This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/fb7864-5795-4208-abe0-08542454d16b/1/lS_7ElVJSzohGwkrzoM9Rl9Uaeo.roa File: lS_7ElVJSzohGwkrzoM9Rl9Uaeo.roa (raw, json) Hash identifier: 2GOJmUxu3DZ3m6sSBQN+fyPKa6u0tmi0xc6B6mGHemU= Subject key identifier: 95:2F:FB:12:55:49:4B:3A:21:1B:09:2B:CE:83:3D:46:5F:54:69:EA Certificate issuer: /CN=9e505f2e67a1e604b3f963ce4c367d1958bd4b78 Certificate serial: 019B7759504B3FFFB81F927FC538CD171B71 Authority key identifier: 9E:50:5F:2E:67:A1:E6:04:B3:F9:63:CE:4C:36:7D:19:58:BD:4B:78 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nlBfLmeh5gSz-WPOTDZ9GVi9S3g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/fb7864-5795-4208-abe0-08542454d16b/1/lS_7ElVJSzohGwkrzoM9Rl9Uaeo.roa Signing time: Thu 01 Jan 2026 02:18:20 +0000 ROA not before: Thu 01 Jan 2026 02:18:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50030 IP address blocks: 193.111.212.0/22 maxlen: 24 2001:678:9b0::/48 maxlen: 48 2001:678:9c0::/48 maxlen: 48 2001:67c:2878::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/fb7864-5795-4208-abe0-08542454d16b/1/nlBfLmeh5gSz-WPOTDZ9GVi9S3g.crl rsync://rpki.ripe.net/repository/DEFAULT/48/fb7864-5795-4208-abe0-08542454d16b/1/nlBfLmeh5gSz-WPOTDZ9GVi9S3g.mft rsync://rpki.ripe.net/repository/DEFAULT/nlBfLmeh5gSz-WPOTDZ9GVi9S3g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:50:4b:3f:ff:b8:1f:92:7f:c5:38:cd:17:1b:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e505f2e67a1e604b3f963ce4c367d1958bd4b78 Validity Not Before: Jan 1 02:18:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=952ffb1255494b3a211b092bce833d465f5469ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:76:c3:7d:8f:8e:79:46:06:e5:d7:ec:c0:da: cd:ab:f4:a3:e6:c5:af:be:b6:80:57:17:49:e4:7b: c6:9b:59:2e:63:dd:12:70:0a:53:4a:dd:4c:a8:e6: 0b:33:ce:48:da:30:cc:da:b2:6b:0e:19:2b:6c:51: 8f:7e:c0:2c:4e:c8:2b:4a:b9:53:3a:2a:64:9b:5d: ee:65:1e:69:62:07:3f:ea:28:3d:76:75:d6:6a:ed: 5c:8c:18:c8:13:ae:9b:b1:99:70:7b:53:fe:48:c0: f9:4a:37:98:9b:27:44:36:f0:49:6f:dd:4c:a5:9f: 88:9f:9f:8f:95:4e:38:cd:fb:aa:b2:99:c5:d6:7c: 7a:00:0f:68:a4:4f:51:e8:7e:4f:c9:24:08:81:4a: df:69:e7:4b:70:01:d6:5c:f2:6b:52:ac:da:0b:dd: 38:55:06:34:57:6c:a1:1f:cd:09:ee:2c:3c:e7:11: 0e:ef:1b:60:21:d8:74:10:b9:ee:a5:72:bb:3c:ff: c5:ab:ec:8e:d8:66:a4:2f:2e:a1:8e:aa:93:91:55: b3:b9:30:18:3c:88:2b:44:14:b8:21:30:cd:18:12: d0:e3:7e:00:4c:bc:92:ef:94:1d:ae:c0:3d:0f:51: 16:79:96:88:07:97:ee:ac:52:fa:cb:92:87:4a:23: 7d:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:2F:FB:12:55:49:4B:3A:21:1B:09:2B:CE:83:3D:46:5F:54:69:EA X509v3 Authority Key Identifier: keyid:9E:50:5F:2E:67:A1:E6:04:B3:F9:63:CE:4C:36:7D:19:58:BD:4B:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nlBfLmeh5gSz-WPOTDZ9GVi9S3g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/fb7864-5795-4208-abe0-08542454d16b/1/lS_7ElVJSzohGwkrzoM9Rl9Uaeo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/fb7864-5795-4208-abe0-08542454d16b/1/nlBfLmeh5gSz-WPOTDZ9GVi9S3g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.111.212.0/22 IPv6: 2001:678:9b0::/48 2001:678:9c0::/48 2001:67c:2878::/48 Signature Algorithm: sha256WithRSAEncryption 68:da:b3:ca:d7:eb:09:9f:19:51:a7:92:e8:96:d0:4e:c8:ac: 4c:1a:56:55:dc:5d:0c:0d:69:24:3a:31:1c:08:f5:b0:ab:7d: f8:b8:6e:57:a0:d5:25:dc:9f:d0:c2:3b:50:c8:87:fd:44:9c: a4:21:c4:08:31:dd:c6:6a:6b:66:b3:9e:51:5a:81:d8:c0:47: c3:94:1a:be:4c:6e:35:57:6e:e2:21:a9:0b:b4:06:a9:35:f9: 2f:41:a9:10:aa:4c:d1:16:42:d7:b3:cc:67:66:2b:44:d0:dd: de:76:5c:9e:08:d4:42:e1:77:81:b7:99:8a:3f:f1:b1:fa:75: f5:03:15:84:74:82:d6:c0:e2:05:2c:9a:f0:90:2f:c9:34:db: 18:e7:ee:9f:9d:c1:4f:52:25:0b:fb:04:1f:09:3e:d9:96:3e: ca:7c:fc:5e:a5:71:7d:a3:a5:6b:f0:13:bf:10:66:73:aa:9d: 3e:24:3f:ec:1e:f4:8a:bf:8d:e7:93:73:f4:c5:43:67:31:b0: f4:32:fe:65:e3:54:f4:8d:a0:99:9c:4d:f8:ac:e3:f8:d4:a5: 9c:c1:0b:da:96:e7:99:7b:34:2d:35:69:52:b4:fe:79:86:44: ca:1e:ba:c9:7c:6f:e5:16:10:6f:87:9f:ca:fb:7e:77:dc:b8: 05:55:6a:9f -----BEGIN CERTIFICATE----- MIIFIDCCBAigAwIBAgISAZt3WVBLP/+4H5J/xTjNFxtxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllNTA1ZjJlNjdhMWU2MDRiM2Y5NjNjZTRjMzY3ZDE5NThi ZDRiNzgwHhcNMjYwMTAxMDIxODIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NTJmZmIxMjU1NDk0YjNhMjExYjA5MmJjZTgzM2Q0NjVmNTQ2OWVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnnbDfY+OeUYG5dfswNrNq/Sj5sWv vraAVxdJ5HvGm1kuY90ScApTSt1MqOYLM85I2jDM2rJrDhkrbFGPfsAsTsgrSrlT Oipkm13uZR5pYgc/6ig9dnXWau1cjBjIE66bsZlwe1P+SMD5SjeYmydENvBJb91M pZ+In5+PlU44zfuqspnF1nx6AA9opE9R6H5PySQIgUrfaedLcAHWXPJrUqzaC904 VQY0V2yhH80J7iw85xEO7xtgIdh0ELnupXK7PP/Fq+yO2GakLy6hjqqTkVWzuTAY PIgrRBS4ITDNGBLQ434ATLyS75QdrsA9D1EWeZaIB5furFL6y5KHSiN9fwIDAQAB o4ICLDCCAigwHQYDVR0OBBYEFJUv+xJVSUs6IRsJK86DPUZfVGnqMB8GA1UdIwQY MBaAFJ5QXy5noeYEs/ljzkw2fRlYvUt4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmxCZkxtZWg1Z1N6LVdQT1REWjlHVmk5UzNnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC9mYjc4NjQtNTc5NS00MjA4LWFiZTAt MDg1NDI0NTRkMTZiLzEvbFNfN0VsVkpTem9oR3drcnpvTTlSbDlVYWVvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC9mYjc4NjQtNTc5NS00MjA4LWFiZTAtMDg1NDI0NTRkMTZi LzEvbmxCZkxtZWg1Z1N6LVdQT1REWjlHVmk5UzNnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEIGCCsGAQUFBwEHAQH/BDMwMTAMBAIAATAGAwQCwW/UMCEE AgACMBsDBwAgAQZ4CbADBwAgAQZ4CcADBwAgAQZ8KHgwDQYJKoZIhvcNAQELBQAD ggEBAGjas8rX6wmfGVGnkuiW0E7IrEwaVlXcXQwNaSQ6MRwI9bCrffi4bleg1SXc n9DCO1DIh/1EnKQhxAgx3cZqa2aznlFagdjAR8OUGr5MbjVXbuIhqQu0Bqk1+S9B qRCqTNEWQtezzGdmK0TQ3d52XJ4I1ELhd4G3mYo/8bH6dfUDFYR0gtbA4gUsmvCQ L8k02xjn7p+dwU9SJQv7BB8JPtmWPsp8/F6lcX2jpWvwE78QZnOqnT4kP+we9Iq/ jeeTc/TFQ2cxsPQy/mXjVPSNoJmcTfis4/jUpZzBC9qW55l7NC01aVK0/nmGRMoe usl8b+UWEG+Hn8r7fnfcuAVVap8= -----END CERTIFICATE-----Generated at Tue Feb 10 00:14:57 2026 by rpki-client