This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/99184f-1c80-47cd-a685-2dd650ea4ac3/1/lRxNEuaM9QpyAjoPeGGqEFp0bP8.roa File: lRxNEuaM9QpyAjoPeGGqEFp0bP8.roa (raw, json) Hash identifier: IPZ3rABOnomgE8tL9UL1behEamup4e8GPV/2Qwjj8sc= Subject key identifier: 95:1C:4D:12:E6:8C:F5:0A:72:02:3A:0F:78:61:AA:10:5A:74:6C:FF Certificate issuer: /CN=dc1a3aa0cf8dfa9167d24d92ed8a16eb4e78044c Certificate serial: 019B7F15D47AE40F4D09CB7C24F0DF688A42 Authority key identifier: DC:1A:3A:A0:CF:8D:FA:91:67:D2:4D:92:ED:8A:16:EB:4E:78:04:4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Bo6oM-N-pFn0k2S7YoW6054BEw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/99184f-1c80-47cd-a685-2dd650ea4ac3/1/lRxNEuaM9QpyAjoPeGGqEFp0bP8.roa Signing time: Fri 02 Jan 2026 14:21:35 +0000 ROA not before: Fri 02 Jan 2026 14:21:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48385 IP address blocks: 91.209.139.0/24 maxlen: 24 91.229.66.0/23 maxlen: 23 193.105.41.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/99184f-1c80-47cd-a685-2dd650ea4ac3/1/3Bo6oM-N-pFn0k2S7YoW6054BEw.crl rsync://rpki.ripe.net/repository/DEFAULT/df/99184f-1c80-47cd-a685-2dd650ea4ac3/1/3Bo6oM-N-pFn0k2S7YoW6054BEw.mft rsync://rpki.ripe.net/repository/DEFAULT/3Bo6oM-N-pFn0k2S7YoW6054BEw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:d4:7a:e4:0f:4d:09:cb:7c:24:f0:df:68:8a:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc1a3aa0cf8dfa9167d24d92ed8a16eb4e78044c Validity Not Before: Jan 2 14:21:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=951c4d12e68cf50a72023a0f7861aa105a746cff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:c9:9d:2a:94:07:46:5a:99:9c:e2:bb:05:bc: 63:04:41:2e:56:46:f1:ca:ae:21:2e:2e:b1:6f:2e: a0:88:4b:95:b8:52:74:82:c5:4f:4b:a5:b1:e1:f1: 8c:31:b8:9a:f0:c5:ce:ed:2f:c7:39:31:bb:1b:9c: 54:6c:5b:67:ca:30:79:ba:95:49:0d:ed:b2:13:ba: 1f:ef:a6:3d:63:f1:4b:a6:26:be:e3:1e:3c:bb:a5: 7b:cd:bc:09:d1:1d:ca:3b:cb:12:8f:6e:bb:84:10: 28:a2:9a:8b:25:fb:87:66:b3:c0:b5:e5:cb:cb:3c: 64:0e:50:3a:ec:60:c0:62:29:44:98:4c:21:91:92: 28:b6:a2:e2:59:27:12:fc:de:e0:c7:f2:b3:6b:6c: 20:67:73:2b:22:cf:8a:80:9d:2a:d7:ef:c9:35:48: 82:28:85:9a:ae:d5:3a:2b:ba:96:70:18:07:5d:61: f5:02:5a:32:71:c4:f8:50:ab:1b:de:ef:ab:48:96: 65:8c:cb:97:bd:ef:64:90:4f:58:4a:ca:0b:96:30: 5d:0e:5f:26:4a:43:48:b6:a2:9d:c5:b0:11:b9:26: 33:bd:b7:40:f5:50:c2:2f:ec:ff:bc:25:61:f9:90: fa:d0:4b:74:e8:35:dd:f4:18:fd:46:e1:38:69:7a: cb:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:1C:4D:12:E6:8C:F5:0A:72:02:3A:0F:78:61:AA:10:5A:74:6C:FF X509v3 Authority Key Identifier: keyid:DC:1A:3A:A0:CF:8D:FA:91:67:D2:4D:92:ED:8A:16:EB:4E:78:04:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Bo6oM-N-pFn0k2S7YoW6054BEw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/99184f-1c80-47cd-a685-2dd650ea4ac3/1/lRxNEuaM9QpyAjoPeGGqEFp0bP8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/99184f-1c80-47cd-a685-2dd650ea4ac3/1/3Bo6oM-N-pFn0k2S7YoW6054BEw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.209.139.0/24 91.229.66.0/23 193.105.41.0/24 Signature Algorithm: sha256WithRSAEncryption 9a:af:3c:ad:1a:36:ce:b4:01:c8:62:89:35:2b:f8:7e:45:4c: ff:d9:db:a2:51:83:96:30:ff:61:6a:72:f8:24:00:18:84:af: 73:18:d6:17:9d:c3:22:58:a8:13:51:00:3c:b4:19:41:54:d7: 68:ad:6a:21:77:ac:a2:76:78:0d:0e:74:10:b5:c6:b7:dc:39: ed:b1:bb:07:1f:14:8f:cc:19:a2:ca:f5:74:e4:40:32:6c:d4: 8c:3c:27:fe:e3:ec:4d:d7:16:03:7b:97:e4:0d:a6:b3:15:2b: 67:f1:21:ef:34:45:11:b5:84:09:11:6c:c9:5d:97:31:09:86: 4f:85:aa:d3:b3:1f:86:60:28:a5:77:37:b2:22:0b:2a:4a:3f: da:09:4b:11:a3:b9:02:dc:5c:df:6c:c4:74:99:ff:9e:0b:98: 01:fc:22:9e:e2:e4:e4:e3:be:83:95:0c:c7:52:ae:24:a9:3e: f4:b7:23:a5:65:00:7e:9c:69:bc:4d:46:da:1c:70:19:d7:52: 4b:d4:ea:be:97:24:e8:71:d1:e1:2d:25:ef:e6:20:01:c6:4f: 86:35:95:bf:38:09:66:4f:98:91:f0:03:6f:a6:c4:54:0c:3f: ae:f3:77:82:a9:be:55:57:98:04:3b:de:27:be:46:2c:fe:d5: e1:ac:03:4e -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt/FdR65A9NCct8JPDfaIpCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjMWEzYWEwY2Y4ZGZhOTE2N2QyNGQ5MmVkOGExNmViNGU3 ODA0NGMwHhcNMjYwMTAyMTQyMTM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NTFjNGQxMmU2OGNmNTBhNzIwMjNhMGY3ODYxYWExMDVhNzQ2Y2ZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAssmdKpQHRlqZnOK7BbxjBEEuVkbx yq4hLi6xby6giEuVuFJ0gsVPS6Wx4fGMMbia8MXO7S/HOTG7G5xUbFtnyjB5upVJ De2yE7of76Y9Y/FLpia+4x48u6V7zbwJ0R3KO8sSj267hBAoopqLJfuHZrPAteXL yzxkDlA67GDAYilEmEwhkZIotqLiWScS/N7gx/Kza2wgZ3MrIs+KgJ0q1+/JNUiC KIWartU6K7qWcBgHXWH1AloyccT4UKsb3u+rSJZljMuXve9kkE9YSsoLljBdDl8m SkNItqKdxbARuSYzvbdA9VDCL+z/vCVh+ZD60Et06DXd9Bj9RuE4aXrLlQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFJUcTRLmjPUKcgI6D3hhqhBadGz/MB8GA1UdIwQY MBaAFNwaOqDPjfqRZ9JNku2KFutOeARMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0JvNm9NLU4tcEZuMGsyUzdZb1c2MDU0QkV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi85OTE4NGYtMWM4MC00N2NkLWE2ODUt MmRkNjUwZWE0YWMzLzEvbFJ4TkV1YU05UXB5QWpvUGVHR3FFRnAwYlA4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi85OTE4NGYtMWM4MC00N2NkLWE2ODUtMmRkNjUwZWE0YWMz LzEvM0JvNm9NLU4tcEZuMGsyUzdZb1c2MDU0QkV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAW9GLAwQB W+VCAwQAwWkpMA0GCSqGSIb3DQEBCwUAA4IBAQCarzytGjbOtAHIYok1K/h+RUz/ 2duiUYOWMP9hanL4JAAYhK9zGNYXncMiWKgTUQA8tBlBVNdorWohd6yidngNDnQQ tca33DntsbsHHxSPzBmiyvV05EAybNSMPCf+4+xN1xYDe5fkDaazFStn8SHvNEUR tYQJEWzJXZcxCYZPharTsx+GYCildzeyIgsqSj/aCUsRo7kC3FzfbMR0mf+eC5gB /CKe4uTk476DlQzHUq4kqT70tyOlZQB+nGm8TUbaHHAZ11JL1Oq+lyTocdHhLSXv 5iABxk+GNZW/OAlmT5iR8ANvpsRUDD+u83eCqb5VV5gEO94nvkYs/tXhrANO -----END CERTIFICATE-----Generated at Tue Feb 10 04:49:10 2026 by rpki-client