This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/1VWiLulxOxhHgQKw7IEXoo5ATg8.roa File: 1VWiLulxOxhHgQKw7IEXoo5ATg8.roa (raw, json) Hash identifier: x6H4n3WYeW4YeYZUn/i7tLDaV8onmgp0QC27YOXzSKw= Subject key identifier: D5:55:A2:2E:E9:71:3B:18:47:81:02:B0:EC:81:17:A2:8E:40:4E:0F Certificate issuer: /CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c Certificate serial: 019B7F14338374AE3E9D09F7BC8EFFD2562F Authority key identifier: 2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/1VWiLulxOxhHgQKw7IEXoo5ATg8.roa Signing time: Fri 02 Jan 2026 14:19:48 +0000 ROA not before: Fri 02 Jan 2026 14:19:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 40676 IP address blocks: 93.152.218.0/24 maxlen: 24 93.152.222.0/24 maxlen: 24 93.152.226.0/24 maxlen: 24 93.152.227.0/24 maxlen: 24 94.26.89.0/24 maxlen: 24 212.102.105.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.mft rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 23 Jan 2026 15:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:33:83:74:ae:3e:9d:09:f7:bc:8e:ff:d2:56:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c Validity Not Before: Jan 2 14:19:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d555a22ee9713b18478102b0ec8117a28e404e0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:5d:10:6b:27:38:fb:1f:1e:12:5d:5c:95:27: ee:95:05:7f:29:ff:0c:6d:3a:13:82:06:e7:77:eb: 79:99:99:e3:02:82:87:61:50:c1:9d:e3:39:6d:ac: fd:29:87:9f:2d:9b:d2:d9:43:b0:c5:1d:23:41:f3: 98:55:f6:b0:52:61:22:bb:2f:73:7d:0c:b3:a5:a0: dc:06:07:d9:8e:58:19:cd:c1:de:d2:38:36:fc:b4: 33:8f:26:0b:06:e6:1e:1b:29:39:e6:36:1b:d3:be: 3c:78:97:f2:1b:b4:db:e1:fe:a3:6d:f6:20:5c:20: a8:e4:e6:21:ff:85:50:ce:dd:fc:4a:50:54:37:3e: af:91:16:a8:c7:e5:31:bb:0e:0b:b2:39:9a:cd:7d: a6:52:59:e7:c5:d0:e9:6e:4d:19:45:8f:84:84:a6: 9b:19:b7:01:d6:20:95:fc:43:10:7d:c8:b9:36:a5: 54:84:31:bb:bb:af:74:cf:8a:a9:8c:c5:c7:3d:9d: d5:83:74:73:42:6f:a7:c6:9d:a2:ce:2b:92:33:87: 5d:cd:c0:79:fa:36:b4:c9:73:7d:52:b7:b3:64:7b: 5f:8a:cd:c5:b0:d8:1d:f8:73:9d:e0:44:bc:1b:e0: 11:8f:bc:dd:68:b2:b0:e7:a8:9f:8e:66:42:59:7d: d4:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:55:A2:2E:E9:71:3B:18:47:81:02:B0:EC:81:17:A2:8E:40:4E:0F X509v3 Authority Key Identifier: keyid:2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/1VWiLulxOxhHgQKw7IEXoo5ATg8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.152.218.0/24 93.152.222.0/24 93.152.226.0/23 94.26.89.0/24 212.102.105.0/24 Signature Algorithm: sha256WithRSAEncryption 27:3a:5b:ee:9f:59:dd:ad:02:06:9d:a0:e6:13:70:f4:40:72: a0:9e:c6:43:6e:43:fb:b7:72:f1:8d:a0:66:3e:1f:f3:c3:9b: f1:14:74:74:df:d6:45:d5:cd:bc:a9:52:6f:8e:e5:27:ab:7a: 07:a4:d7:94:95:49:51:ee:c9:b8:2f:16:04:bb:e1:f2:e3:d5: 99:1c:37:4e:d8:88:3b:a7:76:67:98:24:79:6a:2b:48:7d:20: b4:9a:37:f0:5f:42:d5:7c:4f:65:e6:3a:d9:df:71:36:70:95: e6:b5:7d:f2:81:13:0a:85:2d:21:77:e8:77:bb:1e:a5:97:8e: bf:0f:8f:fd:0b:f5:ea:30:6e:78:d4:11:c2:25:64:08:02:7c: cb:ed:ae:05:c8:4d:3d:64:02:93:a5:3b:b4:da:9c:83:61:f4: 9b:15:79:06:2a:42:14:c1:78:1c:1f:96:0a:ca:96:c8:74:13: 5a:a2:c3:89:1a:af:60:04:b3:7a:e9:68:fd:99:13:ac:f8:91: d4:3b:d7:81:ce:17:73:ca:f0:53:70:02:03:53:5a:c1:cd:d3: 6a:c2:e3:c3:9c:f3:45:21:52:7a:d5:9b:f3:a7:f0:74:4c:8b: 4a:85:96:ed:3a:6e:bb:e3:b3:ca:fb:b8:d7:0d:e4:d9:37:0c: dc:d6:3a:0e -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZt/FDODdK4+nQn3vI7/0lYvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJkMWNhYTY5MzU4ZjhjOThmN2E3MTlmMjU5N2Q1ZGFkZGJk MDAxOGMwHhcNMjYwMTAyMTQxOTQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNTU1YTIyZWU5NzEzYjE4NDc4MTAyYjBlYzgxMTdhMjhlNDA0ZTBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoV0Qayc4+x8eEl1clSfulQV/Kf8M bToTggbnd+t5mZnjAoKHYVDBneM5baz9KYefLZvS2UOwxR0jQfOYVfawUmEiuy9z fQyzpaDcBgfZjlgZzcHe0jg2/LQzjyYLBuYeGyk55jYb0748eJfyG7Tb4f6jbfYg XCCo5OYh/4VQzt38SlBUNz6vkRaox+Uxuw4LsjmazX2mUlnnxdDpbk0ZRY+EhKab GbcB1iCV/EMQfci5NqVUhDG7u690z4qpjMXHPZ3Vg3RzQm+nxp2iziuSM4ddzcB5 +ja0yXN9UrezZHtfis3FsNgd+HOd4ES8G+ARj7zdaLKw56ifjmZCWX3UJQIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFNVVoi7pcTsYR4ECsOyBF6KOQE4PMB8GA1UdIwQY MBaAFC0cqmk1j4yY96cZ8ll9Xa3b0AGMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTFJ5cWFUV1BqSmozcHhueVdYMWRyZHZRQVl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9hOTM2OTktMTg4Yi00NzBhLTk2Yjct MjliMDg1ZGQyM2FkLzEvMVZXaUx1bHhPeGhIZ1FLdzdJRVhvbzVBVGc4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi9hOTM2OTktMTg4Yi00NzBhLTk2YjctMjliMDg1ZGQyM2Fk LzEvTFJ5cWFUV1BqSmozcHhueVdYMWRyZHZRQVl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAXZjaAwQA XZjeAwQBXZjiAwQAXhpZAwQA1GZpMA0GCSqGSIb3DQEBCwUAA4IBAQAnOlvun1nd rQIGnaDmE3D0QHKgnsZDbkP7t3LxjaBmPh/zw5vxFHR039ZF1c28qVJvjuUnq3oH pNeUlUlR7sm4LxYEu+Hy49WZHDdO2Ig7p3ZnmCR5aitIfSC0mjfwX0LVfE9l5jrZ 33E2cJXmtX3ygRMKhS0hd+h3ux6ll46/D4/9C/XqMG541BHCJWQIAnzL7a4FyE09 ZAKTpTu02pyDYfSbFXkGKkIUwXgcH5YKypbIdBNaosOJGq9gBLN66Wj9mROs+JHU O9eBzhdzyvBTcAIDU1rBzdNqwuPDnPNFIVJ61Zvzp/B0TItKhZbtOm6747PK+7jX DeTZNwzc1joO -----END CERTIFICATE-----Generated at Fri Jan 23 02:01:31 2026 by rpki-client