This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/ab57bd-cfed-441f-a437-438e84c7107d/1/lgjWE5f6FBur4txLoui9WQ1m0Wg.roa File: lgjWE5f6FBur4txLoui9WQ1m0Wg.roa (raw, json) Hash identifier: Nc9dyrcUa1QHYvN/T1aLg2QBZKFaf7gWSdVmcW5gdec= Subject key identifier: 96:08:D6:13:97:FA:14:1B:AB:E2:DC:4B:A2:E8:BD:59:0D:66:D1:68 Certificate issuer: /CN=a59a78a8512f909ce6d473252f04cf19e9e68a2a Certificate serial: 019B7C1106D6C4602272B40F49843DF47090 Authority key identifier: A5:9A:78:A8:51:2F:90:9C:E6:D4:73:25:2F:04:CF:19:E9:E6:8A:2A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pZp4qFEvkJzm1HMlLwTPGenmiio.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/ab57bd-cfed-441f-a437-438e84c7107d/1/lgjWE5f6FBur4txLoui9WQ1m0Wg.roa Signing time: Fri 02 Jan 2026 00:17:29 +0000 ROA not before: Fri 02 Jan 2026 00:17:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47291 IP address blocks: 195.62.94.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/ab57bd-cfed-441f-a437-438e84c7107d/1/pZp4qFEvkJzm1HMlLwTPGenmiio.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/ab57bd-cfed-441f-a437-438e84c7107d/1/pZp4qFEvkJzm1HMlLwTPGenmiio.mft rsync://rpki.ripe.net/repository/DEFAULT/pZp4qFEvkJzm1HMlLwTPGenmiio.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:06:d6:c4:60:22:72:b4:0f:49:84:3d:f4:70:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a59a78a8512f909ce6d473252f04cf19e9e68a2a Validity Not Before: Jan 2 00:17:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9608d61397fa141babe2dc4ba2e8bd590d66d168 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:3b:a7:28:d9:ca:22:98:d4:0e:11:9d:66:0f: b7:95:42:f4:04:8d:e8:ec:b6:58:df:4d:de:14:00: 66:af:00:75:00:e0:ce:ed:cf:c5:d4:1e:c5:f1:3a: 36:3d:69:4a:9e:c0:cc:94:21:66:61:f8:9d:2d:93: 3d:e4:f6:77:96:fc:fb:f0:f1:71:64:28:27:30:cb: 91:d8:73:df:56:b1:ae:7d:b4:a2:92:12:bc:e2:b6: ab:54:3f:ce:dd:58:1f:1d:f1:9e:93:a2:39:0a:67: 0c:e5:58:5a:3e:ff:80:08:ab:6f:a1:9c:8f:b9:98: 49:07:4c:2d:d7:38:d1:8a:66:52:9e:4b:3a:fb:f5: 2c:1f:7d:1a:a6:9b:6d:75:35:85:3b:d3:25:25:72: 49:ff:79:86:c4:40:f1:0f:de:85:1c:97:37:d4:da: c2:ca:93:02:dc:1b:a8:30:6f:37:d3:4a:b2:3b:7e: 6d:02:e0:f1:ef:58:6a:3c:95:72:82:df:db:8a:ac: 21:67:02:49:58:d7:8b:6c:7a:68:1c:5b:04:c8:b3: f1:6e:42:1c:33:c3:89:19:98:03:cd:69:27:d1:f2: 85:62:d8:31:e1:ff:7e:ae:c8:4c:34:67:cc:86:21: 17:8d:7c:72:40:9b:0e:47:b7:16:9a:19:f3:ee:e5: b7:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:08:D6:13:97:FA:14:1B:AB:E2:DC:4B:A2:E8:BD:59:0D:66:D1:68 X509v3 Authority Key Identifier: keyid:A5:9A:78:A8:51:2F:90:9C:E6:D4:73:25:2F:04:CF:19:E9:E6:8A:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pZp4qFEvkJzm1HMlLwTPGenmiio.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ab57bd-cfed-441f-a437-438e84c7107d/1/lgjWE5f6FBur4txLoui9WQ1m0Wg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ab57bd-cfed-441f-a437-438e84c7107d/1/pZp4qFEvkJzm1HMlLwTPGenmiio.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.62.94.0/23 Signature Algorithm: sha256WithRSAEncryption a1:86:2f:ba:fc:1e:07:88:89:23:a0:53:f9:a8:44:ac:4f:ec: 46:f4:db:18:5b:23:e7:cf:bb:a9:71:34:e9:c4:c5:7d:e9:48: d4:a2:76:9f:e0:cf:a9:01:ba:53:f4:f0:2c:8f:3d:dd:e3:73: 44:b3:7a:ac:18:3e:a7:aa:f0:33:e3:3b:bb:fe:cb:26:0d:65: 89:ae:f8:61:77:06:ba:01:bd:64:86:50:0a:b9:19:07:d1:3b: ab:05:f5:48:c7:79:e7:3e:3e:a7:e4:eb:5f:2b:ee:1d:82:97: 39:58:7c:5a:ab:c3:ac:23:fe:1b:e8:f6:18:86:80:03:ec:88: 5d:05:80:a5:4f:fb:bc:0d:65:10:9b:d9:f2:0a:6c:c7:29:60: e1:49:7e:65:76:df:84:3c:4e:30:28:0d:04:4f:e1:88:e0:d3: 4a:46:c8:3b:6c:59:c0:da:51:4a:65:fc:9a:42:7b:ee:4e:c7: 31:9b:1c:62:04:57:fd:84:e5:c4:d2:fe:55:ed:5e:99:14:82: bf:56:6f:32:53:11:59:d3:53:fa:f5:62:cb:ad:ce:50:da:b7: de:59:87:a0:fd:67:5b:b9:a7:3e:ea:83:13:e2:52:f0:a8:6f: 1e:93:e5:ef:f5:58:d8:24:e6:53:c6:5e:6b:4a:cd:cf:79:5a: bb:39:1a:cc -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8EQbWxGAicrQPSYQ99HCQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1OWE3OGE4NTEyZjkwOWNlNmQ0NzMyNTJmMDRjZjE5ZTll NjhhMmEwHhcNMjYwMTAyMDAxNzI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NjA4ZDYxMzk3ZmExNDFiYWJlMmRjNGJhMmU4YmQ1OTBkNjZkMTY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvTunKNnKIpjUDhGdZg+3lUL0BI3o 7LZY303eFABmrwB1AODO7c/F1B7F8To2PWlKnsDMlCFmYfidLZM95PZ3lvz78PFx ZCgnMMuR2HPfVrGufbSikhK84rarVD/O3VgfHfGek6I5CmcM5VhaPv+ACKtvoZyP uZhJB0wt1zjRimZSnks6+/UsH30appttdTWFO9MlJXJJ/3mGxEDxD96FHJc31NrC ypMC3BuoMG8300qyO35tAuDx71hqPJVygt/biqwhZwJJWNeLbHpoHFsEyLPxbkIc M8OJGZgDzWkn0fKFYtgx4f9+rshMNGfMhiEXjXxyQJsOR7cWmhnz7uW3EQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJYI1hOX+hQbq+LcS6LovVkNZtFoMB8GA1UdIwQY MBaAFKWaeKhRL5Cc5tRzJS8Ezxnp5ooqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcFpwNHFGRXZrSnptMUhNbEx3VFBHZW5taWlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi9hYjU3YmQtY2ZlZC00NDFmLWE0Mzct NDM4ZTg0YzcxMDdkLzEvbGdqV0U1ZjZGQnVyNHR4TG91aTlXUTFtMFdnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi9hYjU3YmQtY2ZlZC00NDFmLWE0MzctNDM4ZTg0YzcxMDdk LzEvcFpwNHFGRXZrSnptMUhNbEx3VFBHZW5taWlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwz5eMA0G CSqGSIb3DQEBCwUAA4IBAQChhi+6/B4HiIkjoFP5qESsT+xG9NsYWyPnz7upcTTp xMV96UjUonaf4M+pAbpT9PAsjz3d43NEs3qsGD6nqvAz4zu7/ssmDWWJrvhhdwa6 Ab1khlAKuRkH0TurBfVIx3nnPj6n5OtfK+4dgpc5WHxaq8OsI/4b6PYYhoAD7Ihd BYClT/u8DWUQm9nyCmzHKWDhSX5ldt+EPE4wKA0ET+GI4NNKRsg7bFnA2lFKZfya QnvuTscxmxxiBFf9hOXE0v5V7V6ZFIK/Vm8yUxFZ01P69WLLrc5Q2rfeWYeg/Wdb uac+6oMT4lLwqG8ek+Xv9VjYJOZTxl5rSs3PeVq7ORrM -----END CERTIFICATE-----Generated at Tue Feb 10 03:11:13 2026 by rpki-client