This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/8fe048-2ea9-4ea6-9259-0dcd4596c16e/1/lCVXJSEp_GTcd-Q5LEY4oqJjN0U.roa File: lCVXJSEp_GTcd-Q5LEY4oqJjN0U.roa (raw, json) Hash identifier: IGnpPw3ahwQuaJhVH+cw2ULWyqjDG7gfjxfW66UmWow= Subject key identifier: 94:25:57:25:21:29:FC:64:DC:77:E4:39:2C:46:38:A2:A2:63:37:45 Certificate issuer: /CN=db992cb9ed588f4337ccb3fb11bcb9ab2eca2f4a Certificate serial: 019BFA52240570FEC0A0155A55772F670787 Authority key identifier: DB:99:2C:B9:ED:58:8F:43:37:CC:B3:FB:11:BC:B9:AB:2E:CA:2F:4A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/25ksue1Yj0M3zLP7Eby5qy7KL0o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/8fe048-2ea9-4ea6-9259-0dcd4596c16e/1/lCVXJSEp_GTcd-Q5LEY4oqJjN0U.roa Signing time: Mon 26 Jan 2026 12:40:45 +0000 ROA not before: Mon 26 Jan 2026 12:40:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29494 IP address blocks: 194.9.88.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/8fe048-2ea9-4ea6-9259-0dcd4596c16e/1/25ksue1Yj0M3zLP7Eby5qy7KL0o.crl rsync://rpki.ripe.net/repository/DEFAULT/73/8fe048-2ea9-4ea6-9259-0dcd4596c16e/1/25ksue1Yj0M3zLP7Eby5qy7KL0o.mft rsync://rpki.ripe.net/repository/DEFAULT/25ksue1Yj0M3zLP7Eby5qy7KL0o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fa:52:24:05:70:fe:c0:a0:15:5a:55:77:2f:67:07:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db992cb9ed588f4337ccb3fb11bcb9ab2eca2f4a Validity Not Before: Jan 26 12:40:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=942557252129fc64dc77e4392c4638a2a2633745 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:67:9b:19:28:a2:a2:34:a3:ef:38:24:d1:d0: bc:8f:26:40:81:e7:bb:3c:10:b6:45:10:ca:37:42: 12:c6:47:46:06:bc:0d:7c:15:eb:71:8a:30:d1:ef: a5:3c:8d:2b:07:7b:40:32:72:ab:3e:be:a6:5c:49: 0e:9b:07:1f:e5:cf:00:9e:e0:52:63:a7:cb:c1:12: 4e:8f:c5:52:a2:8f:e4:09:c3:8b:55:bc:87:eb:79: 5d:a4:21:ba:e8:d7:67:1f:a3:27:6d:58:d4:4d:37: 2c:bf:ea:d2:2a:59:fe:06:5f:db:68:c1:7f:c1:c8: 2c:22:29:d4:5e:b1:27:ad:e1:5f:79:50:2d:a3:dc: ef:a1:39:f5:3c:00:56:fc:b9:51:46:4a:10:0a:b9: b4:56:5b:79:ef:18:f3:5f:65:56:1f:4d:d1:1b:2c: c3:cd:3c:7c:09:ea:23:9e:1d:ad:e7:35:7e:2e:05: 48:90:43:72:44:af:5a:3b:65:15:1f:a3:93:db:5a: a0:6a:a0:aa:76:0f:ed:bc:88:ee:9c:92:66:7e:32: 7b:aa:dc:68:d7:8b:2c:b2:95:8f:22:b3:71:f6:c4: 79:f4:d9:8b:d2:cb:36:bf:4b:e8:ca:00:4b:8c:b7: 58:f5:a4:a4:34:b4:dd:fc:ed:e5:8d:cf:85:68:92: 05:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:25:57:25:21:29:FC:64:DC:77:E4:39:2C:46:38:A2:A2:63:37:45 X509v3 Authority Key Identifier: keyid:DB:99:2C:B9:ED:58:8F:43:37:CC:B3:FB:11:BC:B9:AB:2E:CA:2F:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/25ksue1Yj0M3zLP7Eby5qy7KL0o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/8fe048-2ea9-4ea6-9259-0dcd4596c16e/1/lCVXJSEp_GTcd-Q5LEY4oqJjN0U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/73/8fe048-2ea9-4ea6-9259-0dcd4596c16e/1/25ksue1Yj0M3zLP7Eby5qy7KL0o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.9.88.0/23 Signature Algorithm: sha256WithRSAEncryption 1f:4d:cb:b8:d3:a6:e7:88:1a:88:00:02:41:88:1f:04:5c:21: 48:01:34:20:13:a9:f8:f9:93:87:44:7a:e9:76:ae:5e:00:b5: a8:c1:8a:2f:87:7f:6e:0f:c1:22:e6:03:63:d5:65:76:16:4a: 93:99:70:62:c4:ef:27:21:6e:15:68:05:35:f7:b1:b5:8e:bc: 11:ae:16:9c:f6:f9:7a:9a:20:9c:2a:b6:e6:9e:89:24:78:13: d7:ac:b9:e2:45:37:f0:c6:ec:35:72:fa:f3:2f:90:f9:73:ea: 2c:eb:6f:78:d3:f3:1d:dd:41:fd:07:0f:c6:72:a1:3a:6c:3a: bf:f4:ba:d4:1b:d2:85:c6:f7:1a:fe:6c:50:4c:c6:97:00:96: ae:05:fb:48:f8:a2:ff:6a:b1:c3:b8:2c:2f:37:b1:40:65:3d: 4a:3f:e7:8e:dd:5f:81:25:8a:4d:46:2a:a6:ba:23:0e:2d:e7: fd:74:46:48:eb:5c:7b:8e:3e:d2:34:55:76:b5:4d:66:25:1c: 9a:47:b0:17:e9:2f:af:3b:cd:59:71:70:1f:ab:e2:3b:24:f0: 91:c9:d4:92:88:b1:65:06:37:a5:41:ca:47:2b:ea:f9:ed:58: 4d:e2:cb:40:f8:40:09:17:d0:27:24:e5:38:a2:ba:76:83:da: 6f:f2:3f:dd -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZv6UiQFcP7AoBVaVXcvZweHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiOTkyY2I5ZWQ1ODhmNDMzN2NjYjNmYjExYmNiOWFiMmVj YTJmNGEwHhcNMjYwMTI2MTI0MDQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NDI1NTcyNTIxMjlmYzY0ZGM3N2U0MzkyYzQ2MzhhMmEyNjMzNzQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmmebGSiiojSj7zgk0dC8jyZAgee7 PBC2RRDKN0ISxkdGBrwNfBXrcYow0e+lPI0rB3tAMnKrPr6mXEkOmwcf5c8AnuBS Y6fLwRJOj8VSoo/kCcOLVbyH63ldpCG66NdnH6MnbVjUTTcsv+rSKln+Bl/baMF/ wcgsIinUXrEnreFfeVAto9zvoTn1PABW/LlRRkoQCrm0Vlt57xjzX2VWH03RGyzD zTx8Ceojnh2t5zV+LgVIkENyRK9aO2UVH6OT21qgaqCqdg/tvIjunJJmfjJ7qtxo 14ssspWPIrNx9sR59NmL0ss2v0voygBLjLdY9aSkNLTd/O3ljc+FaJIFUQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJQlVyUhKfxk3HfkOSxGOKKiYzdFMB8GA1UdIwQY MBaAFNuZLLntWI9DN8yz+xG8uasuyi9KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMjVrc3VlMVlqME0zekxQN0VieTVxeTdLTDBvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My84ZmUwNDgtMmVhOS00ZWE2LTkyNTkt MGRjZDQ1OTZjMTZlLzEvbENWWEpTRXBfR1RjZC1RNUxFWTRvcUpqTjBVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83My84ZmUwNDgtMmVhOS00ZWE2LTkyNTktMGRjZDQ1OTZjMTZl LzEvMjVrc3VlMVlqME0zekxQN0VieTVxeTdLTDBvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwglYMA0G CSqGSIb3DQEBCwUAA4IBAQAfTcu406bniBqIAAJBiB8EXCFIATQgE6n4+ZOHRHrp dq5eALWowYovh39uD8Ei5gNj1WV2FkqTmXBixO8nIW4VaAU197G1jrwRrhac9vl6 miCcKrbmnokkeBPXrLniRTfwxuw1cvrzL5D5c+os62940/Md3UH9Bw/GcqE6bDq/ 9LrUG9KFxvca/mxQTMaXAJauBftI+KL/arHDuCwvN7FAZT1KP+eO3V+BJYpNRiqm uiMOLef9dEZI61x7jj7SNFV2tU1mJRyaR7AX6S+vO81ZcXAfq+I7JPCRydSSiLFl BjelQcpHK+r57VhN4stA+EAJF9AnJOU4orp2g9pv8j/d -----END CERTIFICATE-----Generated at Mon Feb 9 20:51:28 2026 by rpki-client