This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/l9MFgJue1EzXCuODxtcBx9qlmeE.roa File: l9MFgJue1EzXCuODxtcBx9qlmeE.roa (raw, json) Hash identifier: fuHWs+WUDTAY3xy40ymHyTUSZ7zMZKYvLtqA+opm1q8= Subject key identifier: 97:D3:05:80:9B:9E:D4:4C:D7:0A:E3:83:C6:D7:01:C7:DA:A5:99:E1 Certificate issuer: /CN=5a6f9295521df30a158f506ba7cb873ab9529dc3 Certificate serial: 019B7CECF9EB5B19792A0372CFD1F51B1D2F Authority key identifier: 5A:6F:92:95:52:1D:F3:0A:15:8F:50:6B:A7:CB:87:3A:B9:52:9D:C3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wm-SlVId8woVj1Brp8uHOrlSncM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/l9MFgJue1EzXCuODxtcBx9qlmeE.roa Signing time: Fri 02 Jan 2026 04:17:43 +0000 ROA not before: Fri 02 Jan 2026 04:17:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8611 IP address blocks: 83.212.204.0/22 maxlen: 22 195.251.232.0/22 maxlen: 22 195.251.248.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/Wm-SlVId8woVj1Brp8uHOrlSncM.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/Wm-SlVId8woVj1Brp8uHOrlSncM.mft rsync://rpki.ripe.net/repository/DEFAULT/Wm-SlVId8woVj1Brp8uHOrlSncM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 06:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ec:f9:eb:5b:19:79:2a:03:72:cf:d1:f5:1b:1d:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a6f9295521df30a158f506ba7cb873ab9529dc3 Validity Not Before: Jan 2 04:17:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=97d305809b9ed44cd70ae383c6d701c7daa599e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:2e:a4:39:33:d6:04:57:aa:9b:d0:36:0c:53: 00:f8:48:1b:f8:79:1c:e9:b1:2e:04:47:1a:80:0c: 91:7d:64:dd:b2:23:0f:c8:18:f0:ca:91:bc:ba:a5: 45:32:83:4e:05:97:a1:d2:f8:ac:e8:00:4e:9e:51: aa:7e:be:d9:ed:d9:d8:78:27:ff:79:73:c4:ca:11: b8:22:b4:21:70:c4:a7:98:c1:9e:3c:d9:b0:31:06: c1:5c:c2:f8:ef:8d:09:a4:29:fa:48:c5:ae:22:65: ac:1d:86:d3:5c:27:b0:6f:57:7b:fc:b0:a7:a9:c6: be:cb:a2:68:b1:03:5e:c4:78:eb:93:b7:f3:08:4d: ae:12:10:af:d0:8c:36:00:6c:8b:08:24:c2:33:c3: e0:bf:b8:7a:70:6b:61:09:fd:04:9d:f4:49:12:96: 2f:b4:58:2f:d8:26:0b:b2:79:a5:d2:d1:46:76:5e: 85:2a:53:74:0c:f1:3a:23:f8:5c:6c:b9:a0:7c:b5: 8f:83:50:2d:f9:d3:a0:63:6d:05:ae:dd:f0:0b:e2: cf:f7:a2:b5:f9:8b:95:67:25:37:62:f6:97:aa:f5: 7a:f0:59:aa:51:94:a4:fa:4f:bd:e2:3e:62:11:2d: 67:73:0b:00:7f:27:e2:cc:3e:c6:78:7a:88:9a:75: 99:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:D3:05:80:9B:9E:D4:4C:D7:0A:E3:83:C6:D7:01:C7:DA:A5:99:E1 X509v3 Authority Key Identifier: keyid:5A:6F:92:95:52:1D:F3:0A:15:8F:50:6B:A7:CB:87:3A:B9:52:9D:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wm-SlVId8woVj1Brp8uHOrlSncM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/l9MFgJue1EzXCuODxtcBx9qlmeE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/Wm-SlVId8woVj1Brp8uHOrlSncM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 83.212.204.0/22 195.251.232.0/22 195.251.248.0/21 Signature Algorithm: sha256WithRSAEncryption 86:02:f6:48:5b:f6:58:25:07:96:68:40:f6:6b:ce:ac:b0:2d: 59:4f:f9:f9:d6:64:49:7b:c5:6b:25:87:c8:c8:78:34:59:f4: ba:38:fd:db:48:02:92:ba:4f:b4:98:bf:ac:1b:cc:23:ea:b5: 92:bb:8f:a1:e0:59:7c:dc:44:a5:10:4e:30:89:c9:92:93:18: 41:17:72:bb:e4:16:2a:f9:13:bc:57:2a:8d:d3:92:52:8f:86: 26:22:63:c6:ba:bf:b3:21:6e:0a:a1:79:2b:58:96:71:b4:9c: a7:b0:27:0b:de:7c:4e:ce:e7:e0:dd:e3:9d:ed:be:70:31:3d: 24:e1:c1:3b:32:01:0b:98:c7:80:ee:95:49:25:a5:f4:3b:79: 28:ae:3a:dd:5f:e1:70:4d:73:ae:01:49:f8:8c:cc:d4:1d:ab: b2:fe:73:fb:6b:b8:89:12:86:4b:10:36:af:3c:07:aa:40:1f: ca:2e:ce:1d:7f:82:ea:86:33:75:25:2c:5b:96:ff:75:95:59: f5:5a:98:06:64:69:87:eb:5d:34:56:0b:43:7f:43:5b:63:11: 27:64:8c:65:a8:b7:1c:05:1e:29:c9:01:cb:79:bf:64:bc:5e: 85:14:53:22:97:bb:a8:d8:26:13:a8:bb:ea:3e:92:ac:d7:9e: 0d:ee:bd:71 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt87PnrWxl5KgNyz9H1Gx0vMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhNmY5Mjk1NTIxZGYzMGExNThmNTA2YmE3Y2I4NzNhYjk1 MjlkYzMwHhcNMjYwMTAyMDQxNzQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5N2QzMDU4MDliOWVkNDRjZDcwYWUzODNjNmQ3MDFjN2RhYTU5OWUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlC6kOTPWBFeqm9A2DFMA+Egb+Hkc 6bEuBEcagAyRfWTdsiMPyBjwypG8uqVFMoNOBZeh0vis6ABOnlGqfr7Z7dnYeCf/ eXPEyhG4IrQhcMSnmMGePNmwMQbBXML4740JpCn6SMWuImWsHYbTXCewb1d7/LCn qca+y6JosQNexHjrk7fzCE2uEhCv0Iw2AGyLCCTCM8Pgv7h6cGthCf0EnfRJEpYv tFgv2CYLsnml0tFGdl6FKlN0DPE6I/hcbLmgfLWPg1At+dOgY20Frt3wC+LP96K1 +YuVZyU3YvaXqvV68FmqUZSk+k+94j5iES1ncwsAfyfizD7GeHqImnWZgwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFJfTBYCbntRM1wrjg8bXAcfapZnhMB8GA1UdIwQY MBaAFFpvkpVSHfMKFY9Qa6fLhzq5Up3DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV20tU2xWSWQ4d29WajFCcnA4dUhPcmxTbmNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9hOWY5M2ItYmUzMS00NWNmLWFhN2Ut YWFhNDU1M2QyYWJkLzEvbDlNRmdKdWUxRXpYQ3VPRHh0Y0J4OXFsbWVFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9hOWY5M2ItYmUzMS00NWNmLWFhN2UtYWFhNDU1M2QyYWJk LzEvV20tU2xWSWQ4d29WajFCcnA4dUhPcmxTbmNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCU9TMAwQC w/voAwQDw/v4MA0GCSqGSIb3DQEBCwUAA4IBAQCGAvZIW/ZYJQeWaED2a86ssC1Z T/n51mRJe8VrJYfIyHg0WfS6OP3bSAKSuk+0mL+sG8wj6rWSu4+h4Fl83ESlEE4w icmSkxhBF3K75BYq+RO8VyqN05JSj4YmImPGur+zIW4KoXkrWJZxtJynsCcL3nxO zufg3eOd7b5wMT0k4cE7MgELmMeA7pVJJaX0O3korjrdX+FwTXOuAUn4jMzUHauy /nP7a7iJEoZLEDavPAeqQB/KLs4df4LqhjN1JSxblv91lVn1WpgGZGmH6100VgtD f0NbYxEnZIxlqLccBR4pyQHLeb9kvF6FFFMil7uo2CYTqLvqPpKs154N7r1x -----END CERTIFICATE-----Generated at Mon Feb 2 09:39:30 2026 by rpki-client