This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/1a9ad0-2bb1-414f-866c-a8f31c8b9e03/1/LT9Y5vQG-KKC5ohOLYSFhDzKcrQ.roa File: LT9Y5vQG-KKC5ohOLYSFhDzKcrQ.roa (raw, json) Hash identifier: nut59sxjSaBAsjL5yczj9vKm25xZIG45untoxMX+iNw= Subject key identifier: 2D:3F:58:E6:F4:06:F8:A2:82:E6:88:4E:2D:84:85:84:3C:CA:72:B4 Certificate issuer: /CN=e3cb868f221498fea25155ce007fc019b737ffb0 Certificate serial: 019BC65774E40CB9663D4BECC407D60565C9 Authority key identifier: E3:CB:86:8F:22:14:98:FE:A2:51:55:CE:00:7F:C0:19:B7:37:FF:B0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/48uGjyIUmP6iUVXOAH_AGbc3_7A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/1a9ad0-2bb1-414f-866c-a8f31c8b9e03/1/LT9Y5vQG-KKC5ohOLYSFhDzKcrQ.roa Signing time: Fri 16 Jan 2026 10:26:18 +0000 ROA not before: Fri 16 Jan 2026 10:26:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47672 IP address blocks: 91.208.93.0/24 maxlen: 26 91.231.92.0/23 maxlen: 26 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/1a9ad0-2bb1-414f-866c-a8f31c8b9e03/1/48uGjyIUmP6iUVXOAH_AGbc3_7A.crl rsync://rpki.ripe.net/repository/DEFAULT/8f/1a9ad0-2bb1-414f-866c-a8f31c8b9e03/1/48uGjyIUmP6iUVXOAH_AGbc3_7A.mft rsync://rpki.ripe.net/repository/DEFAULT/48uGjyIUmP6iUVXOAH_AGbc3_7A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:c6:57:74:e4:0c:b9:66:3d:4b:ec:c4:07:d6:05:65:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e3cb868f221498fea25155ce007fc019b737ffb0 Validity Not Before: Jan 16 10:26:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2d3f58e6f406f8a282e6884e2d8485843cca72b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:3c:8d:20:69:4d:9d:60:b4:27:bf:72:7d:11: 64:2d:62:f0:41:a9:c5:b5:e9:09:ea:1c:0b:8c:81: 76:f9:48:85:09:70:34:be:4f:63:70:78:65:e7:30: 41:83:89:12:94:7f:2e:99:2c:f0:41:ba:98:c5:1c: ec:62:99:7d:fd:63:11:ea:c1:bf:93:ec:1c:43:92: 49:87:53:66:8e:db:b6:b3:c9:50:84:2c:c2:40:15: e2:19:e7:3d:9e:95:ba:c2:3a:b8:9c:2a:c1:1f:ef: fc:c0:c2:37:08:bd:12:3d:60:13:64:94:b8:d7:0b: 48:68:5a:a8:8b:85:40:35:e0:8f:1a:32:69:14:62: dd:66:76:9d:91:15:cf:fb:9a:7d:e7:8c:ce:f0:fe: 5d:b6:60:b0:2e:a7:8f:50:fb:a0:18:4d:4d:12:aa: 89:9c:bc:4c:66:44:0a:eb:5f:74:95:38:ea:04:3b: c0:c8:76:27:b5:1b:94:00:d0:5e:4b:23:4c:40:36: cd:f6:76:61:f8:44:70:a3:6c:85:86:1d:5d:54:04: a7:66:02:0a:3a:95:82:cd:af:46:05:6a:d9:a2:af: 95:d1:b4:8d:04:47:ac:db:6e:15:25:e3:20:e5:cc: 9b:5a:64:43:c9:61:0f:43:58:f7:46:20:16:2c:9c: 19:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:3F:58:E6:F4:06:F8:A2:82:E6:88:4E:2D:84:85:84:3C:CA:72:B4 X509v3 Authority Key Identifier: keyid:E3:CB:86:8F:22:14:98:FE:A2:51:55:CE:00:7F:C0:19:B7:37:FF:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/48uGjyIUmP6iUVXOAH_AGbc3_7A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/1a9ad0-2bb1-414f-866c-a8f31c8b9e03/1/LT9Y5vQG-KKC5ohOLYSFhDzKcrQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/1a9ad0-2bb1-414f-866c-a8f31c8b9e03/1/48uGjyIUmP6iUVXOAH_AGbc3_7A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.208.93.0/24 91.231.92.0/23 Signature Algorithm: sha256WithRSAEncryption c6:9e:33:36:66:46:70:6a:1a:72:54:a0:ee:4e:38:81:c4:15: cd:cd:02:ef:60:1d:70:f2:c8:8f:a8:27:11:b4:db:d5:d3:74: b7:73:4c:ef:46:f0:94:d4:c9:2c:ac:0b:12:34:67:de:5a:53: 53:84:7d:b8:16:f5:07:82:f2:78:12:4f:5b:d5:64:8d:cf:8b: 64:b8:85:0d:a6:92:4a:ab:c8:df:c4:06:dd:11:93:6e:6e:de: 6a:78:97:b2:89:e1:ce:2a:37:92:ee:f5:6c:5c:67:a6:a1:19: 26:88:c8:95:e7:20:42:13:3c:37:8f:95:84:2c:4e:ad:44:db: f0:6f:77:15:f5:cc:7e:a2:a5:6e:02:d4:98:b4:dd:a2:9a:13: c1:68:83:5b:fe:c1:c4:37:a9:17:21:02:e3:06:84:b0:ab:76: ea:93:16:5e:22:a7:b8:10:bc:52:81:be:a3:d5:6d:14:f0:5a: d1:96:57:74:7a:e8:9a:d9:49:bf:1f:19:e4:11:10:a0:d1:15: 2c:bd:1d:a8:28:79:64:0c:67:91:89:c4:48:5f:e3:e4:de:3a: a6:7b:d8:97:e4:4f:1d:c1:a2:8d:b2:9e:a3:67:91:34:b6:4e: 31:12:09:ca:35:1d:d1:0a:d1:be:e2:9b:83:db:43:3a:85:09: 9d:51:16:ac -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZvGV3TkDLlmPUvsxAfWBWXJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzY2I4NjhmMjIxNDk4ZmVhMjUxNTVjZTAwN2ZjMDE5Yjcz N2ZmYjAwHhcNMjYwMTE2MTAyNjE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZDNmNThlNmY0MDZmOGEyODJlNjg4NGUyZDg0ODU4NDNjY2E3MmI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyzyNIGlNnWC0J79yfRFkLWLwQanF tekJ6hwLjIF2+UiFCXA0vk9jcHhl5zBBg4kSlH8umSzwQbqYxRzsYpl9/WMR6sG/ k+wcQ5JJh1Nmjtu2s8lQhCzCQBXiGec9npW6wjq4nCrBH+/8wMI3CL0SPWATZJS4 1wtIaFqoi4VANeCPGjJpFGLdZnadkRXP+5p954zO8P5dtmCwLqePUPugGE1NEqqJ nLxMZkQK6190lTjqBDvAyHYntRuUANBeSyNMQDbN9nZh+ERwo2yFhh1dVASnZgIK OpWCza9GBWrZoq+V0bSNBEes224VJeMg5cybWmRDyWEPQ1j3RiAWLJwZYQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFC0/WOb0BviiguaITi2EhYQ8ynK0MB8GA1UdIwQY MBaAFOPLho8iFJj+olFVzgB/wBm3N/+wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNDh1R2p5SVVtUDZpVVZYT0FIX0FHYmMzXzdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi8xYTlhZDAtMmJiMS00MTRmLTg2NmMt YThmMzFjOGI5ZTAzLzEvTFQ5WTV2UUctS0tDNW9oT0xZU0ZoRHpLY3JRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Zi8xYTlhZDAtMmJiMS00MTRmLTg2NmMtYThmMzFjOGI5ZTAz LzEvNDh1R2p5SVVtUDZpVVZYT0FIX0FHYmMzXzdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAW9BdAwQB W+dcMA0GCSqGSIb3DQEBCwUAA4IBAQDGnjM2ZkZwahpyVKDuTjiBxBXNzQLvYB1w 8siPqCcRtNvV03S3c0zvRvCU1MksrAsSNGfeWlNThH24FvUHgvJ4Ek9b1WSNz4tk uIUNppJKq8jfxAbdEZNubt5qeJeyieHOKjeS7vVsXGemoRkmiMiV5yBCEzw3j5WE LE6tRNvwb3cV9cx+oqVuAtSYtN2imhPBaINb/sHEN6kXIQLjBoSwq3bqkxZeIqe4 ELxSgb6j1W0U8FrRlld0euia2Um/HxnkERCg0RUsvR2oKHlkDGeRicRIX+Pk3jqm e9iX5E8dwaKNsp6jZ5E0tk4xEgnKNR3RCtG+4puD20M6hQmdURas -----END CERTIFICATE-----Generated at Mon Feb 9 20:46:31 2026 by rpki-client