This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/1-LahbJsZBZr_Cb9GLoRRUknY_ok.roa File: 1-LahbJsZBZr_Cb9GLoRRUknY_ok.roa (raw, json) Hash identifier: 3vBSkWaA78OycQPV5V4Y1lrmpOPd5P5/xF01SIV5iJY= Subject key identifier: F8:B6:A1:6C:9B:19:05:9A:FF:09:BF:46:2E:84:51:52:49:D8:FE:89 Certificate issuer: /CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20 Certificate serial: 019B7E38AFF226F3B2E2D249797E3683B067 Authority key identifier: 62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/1-LahbJsZBZr_Cb9GLoRRUknY_ok.roa Signing time: Fri 02 Jan 2026 10:20:02 +0000 ROA not before: Fri 02 Jan 2026 10:20:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6830 IP address blocks: 93.89.219.0/24 maxlen: 24 93.89.221.0/24 maxlen: 24 93.89.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.mft rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 19:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:af:f2:26:f3:b2:e2:d2:49:79:7e:36:83:b0:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20 Validity Not Before: Jan 2 10:20:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f8b6a16c9b19059aff09bf462e84515249d8fe89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:0c:bb:73:1a:d0:27:31:85:80:9e:4e:5f:70: c7:00:be:43:b1:85:40:d6:d4:7b:a3:a4:1a:35:ce: ef:b8:d0:c3:1b:13:b4:64:bb:a9:54:ad:bf:5b:26: 40:6c:1d:fe:df:9c:6c:9b:cc:6b:f5:1d:b5:f8:f6: 17:b8:99:09:6d:53:39:06:0f:e3:2c:ca:2a:3f:9b: aa:e6:24:86:e0:e0:b2:36:06:c8:a1:b4:91:0f:91: 31:57:6c:a4:3e:8d:81:87:8c:45:e8:8c:35:58:87: 37:fd:ab:4a:d3:83:4a:4b:bf:72:2b:85:b1:26:35: 15:94:a8:c6:4b:54:da:2d:fc:8f:43:73:bb:a2:64: 17:be:00:86:cc:1b:94:7b:86:53:2f:c4:8d:75:8d: fb:cc:22:15:72:b5:0c:9a:6f:b6:ca:d8:23:41:23: 60:ea:90:19:c6:0d:3c:68:0f:26:23:56:68:4c:23: f5:52:77:26:de:7d:d0:df:71:ed:f4:55:9d:f4:8b: c1:87:c0:a7:58:90:8a:3b:b9:79:aa:32:e7:ff:fb: 75:ca:d1:01:dd:e9:e1:ec:ee:1b:0d:bd:f6:56:d9: 02:88:1f:91:44:58:7e:2d:17:58:53:8e:e3:f8:6e: 3a:fb:8e:db:d0:ea:89:e0:70:d2:a9:a3:09:aa:a2: 86:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:B6:A1:6C:9B:19:05:9A:FF:09:BF:46:2E:84:51:52:49:D8:FE:89 X509v3 Authority Key Identifier: keyid:62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/1-LahbJsZBZr_Cb9GLoRRUknY_ok.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.89.219.0/24 93.89.221.0-93.89.222.255 Signature Algorithm: sha256WithRSAEncryption 67:62:0f:3c:ea:1f:0d:bd:5c:fd:9d:20:6e:27:f3:92:3b:97: 6d:0e:e1:45:96:6f:99:60:01:88:9e:0e:0e:26:bd:d5:65:f8: bd:00:a9:a6:b4:02:e1:64:f8:ee:35:cc:b6:92:35:69:9b:d3: d8:9d:ec:1e:8a:7d:f9:8f:b7:e4:7d:65:f6:c6:51:28:32:73: b2:35:b5:40:b4:42:d4:a7:96:7a:39:12:cd:14:f1:51:da:6a: bd:f4:ea:00:74:67:42:10:63:93:51:91:02:3d:38:69:d6:9e: b6:6e:1a:ec:8c:02:4d:e5:db:c1:03:35:af:4a:2f:69:ae:08: a7:7c:54:93:83:04:1e:33:dd:d0:55:00:e3:22:d7:cc:f2:c6: ea:99:9e:d0:85:7f:af:85:37:f1:65:86:09:db:fd:be:ca:71: 03:75:12:d9:d8:b6:99:e1:1f:76:2e:b6:30:d7:02:e7:e2:dd: 3b:64:73:5f:f2:88:37:ce:73:06:87:5d:82:3e:2e:d7:0c:a2: 61:8b:99:a4:38:ef:58:5e:07:bd:72:94:ae:22:1f:35:6b:a2: 0b:f0:25:32:b2:0b:4a:ec:37:6a:ea:d0:9b:81:49:b6:65:98: eb:d5:1f:0d:e5:81:49:44:43:69:90:25:11:16:f4:6b:d1:cb: 6e:90:f2:a3 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt+OK/yJvOy4tJJeX42g7BnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyYTE1Y2M4ODY1OWY1NzhjYzE1OWM1MmIzYTdlOWVjNTgx OWZiMjAwHhcNMjYwMTAyMTAyMDAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOGI2YTE2YzliMTkwNTlhZmYwOWJmNDYyZTg0NTE1MjQ5ZDhmZTg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4wy7cxrQJzGFgJ5OX3DHAL5DsYVA 1tR7o6QaNc7vuNDDGxO0ZLupVK2/WyZAbB3+35xsm8xr9R21+PYXuJkJbVM5Bg/j LMoqP5uq5iSG4OCyNgbIobSRD5ExV2ykPo2Bh4xF6Iw1WIc3/atK04NKS79yK4Wx JjUVlKjGS1TaLfyPQ3O7omQXvgCGzBuUe4ZTL8SNdY37zCIVcrUMmm+2ytgjQSNg 6pAZxg08aA8mI1ZoTCP1Uncm3n3Q33Ht9FWd9IvBh8CnWJCKO7l5qjLn//t1ytEB 3enh7O4bDb32VtkCiB+RRFh+LRdYU47j+G46+47b0OqJ4HDSqaMJqqKGgQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFPi2oWybGQWa/wm/Ri6EUVJJ2P6JMB8GA1UdIwQY MBaAFGKhXMiGWfV4zBWcUrOn6exYGfsgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXFGY3lJWlo5WGpNRlp4U3M2ZnA3RmdaLXlBLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi8yMTE3YmMtMWY5ZS00NTkwLWE1NTAt NDI2OWI1NmJmN2Q0LzEvMS1MYWhiSnNaQlpyX0NiOUdMb1JSVWtuWV9vay5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvN2IvMjExN2JjLTFmOWUtNDU5MC1hNTUwLTQyNjliNTZiZjdk NC8xL1lxRmN5SVpaOVhqTUZaeFNzNmZwN0ZnWi15QS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAtBggrBgEFBQcBBwEB/wQeMBwwGgQCAAEwFAMEAF1Z2zAM AwQAXVndAwQAXVneMA0GCSqGSIb3DQEBCwUAA4IBAQBnYg886h8NvVz9nSBuJ/OS O5dtDuFFlm+ZYAGIng4OJr3VZfi9AKmmtALhZPjuNcy2kjVpm9PYnewein35j7fk fWX2xlEoMnOyNbVAtELUp5Z6ORLNFPFR2mq99OoAdGdCEGOTUZECPThp1p62bhrs jAJN5dvBAzWvSi9prginfFSTgwQeM93QVQDjItfM8sbqmZ7QhX+vhTfxZYYJ2/2+ ynEDdRLZ2LaZ4R92LrYw1wLn4t07ZHNf8og3znMGh12CPi7XDKJhi5mkOO9YXge9 cpSuIh81a6IL8CUysgtK7Ddq6tCbgUm2ZZjr1R8N5YFJRENpkCURFvRr0ctukPKj -----END CERTIFICATE-----Generated at Wed Jan 21 04:57:48 2026 by rpki-client