cf:0b:e6:c6:15:04:eb:0b:27:a4:8f:c3:ca:1d:50:ba: 63:82:c0:4e:49:79:6f:ec:21:d1:47:7f:87:b8:1e:53:2d:60: fe:dc:48:cf:36:fd:f0:4e:10:dd:76:19:48:58:ca:76:ad:34: 7b:53:cb:fd:54:3e:5b:66:9f:ce:de:15:bf:8e:88:44:1e:ca: 69:37:cf:33:ef:18:ca:6d:a4:7f:b8:27:32:44:3f:09:10:b0: b0:92:08:d1:32:29:b1:3d:9d:9f:e3:d2:15:70:66:bc:4a:59: af:f2:2f:f6:26:9f:ab:c6:b7:e9:62:38:d3:30:4f:0e:a0:03: 5b:20:a4:e3:b4:cc:c8:b8:6d:da:9e:5e:a1:40:22:dd:18:43: 97:9b:dd:a3:95:4d:bf:9f:c7:ae:b3:ff:04:53:51:84:d0:35: 87:15:7a:d9:1b:e4:7e:4f:04:ca:a4:fc:30:14:71:07:cd:f2: 00:e0:6a:19 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NGnm5QXopjibVWJdeYKXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjNDBkOTYyNDJiMDgyZWZlNWI0ZjIyNTg4MjBiMzA1OTM5 NjE5OGQwHhcNMjYwMTAxMDYxNzM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmN2M3ZjIxMDE2ZmUzYzgwNjJhZTgwYTNlNzU2ZjM5MWRmOTVmZTJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt11Q0eZIeJev+Y/UIYRGhVxS8GcY PX/wROUyWBzNwTTAmkPATu6OFeduDnw3FUDdJYJXIuXoWMT8HbwbQDtOP/G0maeD LeWcBg92wxSTImAxSnbta6D4zdKNFGqfkR1BM+VbCYcauhq732nSFs75Z3uG+RqU 39d5C9z4l/rNYpn0VwMnJJT2qBuwKejOZGEVTkM77zt2h2FJ+FwSSC8M7WA+Eqkp YhFlUCu0YM6fxVf7tzBXLGpPySQ9RE+IrbJ9mKkge5J3lFHoLCvdOG4koc9ubxOF X+8mxEkGaPbbp5Co+vtSGqiRtIFZJmZTM0+DUKAd5vfa7SgqppwBVnHi3QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPfH8hAW/jyAYq6Ao+dW85Hflf4uMB8GA1UdIwQY MBaAFMxA2WJCsILv5bTyJYggswWTlhmNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvekVEWllrS3dndV9sdFBJbGlDQ3pCWk9XR1kwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS8xYWE2OWYtZGI1NS00ZmJhLWJjZTkt YzFlYmU2MTU0OWNjLzEvOThmeUVCYi1QSUJpcm9DajUxYnprZC1WX2k0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS8xYWE2OWYtZGI1NS00ZmJhLWJjZTktYzFlYmU2MTU0OWNj LzEvekVEWllrS3dndV9sdFBJbGlDQ3pCWk9XR1kwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCueuUMA0G CSqGSIb3DQEBCwUAA4IBAQBuD5XSuSA8PV5p2pFYb7peukdy1YKbeWpMLuWk12d1 RClbGRP797rdmbx1Y3raAUDZwSEf/uFmVjbQxXVfuxB4fZN5EtzicqXgB88L5sYV BOsLJ6SPw8odULpjgsBOSXlv7CHRR3+HuB5TLWD+3EjPNv3wThDddhlIWMp2rTR7 U8v9VD5bZp/O3hW/johEHsppN88z7xjKbaR/uCcyRD8JELCwkgjRMimxPZ2f49IV cGa8Slmv8i/2Jp+rxrfpYjjTME8OoANbIKTjtMzIuG3anl6hQCLdGEOXm92jlU2/ n8eus/8EU1GE0DWHFXrZG+R+TwTKpPwwFHEHzfIA4GoZ -----END CERTIFICATE-----Generated at Mon Jan 26 13:45:04 2026 by rpki-client