This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/l2v1aUPO2iZ99XtBifophtS2fb8.roa File: l2v1aUPO2iZ99XtBifophtS2fb8.roa (raw, json) Hash identifier: CkiOrl4D9L+N02W1LM8m8FRLP4WNtwt4a+3/YU6fK7w= Subject key identifier: 97:6B:F5:69:43:CE:DA:26:7D:F5:7B:41:89:FA:29:86:D4:B6:7D:BF Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926 Certificate serial: 019B7BA563F7FC957D37D314B23175AAF706 Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/l2v1aUPO2iZ99XtBifophtS2fb8.roa Signing time: Thu 01 Jan 2026 22:19:55 +0000 ROA not before: Thu 01 Jan 2026 22:19:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214286 IP address blocks: 45.88.244.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.mft rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 13:02:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:63:f7:fc:95:7d:37:d3:14:b2:31:75:aa:f7:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926 Validity Not Before: Jan 1 22:19:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=976bf56943ceda267df57b4189fa2986d4b67dbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:a0:20:ce:0d:2a:e6:94:77:56:c9:48:63:38: e0:bb:69:2c:9d:c8:12:5d:84:08:55:32:46:02:2b: 82:3b:f6:7c:07:6a:51:72:06:a2:03:26:99:93:90: a9:55:20:25:6c:6d:d4:53:5d:51:11:30:ec:e0:58: 1e:c6:e2:43:6e:fc:9f:fe:59:8e:77:08:75:bd:80: 53:1d:f8:0e:84:55:e5:1e:bf:a2:aa:5d:7b:54:ee: e2:e4:e4:02:fe:a9:fe:4a:e5:92:a7:34:37:9a:38: 36:79:02:f1:88:0c:69:a9:26:5a:cf:8a:f6:ed:9a: 1a:56:1f:f9:66:30:63:59:ba:09:ce:bb:f2:1c:30: 60:eb:4c:7d:d4:ef:58:bb:ed:7a:3d:78:96:15:05: fc:68:5d:9b:d7:c8:d9:61:9a:4c:2d:cc:30:ed:f2: ae:04:09:93:e5:81:8e:76:47:0f:e7:5f:5e:80:29: 1a:4a:26:4c:fb:fb:09:c1:bb:62:27:55:34:9d:92: 23:3d:cf:0d:8a:0e:c4:58:1a:83:40:a5:97:92:6a: 7e:a1:74:27:48:dd:cc:2b:eb:e5:20:83:50:5e:57: ce:ce:3a:9c:b6:48:dc:41:a9:7b:11:0c:75:b4:0b: 91:cd:1e:16:c6:ec:a2:ea:9f:66:9e:5f:3f:01:51: 54:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:6B:F5:69:43:CE:DA:26:7D:F5:7B:41:89:FA:29:86:D4:B6:7D:BF X509v3 Authority Key Identifier: keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/l2v1aUPO2iZ99XtBifophtS2fb8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.88.244.0/23 Signature Algorithm: sha256WithRSAEncryption 09:3d:a9:94:30:16:ce:7f:ce:91:1c:71:1a:d5:3d:43:74:c4: ca:ec:55:94:46:07:b4:2a:bb:d1:ad:1f:cb:b2:4f:89:35:1d: ea:5d:ef:82:e5:04:ce:a4:68:3f:35:e5:99:e4:37:fc:e4:92: 5f:35:9e:2b:97:0c:5b:c0:40:4c:a7:d3:ac:a3:de:21:a7:31: 17:9a:dc:2e:1a:3e:d9:2c:ab:43:b2:ab:bb:b8:08:c6:22:3a: 73:c9:99:f3:36:c6:48:44:e9:c9:3f:71:b9:fb:c3:e0:11:ed: 26:12:bf:09:b1:0e:f1:62:e6:48:29:2e:4b:ca:f4:ed:b4:c3: d0:d7:21:fd:01:45:b9:a0:a6:bb:9d:09:6f:b2:81:ba:9e:fb: 09:a2:b0:7c:61:b6:06:61:01:52:5a:8d:c0:55:0d:84:b9:54: 14:c7:1f:cc:6a:3f:bf:e1:e5:bf:8d:49:3a:c8:2d:78:7f:60: 75:18:f0:cc:6d:d9:a8:3f:55:f1:27:0e:82:2a:2b:05:eb:8f: f7:7a:b1:d4:c4:8f:a1:6d:4d:2d:20:36:8c:2a:fe:5b:25:12: f6:c5:d2:f6:7b:9c:0c:fc:96:58:ad:fe:53:92:5d:f3:8e:1c: 1b:89:a9:a9:e7:7d:3b:c6:28:2c:57:42:4f:71:8f:89:1b:10: bf:bf:f8:39 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pWP3/JV9N9MUsjF1qvcGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxNTUwMDljM2RlNDIxY2M0ZTY3YjlhOWFlNDIzYmIzNWRl MGI5MjYwHhcNMjYwMTAxMjIxOTU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NzZiZjU2OTQzY2VkYTI2N2RmNTdiNDE4OWZhMjk4NmQ0YjY3ZGJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5qAgzg0q5pR3VslIYzjgu2ksncgS XYQIVTJGAiuCO/Z8B2pRcgaiAyaZk5CpVSAlbG3UU11RETDs4FgexuJDbvyf/lmO dwh1vYBTHfgOhFXlHr+iql17VO7i5OQC/qn+SuWSpzQ3mjg2eQLxiAxpqSZaz4r2 7ZoaVh/5ZjBjWboJzrvyHDBg60x91O9Yu+16PXiWFQX8aF2b18jZYZpMLcww7fKu BAmT5YGOdkcP519egCkaSiZM+/sJwbtiJ1U0nZIjPc8Nig7EWBqDQKWXkmp+oXQn SN3MK+vlIINQXlfOzjqctkjcQal7EQx1tAuRzR4Wxuyi6p9mnl8/AVFUsQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJdr9WlDztomffV7QYn6KYbUtn2/MB8GA1UdIwQY MBaAFLFVAJw95CHMTme5qa5CO7Nd4LkmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc1ZVQW5EM2tJY3hPWjdtcHJrSTdzMTNndVNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9kZTkwMmMtM2QxMy00N2QxLWE1ZTYt NzM4NTZhZjQ5ZjNlLzEvbDJ2MWFVUE8yaVo5OVh0Qmlmb3BodFMyZmI4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC9kZTkwMmMtM2QxMy00N2QxLWE1ZTYtNzM4NTZhZjQ5ZjNl LzEvc1ZVQW5EM2tJY3hPWjdtcHJrSTdzMTNndVNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLVj0MA0G CSqGSIb3DQEBCwUAA4IBAQAJPamUMBbOf86RHHEa1T1DdMTK7FWURge0KrvRrR/L sk+JNR3qXe+C5QTOpGg/NeWZ5Df85JJfNZ4rlwxbwEBMp9Oso94hpzEXmtwuGj7Z LKtDsqu7uAjGIjpzyZnzNsZIROnJP3G5+8PgEe0mEr8JsQ7xYuZIKS5LyvTttMPQ 1yH9AUW5oKa7nQlvsoG6nvsJorB8YbYGYQFSWo3AVQ2EuVQUxx/Maj+/4eW/jUk6 yC14f2B1GPDMbdmoP1XxJw6CKisF64/3erHUxI+hbU0tIDaMKv5bJRL2xdL2e5wM /JZYrf5Tkl3zjhwbiamp5307xigsV0JPcY+JGxC/v/g5 -----END CERTIFICATE-----Generated at Mon Jan 19 19:56:31 2026 by rpki-client