This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/43d508-d19e-4f66-ae85-f805ab3a327e/1/lJRouhsD89YwjETpjd4P5W7UKig.roa File: lJRouhsD89YwjETpjd4P5W7UKig.roa (raw, json) Hash identifier: /VHTdnmw9oRohqnCjEDHZH7S7Q3gjl2OViU5nARXvlE= Subject key identifier: 94:94:68:BA:1B:03:F3:D6:30:8C:44:E9:8D:DE:0F:E5:6E:D4:2A:28 Certificate issuer: /CN=97d9ef7bd30324dedf70bace4bbda5760c326b1a Certificate serial: 019B7DCA72143E64EE411E40AD7133AD334F Authority key identifier: 97:D9:EF:7B:D3:03:24:DE:DF:70:BA:CE:4B:BD:A5:76:0C:32:6B:1A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l9nve9MDJN7fcLrOS72ldgwyaxo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/43d508-d19e-4f66-ae85-f805ab3a327e/1/lJRouhsD89YwjETpjd4P5W7UKig.roa Signing time: Fri 02 Jan 2026 08:19:37 +0000 ROA not before: Fri 02 Jan 2026 08:19:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203637 IP address blocks: 185.127.188.0/24 maxlen: 24 185.127.189.0/24 maxlen: 24 185.127.190.0/24 maxlen: 24 185.127.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/43d508-d19e-4f66-ae85-f805ab3a327e/1/l9nve9MDJN7fcLrOS72ldgwyaxo.crl rsync://rpki.ripe.net/repository/DEFAULT/89/43d508-d19e-4f66-ae85-f805ab3a327e/1/l9nve9MDJN7fcLrOS72ldgwyaxo.mft rsync://rpki.ripe.net/repository/DEFAULT/l9nve9MDJN7fcLrOS72ldgwyaxo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:72:14:3e:64:ee:41:1e:40:ad:71:33:ad:33:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97d9ef7bd30324dedf70bace4bbda5760c326b1a Validity Not Before: Jan 2 08:19:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=949468ba1b03f3d6308c44e98dde0fe56ed42a28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:2d:64:8c:25:cc:eb:4a:2b:ad:91:81:09:fc: 70:b7:21:bc:6f:31:88:47:d9:a3:11:c3:be:ed:14: 4e:c6:43:cb:fd:f9:bc:5f:4f:51:c6:5d:4d:39:04: 4a:70:52:80:00:d1:1e:54:0b:07:25:52:e0:0f:ca: 77:a6:16:b9:5a:98:f2:15:4b:be:ec:5c:92:8d:e4: f7:e6:10:91:30:fe:d0:96:23:ba:ca:ab:b7:bc:fc: 4b:7f:f5:25:6e:80:40:10:33:95:73:e7:a6:11:1b: f9:6c:f4:48:67:e8:4d:c1:e4:b8:1d:51:8b:5d:a7: e5:71:96:02:b1:fb:8c:08:57:2f:30:86:a7:ce:f1: 4d:9f:c2:97:57:7f:f0:4e:66:9d:95:17:a2:5a:05: 0b:84:23:7d:19:24:a1:f5:26:97:f4:c7:be:51:5b: 83:b7:96:fa:74:4e:c4:dc:86:66:5e:02:0f:9e:24: 93:b5:ca:19:55:ec:5f:ac:c1:e0:11:d7:27:c3:04: 9a:33:dd:53:3a:da:3f:23:0d:6e:e4:51:9b:ae:56: 4a:b0:73:1c:8e:be:fa:e8:85:e5:dd:95:bf:b4:79: 25:d2:c0:36:03:08:3f:6e:ae:4d:4a:90:08:21:6e: da:e5:d4:30:10:83:9a:61:77:52:74:99:f3:7e:75: 37:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:94:68:BA:1B:03:F3:D6:30:8C:44:E9:8D:DE:0F:E5:6E:D4:2A:28 X509v3 Authority Key Identifier: keyid:97:D9:EF:7B:D3:03:24:DE:DF:70:BA:CE:4B:BD:A5:76:0C:32:6B:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l9nve9MDJN7fcLrOS72ldgwyaxo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/43d508-d19e-4f66-ae85-f805ab3a327e/1/lJRouhsD89YwjETpjd4P5W7UKig.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/89/43d508-d19e-4f66-ae85-f805ab3a327e/1/l9nve9MDJN7fcLrOS72ldgwyaxo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.127.188.0/22 Signature Algorithm: sha256WithRSAEncryption 49:76:11:66:ad:a0:77:4b:3d:98:53:99:76:ee:ba:4a:83:a7: ef:50:ec:87:0c:43:e2:4a:5a:05:56:aa:3b:a3:f6:a1:ca:f1: 24:8b:76:9b:17:f6:70:42:16:5f:c0:1d:32:98:13:f1:ed:92: 3d:4f:39:34:15:17:2c:78:2a:3f:fb:82:c0:28:54:e2:35:b3: 68:17:ef:3a:93:a7:0c:14:b3:bc:44:79:93:f8:e7:3c:cc:3b: 4e:b4:5d:5d:d6:4a:1a:7d:ce:39:9c:45:41:ef:49:58:60:35: 9f:d4:4b:82:52:47:17:0d:3d:77:bb:b8:ef:5f:35:d0:08:9c: cb:a8:3f:d8:51:7f:c8:82:03:8a:95:85:49:e7:7c:a1:9d:36: 81:1e:32:8f:b3:c2:cd:9e:4d:82:52:2e:67:f1:93:67:14:3a: 06:ec:5c:06:f3:46:4a:bb:82:74:36:8c:43:2f:dd:fa:8f:2e: 14:48:af:dc:79:0b:45:de:4f:50:1f:62:0b:cc:c0:30:9f:dd: 25:3f:77:e0:2c:63:ae:00:d6:82:a3:76:14:f5:02:47:b2:01: 39:74:11:fb:4c:d0:de:ad:75:bc:7b:a7:81:8f:5f:00:75:23: ad:de:b9:a0:50:4e:bc:93:5e:cd:61:de:15:2b:8b:46:64:4f: 21:5e:9e:7f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9ynIUPmTuQR5ArXEzrTNPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3ZDllZjdiZDMwMzI0ZGVkZjcwYmFjZTRiYmRhNTc2MGMz MjZiMWEwHhcNMjYwMTAyMDgxOTM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NDk0NjhiYTFiMDNmM2Q2MzA4YzQ0ZTk4ZGRlMGZlNTZlZDQyYTI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1i1kjCXM60orrZGBCfxwtyG8bzGI R9mjEcO+7RROxkPL/fm8X09Rxl1NOQRKcFKAANEeVAsHJVLgD8p3pha5WpjyFUu+ 7FySjeT35hCRMP7QliO6yqu3vPxLf/UlboBAEDOVc+emERv5bPRIZ+hNweS4HVGL XaflcZYCsfuMCFcvMIanzvFNn8KXV3/wTmadlReiWgULhCN9GSSh9SaX9Me+UVuD t5b6dE7E3IZmXgIPniSTtcoZVexfrMHgEdcnwwSaM91TOto/Iw1u5FGbrlZKsHMc jr766IXl3ZW/tHkl0sA2Awg/bq5NSpAIIW7a5dQwEIOaYXdSdJnzfnU3uwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJSUaLobA/PWMIxE6Y3eD+Vu1CooMB8GA1UdIwQY MBaAFJfZ73vTAyTe33C6zku9pXYMMmsaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbDludmU5TURKTjdmY0xyT1M3MmxkZ3d5YXhvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS80M2Q1MDgtZDE5ZS00ZjY2LWFlODUt ZjgwNWFiM2EzMjdlLzEvbEpSb3Voc0Q4OVl3akVUcGpkNFA1VzdVS2lnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OS80M2Q1MDgtZDE5ZS00ZjY2LWFlODUtZjgwNWFiM2EzMjdl LzEvbDludmU5TURKTjdmY0xyT1M3MmxkZ3d5YXhvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuX+8MA0G CSqGSIb3DQEBCwUAA4IBAQBJdhFmraB3Sz2YU5l27rpKg6fvUOyHDEPiSloFVqo7 o/ahyvEki3abF/ZwQhZfwB0ymBPx7ZI9Tzk0FRcseCo/+4LAKFTiNbNoF+86k6cM FLO8RHmT+Oc8zDtOtF1d1koafc45nEVB70lYYDWf1EuCUkcXDT13u7jvXzXQCJzL qD/YUX/IggOKlYVJ53yhnTaBHjKPs8LNnk2CUi5n8ZNnFDoG7FwG80ZKu4J0NoxD L936jy4USK/ceQtF3k9QH2ILzMAwn90lP3fgLGOuANaCo3YU9QJHsgE5dBH7TNDe rXW8e6eBj18AdSOt3rmgUE68k17NYd4VK4tGZE8hXp5/ -----END CERTIFICATE-----Generated at Mon Feb 9 22:37:26 2026 by rpki-client