This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/cea581-5cde-4574-ba0a-2c62de7b3e45/1/p__Ljf9fbtB14fFLA3bn-BJKRV0.roa File: p__Ljf9fbtB14fFLA3bn-BJKRV0.roa (raw, json) Hash identifier: 5UgXfWB96o5m7QwdXIFEVhhiyZqKscYo5S/m82Eg2zo= Subject key identifier: A7:FF:CB:8D:FF:5F:6E:D0:75:E1:F1:4B:03:76:E7:F8:12:4A:45:5D Certificate issuer: /CN=af73ff1ec55f49296dd734039fa0284cc400eb26 Certificate serial: 019B7C124D9E05866D220BCA37E50FB256AA Authority key identifier: AF:73:FF:1E:C5:5F:49:29:6D:D7:34:03:9F:A0:28:4C:C4:00:EB:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r3P_HsVfSSlt1zQDn6AoTMQA6yY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/cea581-5cde-4574-ba0a-2c62de7b3e45/1/p__Ljf9fbtB14fFLA3bn-BJKRV0.roa Signing time: Fri 02 Jan 2026 00:18:52 +0000 ROA not before: Fri 02 Jan 2026 00:18:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211099 IP address blocks: 94.177.116.0/23 maxlen: 24 194.156.235.0/24 maxlen: 24 2a02:7c9::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/cea581-5cde-4574-ba0a-2c62de7b3e45/1/r3P_HsVfSSlt1zQDn6AoTMQA6yY.crl rsync://rpki.ripe.net/repository/DEFAULT/00/cea581-5cde-4574-ba0a-2c62de7b3e45/1/r3P_HsVfSSlt1zQDn6AoTMQA6yY.mft rsync://rpki.ripe.net/repository/DEFAULT/r3P_HsVfSSlt1zQDn6AoTMQA6yY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:4d:9e:05:86:6d:22:0b:ca:37:e5:0f:b2:56:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af73ff1ec55f49296dd734039fa0284cc400eb26 Validity Not Before: Jan 2 00:18:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a7ffcb8dff5f6ed075e1f14b0376e7f8124a455d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:d1:e1:da:0e:de:ef:ae:5f:88:00:e8:b1:04: 76:5d:a5:8c:2d:5c:69:31:fa:fd:c3:d0:ef:26:06: 73:43:0b:b8:90:ba:d2:9d:17:8f:1f:49:d4:55:42: 6c:5e:57:25:be:20:92:75:3d:2a:af:17:27:39:68: 65:9b:8b:e1:46:56:f6:0e:ce:72:ef:34:88:d8:3d: d4:e2:6f:31:d5:e2:2d:6b:92:f4:8d:4a:36:5a:be: b2:8f:5b:e6:de:41:1e:50:0c:9d:7e:35:f2:c7:e3: b2:47:59:57:6e:5e:5f:f7:00:24:f3:75:01:97:e7: 9c:b3:50:1b:d8:48:09:e8:b7:52:f8:c8:99:5b:57: 22:44:85:23:b8:7c:17:df:c8:6b:5c:aa:d5:29:c9: 6c:83:c6:0e:d7:7a:e4:21:dd:de:d7:2c:b5:3b:c8: 5a:b5:75:0f:6e:5b:91:39:b1:f1:72:08:bc:bb:49: ca:9c:f1:d1:47:8d:7d:db:0f:c4:c9:39:2d:3b:29: 8d:5a:89:9d:f5:0c:28:42:51:13:8d:03:1f:e5:55: 8f:3a:15:06:cf:8a:75:cb:01:36:c9:4c:d3:ec:ef: a0:80:1f:5f:14:f5:95:f7:cd:0f:9a:8c:a7:41:e0: af:99:4a:d7:da:a5:9c:ab:d6:a8:b4:3a:9c:4c:d2: 59:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:FF:CB:8D:FF:5F:6E:D0:75:E1:F1:4B:03:76:E7:F8:12:4A:45:5D X509v3 Authority Key Identifier: keyid:AF:73:FF:1E:C5:5F:49:29:6D:D7:34:03:9F:A0:28:4C:C4:00:EB:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r3P_HsVfSSlt1zQDn6AoTMQA6yY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/cea581-5cde-4574-ba0a-2c62de7b3e45/1/p__Ljf9fbtB14fFLA3bn-BJKRV0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/cea581-5cde-4574-ba0a-2c62de7b3e45/1/r3P_HsVfSSlt1zQDn6AoTMQA6yY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.177.116.0/23 194.156.235.0/24 IPv6: 2a02:7c9::/44 Signature Algorithm: sha256WithRSAEncryption 8c:89:cb:22:cc:d0:77:20:6a:6b:b6:10:7d:fe:41:1b:53:97: d3:07:20:84:e3:13:b9:c1:6c:9b:67:89:67:44:e2:bd:d4:17: 8d:9b:fc:13:b1:d1:e8:58:be:09:63:78:53:78:d1:97:a7:e3: 62:10:a6:f1:e5:12:3e:1f:42:f9:ac:a6:ac:93:dc:0f:f4:4a: de:91:01:79:93:5f:47:4a:9b:ef:f7:f5:ce:95:d3:d9:69:95: e3:c1:8f:fc:c6:dd:9c:eb:aa:b3:bf:dc:3a:41:a0:90:81:44: 95:5d:27:e2:26:12:73:54:38:ff:35:d6:3b:40:6c:eb:25:f2: 1a:ad:23:82:df:25:38:47:d4:8a:33:08:02:2a:01:f9:49:7c: a1:c9:5e:61:48:7e:1e:b8:4d:3e:2b:0a:64:26:c1:5a:c8:b8: 0e:19:84:f0:bf:30:f1:3a:e6:3c:2e:c0:66:ef:05:61:64:91: a5:e3:6a:e9:93:c7:ff:dc:19:e9:e1:f9:45:ff:32:66:c0:73: f7:24:c8:0e:c5:67:14:82:82:38:0e:76:33:1e:55:d9:9c:e8: 54:12:5f:e7:f5:e2:c1:34:9c:c6:e3:0a:92:4d:63:b7:ad:db: e6:39:5a:c6:23:4b:8b:51:b0:08:e9:cc:7a:51:26:4a:35:a8: 3c:f3:75:99 -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgISAZt8Ek2eBYZtIgvKN+UPslaqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmNzNmZjFlYzU1ZjQ5Mjk2ZGQ3MzQwMzlmYTAyODRjYzQw MGViMjYwHhcNMjYwMTAyMDAxODUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhN2ZmY2I4ZGZmNWY2ZWQwNzVlMWYxNGIwMzc2ZTdmODEyNGE0NTVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt9Hh2g7e765fiADosQR2XaWMLVxp Mfr9w9DvJgZzQwu4kLrSnRePH0nUVUJsXlclviCSdT0qrxcnOWhlm4vhRlb2Ds5y 7zSI2D3U4m8x1eIta5L0jUo2Wr6yj1vm3kEeUAydfjXyx+OyR1lXbl5f9wAk83UB l+ecs1Ab2EgJ6LdS+MiZW1ciRIUjuHwX38hrXKrVKclsg8YO13rkId3e1yy1O8ha tXUPbluRObHxcgi8u0nKnPHRR4192w/EyTktOymNWomd9QwoQlETjQMf5VWPOhUG z4p1ywE2yUzT7O+ggB9fFPWV980PmoynQeCvmUrX2qWcq9aotDqcTNJZDwIDAQAB o4ICIDCCAhwwHQYDVR0OBBYEFKf/y43/X27QdeHxSwN25/gSSkVdMB8GA1UdIwQY MBaAFK9z/x7FX0kpbdc0A5+gKEzEAOsmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcjNQX0hzVmZTU2x0MXpRRG42QW9UTVFBNnlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9jZWE1ODEtNWNkZS00NTc0LWJhMGEt MmM2MmRlN2IzZTQ1LzEvcF9fTGpmOWZidEIxNGZGTEEzYm4tQkpLUlYwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC9jZWE1ODEtNWNkZS00NTc0LWJhMGEtMmM2MmRlN2IzZTQ1 LzEvcjNQX0hzVmZTU2x0MXpRRG42QW9UTVFBNnlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQBXrF0AwQA wpzrMA8EAgACMAkDBwQqAgfJAAAwDQYJKoZIhvcNAQELBQADggEBAIyJyyLM0Hcg amu2EH3+QRtTl9MHIITjE7nBbJtniWdE4r3UF42b/BOx0ehYvgljeFN40Zen42IQ pvHlEj4fQvmspqyT3A/0St6RAXmTX0dKm+/39c6V09lplePBj/zG3ZzrqrO/3DpB oJCBRJVdJ+ImEnNUOP811jtAbOsl8hqtI4LfJThH1IozCAIqAflJfKHJXmFIfh64 TT4rCmQmwVrIuA4ZhPC/MPE65jwuwGbvBWFkkaXjaumTx//cGenh+UX/MmbAc/ck yA7FZxSCgjgOdjMeVdmc6FQSX+f14sE0nMbjCpJNY7et2+Y5WsYjS4tRsAjpzHpR Jko1qDzzdZk= -----END CERTIFICATE-----Generated at Mon Feb 9 22:36:18 2026 by rpki-client