This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/73db77-0a6b-4f9b-a8e8-eaedb709efbf/1/lP-JqqYW4N8njI6uaIDIxBXmo3Q.roa File: lP-JqqYW4N8njI6uaIDIxBXmo3Q.roa (raw, json) Hash identifier: iUpeWO/zWeAoo1xidbKM+b5szCcBiTY0HxyO251Cj3M= Subject key identifier: 94:FF:89:AA:A6:16:E0:DF:27:8C:8E:AE:68:80:C8:C4:15:E6:A3:74 Certificate issuer: /CN=f8e826de1070d9d79daa9e415fc432613cc57e57 Certificate serial: 019B7BA342F10971024824E506A2CBA2B8DE Authority key identifier: F8:E8:26:DE:10:70:D9:D7:9D:AA:9E:41:5F:C4:32:61:3C:C5:7E:57 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Ogm3hBw2dedqp5BX8QyYTzFflc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/73db77-0a6b-4f9b-a8e8-eaedb709efbf/1/lP-JqqYW4N8njI6uaIDIxBXmo3Q.roa Signing time: Thu 01 Jan 2026 22:17:35 +0000 ROA not before: Thu 01 Jan 2026 22:17:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202932 IP address blocks: 185.47.224.0/22 maxlen: 24 185.150.68.0/22 maxlen: 22 2a07:6e80::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/73db77-0a6b-4f9b-a8e8-eaedb709efbf/1/1-Ogm3hBw2dedqp5BX8QyYTzFflc.crl rsync://rpki.ripe.net/repository/DEFAULT/9d/73db77-0a6b-4f9b-a8e8-eaedb709efbf/1/1-Ogm3hBw2dedqp5BX8QyYTzFflc.mft rsync://rpki.ripe.net/repository/DEFAULT/1-Ogm3hBw2dedqp5BX8QyYTzFflc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:42:f1:09:71:02:48:24:e5:06:a2:cb:a2:b8:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8e826de1070d9d79daa9e415fc432613cc57e57 Validity Not Before: Jan 1 22:17:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=94ff89aaa616e0df278c8eae6880c8c415e6a374 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:8c:13:27:b7:d8:fd:25:58:ef:73:31:ea:fe: 71:44:9d:e0:3c:42:7c:27:8e:f7:d9:a0:dc:74:60: 8f:5b:53:a1:e2:a1:d9:44:88:4d:4c:a6:09:74:19: 32:42:ea:f1:25:f0:94:3b:c8:a7:65:4a:53:76:56: f4:f9:03:c5:e4:b8:ab:03:d3:b6:ab:71:15:44:cd: 65:e4:48:cf:42:1a:29:af:83:39:3d:38:16:8e:78: 31:0b:2d:d5:14:dc:c1:d6:f0:e0:79:18:44:cb:c6: d5:50:7e:7d:93:9a:77:19:98:28:07:fa:6e:f5:ec: 0d:04:a7:d1:07:d5:06:fc:4b:40:a5:a1:dc:bd:99: a4:5f:13:90:6e:83:67:d7:cb:1b:6b:cd:8e:d9:62: 7c:d9:82:8d:f2:c1:15:42:9b:a4:68:a3:a3:fe:0c: 79:ce:7d:51:47:ec:26:69:ee:c1:94:89:29:2b:76: 8f:cd:59:f4:c4:fc:e2:92:63:70:a9:18:c5:1f:7f: be:e2:b4:d5:dc:e5:17:08:bb:55:f8:60:f2:00:b8: 7f:d3:29:b1:86:ef:fe:6f:7d:08:b8:c1:3f:3d:c2: 89:64:b0:ff:bc:3b:65:11:62:1c:8e:ca:a6:ac:27: 79:83:40:eb:40:c9:ce:f3:67:18:46:02:e1:fd:44: 66:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:FF:89:AA:A6:16:E0:DF:27:8C:8E:AE:68:80:C8:C4:15:E6:A3:74 X509v3 Authority Key Identifier: keyid:F8:E8:26:DE:10:70:D9:D7:9D:AA:9E:41:5F:C4:32:61:3C:C5:7E:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Ogm3hBw2dedqp5BX8QyYTzFflc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/73db77-0a6b-4f9b-a8e8-eaedb709efbf/1/lP-JqqYW4N8njI6uaIDIxBXmo3Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/73db77-0a6b-4f9b-a8e8-eaedb709efbf/1/1-Ogm3hBw2dedqp5BX8QyYTzFflc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.47.224.0/22 185.150.68.0/22 IPv6: 2a07:6e80::/29 Signature Algorithm: sha256WithRSAEncryption 11:33:a5:cf:91:c7:7d:cc:08:79:7e:c5:42:00:19:c2:27:86: 29:14:0d:88:e2:74:25:43:30:8e:4f:7d:ad:32:ae:5c:c2:ca: 10:dd:62:4a:4e:dc:74:92:8e:26:56:a0:53:db:47:9e:bd:3f: c9:94:4e:a8:1b:5f:6a:51:6e:cb:6e:b6:85:87:49:b1:91:ec: 7d:fb:2d:e5:4f:75:d7:fb:83:4b:7e:da:4e:e7:7f:a2:70:1c: 1a:8b:f2:4a:62:30:71:ec:af:d8:82:a1:dc:45:df:fa:ad:ec: 89:22:45:bb:ca:5a:60:15:3e:db:e8:76:12:50:1b:8b:24:36: 3d:8f:cf:c1:31:91:9e:15:27:95:a2:43:1d:5b:bf:42:ab:71: 84:b7:a7:ac:c6:7c:cc:d0:3e:68:08:33:d2:c1:b9:34:1b:e2: 29:47:ae:ad:ea:6f:4d:37:2c:28:c1:ca:26:cd:45:15:f7:37: 1e:f1:28:1e:83:09:76:bd:c7:1e:53:72:db:27:4b:97:f8:a4: f2:a0:f4:df:db:12:92:ac:b8:ea:23:16:a1:73:10:c1:43:ef: 8b:78:96:8e:7c:3b:d4:07:96:00:20:e8:94:be:e3:16:ba:53: 57:1e:87:63:74:b3:d8:2d:d4:97:ec:87:34:ad:76:d8:80:72: 71:65:a0:94 -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgISAZt7o0LxCXECSCTlBqLLorjeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4ZTgyNmRlMTA3MGQ5ZDc5ZGFhOWU0MTVmYzQzMjYxM2Nj NTdlNTcwHhcNMjYwMTAxMjIxNzM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NGZmODlhYWE2MTZlMGRmMjc4YzhlYWU2ODgwYzhjNDE1ZTZhMzc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjowTJ7fY/SVY73Mx6v5xRJ3gPEJ8 J4732aDcdGCPW1Oh4qHZRIhNTKYJdBkyQurxJfCUO8inZUpTdlb0+QPF5LirA9O2 q3EVRM1l5EjPQhopr4M5PTgWjngxCy3VFNzB1vDgeRhEy8bVUH59k5p3GZgoB/pu 9ewNBKfRB9UG/EtApaHcvZmkXxOQboNn18sba82O2WJ82YKN8sEVQpukaKOj/gx5 zn1RR+wmae7BlIkpK3aPzVn0xPzikmNwqRjFH3++4rTV3OUXCLtV+GDyALh/0ymx hu/+b30IuME/PcKJZLD/vDtlEWIcjsqmrCd5g0DrQMnO82cYRgLh/URm6wIDAQAB o4ICIDCCAhwwHQYDVR0OBBYEFJT/iaqmFuDfJ4yOrmiAyMQV5qN0MB8GA1UdIwQY MBaAFPjoJt4QcNnXnaqeQV/EMmE8xX5XMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1PZ20zaEJ3MmRlZHFwNUJYOFF5WVR6RmZsYy5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWQvNzNkYjc3LTBhNmItNGY5Yi1hOGU4 LWVhZWRiNzA5ZWZiZi8xL2xQLUpxcVlXNE44bmpJNnVhSURJeEJYbW8zUS5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvOWQvNzNkYjc3LTBhNmItNGY5Yi1hOGU4LWVhZWRiNzA5ZWZi Zi8xLzEtT2dtM2hCdzJkZWRxcDVCWDhReVlUekZmbGMuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwNAYIKwYBBQUHAQcBAf8EJTAjMBIEAgABMAwDBAK5L+AD BAK5lkQwDQQCAAIwBwMFAyoHboAwDQYJKoZIhvcNAQELBQADggEBABEzpc+Rx33M CHl+xUIAGcInhikUDYjidCVDMI5Pfa0yrlzCyhDdYkpO3HSSjiZWoFPbR569P8mU TqgbX2pRbstutoWHSbGR7H37LeVPddf7g0t+2k7nf6JwHBqL8kpiMHHsr9iCodxF 3/qt7IkiRbvKWmAVPtvodhJQG4skNj2Pz8ExkZ4VJ5WiQx1bv0KrcYS3p6zGfMzQ PmgIM9LBuTQb4ilHrq3qb003LCjByibNRRX3Nx7xKB6DCXa9xx5TctsnS5f4pPKg 9N/bEpKsuOojFqFzEMFD74t4lo58O9QHlgAg6JS+4xa6U1ceh2N0s9gt1JfshzSt dtiAcnFloJQ= -----END CERTIFICATE-----Generated at Tue Feb 10 06:06:28 2026 by rpki-client