This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/76519e-c680-4297-8b79-24f6bdbd950d/1/lf9Sr0qMQc6EvlFGm-3h8QpjBDA.roa File: lf9Sr0qMQc6EvlFGm-3h8QpjBDA.roa (raw, json) Hash identifier: nZLAYramQ4+XmCssjOO+563Qck36z5WDduUFdBKoqPw= Subject key identifier: 95:FF:52:AF:4A:8C:41:CE:84:BE:51:46:9B:ED:E1:F1:0A:63:04:30 Certificate issuer: /CN=750e52de53330d5005498b0fc409e64dd98bb099 Certificate serial: 019C317ABB72E69BAEE1D32DB1F084A88A81 Authority key identifier: 75:0E:52:DE:53:33:0D:50:05:49:8B:0F:C4:09:E6:4D:D9:8B:B0:99 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQ5S3lMzDVAFSYsPxAnmTdmLsJk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/76519e-c680-4297-8b79-24f6bdbd950d/1/lf9Sr0qMQc6EvlFGm-3h8QpjBDA.roa Signing time: Fri 06 Feb 2026 05:44:12 +0000 ROA not before: Fri 06 Feb 2026 05:44:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202446 IP address blocks: 194.33.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/76519e-c680-4297-8b79-24f6bdbd950d/1/dQ5S3lMzDVAFSYsPxAnmTdmLsJk.crl rsync://rpki.ripe.net/repository/DEFAULT/49/76519e-c680-4297-8b79-24f6bdbd950d/1/dQ5S3lMzDVAFSYsPxAnmTdmLsJk.mft rsync://rpki.ripe.net/repository/DEFAULT/dQ5S3lMzDVAFSYsPxAnmTdmLsJk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:31:7a:bb:72:e6:9b:ae:e1:d3:2d:b1:f0:84:a8:8a:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=750e52de53330d5005498b0fc409e64dd98bb099 Validity Not Before: Feb 6 05:44:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=95ff52af4a8c41ce84be51469bede1f10a630430 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:96:0e:47:a7:60:11:11:04:f8:8e:b1:5c:cd: 66:97:e5:9a:f2:7e:09:91:11:29:8c:11:a6:73:a9: 7b:91:02:24:99:f8:83:64:8d:d4:23:27:a2:92:62: 69:85:af:6d:54:f2:f8:92:f6:b6:18:53:1e:a2:30: 6a:bc:4b:57:6b:2a:88:44:dc:93:bf:32:8f:1e:7a: 07:45:1b:11:5a:56:93:7a:e6:ac:c7:fa:3c:d0:5e: 2e:db:d7:cc:56:d7:ba:f7:05:8f:08:27:c0:2c:16: ea:87:74:0c:f6:93:3e:36:a1:05:6d:08:c4:f4:5e: a5:c0:e5:95:e2:87:75:67:92:05:af:f3:a9:a4:73: 75:9c:31:85:ab:e5:a1:a5:1e:ca:51:89:9b:af:42: 33:7b:9f:60:bf:c4:f2:d0:6a:81:2d:e6:65:27:e8: 84:aa:16:ba:3c:01:2e:cf:6c:ae:d3:6a:a1:81:05: 38:e0:6d:d6:d0:c5:8a:b7:82:04:41:77:47:da:a9: a5:4c:73:6d:ba:ed:e4:66:ae:9a:4e:94:a7:70:b2: 23:b3:37:cb:51:04:a4:8a:15:df:92:e2:fb:20:a9: e3:c8:da:18:16:32:77:93:33:72:36:fe:e5:81:ff: 59:ad:32:fb:3a:d0:ac:60:af:b6:02:24:34:b9:9c: 68:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:FF:52:AF:4A:8C:41:CE:84:BE:51:46:9B:ED:E1:F1:0A:63:04:30 X509v3 Authority Key Identifier: keyid:75:0E:52:DE:53:33:0D:50:05:49:8B:0F:C4:09:E6:4D:D9:8B:B0:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQ5S3lMzDVAFSYsPxAnmTdmLsJk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/76519e-c680-4297-8b79-24f6bdbd950d/1/lf9Sr0qMQc6EvlFGm-3h8QpjBDA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/49/76519e-c680-4297-8b79-24f6bdbd950d/1/dQ5S3lMzDVAFSYsPxAnmTdmLsJk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.33.20.0/24 Signature Algorithm: sha256WithRSAEncryption b4:47:96:67:4f:b9:77:6a:38:30:8d:60:08:a7:1a:92:02:29: 73:31:eb:53:ec:6a:5a:43:d0:71:44:e3:01:f0:4c:99:60:5d: 31:f0:da:c8:80:68:99:82:25:c1:2a:1e:8f:13:4b:09:73:1c: 8c:c1:ff:de:f2:e1:10:b4:28:10:77:a0:b9:f8:da:4a:3f:32: 21:ce:b8:1e:5c:f7:7e:20:66:5b:b5:13:de:ac:ce:23:cf:dd: e4:a0:72:d9:f9:a4:aa:61:85:27:ce:2e:4c:0b:40:c0:a9:8b: 28:5c:91:18:85:a7:35:e3:03:6f:8b:22:af:e7:55:99:ac:2f: 4f:8c:89:b3:bc:eb:e5:e3:e1:b6:8c:e3:f8:dc:79:8d:18:62: 41:73:00:a2:29:69:a7:2d:d5:38:cf:40:f2:57:39:20:70:ed: 05:bb:38:b6:7c:42:bd:0e:6d:e5:c1:0d:61:dc:0e:03:e4:3f: 3c:90:78:0f:f8:90:16:40:13:8d:f6:02:19:0a:ee:84:79:69: 59:b1:8b:de:bb:d9:c3:10:f8:22:de:e2:52:41:f6:d9:14:7c: e9:05:f4:b3:39:2b:16:77:4f:f2:7d:ad:11:25:6f:f0:8a:80: fb:ed:e0:d7:dd:0e:b6:37:f6:d3:1e:16:a6:29:3e:a5:53:7c: 7e:00:ad:c7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZwxerty5puu4dMtsfCEqIqBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1MGU1MmRlNTMzMzBkNTAwNTQ5OGIwZmM0MDllNjRkZDk4 YmIwOTkwHhcNMjYwMjA2MDU0NDEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NWZmNTJhZjRhOGM0MWNlODRiZTUxNDY5YmVkZTFmMTBhNjMwNDMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ZYOR6dgEREE+I6xXM1ml+Wa8n4J kREpjBGmc6l7kQIkmfiDZI3UIyeikmJpha9tVPL4kva2GFMeojBqvEtXayqIRNyT vzKPHnoHRRsRWlaTeuasx/o80F4u29fMVte69wWPCCfALBbqh3QM9pM+NqEFbQjE 9F6lwOWV4od1Z5IFr/OppHN1nDGFq+WhpR7KUYmbr0Ize59gv8Ty0GqBLeZlJ+iE qha6PAEuz2yu02qhgQU44G3W0MWKt4IEQXdH2qmlTHNtuu3kZq6aTpSncLIjszfL UQSkihXfkuL7IKnjyNoYFjJ3kzNyNv7lgf9ZrTL7OtCsYK+2AiQ0uZxoHwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJX/Uq9KjEHOhL5RRpvt4fEKYwQwMB8GA1UdIwQY MBaAFHUOUt5TMw1QBUmLD8QJ5k3Zi7CZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZFE1UzNsTXpEVkFGU1lzUHhBbm1UZG1Mc0prLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS83NjUxOWUtYzY4MC00Mjk3LThiNzkt MjRmNmJkYmQ5NTBkLzEvbGY5U3IwcU1RYzZFdmxGR20tM2g4UXBqQkRBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OS83NjUxOWUtYzY4MC00Mjk3LThiNzktMjRmNmJkYmQ5NTBk LzEvZFE1UzNsTXpEVkFGU1lzUHhBbm1UZG1Mc0prLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwiEUMA0G CSqGSIb3DQEBCwUAA4IBAQC0R5ZnT7l3ajgwjWAIpxqSAilzMetT7GpaQ9BxROMB 8EyZYF0x8NrIgGiZgiXBKh6PE0sJcxyMwf/e8uEQtCgQd6C5+NpKPzIhzrgeXPd+ IGZbtRPerM4jz93koHLZ+aSqYYUnzi5MC0DAqYsoXJEYhac14wNviyKv51WZrC9P jImzvOvl4+G2jOP43HmNGGJBcwCiKWmnLdU4z0DyVzkgcO0Fuzi2fEK9Dm3lwQ1h 3A4D5D88kHgP+JAWQBON9gIZCu6EeWlZsYveu9nDEPgi3uJSQfbZFHzpBfSzOSsW d0/yfa0RJW/wioD77eDX3Q62N/bTHhamKT6lU3x+AK3H -----END CERTIFICATE-----Generated at Mon Feb 9 23:47:30 2026 by rpki-client