This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/1776cb-1c78-4dcc-b43b-36d7b4f84e5c/1/lGr9cYHRnCsNDCZfUo0W-DvnKzw.roa File: lGr9cYHRnCsNDCZfUo0W-DvnKzw.roa (raw, json) Hash identifier: C+9twYg0QFPSJmRlw83x2KzBrS2F6s+54IkDQKWwdpc= Subject key identifier: 94:6A:FD:71:81:D1:9C:2B:0D:0C:26:5F:52:8D:16:F8:3B:E7:2B:3C Certificate issuer: /CN=7cfc92b0a75b89ad2e3c57f7cba0e478684219ce Certificate serial: 019B79106C5276F3617CCE06564BF4617BC1 Authority key identifier: 7C:FC:92:B0:A7:5B:89:AD:2E:3C:57:F7:CB:A0:E4:78:68:42:19:CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fPySsKdbia0uPFf3y6DkeGhCGc4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/1776cb-1c78-4dcc-b43b-36d7b4f84e5c/1/lGr9cYHRnCsNDCZfUo0W-DvnKzw.roa Signing time: Thu 01 Jan 2026 10:17:57 +0000 ROA not before: Thu 01 Jan 2026 10:17:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62178 IP address blocks: 94.229.80.0/24 maxlen: 24 94.229.81.0/24 maxlen: 24 94.229.82.0/24 maxlen: 24 94.229.83.0/24 maxlen: 24 94.229.84.0/24 maxlen: 24 94.229.85.0/24 maxlen: 24 94.229.86.0/24 maxlen: 24 94.229.87.0/24 maxlen: 24 94.229.88.0/24 maxlen: 24 94.229.89.0/24 maxlen: 24 94.229.90.0/24 maxlen: 24 94.229.91.0/24 maxlen: 24 94.229.92.0/24 maxlen: 24 94.229.93.0/24 maxlen: 24 94.229.94.0/24 maxlen: 24 94.229.95.0/24 maxlen: 24 2a05:2c0::/34 maxlen: 34 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/1776cb-1c78-4dcc-b43b-36d7b4f84e5c/1/fPySsKdbia0uPFf3y6DkeGhCGc4.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/1776cb-1c78-4dcc-b43b-36d7b4f84e5c/1/fPySsKdbia0uPFf3y6DkeGhCGc4.mft rsync://rpki.ripe.net/repository/DEFAULT/fPySsKdbia0uPFf3y6DkeGhCGc4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:6c:52:76:f3:61:7c:ce:06:56:4b:f4:61:7b:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7cfc92b0a75b89ad2e3c57f7cba0e478684219ce Validity Not Before: Jan 1 10:17:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=946afd7181d19c2b0d0c265f528d16f83be72b3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:51:4d:fe:b2:b4:1d:99:d3:d1:08:63:3b:d4: 9c:7b:62:f2:ad:58:e3:06:3a:ea:0b:56:c7:42:90: 1b:0f:d9:12:71:16:30:8c:77:12:5e:4b:d8:6a:37: de:ba:0a:ff:5e:63:42:ce:54:c0:4b:c0:6e:0c:a1: 3b:5c:74:8d:03:7b:9a:3f:6a:51:f8:24:c2:88:17: 84:40:e7:5f:55:05:d6:8f:3e:69:d7:2b:02:44:65: 1b:b4:8f:b5:c5:34:97:4a:35:85:f4:35:96:e9:42: 70:18:46:14:21:90:29:9b:5b:ad:50:8c:51:55:c7: bf:9b:54:ea:5f:2d:80:04:e2:57:36:08:b5:b2:f7: d4:41:89:df:a5:7d:5f:0f:b8:3e:01:70:25:17:5c: 35:50:d6:39:c7:55:1e:39:d6:77:ee:6f:b4:a6:a7: 2a:cd:b0:53:87:fb:02:52:05:54:d0:67:59:e2:f3: 9b:14:12:1d:2f:2b:62:f4:83:c6:7e:5a:2b:a9:e4: 26:28:2d:3d:d4:9c:4d:90:5b:bf:b0:ce:2f:76:5a: ed:c7:67:9c:16:94:6a:65:2b:47:bc:22:ca:99:91: 5f:f6:39:ce:db:4e:21:3e:94:bb:c7:0f:ff:29:44: e7:b5:cf:9f:45:86:a3:dd:1a:50:45:e2:48:aa:8b: 5a:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:6A:FD:71:81:D1:9C:2B:0D:0C:26:5F:52:8D:16:F8:3B:E7:2B:3C X509v3 Authority Key Identifier: keyid:7C:FC:92:B0:A7:5B:89:AD:2E:3C:57:F7:CB:A0:E4:78:68:42:19:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fPySsKdbia0uPFf3y6DkeGhCGc4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/1776cb-1c78-4dcc-b43b-36d7b4f84e5c/1/lGr9cYHRnCsNDCZfUo0W-DvnKzw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/1776cb-1c78-4dcc-b43b-36d7b4f84e5c/1/fPySsKdbia0uPFf3y6DkeGhCGc4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.229.80.0/20 IPv6: 2a05:2c0::/34 Signature Algorithm: sha256WithRSAEncryption 58:c4:5f:39:54:8a:d8:53:0b:8d:08:e2:a6:f8:71:4d:d9:31: 12:86:5e:4c:99:c1:71:47:7a:df:09:d1:f6:30:4c:1a:dd:3b: 34:5b:aa:c1:d9:b6:8e:84:26:a8:8a:1e:7b:59:9d:b8:f8:5d: 76:5f:7d:24:15:a0:d0:41:f2:5e:62:80:9e:23:75:1c:a8:07: 13:13:96:b2:00:c2:bc:5c:1e:a2:1a:af:22:95:96:8c:fb:fa: fb:35:ba:bf:3b:91:b8:b8:56:ed:55:d5:58:f6:6b:d2:dc:31: 0d:f4:18:10:47:19:30:1c:4b:df:13:e6:b1:b6:e5:bb:b5:10: 65:db:b8:ef:20:72:31:c2:35:10:cb:47:34:8f:a2:37:48:05: 8c:ce:31:14:35:82:43:d8:23:07:84:a7:72:85:65:1c:31:88: ef:32:a6:9c:8a:d5:a2:41:04:ba:2b:7b:f7:7e:c9:1f:af:ca: d5:6d:11:72:27:15:49:55:25:bc:71:fd:67:f8:57:90:2d:8f: c0:0e:e2:b9:0d:06:1b:7b:0f:e5:99:39:99:0c:c1:a1:8d:bd: 42:63:f5:a4:1e:82:38:13:bf:2e:0a:9f:b9:e1:fe:55:44:26: ba:a7:50:2c:69:69:d5:c8:b9:45:b3:f2:4a:a0:31:60:dd:a2: 63:2f:de:f1 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgISAZt5EGxSdvNhfM4GVkv0YXvBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjZmM5MmIwYTc1Yjg5YWQyZTNjNTdmN2NiYTBlNDc4Njg0 MjE5Y2UwHhcNMjYwMTAxMTAxNzU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NDZhZmQ3MTgxZDE5YzJiMGQwYzI2NWY1MjhkMTZmODNiZTcyYjNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvVFN/rK0HZnT0QhjO9Sce2LyrVjj BjrqC1bHQpAbD9kScRYwjHcSXkvYajfeugr/XmNCzlTAS8BuDKE7XHSNA3uaP2pR +CTCiBeEQOdfVQXWjz5p1ysCRGUbtI+1xTSXSjWF9DWW6UJwGEYUIZApm1utUIxR Vce/m1TqXy2ABOJXNgi1svfUQYnfpX1fD7g+AXAlF1w1UNY5x1UeOdZ37m+0pqcq zbBTh/sCUgVU0GdZ4vObFBIdLyti9IPGflorqeQmKC091JxNkFu/sM4vdlrtx2ec FpRqZStHvCLKmZFf9jnO204hPpS7xw//KUTntc+fRYaj3RpQReJIqota/QIDAQAB o4ICGTCCAhUwHQYDVR0OBBYEFJRq/XGB0ZwrDQwmX1KNFvg75ys8MB8GA1UdIwQY MBaAFHz8krCnW4mtLjxX98ug5HhoQhnOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlB5U3NLZGJpYTB1UEZmM3k2RGtlR2hDR2M0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS8xNzc2Y2ItMWM3OC00ZGNjLWI0M2It MzZkN2I0Zjg0ZTVjLzEvbEdyOWNZSFJuQ3NORENaZlVvMFctRHZuS3p3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS8xNzc2Y2ItMWM3OC00ZGNjLWI0M2ItMzZkN2I0Zjg0ZTVj LzEvZlB5U3NLZGJpYTB1UEZmM3k2RGtlR2hDR2M0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQEXuVQMA4E AgACMAgDBgYqBQLAADANBgkqhkiG9w0BAQsFAAOCAQEAWMRfOVSK2FMLjQjipvhx TdkxEoZeTJnBcUd63wnR9jBMGt07NFuqwdm2joQmqIoee1mduPhddl99JBWg0EHy XmKAniN1HKgHExOWsgDCvFweohqvIpWWjPv6+zW6vzuRuLhW7VXVWPZr0twxDfQY EEcZMBxL3xPmsbblu7UQZdu47yByMcI1EMtHNI+iN0gFjM4xFDWCQ9gjB4SncoVl HDGI7zKmnIrVokEEuit7937JH6/K1W0RcicVSVUlvHH9Z/hXkC2PwA7iuQ0GG3sP 5Zk5mQzBoY29QmP1pB6COBO/LgqfueH+VUQmuqdQLGlp1ci5RbPySqAxYN2iYy/e 8Q== -----END CERTIFICATE-----Generated at Mon Feb 9 20:59:50 2026 by rpki-client