This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/3dbfeb-b2e2-4816-9ba9-a5cd81b5e00b/1/lGdnHQ9JzbcCAf7aCdi2AtQWylc.roa File: lGdnHQ9JzbcCAf7aCdi2AtQWylc.roa (raw, json) Hash identifier: /SsAkMvFx9VtM23+Xr14ddTXFb4dIacWZgb2bJ1bpX4= Subject key identifier: 94:67:67:1D:0F:49:CD:B7:02:01:FE:DA:09:D8:B6:02:D4:16:CA:57 Certificate issuer: /CN=d695cb86586cbfd2462afa052c96a25c162830a8 Certificate serial: 019B7F14D7A7BB8AC77C44253818FC482088 Authority key identifier: D6:95:CB:86:58:6C:BF:D2:46:2A:FA:05:2C:96:A2:5C:16:28:30:A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1pXLhlhsv9JGKvoFLJaiXBYoMKg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/3dbfeb-b2e2-4816-9ba9-a5cd81b5e00b/1/lGdnHQ9JzbcCAf7aCdi2AtQWylc.roa Signing time: Fri 02 Jan 2026 14:20:30 +0000 ROA not before: Fri 02 Jan 2026 14:20:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49624 IP address blocks: 188.93.170.0/23 maxlen: 23 2001:7f8:4c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/3dbfeb-b2e2-4816-9ba9-a5cd81b5e00b/1/1pXLhlhsv9JGKvoFLJaiXBYoMKg.crl rsync://rpki.ripe.net/repository/DEFAULT/50/3dbfeb-b2e2-4816-9ba9-a5cd81b5e00b/1/1pXLhlhsv9JGKvoFLJaiXBYoMKg.mft rsync://rpki.ripe.net/repository/DEFAULT/1pXLhlhsv9JGKvoFLJaiXBYoMKg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:d7:a7:bb:8a:c7:7c:44:25:38:18:fc:48:20:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d695cb86586cbfd2462afa052c96a25c162830a8 Validity Not Before: Jan 2 14:20:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9467671d0f49cdb70201feda09d8b602d416ca57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:e0:3e:5c:ac:f4:32:fe:8c:6e:43:b5:49:31: e1:7c:c5:d8:d0:bc:ce:ad:42:19:08:d5:b4:68:85: 23:17:ff:38:a7:c0:1a:c3:b9:72:31:6a:d7:8f:c7: 53:88:a4:a6:b0:c6:32:ef:a7:f9:50:24:d5:dd:02: 0c:d8:fc:98:73:ec:9c:e2:29:4c:de:09:82:6a:b9: 96:47:9b:51:ce:1a:fb:a9:1e:48:a5:9e:e8:74:7f: 34:69:1b:7f:99:83:93:95:1e:49:bf:af:9c:b7:19: 10:74:16:a2:18:1c:7f:fb:d2:07:c8:78:4f:fe:c2: 31:6b:c4:d2:75:b8:5d:53:9c:a3:79:d7:72:35:d4: c2:d0:73:29:49:b5:02:fc:76:7a:5a:2b:67:10:0a: 29:0e:ed:91:8a:72:65:23:17:05:89:c2:09:cc:02: fb:fb:7d:70:bb:bc:4e:2d:28:b0:71:db:dc:bf:fa: d7:2e:95:8d:5b:61:cf:85:d8:f3:82:60:75:e4:18: 12:82:8e:c9:47:b9:1f:09:71:6b:34:35:65:1d:74: 33:d9:01:7b:fd:42:fd:11:58:20:e4:42:90:3c:3d: fc:b5:15:96:61:97:3c:d9:93:05:4d:0b:a5:08:0d: 09:06:11:8b:f8:be:6c:0c:81:09:6f:8e:d6:cb:9b: e6:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:67:67:1D:0F:49:CD:B7:02:01:FE:DA:09:D8:B6:02:D4:16:CA:57 X509v3 Authority Key Identifier: keyid:D6:95:CB:86:58:6C:BF:D2:46:2A:FA:05:2C:96:A2:5C:16:28:30:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1pXLhlhsv9JGKvoFLJaiXBYoMKg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3dbfeb-b2e2-4816-9ba9-a5cd81b5e00b/1/lGdnHQ9JzbcCAf7aCdi2AtQWylc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3dbfeb-b2e2-4816-9ba9-a5cd81b5e00b/1/1pXLhlhsv9JGKvoFLJaiXBYoMKg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.93.170.0/23 IPv6: 2001:7f8:4c::/48 Signature Algorithm: sha256WithRSAEncryption 1d:4a:4a:97:73:30:71:1a:88:19:16:93:66:9c:1f:a8:10:e9: 09:45:c1:3c:81:c0:82:9e:30:1a:3c:d6:62:29:d3:33:61:7e: 31:67:f5:60:50:4d:48:a9:18:b5:74:02:5c:f5:9b:bc:e3:6b: e9:75:42:86:9d:a4:b6:e2:55:38:4e:c9:97:23:f2:63:1c:48: 9b:31:80:c3:d2:93:10:c2:1b:7c:09:72:02:b6:4c:70:46:01: 06:7a:dd:29:3e:0d:e6:aa:d9:4d:0f:4f:20:a0:86:6f:1d:cc: 17:d0:a8:fe:9d:72:2b:52:fc:50:69:82:5d:e6:3e:b0:e6:16: 26:d8:16:a5:83:9f:d0:54:db:ae:c8:4c:ce:5f:0d:8c:8d:2a: 34:85:32:81:85:d3:0d:28:42:24:62:4c:52:f0:7f:31:3d:51: c3:d4:58:f0:b4:23:cb:5d:be:5f:ca:1c:0f:81:56:c0:eb:c2: 2d:82:2e:57:06:44:d4:be:92:a8:85:42:cb:c8:c0:82:eb:a8: fd:30:a4:4d:a3:a2:ed:7e:e1:c0:9e:50:d1:d1:48:d2:eb:be: 40:89:1f:92:05:40:52:ce:fd:c8:78:48:42:ca:c1:60:14:25: 49:bb:b0:d0:ef:ba:ca:5f:2e:92:d6:15:62:7a:ee:56:96:0a: 63:5c:96:88 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt/FNenu4rHfEQlOBj8SCCIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2OTVjYjg2NTg2Y2JmZDI0NjJhZmEwNTJjOTZhMjVjMTYy ODMwYTgwHhcNMjYwMTAyMTQyMDMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NDY3NjcxZDBmNDljZGI3MDIwMWZlZGEwOWQ4YjYwMmQ0MTZjYTU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2OA+XKz0Mv6MbkO1STHhfMXY0LzO rUIZCNW0aIUjF/84p8Aaw7lyMWrXj8dTiKSmsMYy76f5UCTV3QIM2PyYc+yc4ilM 3gmCarmWR5tRzhr7qR5IpZ7odH80aRt/mYOTlR5Jv6+ctxkQdBaiGBx/+9IHyHhP /sIxa8TSdbhdU5yjeddyNdTC0HMpSbUC/HZ6WitnEAopDu2RinJlIxcFicIJzAL7 +31wu7xOLSiwcdvcv/rXLpWNW2HPhdjzgmB15BgSgo7JR7kfCXFrNDVlHXQz2QF7 /UL9EVgg5EKQPD38tRWWYZc82ZMFTQulCA0JBhGL+L5sDIEJb47Wy5vmVwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFJRnZx0PSc23AgH+2gnYtgLUFspXMB8GA1UdIwQY MBaAFNaVy4ZYbL/SRir6BSyWolwWKDCoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMXBYTGhsaHN2OUpHS3ZvRkxKYWlYQllvTUtnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC8zZGJmZWItYjJlMi00ODE2LTliYTkt YTVjZDgxYjVlMDBiLzEvbEdkbkhROUp6YmNDQWY3YUNkaTJBdFFXeWxjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MC8zZGJmZWItYjJlMi00ODE2LTliYTktYTVjZDgxYjVlMDBi LzEvMXBYTGhsaHN2OUpHS3ZvRkxKYWlYQllvTUtnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBvF2qMA8E AgACMAkDBwAgAQf4AEwwDQYJKoZIhvcNAQELBQADggEBAB1KSpdzMHEaiBkWk2ac H6gQ6QlFwTyBwIKeMBo81mIp0zNhfjFn9WBQTUipGLV0Alz1m7zja+l1QoadpLbi VThOyZcj8mMcSJsxgMPSkxDCG3wJcgK2THBGAQZ63Sk+Deaq2U0PTyCghm8dzBfQ qP6dcitS/FBpgl3mPrDmFibYFqWDn9BU267ITM5fDYyNKjSFMoGF0w0oQiRiTFLw fzE9UcPUWPC0I8tdvl/KHA+BVsDrwi2CLlcGRNS+kqiFQsvIwILrqP0wpE2jou1+ 4cCeUNHRSNLrvkCJH5IFQFLO/ch4SELKwWAUJUm7sNDvuspfLpLWFWJ67laWCmNc log= -----END CERTIFICATE-----Generated at Mon Feb 9 18:42:35 2026 by rpki-client