This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/l_ZD8sSGfJ3_8TqaLtRsvJOov9Q.roa File: l_ZD8sSGfJ3_8TqaLtRsvJOov9Q.roa (raw, json) Hash identifier: 0ZLcxVq4SbMJb/Tzs+R0ez5dGHPb27PKXrdMSol7/iI= Subject key identifier: 97:F6:43:F2:C4:86:7C:9D:FF:F1:3A:9A:2E:D4:6C:BC:93:A8:BF:D4 Certificate issuer: /CN=ba9d30e6035be8b8386061f271481c707e04ce2b Certificate serial: 019B76EB86A0E8646FCDF679A905ADF882F8 Authority key identifier: BA:9D:30:E6:03:5B:E8:B8:38:60:61:F2:71:48:1C:70:7E:04:CE:2B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/l_ZD8sSGfJ3_8TqaLtRsvJOov9Q.roa Signing time: Thu 01 Jan 2026 00:18:25 +0000 ROA not before: Thu 01 Jan 2026 00:18:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51575 IP address blocks: 92.45.66.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.crl rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.mft rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 18:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:86:a0:e8:64:6f:cd:f6:79:a9:05:ad:f8:82:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba9d30e6035be8b8386061f271481c707e04ce2b Validity Not Before: Jan 1 00:18:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=97f643f2c4867c9dfff13a9a2ed46cbc93a8bfd4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:37:8f:2a:b5:7d:b2:36:01:5f:30:69:4c:ba: 3b:65:74:5a:88:dc:11:04:f3:90:a3:ce:00:c3:c5: c2:02:e9:d7:30:d9:29:91:28:5f:a5:eb:59:af:df: 31:1c:15:73:7c:65:29:c6:70:ae:03:bb:b8:9c:6f: 54:43:9e:9a:1a:3d:dd:04:74:a9:9c:82:a3:ab:fd: 35:99:77:d9:36:38:4d:9d:36:4e:9a:9e:53:25:60: 54:a1:87:66:c8:f7:72:c3:9b:bb:78:de:17:69:0a: 96:95:4a:7e:52:9c:b6:6d:18:b8:21:23:48:63:31: 82:0f:1a:f0:6b:8e:5e:1a:3b:bf:a1:3d:44:3c:26: ef:d6:b2:bf:65:fb:82:34:d7:25:85:f6:3a:64:15: a1:94:e6:9c:28:21:8c:0f:55:17:17:18:61:dc:48: 80:6d:2c:f5:90:f9:be:f0:77:81:56:0d:26:10:3c: eb:55:3c:4e:71:1c:39:b2:3e:30:57:d6:d3:f2:32: b5:d1:88:88:ee:96:5b:f9:b6:46:ca:49:9e:52:ec: 9b:f9:9f:cf:d2:91:45:72:a0:4e:d5:6d:fb:17:f5: c5:34:ee:d5:07:89:06:01:cf:cf:04:fa:09:a9:9d: 00:51:b3:46:d7:f1:cc:c1:88:46:7a:a9:86:8a:d0: 22:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:F6:43:F2:C4:86:7C:9D:FF:F1:3A:9A:2E:D4:6C:BC:93:A8:BF:D4 X509v3 Authority Key Identifier: keyid:BA:9D:30:E6:03:5B:E8:B8:38:60:61:F2:71:48:1C:70:7E:04:CE:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/l_ZD8sSGfJ3_8TqaLtRsvJOov9Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.45.66.0/24 Signature Algorithm: sha256WithRSAEncryption 87:59:6b:c4:32:f0:05:90:b0:19:fd:a2:87:8f:ce:9d:ab:3b: 24:0d:6b:1d:c2:17:8e:15:1c:8b:bf:84:a7:c5:dd:81:df:be: 15:19:cd:50:96:a0:e6:31:67:6c:4d:8b:9f:a5:69:cd:d8:3c: c5:16:17:6f:b4:14:ac:3b:3a:62:50:20:fb:30:91:32:f0:de: f6:b9:fa:67:aa:dd:81:ef:d5:df:00:8f:90:c8:43:a4:e5:48: ce:d7:de:69:a9:55:7f:e8:51:1d:bd:a6:fc:3f:0a:89:91:9c: 56:a8:ae:7a:35:a5:4f:73:c9:53:78:c5:06:5a:e5:d7:34:60: 02:f0:76:66:4a:96:4d:16:0a:43:f6:55:e2:05:c2:91:9f:7e: 7c:12:2f:e9:d1:5d:70:22:97:a5:f2:29:35:fc:a5:c8:fd:05: ed:4c:f5:95:63:8b:2b:e2:a5:a7:f3:e2:d1:80:31:ef:49:1a: ed:41:5e:00:34:fc:89:20:87:91:ca:71:c7:3d:d7:81:74:1a: 5d:38:92:3f:e6:19:3a:ed:54:30:bd:95:0c:41:37:18:ef:f4: 86:d9:71:04:05:48:77:93:11:a1:2d:99:f0:22:1a:e5:e4:ff: ce:e9:84:2d:49:b6:c1:34:3c:25:6c:c8:6e:08:fd:5c:3a:fa: 38:e9:ba:70 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt264ag6GRvzfZ5qQWt+IL4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhOWQzMGU2MDM1YmU4YjgzODYwNjFmMjcxNDgxYzcwN2Uw NGNlMmIwHhcNMjYwMTAxMDAxODI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5N2Y2NDNmMmM0ODY3YzlkZmZmMTNhOWEyZWQ0NmNiYzkzYThiZmQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1zePKrV9sjYBXzBpTLo7ZXRaiNwR BPOQo84Aw8XCAunXMNkpkShfpetZr98xHBVzfGUpxnCuA7u4nG9UQ56aGj3dBHSp nIKjq/01mXfZNjhNnTZOmp5TJWBUoYdmyPdyw5u7eN4XaQqWlUp+Upy2bRi4ISNI YzGCDxrwa45eGju/oT1EPCbv1rK/ZfuCNNclhfY6ZBWhlOacKCGMD1UXFxhh3EiA bSz1kPm+8HeBVg0mEDzrVTxOcRw5sj4wV9bT8jK10YiI7pZb+bZGykmeUuyb+Z/P 0pFFcqBO1W37F/XFNO7VB4kGAc/PBPoJqZ0AUbNG1/HMwYhGeqmGitAijQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJf2Q/LEhnyd//E6mi7UbLyTqL/UMB8GA1UdIwQY MBaAFLqdMOYDW+i4OGBh8nFIHHB+BM4rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdXAwdzVnTmI2TGc0WUdIeWNVZ2NjSDRFemlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9hYzljMzItN2RiYy00ZDZjLWJjMDgt NWQ1ODRmYmM1ZDI3LzEvbF9aRDhzU0dmSjNfOFRxYUx0UnN2Sk9vdjlRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9hYzljMzItN2RiYy00ZDZjLWJjMDgtNWQ1ODRmYmM1ZDI3 LzEvdXAwdzVnTmI2TGc0WUdIeWNVZ2NjSDRFemlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXC1CMA0G CSqGSIb3DQEBCwUAA4IBAQCHWWvEMvAFkLAZ/aKHj86dqzskDWsdwheOFRyLv4Sn xd2B374VGc1QlqDmMWdsTYufpWnN2DzFFhdvtBSsOzpiUCD7MJEy8N72ufpnqt2B 79XfAI+QyEOk5UjO195pqVV/6FEdvab8PwqJkZxWqK56NaVPc8lTeMUGWuXXNGAC 8HZmSpZNFgpD9lXiBcKRn358Ei/p0V1wIpel8ik1/KXI/QXtTPWVY4sr4qWn8+LR gDHvSRrtQV4ANPyJIIeRynHHPdeBdBpdOJI/5hk67VQwvZUMQTcY7/SG2XEEBUh3 kxGhLZnwIhrl5P/O6YQtSbbBNDwlbMhuCP1cOvo46bpw -----END CERTIFICATE-----Generated at Mon Jan 26 03:27:12 2026 by rpki-client