This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/1N2eBsiKVFg4yqjCj4qrDM-I7hg.roa File: 1N2eBsiKVFg4yqjCj4qrDM-I7hg.roa (raw, json) Hash identifier: YWmW+qHhsLN+csw32WYbNSaULT6cEK/L9LG3DcTcfQU= Subject key identifier: D4:DD:9E:06:C8:8A:54:58:38:CA:A8:C2:8F:8A:AB:0C:CF:88:EE:18 Certificate issuer: /CN=f71d4a4374df222ac3235b9602206d96bf1dac82 Certificate serial: 019B7AC849CA79360B4BBC0DD6CD9CCCE5C5 Authority key identifier: F7:1D:4A:43:74:DF:22:2A:C3:23:5B:96:02:20:6D:96:BF:1D:AC:82 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9x1KQ3TfIirDI1uWAiBtlr8drII.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/1N2eBsiKVFg4yqjCj4qrDM-I7hg.roa Signing time: Thu 01 Jan 2026 18:18:25 +0000 ROA not before: Thu 01 Jan 2026 18:18:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207163 IP address blocks: 93.96.192.0/19 maxlen: 19 93.96.210.0/24 maxlen: 24 93.96.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/9x1KQ3TfIirDI1uWAiBtlr8drII.crl rsync://rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/9x1KQ3TfIirDI1uWAiBtlr8drII.mft rsync://rpki.ripe.net/repository/DEFAULT/9x1KQ3TfIirDI1uWAiBtlr8drII.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 16:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:49:ca:79:36:0b:4b:bc:0d:d6:cd:9c:cc:e5:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f71d4a4374df222ac3235b9602206d96bf1dac82 Validity Not Before: Jan 1 18:18:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d4dd9e06c88a545838caa8c28f8aab0ccf88ee18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:68:0b:5b:b9:aa:17:13:f7:2d:bc:21:04:76: 4b:36:92:0f:03:e6:a9:ea:d5:8d:ff:e1:87:6a:92: 03:ce:0e:11:24:6e:20:0c:36:16:c7:a3:f0:81:e0: 6b:4c:ae:37:56:e2:11:a0:c8:d4:c2:d3:bf:37:6f: a1:fe:6b:dc:4e:8a:94:d0:ad:d1:16:2c:6d:d2:8b: c2:9d:d9:a3:5f:e9:c9:6d:29:ed:9c:dc:74:f9:2d: aa:b7:0b:25:e9:7a:27:9c:4e:f7:02:37:fb:4a:92: 09:10:4f:2e:2f:65:8b:ec:df:78:6f:96:da:d3:93: 55:05:86:08:68:95:3c:63:28:de:3a:1f:c1:74:7d: ba:c9:c5:3e:ee:a4:f8:6a:96:d7:75:c7:51:55:3f: 0c:d4:56:bc:a2:bf:b7:b8:e6:4f:db:50:58:34:94: a1:bc:32:34:57:9e:72:23:80:7b:85:5b:f6:02:e3: ee:9c:41:63:19:1e:8b:66:c1:7f:d8:fa:ae:30:fb: 40:1c:87:f6:74:5e:e9:29:7b:06:cd:e6:8e:bf:b4: ac:8f:93:62:ad:f3:49:77:6d:e1:8e:9b:c9:94:99: 22:ae:d2:13:a5:29:ce:aa:37:f7:e8:88:54:67:c7: c5:2c:a0:44:1d:98:e4:b0:47:48:8d:ce:08:0b:97: b2:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:DD:9E:06:C8:8A:54:58:38:CA:A8:C2:8F:8A:AB:0C:CF:88:EE:18 X509v3 Authority Key Identifier: keyid:F7:1D:4A:43:74:DF:22:2A:C3:23:5B:96:02:20:6D:96:BF:1D:AC:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9x1KQ3TfIirDI1uWAiBtlr8drII.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/1N2eBsiKVFg4yqjCj4qrDM-I7hg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/9x1KQ3TfIirDI1uWAiBtlr8drII.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.96.192.0/19 Signature Algorithm: sha256WithRSAEncryption ac:6b:45:a9:c7:87:d1:de:ad:3f:98:5f:2a:85:b5:6b:fd:59: 9c:0d:99:20:ab:c5:91:a0:c9:fc:b1:9a:98:fa:cb:6c:eb:00: fc:5c:43:9d:fe:af:a6:a5:09:a9:f5:fd:03:1b:e5:05:7e:f8: 46:34:0d:b0:a2:a9:4c:fa:d9:34:d8:6e:b0:1c:65:6a:25:a2: ff:f2:ea:1b:3e:c9:b1:c2:10:39:b7:e2:70:e1:ee:66:90:17: 59:c4:39:c7:8e:a8:d8:b5:52:37:ad:2a:ba:38:2a:26:ce:52: de:6e:39:7e:73:04:15:98:f0:ec:16:fb:af:b2:f4:2d:3c:e6: 8b:a3:9a:d2:a9:fa:7f:d7:63:91:12:64:04:c5:8d:4b:9a:bf: 06:10:71:5c:7d:45:4d:5d:88:e8:3f:a2:63:5f:77:41:27:24: 52:c5:fc:25:32:a3:61:12:f9:18:7f:8b:c6:53:ff:82:66:64: 68:0e:1e:8e:78:d3:88:a3:49:59:da:32:5d:1f:35:e5:d9:a9: 53:94:d9:9e:c6:b3:25:7a:24:ce:1f:ee:4f:54:2c:09:11:4c: 70:97:a6:dd:be:89:b0:32:3e:0e:5c:eb:57:5b:ac:f1:7b:84: 55:cd:f5:07:6a:8a:91:7c:97:9f:ea:18:22:eb:0b:25:06:79: 6d:4e:dd:b8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yEnKeTYLS7wN1s2czOXFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY3MWQ0YTQzNzRkZjIyMmFjMzIzNWI5NjAyMjA2ZDk2YmYx ZGFjODIwHhcNMjYwMTAxMTgxODI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNGRkOWUwNmM4OGE1NDU4MzhjYWE4YzI4ZjhhYWIwY2NmODhlZTE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy2gLW7mqFxP3LbwhBHZLNpIPA+ap 6tWN/+GHapIDzg4RJG4gDDYWx6PwgeBrTK43VuIRoMjUwtO/N2+h/mvcToqU0K3R Fixt0ovCndmjX+nJbSntnNx0+S2qtwsl6XonnE73Ajf7SpIJEE8uL2WL7N94b5ba 05NVBYYIaJU8YyjeOh/BdH26ycU+7qT4apbXdcdRVT8M1Fa8or+3uOZP21BYNJSh vDI0V55yI4B7hVv2AuPunEFjGR6LZsF/2PquMPtAHIf2dF7pKXsGzeaOv7Ssj5Ni rfNJd23hjpvJlJkirtITpSnOqjf36IhUZ8fFLKBEHZjksEdIjc4IC5eycwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNTdngbIilRYOMqowo+KqwzPiO4YMB8GA1UdIwQY MBaAFPcdSkN03yIqwyNblgIgbZa/HayCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOXgxS1EzVGZJaXJESTF1V0FpQnRscjhkcklJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS83NzM5ZGMtMTEzMi00ODM3LTliODUt ZTlhYzJiMDAzMTZhLzEvMU4yZUJzaUtWRmc0eXFqQ2o0cXJETS1JN2hnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS83NzM5ZGMtMTEzMi00ODM3LTliODUtZTlhYzJiMDAzMTZh LzEvOXgxS1EzVGZJaXJESTF1V0FpQnRscjhkcklJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFXWDAMA0G CSqGSIb3DQEBCwUAA4IBAQCsa0Wpx4fR3q0/mF8qhbVr/VmcDZkgq8WRoMn8sZqY +sts6wD8XEOd/q+mpQmp9f0DG+UFfvhGNA2woqlM+tk02G6wHGVqJaL/8uobPsmx whA5t+Jw4e5mkBdZxDnHjqjYtVI3rSq6OComzlLebjl+cwQVmPDsFvuvsvQtPOaL o5rSqfp/12OREmQExY1Lmr8GEHFcfUVNXYjoP6JjX3dBJyRSxfwlMqNhEvkYf4vG U/+CZmRoDh6OeNOIo0lZ2jJdHzXl2alTlNmexrMleiTOH+5PVCwJEUxwl6bdvomw Mj4OXOtXW6zxe4RVzfUHaoqRfJef6hgi6wslBnltTt24 -----END CERTIFICATE-----Generated at Wed Jan 21 02:31:51 2026 by rpki-client