This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/l1pzlCUbLYSwaiCGAir9wNYcTTE.roa File: l1pzlCUbLYSwaiCGAir9wNYcTTE.roa (raw, json) Hash identifier: t1UtwzLw1x5tIwxUqO3rM2BmFbhBkbvupvjPzA3M+14= Subject key identifier: 97:5A:73:94:25:1B:2D:84:B0:6A:20:86:02:2A:FD:C0:D6:1C:4D:31 Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10 Certificate serial: 019B7F84DF8CA3B47CDA60E90605B4D5585D Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/l1pzlCUbLYSwaiCGAir9wNYcTTE.roa Signing time: Fri 02 Jan 2026 16:22:52 +0000 ROA not before: Fri 02 Jan 2026 16:22:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31128 IP address blocks: 88.209.219.0/27 maxlen: 27 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.mft rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 15:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:df:8c:a3:b4:7c:da:60:e9:06:05:b4:d5:58:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10 Validity Not Before: Jan 2 16:22:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=975a7394251b2d84b06a2086022afdc0d61c4d31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ed:d7:54:93:a1:0c:5e:89:10:c2:85:a9:14: f2:3f:09:f2:10:47:44:fb:4a:de:c6:59:a7:af:be: 77:cb:9b:5a:12:a3:28:e8:87:cb:69:ff:9f:42:c4: 8c:74:bf:81:a6:0c:c5:6c:da:b6:4e:a9:14:51:06: 44:34:ab:78:12:d8:83:5d:39:4e:72:8e:2a:c0:03: b8:64:6c:62:00:e4:d2:5c:f3:12:a4:c1:4f:27:d1: 76:25:f3:28:26:60:94:48:89:65:34:54:59:42:f3: 1e:d6:db:9b:f4:41:e4:bc:95:99:ae:f1:9e:3f:e5: 77:01:08:f1:29:81:cd:9a:64:cc:f8:36:8f:cf:60: 57:0f:2b:64:94:b6:33:f0:f6:8c:e1:29:52:8e:cd: ff:ae:d1:02:87:e7:5d:0e:90:ee:f0:d8:d3:08:83: d9:9d:ef:19:0f:8d:70:8c:df:4b:62:6f:33:f5:74: bf:08:37:ea:30:e5:7e:28:be:dd:ee:ad:0d:03:bd: 10:0e:bc:12:8c:a3:64:f9:fc:9d:36:35:20:47:bc: bd:d1:40:54:12:c0:39:0f:e4:11:d6:85:d8:56:10: 4a:b5:75:07:e4:28:21:0a:ea:4b:f0:8c:c0:b4:32: e7:bc:9d:55:19:33:03:9b:99:f8:d6:4d:e0:40:0b: 44:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:5A:73:94:25:1B:2D:84:B0:6A:20:86:02:2A:FD:C0:D6:1C:4D:31 X509v3 Authority Key Identifier: keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/l1pzlCUbLYSwaiCGAir9wNYcTTE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 88.209.219.0/27 Signature Algorithm: sha256WithRSAEncryption 45:c1:1b:c1:b6:5e:89:26:df:b0:62:51:8c:dd:f7:81:11:f7: 49:1e:c4:04:49:02:1d:ec:30:e6:b8:51:38:eb:5e:39:5a:70: b5:5b:90:f8:37:3b:dd:b5:de:33:8f:01:bb:ca:a8:c7:07:55: 8b:86:05:11:6d:e7:d7:89:d2:67:84:8a:a0:57:a5:a5:24:1e: 40:bf:3a:4e:96:6f:d2:a6:64:0f:ca:6d:47:f8:68:2a:e6:0c: d6:84:64:51:f5:87:3a:6c:d4:ca:82:a4:c2:80:1c:5e:7b:9d: 4a:e2:93:70:17:a6:8a:93:2e:eb:e7:fd:fb:99:7d:7a:9e:cf: e1:03:e5:20:98:4f:0a:bc:b7:aa:5d:18:ca:f1:d7:fb:32:5a: a3:48:12:c3:16:1b:54:2c:02:af:fa:f1:18:56:8d:3e:3c:3c: d3:ce:81:97:e9:6e:ff:b9:2b:55:a9:4c:b5:9b:ed:54:0c:b7: 41:3b:3b:4a:37:f5:21:4b:6b:7a:47:79:93:75:15:34:c3:4a: bf:67:88:f5:59:ba:58:af:8a:5e:a5:3a:03:16:b1:40:6b:25: c8:6b:44:7d:55:f6:bf:11:8b:73:f3:41:08:37:6b:b1:27:b9: 94:2a:ff:8f:2e:c9:2d:a8:cf:6e:10:18:ea:b0:ef:b5:f6:c8: ad:96:14:0c -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt/hN+Mo7R82mDpBgW01VhdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkYWFhMGUwODIzNjAzNjBhY2RhMzQ3NjY0ZWI4MzE0ZWIx MWRhMTAwHhcNMjYwMTAyMTYyMjUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NzVhNzM5NDI1MWIyZDg0YjA2YTIwODYwMjJhZmRjMGQ2MWM0ZDMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAte3XVJOhDF6JEMKFqRTyPwnyEEdE +0rexlmnr753y5taEqMo6IfLaf+fQsSMdL+BpgzFbNq2TqkUUQZENKt4EtiDXTlO co4qwAO4ZGxiAOTSXPMSpMFPJ9F2JfMoJmCUSIllNFRZQvMe1tub9EHkvJWZrvGe P+V3AQjxKYHNmmTM+DaPz2BXDytklLYz8PaM4SlSjs3/rtECh+ddDpDu8NjTCIPZ ne8ZD41wjN9LYm8z9XS/CDfqMOV+KL7d7q0NA70QDrwSjKNk+fydNjUgR7y90UBU EsA5D+QR1oXYVhBKtXUH5CghCupL8IzAtDLnvJ1VGTMDm5n41k3gQAtEfwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFJdac5QlGy2EsGoghgIq/cDWHE0xMB8GA1UdIwQY MBaAFM2qoOCCNgNgrNo0dmTrgxTrEdoQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvemFxZzRJSTJBMkNzMmpSMlpPdURGT3NSMmhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC81ODkxMjctMTA5Ni00YzkxLTk2Y2Mt N2U0ZDZmNmY2ZTY2LzEvbDFwemxDVWJMWVN3YWlDR0Fpcjl3TlljVFRFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC81ODkxMjctMTA5Ni00YzkxLTk2Y2MtN2U0ZDZmNmY2ZTY2 LzEvemFxZzRJSTJBMkNzMmpSMlpPdURGT3NSMmhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUFWNHbADAN BgkqhkiG9w0BAQsFAAOCAQEARcEbwbZeiSbfsGJRjN33gRH3SR7EBEkCHeww5rhR OOteOVpwtVuQ+Dc73bXeM48Bu8qoxwdVi4YFEW3n14nSZ4SKoFelpSQeQL86TpZv 0qZkD8ptR/hoKuYM1oRkUfWHOmzUyoKkwoAcXnudSuKTcBemipMu6+f9+5l9ep7P 4QPlIJhPCry3ql0YyvHX+zJao0gSwxYbVCwCr/rxGFaNPjw8086Bl+lu/7krValM tZvtVAy3QTs7Sjf1IUtrekd5k3UVNMNKv2eI9Vm6WK+KXqU6AxaxQGslyGtEfVX2 vxGLc/NBCDdrsSe5lCr/jy7JLajPbhAY6rDvtfbIrZYUDA== -----END CERTIFICATE-----Generated at Mon Jan 19 20:01:02 2026 by rpki-client