This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/131a77-c8c8-4bb7-9aee-5a665655eb57/1/l_-ms9_QDftLZCKN9_q-vLa8Z1g.roa File: l_-ms9_QDftLZCKN9_q-vLa8Z1g.roa (raw, json) Hash identifier: zRFmfmk1D1sRun+Y9I4hMktcVuNfXiGOIRhzxPU2++g= Subject key identifier: 97:FF:A6:B3:DF:D0:0D:FB:4B:64:22:8D:F7:FA:BE:BC:B6:BC:67:58 Certificate issuer: /CN=e8964e4e8ffe31f692f71318c2b7282028d0f3a4 Certificate serial: 019B7F83E328E570B8CCE735BCE2D8A02A94 Authority key identifier: E8:96:4E:4E:8F:FE:31:F6:92:F7:13:18:C2:B7:28:20:28:D0:F3:A4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6JZOTo_-MfaS9xMYwrcoICjQ86Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/131a77-c8c8-4bb7-9aee-5a665655eb57/1/l_-ms9_QDftLZCKN9_q-vLa8Z1g.roa Signing time: Fri 02 Jan 2026 16:21:48 +0000 ROA not before: Fri 02 Jan 2026 16:21:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211510 IP address blocks: 185.251.12.0/24 maxlen: 24 2a10:a740::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/131a77-c8c8-4bb7-9aee-5a665655eb57/1/6JZOTo_-MfaS9xMYwrcoICjQ86Q.crl rsync://rpki.ripe.net/repository/DEFAULT/60/131a77-c8c8-4bb7-9aee-5a665655eb57/1/6JZOTo_-MfaS9xMYwrcoICjQ86Q.mft rsync://rpki.ripe.net/repository/DEFAULT/6JZOTo_-MfaS9xMYwrcoICjQ86Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:e3:28:e5:70:b8:cc:e7:35:bc:e2:d8:a0:2a:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e8964e4e8ffe31f692f71318c2b7282028d0f3a4 Validity Not Before: Jan 2 16:21:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=97ffa6b3dfd00dfb4b64228df7fabebcb6bc6758 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:05:81:b1:14:30:68:d5:27:fa:68:2a:da:82: 9f:e2:b3:37:7b:95:90:16:11:4b:76:6c:8c:3f:21: 9e:d1:9b:06:97:32:0d:bd:b9:e8:88:5d:98:da:89: 7a:b5:76:2e:40:e8:a8:7e:20:30:25:03:10:09:5e: 9f:cc:53:70:71:fa:3e:b6:ce:66:16:d6:10:92:3a: b0:c6:e1:92:75:0e:e2:70:57:96:ca:53:f5:b7:5c: 50:fe:7d:05:cb:c5:cb:f3:61:9c:c6:4f:89:fa:b2: 1c:d5:5b:b4:34:29:4d:ca:dc:ed:82:ce:63:41:08: b9:3e:d5:1c:11:13:80:a3:2b:81:31:58:b5:55:83: 46:26:be:42:1a:f9:80:d5:96:16:1b:b5:d5:4b:5d: c5:76:68:c6:f7:3c:db:54:fd:b5:36:5f:4a:c8:e9: 79:e9:1f:b6:4d:06:28:cf:67:16:8c:e2:3b:59:e4: 1b:b3:29:87:b0:0d:5f:e9:c3:e8:0b:6e:cc:f7:11: bf:fa:66:9d:ad:fc:96:ca:f7:df:a8:3e:ce:33:d5: 53:bd:32:b9:a8:3e:15:cc:24:c5:fe:b5:30:2a:c0: d3:1a:98:35:b4:b2:f3:07:ac:83:21:5c:dd:6e:61: 10:81:11:83:fb:8a:ba:f1:da:67:90:6a:40:ca:0c: ba:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:FF:A6:B3:DF:D0:0D:FB:4B:64:22:8D:F7:FA:BE:BC:B6:BC:67:58 X509v3 Authority Key Identifier: keyid:E8:96:4E:4E:8F:FE:31:F6:92:F7:13:18:C2:B7:28:20:28:D0:F3:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6JZOTo_-MfaS9xMYwrcoICjQ86Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/131a77-c8c8-4bb7-9aee-5a665655eb57/1/l_-ms9_QDftLZCKN9_q-vLa8Z1g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/131a77-c8c8-4bb7-9aee-5a665655eb57/1/6JZOTo_-MfaS9xMYwrcoICjQ86Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.251.12.0/24 IPv6: 2a10:a740::/29 Signature Algorithm: sha256WithRSAEncryption 9b:5e:36:13:ea:6d:9c:91:f5:66:22:e6:1e:78:31:4f:30:95: 55:b6:4a:16:42:3d:28:e0:ca:bf:06:d2:ef:4d:58:87:1b:49: 2a:5c:12:78:79:04:c8:32:06:ba:fa:93:64:e0:30:b1:e1:cc: 98:2a:03:54:78:b3:b9:e0:83:32:e5:cf:27:da:e7:0d:fa:cb: e5:45:55:e5:2c:89:8e:1c:3d:24:63:d8:60:22:cd:71:8c:07: e6:87:10:64:8d:ca:c1:e4:81:bd:54:28:6b:db:aa:44:2b:fb: 7a:d0:6a:72:88:9b:4c:7e:dd:37:84:b8:33:c0:1e:f4:6b:59: de:5d:21:ca:35:14:ac:3c:61:85:26:42:22:35:a8:08:87:8d: 6f:26:a9:b0:ca:1c:3e:b2:66:13:12:70:2d:1b:c2:0b:8b:b1: d1:c4:c9:cc:b2:44:2f:4d:ef:49:b9:e1:69:9f:5e:23:ed:68: f4:6e:1b:43:63:c0:24:46:34:69:6c:b9:4e:2b:2f:3c:20:f4: 82:a4:a2:45:09:28:7e:3a:96:6c:1b:3e:4d:06:54:de:2e:5d: b9:d4:1f:50:55:80:ac:57:fd:66:1a:32:57:14:58:9e:ce:6f: d8:dc:0d:a8:38:d7:8f:76:8c:7e:e5:a7:b5:b6:53:9d:f3:d1: ed:95:3e:f1 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt/g+Mo5XC4zOc1vOLYoCqUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU4OTY0ZTRlOGZmZTMxZjY5MmY3MTMxOGMyYjcyODIwMjhk MGYzYTQwHhcNMjYwMTAyMTYyMTQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5N2ZmYTZiM2RmZDAwZGZiNGI2NDIyOGRmN2ZhYmViY2I2YmM2NzU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqgWBsRQwaNUn+mgq2oKf4rM3e5WQ FhFLdmyMPyGe0ZsGlzINvbnoiF2Y2ol6tXYuQOiofiAwJQMQCV6fzFNwcfo+ts5m FtYQkjqwxuGSdQ7icFeWylP1t1xQ/n0Fy8XL82Gcxk+J+rIc1Vu0NClNytztgs5j QQi5PtUcEROAoyuBMVi1VYNGJr5CGvmA1ZYWG7XVS13FdmjG9zzbVP21Nl9KyOl5 6R+2TQYoz2cWjOI7WeQbsymHsA1f6cPoC27M9xG/+madrfyWyvffqD7OM9VTvTK5 qD4VzCTF/rUwKsDTGpg1tLLzB6yDIVzdbmEQgRGD+4q68dpnkGpAygy6AQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFJf/prPf0A37S2Qijff6vry2vGdYMB8GA1UdIwQY MBaAFOiWTk6P/jH2kvcTGMK3KCAo0POkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNkpaT1RvXy1NZmFTOXhNWXdyY29JQ2pRODZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC8xMzFhNzctYzhjOC00YmI3LTlhZWUt NWE2NjU2NTVlYjU3LzEvbF8tbXM5X1FEZnRMWkNLTjlfcS12TGE4WjFnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC8xMzFhNzctYzhjOC00YmI3LTlhZWUtNWE2NjU2NTVlYjU3 LzEvNkpaT1RvXy1NZmFTOXhNWXdyY29JQ2pRODZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAufsMMA0E AgACMAcDBQMqEKdAMA0GCSqGSIb3DQEBCwUAA4IBAQCbXjYT6m2ckfVmIuYeeDFP MJVVtkoWQj0o4Mq/BtLvTViHG0kqXBJ4eQTIMga6+pNk4DCx4cyYKgNUeLO54IMy 5c8n2ucN+svlRVXlLImOHD0kY9hgIs1xjAfmhxBkjcrB5IG9VChr26pEK/t60Gpy iJtMft03hLgzwB70a1neXSHKNRSsPGGFJkIiNagIh41vJqmwyhw+smYTEnAtG8IL i7HRxMnMskQvTe9JueFpn14j7Wj0bhtDY8AkRjRpbLlOKy88IPSCpKJFCSh+OpZs Gz5NBlTeLl251B9QVYCsV/1mGjJXFFiezm/Y3A2oONePdox+5ae1tlOd89HtlT7x -----END CERTIFICATE-----Generated at Mon Feb 9 22:36:57 2026 by rpki-client