This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/f35432-cf99-4f19-a76e-07b7fef0858f/1/Lo8OrI4-QoBfkRG5EFpy6ZKhD3c.roa File: Lo8OrI4-QoBfkRG5EFpy6ZKhD3c.roa (raw, json) Hash identifier: liDOGahnCT5YOOVoL1UbtXwpmdR4G1O4f4p7XQvK1gQ= Subject key identifier: 2E:8F:0E:AC:8E:3E:42:80:5F:91:11:B9:10:5A:72:E9:92:A1:0F:77 Certificate issuer: /CN=c9b232958097b5863eafd047bb315171eaa01fb7 Certificate serial: 019B7DCACBF2F7489AD9CB3DFCBBF072F93F Authority key identifier: C9:B2:32:95:80:97:B5:86:3E:AF:D0:47:BB:31:51:71:EA:A0:1F:B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ybIylYCXtYY-r9BHuzFRceqgH7c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/f35432-cf99-4f19-a76e-07b7fef0858f/1/Lo8OrI4-QoBfkRG5EFpy6ZKhD3c.roa Signing time: Fri 02 Jan 2026 08:20:01 +0000 ROA not before: Fri 02 Jan 2026 08:20:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25409 IP address blocks: 93.190.144.0/21 maxlen: 21 95.128.170.0/23 maxlen: 23 195.234.188.0/24 maxlen: 24 2a00:ff0::/48 maxlen: 48 2a00:ff0:fffe::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/f35432-cf99-4f19-a76e-07b7fef0858f/1/ybIylYCXtYY-r9BHuzFRceqgH7c.crl rsync://rpki.ripe.net/repository/DEFAULT/de/f35432-cf99-4f19-a76e-07b7fef0858f/1/ybIylYCXtYY-r9BHuzFRceqgH7c.mft rsync://rpki.ripe.net/repository/DEFAULT/ybIylYCXtYY-r9BHuzFRceqgH7c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:cb:f2:f7:48:9a:d9:cb:3d:fc:bb:f0:72:f9:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9b232958097b5863eafd047bb315171eaa01fb7 Validity Not Before: Jan 2 08:20:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2e8f0eac8e3e42805f9111b9105a72e992a10f77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:02:ef:7c:a1:b0:7c:ce:ff:c0:49:11:19:0d: f6:d8:93:3f:cb:4d:9f:65:bb:40:9c:13:eb:ba:36: 99:48:41:61:03:05:e2:b9:97:a2:2c:51:ac:3e:bf: 07:22:c6:47:6a:66:da:0d:f7:a3:55:cf:49:63:2f: 75:cd:53:e6:78:54:c2:16:ca:9f:d5:be:99:16:c0: e6:8e:52:3f:a3:63:a3:56:a3:0f:2c:f8:da:81:f7: a0:60:fb:a7:a1:8e:7d:29:07:92:83:fb:78:71:37: c6:b2:6a:aa:c9:23:2d:7d:bd:42:6a:da:cf:ee:5a: ff:f9:67:0a:02:eb:47:91:63:c9:8b:28:27:f8:1b: 84:65:4d:1a:a2:e9:bc:bb:04:e6:6f:00:18:0e:ab: 8f:b2:f9:b4:64:86:48:d3:c8:78:74:98:a7:47:79: f4:1b:91:6c:62:be:20:ac:7f:9d:70:b2:c5:35:39: da:e1:7d:f7:5d:a5:44:86:0b:9e:8e:c6:7e:77:94: 30:d8:0a:b6:2b:fc:3c:ff:17:3f:42:47:a5:08:ef: 1e:58:3a:5e:c0:54:ad:be:40:ec:fc:b7:29:12:77: 40:62:24:ff:05:24:88:d8:ce:3e:64:a9:29:33:5e: 2e:05:e8:39:62:7d:d8:2c:a6:91:5e:ca:c0:30:0f: 06:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:8F:0E:AC:8E:3E:42:80:5F:91:11:B9:10:5A:72:E9:92:A1:0F:77 X509v3 Authority Key Identifier: keyid:C9:B2:32:95:80:97:B5:86:3E:AF:D0:47:BB:31:51:71:EA:A0:1F:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ybIylYCXtYY-r9BHuzFRceqgH7c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f35432-cf99-4f19-a76e-07b7fef0858f/1/Lo8OrI4-QoBfkRG5EFpy6ZKhD3c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f35432-cf99-4f19-a76e-07b7fef0858f/1/ybIylYCXtYY-r9BHuzFRceqgH7c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.190.144.0/21 95.128.170.0/23 195.234.188.0/24 IPv6: 2a00:ff0::/48 2a00:ff0:fffe::/48 Signature Algorithm: sha256WithRSAEncryption 85:82:2a:21:56:70:63:7f:bb:09:f2:84:61:11:d1:6b:be:38: c8:9f:06:88:8b:a4:be:9b:42:38:8b:04:68:49:c2:94:2c:1b: 57:8e:04:f2:ce:5b:be:48:a6:89:dc:d8:5e:4c:25:56:97:35: 99:f4:5c:7d:9b:8a:47:85:2d:d0:09:42:bf:b1:e1:cc:34:7b: 44:2e:87:ff:27:7c:7e:82:bc:9a:d2:ae:52:78:72:aa:5a:cf: 6b:1f:73:5b:b5:9c:99:04:8c:67:05:f8:21:44:2b:9c:f7:7c: 0c:ad:24:0a:c1:be:27:c9:4e:60:a2:81:0f:4a:63:1c:0c:94: bb:ba:82:c6:35:e5:cb:a6:07:17:d2:cd:b0:ba:15:33:94:bb: 41:52:21:07:bb:69:56:89:5f:95:da:85:0d:10:b6:e2:37:65: f2:4e:97:a0:38:d7:ef:44:41:17:bf:0e:f0:67:81:d2:4e:2e: 32:19:36:08:42:64:a9:8c:55:6c:fa:b3:6b:1d:34:1f:62:86: a8:f5:73:6f:69:e9:6a:e7:5f:cc:e7:63:9c:65:ab:3a:c7:4a: bb:8e:f5:62:bc:80:31:8f:ee:66:3e:52:ae:79:29:c4:e4:9b: 58:42:68:af:75:b4:cc:03:36:03:a8:f0:df:37:33:8a:78:46: c3:b9:cc:43 -----BEGIN CERTIFICATE----- MIIFIzCCBAugAwIBAgISAZt9ysvy90ia2cs9/Lvwcvk/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5YjIzMjk1ODA5N2I1ODYzZWFmZDA0N2JiMzE1MTcxZWFh MDFmYjcwHhcNMjYwMTAyMDgyMDAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZThmMGVhYzhlM2U0MjgwNWY5MTExYjkxMDVhNzJlOTkyYTEwZjc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsALvfKGwfM7/wEkRGQ322JM/y02f ZbtAnBPrujaZSEFhAwXiuZeiLFGsPr8HIsZHambaDfejVc9JYy91zVPmeFTCFsqf 1b6ZFsDmjlI/o2OjVqMPLPjagfegYPunoY59KQeSg/t4cTfGsmqqySMtfb1CatrP 7lr/+WcKAutHkWPJiygn+BuEZU0aoum8uwTmbwAYDquPsvm0ZIZI08h4dJinR3n0 G5FsYr4grH+dcLLFNTna4X33XaVEhguejsZ+d5Qw2Aq2K/w8/xc/QkelCO8eWDpe wFStvkDs/LcpEndAYiT/BSSI2M4+ZKkpM14uBeg5Yn3YLKaRXsrAMA8GyQIDAQAB o4ICLzCCAiswHQYDVR0OBBYEFC6PDqyOPkKAX5ERuRBacumSoQ93MB8GA1UdIwQY MBaAFMmyMpWAl7WGPq/QR7sxUXHqoB+3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWJJeWxZQ1h0WVktcjlCSHV6RlJjZXFnSDdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS9mMzU0MzItY2Y5OS00ZjE5LWE3NmUt MDdiN2ZlZjA4NThmLzEvTG84T3JJNC1Rb0Jma1JHNUVGcHk2WktoRDNjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZS9mMzU0MzItY2Y5OS00ZjE5LWE3NmUtMDdiN2ZlZjA4NThm LzEveWJJeWxZQ1h0WVktcjlCSHV6RlJjZXFnSDdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEUGCCsGAQUFBwEHAQH/BDYwNDAYBAIAATASAwQDXb6QAwQB X4CqAwQAw+q8MBgEAgACMBIDBwAqAA/wAAADBwAqAA/w//4wDQYJKoZIhvcNAQEL BQADggEBAIWCKiFWcGN/uwnyhGER0Wu+OMifBoiLpL6bQjiLBGhJwpQsG1eOBPLO W75Iponc2F5MJVaXNZn0XH2bikeFLdAJQr+x4cw0e0Quh/8nfH6CvJrSrlJ4cqpa z2sfc1u1nJkEjGcF+CFEK5z3fAytJArBvifJTmCigQ9KYxwMlLu6gsY15cumBxfS zbC6FTOUu0FSIQe7aVaJX5XahQ0QtuI3ZfJOl6A41+9EQRe/DvBngdJOLjIZNghC ZKmMVWz6s2sdNB9ihqj1c29p6WrnX8znY5xlqzrHSruO9WK8gDGP7mY+Uq55KcTk m1hCaK91tMwDNgOo8N83M4p4RsO5zEM= -----END CERTIFICATE-----Generated at Mon Feb 9 20:09:11 2026 by rpki-client