This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/d2b0a2-95e3-41a0-8cdf-ff809e7daeca/1/lNZ8b2GqipxFmFvx0Lw_q8EwfSo.roa File: lNZ8b2GqipxFmFvx0Lw_q8EwfSo.roa (raw, json) Hash identifier: qDLpSNqlibtH6zRBXzlD7tUyev4dQUA/1eIb4IG63oo= Subject key identifier: 94:D6:7C:6F:61:AA:8A:9C:45:98:5B:F1:D0:BC:3F:AB:C1:30:7D:2A Certificate issuer: /CN=d2c4c3806e1f88e99bd8c5e490077f8de5d7cf06 Certificate serial: 019B7EA72F5F4C752E1481CA98665B8385C4 Authority key identifier: D2:C4:C3:80:6E:1F:88:E9:9B:D8:C5:E4:90:07:7F:8D:E5:D7:CF:06 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0sTDgG4fiOmb2MXkkAd_jeXXzwY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/d2b0a2-95e3-41a0-8cdf-ff809e7daeca/1/lNZ8b2GqipxFmFvx0Lw_q8EwfSo.roa Signing time: Fri 02 Jan 2026 12:20:44 +0000 ROA not before: Fri 02 Jan 2026 12:20:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198208 IP address blocks: 91.109.208.0/21 maxlen: 24 134.19.200.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/d2b0a2-95e3-41a0-8cdf-ff809e7daeca/1/0sTDgG4fiOmb2MXkkAd_jeXXzwY.crl rsync://rpki.ripe.net/repository/DEFAULT/16/d2b0a2-95e3-41a0-8cdf-ff809e7daeca/1/0sTDgG4fiOmb2MXkkAd_jeXXzwY.mft rsync://rpki.ripe.net/repository/DEFAULT/0sTDgG4fiOmb2MXkkAd_jeXXzwY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 18:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:2f:5f:4c:75:2e:14:81:ca:98:66:5b:83:85:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d2c4c3806e1f88e99bd8c5e490077f8de5d7cf06 Validity Not Before: Jan 2 12:20:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=94d67c6f61aa8a9c45985bf1d0bc3fabc1307d2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:92:be:34:73:dc:05:68:da:7a:a3:26:8d:32: 58:77:8e:d8:55:90:e0:b1:db:5f:b1:c1:25:61:cb: a5:af:e9:b0:46:06:3a:f3:13:20:a6:f8:bc:8b:a1: fb:f7:13:4b:b6:0a:e6:e9:74:2e:07:4d:73:5d:ce: f1:b8:ed:53:33:2c:01:cc:ee:ba:cf:b1:bd:35:45: c8:0e:3d:f7:3a:40:e7:92:18:89:b7:b3:50:dc:c3: 65:7a:cc:02:7a:e6:15:e0:a0:7d:d4:4b:17:f2:53: d9:e7:09:16:2b:bc:47:9e:1b:58:6f:11:89:80:1d: bf:38:c4:6f:b0:0f:32:41:51:50:d1:e4:a1:e5:4a: c0:3c:ac:a9:9e:1e:a7:d8:17:03:9b:4c:c1:0d:f2: f6:c9:21:e8:1b:80:8b:18:6a:83:4a:3f:b3:d6:8d: 7b:2d:60:f4:3a:b3:c2:6a:33:01:e5:c8:cf:57:a5: 6d:f9:f5:f6:05:4b:0f:5c:54:cc:fa:ce:21:e1:91: f6:f8:b1:c8:6a:17:a5:60:87:73:9f:80:68:7c:6f: 67:fb:e1:d5:37:44:b7:b5:3c:71:6e:61:3e:e1:85: 42:d3:d9:db:c0:0a:d6:e2:aa:17:b7:ee:03:66:f7: cf:e4:05:bd:51:03:da:54:1d:cd:2b:ca:6c:c2:3f: 3a:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:D6:7C:6F:61:AA:8A:9C:45:98:5B:F1:D0:BC:3F:AB:C1:30:7D:2A X509v3 Authority Key Identifier: keyid:D2:C4:C3:80:6E:1F:88:E9:9B:D8:C5:E4:90:07:7F:8D:E5:D7:CF:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0sTDgG4fiOmb2MXkkAd_jeXXzwY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d2b0a2-95e3-41a0-8cdf-ff809e7daeca/1/lNZ8b2GqipxFmFvx0Lw_q8EwfSo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d2b0a2-95e3-41a0-8cdf-ff809e7daeca/1/0sTDgG4fiOmb2MXkkAd_jeXXzwY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.109.208.0/21 134.19.200.0/21 Signature Algorithm: sha256WithRSAEncryption 42:40:b9:9c:74:f5:13:0b:39:9d:63:a7:d6:df:01:e7:60:2f: 3d:a6:06:50:35:8b:cc:86:24:3b:8b:cf:4b:9d:28:96:04:02: 47:c4:36:cd:fb:88:ad:16:5f:12:95:04:66:6e:b3:73:39:d5: df:a6:fb:6d:e5:47:46:f1:1b:08:f7:ad:ff:f3:92:f5:ab:09: eb:4a:5f:39:a1:e1:ed:e0:7f:4e:6f:2b:18:92:95:4a:78:c3: a2:4c:70:26:10:a5:42:93:98:ff:0a:68:9e:44:90:b7:b2:f2: 0a:3b:be:d4:f7:5e:4d:35:18:d4:f3:90:4e:1e:a8:90:7e:8e: d1:3a:92:a8:2c:57:1e:15:c4:09:d7:15:54:ee:df:93:7a:9f: 15:f9:84:98:62:c3:7d:83:f2:ad:00:ed:0a:4a:e3:e1:81:f1: 8e:9f:a0:57:99:79:94:cd:c2:c6:66:76:d5:0b:b2:15:6f:d8: a6:8a:78:9d:44:d7:09:f0:cd:1d:4d:b1:79:57:63:2b:d8:cb: 7f:18:48:33:28:a6:be:b2:62:09:34:56:9d:5b:2f:56:c9:f3: 8c:24:98:53:f0:82:f6:f4:0f:01:2f:b4:ab:25:b5:7a:34:b1: 1c:6e:c5:8b:d4:e6:f9:d5:cf:0a:ba:c2:f7:4e:71:31:66:20: fe:1b:3f:67 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt+py9fTHUuFIHKmGZbg4XEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyYzRjMzgwNmUxZjg4ZTk5YmQ4YzVlNDkwMDc3ZjhkZTVk N2NmMDYwHhcNMjYwMTAyMTIyMDQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NGQ2N2M2ZjYxYWE4YTljNDU5ODViZjFkMGJjM2ZhYmMxMzA3ZDJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxZK+NHPcBWjaeqMmjTJYd47YVZDg sdtfscElYculr+mwRgY68xMgpvi8i6H79xNLtgrm6XQuB01zXc7xuO1TMywBzO66 z7G9NUXIDj33OkDnkhiJt7NQ3MNleswCeuYV4KB91EsX8lPZ5wkWK7xHnhtYbxGJ gB2/OMRvsA8yQVFQ0eSh5UrAPKypnh6n2BcDm0zBDfL2ySHoG4CLGGqDSj+z1o17 LWD0OrPCajMB5cjPV6Vt+fX2BUsPXFTM+s4h4ZH2+LHIahelYIdzn4BofG9n++HV N0S3tTxxbmE+4YVC09nbwArW4qoXt+4DZvfP5AW9UQPaVB3NK8pswj86iwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFJTWfG9hqoqcRZhb8dC8P6vBMH0qMB8GA1UdIwQY MBaAFNLEw4BuH4jpm9jF5JAHf43l188GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMHNURGdHNGZpT21iMk1Ya2tBZF9qZVhYendZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9kMmIwYTItOTVlMy00MWEwLThjZGYt ZmY4MDllN2RhZWNhLzEvbE5aOGIyR3FpcHhGbUZ2eDBMd19xOEV3ZlNvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi9kMmIwYTItOTVlMy00MWEwLThjZGYtZmY4MDllN2RhZWNh LzEvMHNURGdHNGZpT21iMk1Ya2tBZF9qZVhYendZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDW23QAwQD hhPIMA0GCSqGSIb3DQEBCwUAA4IBAQBCQLmcdPUTCzmdY6fW3wHnYC89pgZQNYvM hiQ7i89LnSiWBAJHxDbN+4itFl8SlQRmbrNzOdXfpvtt5UdG8RsI963/85L1qwnr Sl85oeHt4H9ObysYkpVKeMOiTHAmEKVCk5j/CmieRJC3svIKO77U915NNRjU85BO HqiQfo7ROpKoLFceFcQJ1xVU7t+Tep8V+YSYYsN9g/KtAO0KSuPhgfGOn6BXmXmU zcLGZnbVC7IVb9iminidRNcJ8M0dTbF5V2Mr2Mt/GEgzKKa+smIJNFadWy9WyfOM JJhT8IL29A8BL7SrJbV6NLEcbsWL1Ob51c8KusL3TnExZiD+Gz9n -----END CERTIFICATE-----Generated at Tue Feb 10 04:14:49 2026 by rpki-client