This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/aa7e53-490f-4177-8b11-0b3e7ebe4ac2/1/L2qJI7yRbblQboJ_mw8-jepGvkU.roa File: L2qJI7yRbblQboJ_mw8-jepGvkU.roa (raw, json) Hash identifier: QrheslDEw6JQRvz6jkCSMc1vh9NuFBMIWo/PVUBPvp4= Subject key identifier: 2F:6A:89:23:BC:91:6D:B9:50:6E:82:7F:9B:0F:3E:8D:EA:46:BE:45 Certificate issuer: /CN=66ba8d64e901b39b501ed3693ec27430713886e3 Certificate serial: 019B77C75DCF5057C5A3036A571F1AB1B050 Authority key identifier: 66:BA:8D:64:E9:01:B3:9B:50:1E:D3:69:3E:C2:74:30:71:38:86:E3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZrqNZOkBs5tQHtNpPsJ0MHE4huM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/aa7e53-490f-4177-8b11-0b3e7ebe4ac2/1/L2qJI7yRbblQboJ_mw8-jepGvkU.roa Signing time: Thu 01 Jan 2026 04:18:32 +0000 ROA not before: Thu 01 Jan 2026 04:18:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210861 IP address blocks: 93.190.126.0/24 maxlen: 24 2a11:7980::/40 maxlen: 40 2a11:7980:ff::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/aa7e53-490f-4177-8b11-0b3e7ebe4ac2/1/ZrqNZOkBs5tQHtNpPsJ0MHE4huM.crl rsync://rpki.ripe.net/repository/DEFAULT/91/aa7e53-490f-4177-8b11-0b3e7ebe4ac2/1/ZrqNZOkBs5tQHtNpPsJ0MHE4huM.mft rsync://rpki.ripe.net/repository/DEFAULT/ZrqNZOkBs5tQHtNpPsJ0MHE4huM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 07:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:5d:cf:50:57:c5:a3:03:6a:57:1f:1a:b1:b0:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66ba8d64e901b39b501ed3693ec27430713886e3 Validity Not Before: Jan 1 04:18:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2f6a8923bc916db9506e827f9b0f3e8dea46be45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:74:45:c3:51:87:f9:dc:e2:33:b3:c3:ae:92: 23:f9:f3:72:9f:c6:3f:d3:39:a5:df:62:e5:66:13: f0:3a:d1:fb:89:8d:bd:00:d4:62:2c:72:c2:a5:42: b9:22:34:7a:ec:b2:55:11:f6:27:c5:65:c2:a2:96: e3:bd:98:96:58:05:5f:35:ae:1e:ff:42:9d:cb:e0: 97:b0:b6:ce:0c:3d:0a:75:b6:96:88:eb:95:9e:c2: d6:79:9e:49:72:05:cb:88:ff:20:71:14:7a:82:a1: f5:f8:92:87:42:64:b9:23:70:0a:63:c7:ac:f8:c2: 1f:cc:de:48:e9:45:4e:47:c0:58:98:5c:65:1e:72: fb:2b:3d:ab:d7:7a:b5:09:59:c6:fc:7a:78:0e:14: 70:3c:c6:ba:c7:70:71:4e:56:3e:f7:56:c0:d1:d9: 4f:7c:c3:4c:c6:bb:65:a6:ac:5e:ac:59:5f:49:55: ed:e0:56:1e:9b:37:67:8a:2f:9e:af:f2:36:05:2d: a7:7e:bf:7b:9a:ca:3f:0d:43:1f:3f:12:f7:47:d9: 49:12:ea:89:56:fe:00:0b:dd:db:03:56:7a:84:ab: 68:f3:07:b8:1a:95:6e:f6:cd:1f:10:1c:76:77:94: d0:6d:7d:70:b2:c3:2e:5c:79:57:cb:3d:a3:c4:db: 07:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:6A:89:23:BC:91:6D:B9:50:6E:82:7F:9B:0F:3E:8D:EA:46:BE:45 X509v3 Authority Key Identifier: keyid:66:BA:8D:64:E9:01:B3:9B:50:1E:D3:69:3E:C2:74:30:71:38:86:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZrqNZOkBs5tQHtNpPsJ0MHE4huM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/aa7e53-490f-4177-8b11-0b3e7ebe4ac2/1/L2qJI7yRbblQboJ_mw8-jepGvkU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/91/aa7e53-490f-4177-8b11-0b3e7ebe4ac2/1/ZrqNZOkBs5tQHtNpPsJ0MHE4huM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.190.126.0/24 IPv6: 2a11:7980::/40 Signature Algorithm: sha256WithRSAEncryption 9f:8e:77:5a:d7:bc:29:7e:5c:00:97:08:44:db:1d:f4:ef:8d: 64:ef:c3:45:05:ba:93:e9:97:4a:e7:52:61:a8:8b:f7:d7:7b: c4:ee:66:de:24:4f:ff:e9:51:75:8d:c2:93:95:fe:b7:bd:6d: 0d:63:20:75:7f:de:ad:aa:56:60:55:eb:02:9c:ab:5b:b1:26: fd:34:b5:de:52:16:c6:01:58:d0:34:a5:ba:e0:14:75:79:a1: 2a:88:61:5f:1a:98:9a:32:3d:f9:35:a5:86:bf:bc:cd:11:65: 5b:dc:30:9a:92:4c:0b:65:ec:5e:20:d0:82:50:5b:6c:84:83: e1:65:7a:9d:39:c4:e9:2b:2a:75:3b:ed:c3:a7:a7:97:e1:3e: 6f:57:b4:5e:dc:65:7f:66:9d:cb:f4:6a:7e:c8:38:79:4d:83: 14:d9:8a:d0:99:29:4f:7a:b0:b4:65:20:8f:db:8f:c0:20:4f: c0:a2:fd:20:2b:6d:5b:71:b3:4c:d1:53:de:36:2c:28:7c:1d: 6f:b6:c4:6e:9f:ad:09:38:2b:16:5a:1c:7a:50:d3:31:b2:94: 51:45:3e:f5:2b:f6:8e:70:10:6d:34:27:bc:16:07:65:20:5a: e1:ab:6c:c8:c7:fa:68:75:13:25:20:82:c9:aa:96:f0:be:84: 46:f9:b4:27 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgISAZt3x13PUFfFowNqVx8asbBQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2YmE4ZDY0ZTkwMWIzOWI1MDFlZDM2OTNlYzI3NDMwNzEz ODg2ZTMwHhcNMjYwMTAxMDQxODMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZjZhODkyM2JjOTE2ZGI5NTA2ZTgyN2Y5YjBmM2U4ZGVhNDZiZTQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApXRFw1GH+dziM7PDrpIj+fNyn8Y/ 0zml32LlZhPwOtH7iY29ANRiLHLCpUK5IjR67LJVEfYnxWXCopbjvZiWWAVfNa4e /0Kdy+CXsLbODD0KdbaWiOuVnsLWeZ5JcgXLiP8gcRR6gqH1+JKHQmS5I3AKY8es +MIfzN5I6UVOR8BYmFxlHnL7Kz2r13q1CVnG/Hp4DhRwPMa6x3BxTlY+91bA0dlP fMNMxrtlpqxerFlfSVXt4FYemzdnii+er/I2BS2nfr97mso/DUMfPxL3R9lJEuqJ Vv4AC93bA1Z6hKto8we4GpVu9s0fEBx2d5TQbX1wssMuXHlXyz2jxNsHsQIDAQAB o4ICGTCCAhUwHQYDVR0OBBYEFC9qiSO8kW25UG6Cf5sPPo3qRr5FMB8GA1UdIwQY MBaAFGa6jWTpAbObUB7TaT7CdDBxOIbjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWnJxTlpPa0JzNXRRSHROcFBzSjBNSEU0aHVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS9hYTdlNTMtNDkwZi00MTc3LThiMTEt MGIzZTdlYmU0YWMyLzEvTDJxSkk3eVJiYmxRYm9KX213OC1qZXBHdmtVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MS9hYTdlNTMtNDkwZi00MTc3LThiMTEtMGIzZTdlYmU0YWMy LzEvWnJxTlpPa0JzNXRRSHROcFBzSjBNSEU0aHVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAXb5+MA4E AgACMAgDBgAqEXmAADANBgkqhkiG9w0BAQsFAAOCAQEAn453Wte8KX5cAJcIRNsd 9O+NZO/DRQW6k+mXSudSYaiL99d7xO5m3iRP/+lRdY3Ck5X+t71tDWMgdX/erapW YFXrApyrW7Em/TS13lIWxgFY0DSluuAUdXmhKohhXxqYmjI9+TWlhr+8zRFlW9ww mpJMC2XsXiDQglBbbISD4WV6nTnE6SsqdTvtw6enl+E+b1e0Xtxlf2ady/Rqfsg4 eU2DFNmK0JkpT3qwtGUgj9uPwCBPwKL9ICttW3GzTNFT3jYsKHwdb7bEbp+tCTgr FlocelDTMbKUUUU+9Sv2jnAQbTQnvBYHZSBa4atsyMf6aHUTJSCCyaqW8L6ERvm0 Jw== -----END CERTIFICATE-----Generated at Mon Jan 26 12:21:25 2026 by rpki-client