This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/ee0538-39c9-4450-9647-aba55e2424d2/1/lPKn0A-IXhdHwCClGsh4tcwcKys.roa File: lPKn0A-IXhdHwCClGsh4tcwcKys.roa (raw, json) Hash identifier: r48MZGYcfxv5fZud0sCAUwlrU9Dsef9uT7Z4ZtLSoLs= Subject key identifier: 94:F2:A7:D0:0F:88:5E:17:47:C0:20:A5:1A:C8:78:B5:CC:1C:2B:2B Certificate issuer: /CN=93d4c4ad731e45ed320a2f38ab70b7a7bff7ea79 Certificate serial: 019B79112D908DFB79A870724C5253597031 Authority key identifier: 93:D4:C4:AD:73:1E:45:ED:32:0A:2F:38:AB:70:B7:A7:BF:F7:EA:79 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k9TErXMeRe0yCi84q3C3p7_36nk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/ee0538-39c9-4450-9647-aba55e2424d2/1/lPKn0A-IXhdHwCClGsh4tcwcKys.roa Signing time: Thu 01 Jan 2026 10:18:47 +0000 ROA not before: Thu 01 Jan 2026 10:18:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42852 IP address blocks: 91.151.224.0/22 maxlen: 22 91.151.228.0/22 maxlen: 22 91.151.232.0/22 maxlen: 22 91.151.236.0/22 maxlen: 22 149.3.152.0/22 maxlen: 22 149.3.156.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/ee0538-39c9-4450-9647-aba55e2424d2/1/k9TErXMeRe0yCi84q3C3p7_36nk.crl rsync://rpki.ripe.net/repository/DEFAULT/c9/ee0538-39c9-4450-9647-aba55e2424d2/1/k9TErXMeRe0yCi84q3C3p7_36nk.mft rsync://rpki.ripe.net/repository/DEFAULT/k9TErXMeRe0yCi84q3C3p7_36nk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:2d:90:8d:fb:79:a8:70:72:4c:52:53:59:70:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=93d4c4ad731e45ed320a2f38ab70b7a7bff7ea79 Validity Not Before: Jan 1 10:18:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=94f2a7d00f885e1747c020a51ac878b5cc1c2b2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:0a:88:0a:41:a3:6a:23:8b:10:3d:e3:54:ed: 13:0c:48:e2:cb:bf:e4:64:97:bf:7d:f0:c9:b5:8a: db:ad:26:b8:dc:41:31:41:44:39:33:b1:b6:f6:23: 08:42:54:3d:2b:f5:60:c9:3b:1f:87:71:fb:4f:17: fe:85:32:9b:6e:b3:0c:b5:e4:fd:15:dc:08:f6:b4: 06:58:4d:a8:2e:40:7d:87:56:65:b3:85:6b:20:d8: 91:95:b9:08:2f:38:6c:47:c2:81:dd:a3:8f:7d:be: 48:95:b6:05:0e:56:30:55:a0:c3:1e:87:a6:dd:fb: a8:0b:cb:3c:2f:ef:3e:a0:ab:18:54:8e:bb:56:65: 1c:01:fa:bc:6d:a1:50:ce:1c:53:cb:8b:f5:32:1f: cc:e4:59:fa:87:cf:13:9d:1a:87:7e:c3:67:d6:4a: 61:d0:46:62:ed:8a:ee:9d:ac:a3:6b:2b:ca:8e:9d: c7:82:8b:63:a5:68:00:72:a2:44:d8:7e:9a:ce:1d: cc:88:2c:d5:aa:20:5b:44:9c:88:a7:7d:bb:f2:f4: f4:15:22:08:89:00:b3:38:b8:90:99:a6:1f:84:d3: 0e:9e:d3:7c:4b:49:07:da:2b:51:86:a8:b7:70:e8: 56:b2:ff:24:6e:e7:9b:ff:0a:d3:c4:74:96:56:08: e5:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:F2:A7:D0:0F:88:5E:17:47:C0:20:A5:1A:C8:78:B5:CC:1C:2B:2B X509v3 Authority Key Identifier: keyid:93:D4:C4:AD:73:1E:45:ED:32:0A:2F:38:AB:70:B7:A7:BF:F7:EA:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k9TErXMeRe0yCi84q3C3p7_36nk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/ee0538-39c9-4450-9647-aba55e2424d2/1/lPKn0A-IXhdHwCClGsh4tcwcKys.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/ee0538-39c9-4450-9647-aba55e2424d2/1/k9TErXMeRe0yCi84q3C3p7_36nk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.151.224.0/20 149.3.152.0/21 Signature Algorithm: sha256WithRSAEncryption 17:c7:8f:fc:4f:9f:2c:a1:67:49:27:43:16:3a:68:f1:0a:19: c8:c2:da:34:f8:35:ab:5e:a1:f3:56:c1:79:aa:cb:68:5d:6c: 92:7b:f1:f6:7d:d2:88:47:fa:99:87:82:c6:2d:8f:ab:82:25: 65:b5:63:d6:ed:43:1b:3c:62:e5:55:a0:4f:60:21:17:9d:fc: ac:73:e1:04:0b:c2:08:48:09:83:c4:93:3a:56:11:e6:2c:e1: 12:86:c2:90:01:47:6d:12:59:13:98:06:5e:04:9a:3a:13:86: d1:4e:e0:c8:c9:a7:9f:7b:36:c8:1c:8d:d1:a7:8e:3d:40:1e: f7:88:a4:ae:1d:ac:8f:44:35:cd:7a:70:50:68:e7:30:30:e3: 11:57:7f:e6:fb:6c:01:83:e4:2d:37:e7:8b:91:bf:80:fd:a6: 27:0a:47:52:be:77:9a:a1:49:7e:d8:e1:0d:02:74:73:ff:d1: a6:f6:98:a9:d3:38:cb:9a:00:d9:75:d6:93:56:c8:84:3b:9e: 9d:c1:6c:35:69:f9:11:7a:c4:9f:d3:3c:23:d8:3f:6c:92:05: 69:c9:13:e0:36:ca:80:d1:75:04:19:ab:45:53:35:97:4d:a9: 49:fd:b8:65:08:ff:23:a2:de:a4:84:26:39:b9:d3:50:d7:2e: 66:00:68:a0 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt5ES2Qjft5qHByTFJTWXAxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzZDRjNGFkNzMxZTQ1ZWQzMjBhMmYzOGFiNzBiN2E3YmZm N2VhNzkwHhcNMjYwMTAxMTAxODQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NGYyYTdkMDBmODg1ZTE3NDdjMDIwYTUxYWM4NzhiNWNjMWMyYjJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApwqICkGjaiOLED3jVO0TDEjiy7/k ZJe/ffDJtYrbrSa43EExQUQ5M7G29iMIQlQ9K/VgyTsfh3H7Txf+hTKbbrMMteT9 FdwI9rQGWE2oLkB9h1Zls4VrINiRlbkILzhsR8KB3aOPfb5IlbYFDlYwVaDDHoem 3fuoC8s8L+8+oKsYVI67VmUcAfq8baFQzhxTy4v1Mh/M5Fn6h88TnRqHfsNn1kph 0EZi7YrunayjayvKjp3HgotjpWgAcqJE2H6azh3MiCzVqiBbRJyIp3278vT0FSII iQCzOLiQmaYfhNMOntN8S0kH2itRhqi3cOhWsv8kbueb/wrTxHSWVgjlSQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFJTyp9APiF4XR8AgpRrIeLXMHCsrMB8GA1UdIwQY MBaAFJPUxK1zHkXtMgovOKtwt6e/9+p5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazlURXJYTWVSZTB5Q2k4NHEzQzNwN18zNm5rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS9lZTA1MzgtMzljOS00NDUwLTk2NDct YWJhNTVlMjQyNGQyLzEvbFBLbjBBLUlYaGRId0NDbEdzaDR0Y3djS3lzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOS9lZTA1MzgtMzljOS00NDUwLTk2NDctYWJhNTVlMjQyNGQy LzEvazlURXJYTWVSZTB5Q2k4NHEzQzNwN18zNm5rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQEW5fgAwQD lQOYMA0GCSqGSIb3DQEBCwUAA4IBAQAXx4/8T58soWdJJ0MWOmjxChnIwto0+DWr XqHzVsF5qstoXWySe/H2fdKIR/qZh4LGLY+rgiVltWPW7UMbPGLlVaBPYCEXnfys c+EEC8IISAmDxJM6VhHmLOEShsKQAUdtElkTmAZeBJo6E4bRTuDIyaefezbIHI3R p449QB73iKSuHayPRDXNenBQaOcwMOMRV3/m+2wBg+QtN+eLkb+A/aYnCkdSvnea oUl+2OENAnRz/9Gm9pip0zjLmgDZddaTVsiEO56dwWw1afkResSf0zwj2D9skgVp yRPgNsqA0XUEGatFUzWXTalJ/bhlCP8jot6khCY5udNQ1y5mAGig -----END CERTIFICATE-----Generated at Mon Feb 9 22:36:25 2026 by rpki-client