This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/bab194-5e24-4ead-8f49-37ed99143aae/1/96uhsxBhe-FEbEFUz44UCsO9ftM.roa File: 96uhsxBhe-FEbEFUz44UCsO9ftM.roa (raw, json) Hash identifier: sX4SikCnq8N0L06GUAKXHc2cNrB1d0XvilI3V9rlkrI= Subject key identifier: F7:AB:A1:B3:10:61:7B:E1:44:6C:41:54:CF:8E:14:0A:C3:BD:7E:D3 Certificate issuer: /CN=44f885220f1719f5837cb5a36fa62f3f537e8e3f Certificate serial: 019B79ECDEED88B53152FB57CE94E224C7B4 Authority key identifier: 44:F8:85:22:0F:17:19:F5:83:7C:B5:A3:6F:A6:2F:3F:53:7E:8E:3F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RPiFIg8XGfWDfLWjb6YvP1N-jj8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/bab194-5e24-4ead-8f49-37ed99143aae/1/96uhsxBhe-FEbEFUz44UCsO9ftM.roa Signing time: Thu 01 Jan 2026 14:18:45 +0000 ROA not before: Thu 01 Jan 2026 14:18:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44548 IP address blocks: 91.220.199.0/24 maxlen: 24 195.93.156.0/23 maxlen: 23 195.93.156.0/24 maxlen: 24 195.93.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/bab194-5e24-4ead-8f49-37ed99143aae/1/RPiFIg8XGfWDfLWjb6YvP1N-jj8.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/bab194-5e24-4ead-8f49-37ed99143aae/1/RPiFIg8XGfWDfLWjb6YvP1N-jj8.mft rsync://rpki.ripe.net/repository/DEFAULT/RPiFIg8XGfWDfLWjb6YvP1N-jj8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 11:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:de:ed:88:b5:31:52:fb:57:ce:94:e2:24:c7:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44f885220f1719f5837cb5a36fa62f3f537e8e3f Validity Not Before: Jan 1 14:18:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f7aba1b310617be1446c4154cf8e140ac3bd7ed3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:1f:3d:0b:1b:f3:9d:c5:8a:a4:12:2c:73:ec: cb:4a:6e:b3:06:38:50:56:a6:f3:79:41:ae:98:31: 69:a7:1c:63:57:1a:68:3e:7c:0e:6c:97:8a:da:9e: 7b:56:39:a3:18:68:69:c1:7c:b6:45:62:a5:f7:d5: 58:f8:a7:c3:06:2d:aa:4b:2f:cc:ec:c4:31:a9:de: 6d:1e:78:52:18:1f:3b:69:74:28:32:84:6f:f1:97: d8:de:15:64:17:18:ba:e1:55:92:c1:20:8a:ae:d1: 01:4d:1c:c1:9b:11:be:e9:4d:5c:4d:22:89:4e:5f: 2e:a7:52:3f:23:f4:c3:e9:fc:5f:67:a0:66:e5:d8: 5b:b4:66:f6:d0:68:b2:5e:ce:7d:c8:9a:11:ac:0b: 29:94:a2:fb:3d:c1:0d:c7:ec:85:50:14:91:8c:b0: ef:79:81:3b:01:6d:25:c3:75:e0:6b:b7:99:39:99: e8:20:96:5c:ba:40:c1:6c:94:7a:5a:89:d4:3f:77: b5:7b:58:40:7b:fe:a8:87:d5:a8:19:94:35:b4:f9: 2c:2e:f0:f0:8b:6b:2a:50:c7:67:37:01:95:d2:17: 91:69:a3:61:ee:86:44:29:4b:4b:35:98:be:9e:8c: 0d:dd:11:db:34:82:c9:79:ff:90:86:30:d7:bb:8b: d7:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:AB:A1:B3:10:61:7B:E1:44:6C:41:54:CF:8E:14:0A:C3:BD:7E:D3 X509v3 Authority Key Identifier: keyid:44:F8:85:22:0F:17:19:F5:83:7C:B5:A3:6F:A6:2F:3F:53:7E:8E:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RPiFIg8XGfWDfLWjb6YvP1N-jj8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/bab194-5e24-4ead-8f49-37ed99143aae/1/96uhsxBhe-FEbEFUz44UCsO9ftM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/bab194-5e24-4ead-8f49-37ed99143aae/1/RPiFIg8XGfWDfLWjb6YvP1N-jj8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.220.199.0/24 195.93.156.0/23 Signature Algorithm: sha256WithRSAEncryption 20:5b:47:36:fd:fc:06:a6:0d:fe:00:bf:9e:7e:dd:b6:91:e3: 8e:ec:5f:61:89:65:d7:de:11:28:03:be:ec:20:f9:a2:92:03: 77:a6:04:69:7c:fc:f7:83:7a:c1:f5:d0:b6:69:3d:4f:02:e1: bf:e3:97:52:18:ad:c8:fd:c0:9d:e5:b9:85:ad:8e:53:bd:3e: 8f:c5:93:32:98:74:3e:cf:e0:0e:1e:b0:d6:25:21:12:1d:92: 55:01:67:2e:07:74:34:7c:a0:8e:0f:34:44:68:92:6e:88:d9: f1:19:b7:49:8a:d0:19:a0:e5:e1:29:2d:06:5d:7a:98:90:95: df:b1:ca:67:86:04:a4:c8:89:13:24:41:9c:33:6f:7c:11:cd: 34:9e:db:8a:a2:b8:9f:3e:41:8f:5e:2f:ba:74:48:19:19:74: ae:f0:9f:03:3c:1e:ae:c3:15:7f:38:1f:46:c5:da:08:1b:33: 59:fb:0f:e3:6d:d0:19:9b:e6:e1:0e:50:73:0d:60:f8:f8:2f: 56:e9:04:34:b8:43:72:eb:4f:93:e1:2e:8e:37:7b:ce:68:08: a7:a8:a6:af:c7:c3:f4:71:80:a0:b4:03:62:d5:b6:02:16:51: f8:53:9c:44:ff:21:b6:c0:86:12:63:0e:62:cc:1b:71:45:16: 98:5e:99:7f -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt57N7tiLUxUvtXzpTiJMe0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0Zjg4NTIyMGYxNzE5ZjU4MzdjYjVhMzZmYTYyZjNmNTM3 ZThlM2YwHhcNMjYwMTAxMTQxODQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmN2FiYTFiMzEwNjE3YmUxNDQ2YzQxNTRjZjhlMTQwYWMzYmQ3ZWQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtx89CxvzncWKpBIsc+zLSm6zBjhQ VqbzeUGumDFppxxjVxpoPnwObJeK2p57VjmjGGhpwXy2RWKl99VY+KfDBi2qSy/M 7MQxqd5tHnhSGB87aXQoMoRv8ZfY3hVkFxi64VWSwSCKrtEBTRzBmxG+6U1cTSKJ Tl8up1I/I/TD6fxfZ6Bm5dhbtGb20GiyXs59yJoRrAsplKL7PcENx+yFUBSRjLDv eYE7AW0lw3Xga7eZOZnoIJZcukDBbJR6WonUP3e1e1hAe/6oh9WoGZQ1tPksLvDw i2sqUMdnNwGV0heRaaNh7oZEKUtLNZi+nowN3RHbNILJef+QhjDXu4vX7QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFPerobMQYXvhRGxBVM+OFArDvX7TMB8GA1UdIwQY MBaAFET4hSIPFxn1g3y1o2+mLz9Tfo4/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUlBpRklnOFhHZldEZkxXamI2WXZQMU4tamo4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9iYWIxOTQtNWUyNC00ZWFkLThmNDkt MzdlZDk5MTQzYWFlLzEvOTZ1aHN4QmhlLUZFYkVGVXo0NFVDc085ZnRNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy9iYWIxOTQtNWUyNC00ZWFkLThmNDktMzdlZDk5MTQzYWFl LzEvUlBpRklnOFhHZldEZkxXamI2WXZQMU4tamo4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAW9zHAwQB w12cMA0GCSqGSIb3DQEBCwUAA4IBAQAgW0c2/fwGpg3+AL+eft22keOO7F9hiWXX 3hEoA77sIPmikgN3pgRpfPz3g3rB9dC2aT1PAuG/45dSGK3I/cCd5bmFrY5TvT6P xZMymHQ+z+AOHrDWJSESHZJVAWcuB3Q0fKCODzREaJJuiNnxGbdJitAZoOXhKS0G XXqYkJXfscpnhgSkyIkTJEGcM298Ec00ntuKorifPkGPXi+6dEgZGXSu8J8DPB6u wxV/OB9GxdoIGzNZ+w/jbdAZm+bhDlBzDWD4+C9W6QQ0uENy60+T4S6ON3vOaAin qKavx8P0cYCgtANi1bYCFlH4U5xE/yG2wIYSYw5izBtxRRaYXpl/ -----END CERTIFICATE-----Generated at Mon Jan 12 17:17:49 2026 by rpki-client