This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/l_M-qcELBfH_HuI6aghWUFDtxOw.roa File: l_M-qcELBfH_HuI6aghWUFDtxOw.roa (raw, json) Hash identifier: z2cHGTv3tLxgFFvet0Fzm8aB5Q9uQ06+bb/TW2RJpDc= Subject key identifier: 97:F3:3E:A9:C1:0B:05:F1:FF:1E:E2:3A:6A:08:56:50:50:ED:C4:EC Certificate issuer: /CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7 Certificate serial: 019B79103CEE7F8869FB768B074797F79DB9 Authority key identifier: 65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/l_M-qcELBfH_HuI6aghWUFDtxOw.roa Signing time: Thu 01 Jan 2026 10:17:45 +0000 ROA not before: Thu 01 Jan 2026 10:17:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200202 IP address blocks: 195.216.171.0/24 maxlen: 24 195.216.190.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.crl rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.mft rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 20:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:3c:ee:7f:88:69:fb:76:8b:07:47:97:f7:9d:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7 Validity Not Before: Jan 1 10:17:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=97f33ea9c10b05f1ff1ee23a6a08565050edc4ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:a1:35:79:a3:0b:bb:e8:30:cc:5f:3b:fb:36: 28:e3:d6:09:64:0a:5e:2f:05:9d:6f:93:ec:74:1d: 6c:f1:6e:98:75:14:b7:7d:03:ad:a4:ce:7c:e5:e1: c2:c5:41:7f:01:ae:90:1e:b6:9e:0c:1f:31:be:6e: 14:46:50:36:ed:36:9d:36:e9:9e:a4:b9:36:6b:91: 51:ee:bd:c7:0e:6f:17:f1:d9:eb:b0:78:ff:dc:a7: eb:ea:a3:93:6a:0a:6d:16:44:2a:80:c5:31:bf:31: be:19:e3:cc:c5:e7:ac:29:31:7e:2b:a0:8d:59:39: 1c:29:cb:ee:4f:a4:14:4d:31:36:fc:d8:73:40:e5: 4d:56:5b:b3:0b:15:4b:aa:d6:7a:92:59:25:8f:1a: 4b:8c:03:42:8e:c3:cb:4e:0b:a6:d5:5a:51:31:4f: bb:2c:31:8f:85:3f:23:13:89:58:3f:3e:b6:7b:15: e2:98:c8:27:0f:b0:f8:06:22:b5:ef:b6:b3:3c:be: 89:8f:36:d8:ed:16:47:50:26:ee:6c:38:4c:ab:3b: 95:f7:95:c3:e1:b1:14:b4:ab:91:37:99:67:60:5d: c1:06:70:50:38:df:ee:74:76:19:43:99:9a:58:91: 74:91:0e:91:d5:50:e1:dd:5c:05:55:3d:e7:70:5e: 29:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:F3:3E:A9:C1:0B:05:F1:FF:1E:E2:3A:6A:08:56:50:50:ED:C4:EC X509v3 Authority Key Identifier: keyid:65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/l_M-qcELBfH_HuI6aghWUFDtxOw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.216.171.0/24 195.216.190.0/24 Signature Algorithm: sha256WithRSAEncryption 68:ac:e5:ca:84:20:62:48:50:6e:a3:34:c7:38:e6:47:ce:eb: 2a:d9:43:b9:af:00:aa:ba:76:ab:62:cc:9a:90:8e:32:e5:1c: 49:4c:e6:c5:89:cf:8a:54:e8:81:85:fc:0f:fe:49:2e:65:9c: 4e:44:15:b5:e2:3f:e6:cc:13:93:11:14:8d:08:40:9b:ca:0a: 9a:2e:33:fb:b5:8a:18:cf:2d:1d:9c:ae:83:8c:5b:a9:ad:c2: 98:c1:57:e1:b4:78:28:d2:7b:c0:59:c7:25:9c:0e:ab:ae:9a: e5:dd:ab:1d:fa:4d:e2:27:fb:60:39:b4:bb:03:af:b6:e0:64: f3:55:01:c3:a8:36:81:e7:fb:db:05:8c:f5:50:88:79:69:2f: 2a:a6:90:59:d7:24:04:48:3d:61:95:9c:89:bf:5b:28:5b:87: b4:c9:6d:7f:5c:c7:8e:31:e7:17:0e:a1:2c:1e:c0:d3:93:ec: 02:91:d7:69:c7:31:77:8f:93:73:91:4f:e8:ea:cf:51:c3:b5: 71:45:d1:ab:38:62:d1:2f:9e:26:dd:77:7c:b3:88:ac:91:14: 3f:69:1f:f6:e2:0d:91:da:4c:a8:fe:76:31:28:6b:7c:3c:4f: fb:ef:f2:8d:63:03:56:42:47:98:e9:06:19:0c:6d:0a:b2:2b: d2:12:3f:8c -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt5EDzuf4hp+3aLB0eX9525MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1YjdkNjY5OTgzNWJmZTlhODA4MWRmYzExNGRmMWJmNmQy MTVkYTcwHhcNMjYwMTAxMTAxNzQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5N2YzM2VhOWMxMGIwNWYxZmYxZWUyM2E2YTA4NTY1MDUwZWRjNGVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3KE1eaMLu+gwzF87+zYo49YJZApe LwWdb5PsdB1s8W6YdRS3fQOtpM585eHCxUF/Aa6QHraeDB8xvm4URlA27TadNume pLk2a5FR7r3HDm8X8dnrsHj/3Kfr6qOTagptFkQqgMUxvzG+GePMxeesKTF+K6CN WTkcKcvuT6QUTTE2/NhzQOVNVluzCxVLqtZ6klkljxpLjANCjsPLTgum1VpRMU+7 LDGPhT8jE4lYPz62exXimMgnD7D4BiK177azPL6JjzbY7RZHUCbubDhMqzuV95XD 4bEUtKuRN5lnYF3BBnBQON/udHYZQ5maWJF0kQ6R1VDh3VwFVT3ncF4pwwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFJfzPqnBCwXx/x7iOmoIVlBQ7cTsMB8GA1UdIwQY MBaAFGW31mmYNb/pqAgd/BFN8b9tIV2nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmJmV2FaZzF2LW1vQ0IzOEVVM3h2MjBoWGFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC8wMjVlZTgtM2Y0Ny00NTdkLThkNDct OWU0MTNlYmY0MmYzLzEvbF9NLXFjRUxCZkhfSHVJNmFnaFdVRkR0eE93LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC8wMjVlZTgtM2Y0Ny00NTdkLThkNDctOWU0MTNlYmY0MmYz LzEvWmJmV2FaZzF2LW1vQ0IzOEVVM3h2MjBoWGFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAw9irAwQA w9i+MA0GCSqGSIb3DQEBCwUAA4IBAQBorOXKhCBiSFBuozTHOOZHzusq2UO5rwCq unarYsyakI4y5RxJTObFic+KVOiBhfwP/kkuZZxORBW14j/mzBOTERSNCECbygqa LjP7tYoYzy0dnK6DjFuprcKYwVfhtHgo0nvAWcclnA6rrprl3asd+k3iJ/tgObS7 A6+24GTzVQHDqDaB5/vbBYz1UIh5aS8qppBZ1yQESD1hlZyJv1soW4e0yW1/XMeO MecXDqEsHsDTk+wCkddpxzF3j5NzkU/o6s9Rw7VxRdGrOGLRL54m3Xd8s4iskRQ/ aR/24g2R2kyo/nYxKGt8PE/77/KNYwNWQkeY6QYZDG0KsivSEj+M -----END CERTIFICATE-----Generated at Tue Jan 20 06:02:49 2026 by rpki-client