This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/7db7a8-827f-4cf0-abc9-b8c46f95640e/1/lJ6MK4EWxS2iDNPG8gtC0QXW6QY.roa File: lJ6MK4EWxS2iDNPG8gtC0QXW6QY.roa (raw, json) Hash identifier: gfFr5x9q2uzGjatgMbItLXzkpsrcI9SLgHSTPYcd2mQ= Subject key identifier: 94:9E:8C:2B:81:16:C5:2D:A2:0C:D3:C6:F2:0B:42:D1:05:D6:E9:06 Certificate issuer: /CN=1089a0251e32bf3c480f5a94abb5fb4eb906a5b3 Certificate serial: 019B7758A69CB214C4A67B9A7BC64653F235 Authority key identifier: 10:89:A0:25:1E:32:BF:3C:48:0F:5A:94:AB:B5:FB:4E:B9:06:A5:B3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EImgJR4yvzxID1qUq7X7TrkGpbM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/7db7a8-827f-4cf0-abc9-b8c46f95640e/1/lJ6MK4EWxS2iDNPG8gtC0QXW6QY.roa Signing time: Thu 01 Jan 2026 02:17:37 +0000 ROA not before: Thu 01 Jan 2026 02:17:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203412 IP address blocks: 194.55.162.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/7db7a8-827f-4cf0-abc9-b8c46f95640e/1/EImgJR4yvzxID1qUq7X7TrkGpbM.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/7db7a8-827f-4cf0-abc9-b8c46f95640e/1/EImgJR4yvzxID1qUq7X7TrkGpbM.mft rsync://rpki.ripe.net/repository/DEFAULT/EImgJR4yvzxID1qUq7X7TrkGpbM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:00:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:a6:9c:b2:14:c4:a6:7b:9a:7b:c6:46:53:f2:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1089a0251e32bf3c480f5a94abb5fb4eb906a5b3 Validity Not Before: Jan 1 02:17:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=949e8c2b8116c52da20cd3c6f20b42d105d6e906 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:83:d9:bc:bf:05:6e:46:0f:fc:06:4c:df:f3: 87:23:7d:67:cc:50:72:f7:dd:21:b9:21:82:e5:ca: 44:cf:c5:a7:f0:10:4f:cb:6c:14:f2:c6:50:68:c1: 0d:bf:66:ce:70:74:40:ae:dd:1e:95:4a:66:be:92: f1:cd:45:0f:fc:e7:8d:75:05:24:df:15:a0:70:77: f1:e1:7e:49:63:29:66:3d:24:07:38:f9:73:a2:fb: 10:f8:26:87:dc:6b:32:30:16:55:8f:ca:37:0c:b9: 7e:56:56:da:fa:0d:fd:cc:0b:72:13:7a:54:7c:b2: f3:8f:ad:b9:9c:fa:5a:68:44:c7:d8:9f:f6:2e:aa: 69:55:ef:19:99:3c:7c:b3:63:06:19:fc:19:6e:ad: a0:05:7b:9b:66:d2:48:12:c0:24:e5:9b:36:bd:0c: 2e:5c:af:ac:c1:04:f5:8c:9d:e2:d9:dd:6f:ba:be: b9:b7:bc:66:2c:d0:39:be:1a:c1:17:c5:24:b9:54: c3:c1:22:aa:61:98:f4:5e:48:c2:16:d4:8b:75:0f: 9d:42:b3:63:61:a2:23:82:8b:d3:67:05:19:0a:b7: 68:7a:a8:b2:03:37:15:3c:2b:9b:0d:78:9f:2f:2c: df:bb:91:03:1c:89:9b:53:c9:02:76:9c:06:77:12: db:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:9E:8C:2B:81:16:C5:2D:A2:0C:D3:C6:F2:0B:42:D1:05:D6:E9:06 X509v3 Authority Key Identifier: keyid:10:89:A0:25:1E:32:BF:3C:48:0F:5A:94:AB:B5:FB:4E:B9:06:A5:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EImgJR4yvzxID1qUq7X7TrkGpbM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/7db7a8-827f-4cf0-abc9-b8c46f95640e/1/lJ6MK4EWxS2iDNPG8gtC0QXW6QY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/7db7a8-827f-4cf0-abc9-b8c46f95640e/1/EImgJR4yvzxID1qUq7X7TrkGpbM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.55.162.0/24 Signature Algorithm: sha256WithRSAEncryption 0d:67:75:a6:fb:5f:0d:95:63:e2:b5:4c:7d:65:c4:da:47:5d: 65:a2:8d:a9:12:24:a2:ab:ec:fc:a0:0e:82:a8:8b:19:91:97: b5:9c:f6:c5:7b:ba:ae:38:da:2e:69:aa:61:f1:2d:3f:54:e3: fd:89:7a:80:6b:f5:da:0a:7d:38:01:03:73:dc:ef:83:6b:9b: 8a:f9:24:23:8a:9f:08:b8:10:19:10:17:3c:02:b8:97:88:fa: e6:a7:b0:43:18:b4:81:a8:d8:e4:9b:90:37:2b:28:5a:a5:3b: d4:47:dd:b3:9c:c7:00:75:f8:a2:4c:ea:e6:4b:b6:20:b4:ac: cc:fa:fc:5a:dd:29:44:44:78:40:07:c9:29:64:6c:ff:d7:03: 9f:3a:17:59:d6:58:a5:0d:4d:39:c2:50:70:3c:d1:be:ef:04: db:ff:33:f5:a9:3f:7a:b5:08:c3:60:4a:82:e6:88:9e:cc:cc: e6:89:b6:54:8f:6c:95:3a:c3:4f:66:53:fa:43:2d:a6:63:af: b5:b3:2d:4a:a5:0d:dd:d1:88:4d:5e:bf:e3:de:80:fb:0c:94: 44:e2:04:09:9c:bf:da:85:7a:88:01:3f:99:e4:4d:cd:c8:95: 26:06:e1:ba:33:40:8b:ca:89:d3:fd:98:cb:4d:be:51:f4:58: 3c:0e:d6:56 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WKacshTEpnuae8ZGU/I1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEwODlhMDI1MWUzMmJmM2M0ODBmNWE5NGFiYjVmYjRlYjkw NmE1YjMwHhcNMjYwMTAxMDIxNzM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NDllOGMyYjgxMTZjNTJkYTIwY2QzYzZmMjBiNDJkMTA1ZDZlOTA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3YPZvL8FbkYP/AZM3/OHI31nzFBy 990huSGC5cpEz8Wn8BBPy2wU8sZQaMENv2bOcHRArt0elUpmvpLxzUUP/OeNdQUk 3xWgcHfx4X5JYylmPSQHOPlzovsQ+CaH3GsyMBZVj8o3DLl+Vlba+g39zAtyE3pU fLLzj625nPpaaETH2J/2LqppVe8ZmTx8s2MGGfwZbq2gBXubZtJIEsAk5Zs2vQwu XK+swQT1jJ3i2d1vur65t7xmLNA5vhrBF8UkuVTDwSKqYZj0XkjCFtSLdQ+dQrNj YaIjgovTZwUZCrdoeqiyAzcVPCubDXifLyzfu5EDHImbU8kCdpwGdxLbJwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJSejCuBFsUtogzTxvILQtEF1ukGMB8GA1UdIwQY MBaAFBCJoCUeMr88SA9alKu1+065BqWzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRUltZ0pSNHl2enhJRDFxVXE3WDdUcmtHcGJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi83ZGI3YTgtODI3Zi00Y2YwLWFiYzkt YjhjNDZmOTU2NDBlLzEvbEo2TUs0RVd4UzJpRE5QRzhndEMwUVhXNlFZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi83ZGI3YTgtODI3Zi00Y2YwLWFiYzktYjhjNDZmOTU2NDBl LzEvRUltZ0pSNHl2enhJRDFxVXE3WDdUcmtHcGJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwjeiMA0G CSqGSIb3DQEBCwUAA4IBAQANZ3Wm+18NlWPitUx9ZcTaR11loo2pEiSiq+z8oA6C qIsZkZe1nPbFe7quONouaaph8S0/VOP9iXqAa/XaCn04AQNz3O+Da5uK+SQjip8I uBAZEBc8AriXiPrmp7BDGLSBqNjkm5A3KyhapTvUR92znMcAdfiiTOrmS7YgtKzM +vxa3SlERHhAB8kpZGz/1wOfOhdZ1lilDU05wlBwPNG+7wTb/zP1qT96tQjDYEqC 5oiezMzmibZUj2yVOsNPZlP6Qy2mY6+1sy1KpQ3d0YhNXr/j3oD7DJRE4gQJnL/a hXqIAT+Z5E3NyJUmBuG6M0CLyonT/ZjLTb5R9Fg8DtZW -----END CERTIFICATE-----Generated at Tue Feb 10 04:01:10 2026 by rpki-client