This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/096eaf-634b-4c49-b68e-c2c61518589f/1/l2HM9TjAmlQ51Kjpvur50iHMyUI.roa File: l2HM9TjAmlQ51Kjpvur50iHMyUI.roa (raw, json) Hash identifier: UMn59r+IaSm5xbsWtuAVHtlw48z/K2CcexPZldv0ZrA= Subject key identifier: 97:61:CC:F5:38:C0:9A:54:39:D4:A8:E9:BE:EA:F9:D2:21:CC:C9:42 Certificate issuer: /CN=6e8b028d18274d21a7316aea3ccce9158b54f481 Certificate serial: 019BC67117A0F109997737D243123054372A Authority key identifier: 6E:8B:02:8D:18:27:4D:21:A7:31:6A:EA:3C:CC:E9:15:8B:54:F4:81 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bosCjRgnTSGnMWrqPMzpFYtU9IE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/096eaf-634b-4c49-b68e-c2c61518589f/1/l2HM9TjAmlQ51Kjpvur50iHMyUI.roa Signing time: Fri 16 Jan 2026 10:54:18 +0000 ROA not before: Fri 16 Jan 2026 10:54:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 52113 IP address blocks: 195.20.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/096eaf-634b-4c49-b68e-c2c61518589f/1/bosCjRgnTSGnMWrqPMzpFYtU9IE.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/096eaf-634b-4c49-b68e-c2c61518589f/1/bosCjRgnTSGnMWrqPMzpFYtU9IE.mft rsync://rpki.ripe.net/repository/DEFAULT/bosCjRgnTSGnMWrqPMzpFYtU9IE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:c6:71:17:a0:f1:09:99:77:37:d2:43:12:30:54:37:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6e8b028d18274d21a7316aea3ccce9158b54f481 Validity Not Before: Jan 16 10:54:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9761ccf538c09a5439d4a8e9beeaf9d221ccc942 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:df:28:13:3f:ae:cc:9a:81:ac:d1:e2:6a:a6: bc:ad:5d:d0:84:62:b2:f1:bf:a9:d3:1e:68:23:cd: 17:b6:9a:27:cb:34:f2:90:1b:90:49:64:b0:71:29: 6f:a3:14:88:7a:e3:43:1f:ab:c4:14:cd:0d:32:3b: 22:ca:0d:a8:c5:0d:42:d7:d4:30:0a:9c:ad:53:db: 7b:d8:66:87:e7:c8:24:1e:9c:70:ee:62:eb:ba:e9: de:ea:7f:cf:0e:02:12:96:66:ff:40:89:77:76:14: f7:e2:af:8d:4a:95:56:17:82:90:69:21:78:14:b0: 13:16:33:37:0c:d3:08:07:b9:e4:5d:ac:af:46:87: ed:55:98:f5:23:57:99:a1:5d:b3:fe:b9:af:db:f9: 1f:5f:d1:5b:23:45:6c:3c:43:34:04:b8:4f:d1:39: 99:1b:38:71:52:84:51:82:49:e5:6a:a2:bd:54:eb: 3f:6a:5a:b1:df:e7:b0:1b:bf:96:bf:04:66:6e:31: e5:bb:2b:61:aa:34:63:57:d1:67:20:a0:14:e6:89: 05:f2:f0:60:e1:27:c6:ae:d3:e3:74:00:0e:b9:18: 4f:9f:85:26:aa:88:93:78:b9:44:3d:b0:5e:d7:71: d7:ce:91:0f:6b:71:89:c5:7f:96:82:45:be:c5:ea: af:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:61:CC:F5:38:C0:9A:54:39:D4:A8:E9:BE:EA:F9:D2:21:CC:C9:42 X509v3 Authority Key Identifier: keyid:6E:8B:02:8D:18:27:4D:21:A7:31:6A:EA:3C:CC:E9:15:8B:54:F4:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bosCjRgnTSGnMWrqPMzpFYtU9IE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/096eaf-634b-4c49-b68e-c2c61518589f/1/l2HM9TjAmlQ51Kjpvur50iHMyUI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/096eaf-634b-4c49-b68e-c2c61518589f/1/bosCjRgnTSGnMWrqPMzpFYtU9IE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.20.133.0/24 Signature Algorithm: sha256WithRSAEncryption 45:94:78:02:bc:6a:1b:9b:15:ac:09:d4:31:a8:30:d3:f4:db: 52:91:1e:85:ec:b2:d3:1f:18:39:4f:06:c9:f6:ce:39:01:e2: 45:7a:50:32:8f:fe:bc:32:10:03:36:98:e5:20:74:c3:e7:06: 0b:94:de:97:e2:09:78:a0:6f:09:d6:e6:3b:a6:e1:f8:88:69: 9f:a1:66:fb:9c:e0:ca:39:d3:69:44:13:7e:7a:24:1e:4b:80: c3:d5:56:c7:e3:cb:03:39:d5:07:1a:2a:10:e9:a3:2c:df:a8: 12:22:c7:79:07:f3:20:43:07:f3:1b:f0:25:02:5f:41:cf:2a: 7f:31:35:d1:aa:1d:2e:d3:bf:cb:4f:fc:6c:82:d4:80:5e:6c: ac:26:23:80:55:3f:b9:6e:89:49:1b:10:bc:87:ef:2b:f8:93: c3:ce:f8:26:7c:8c:d8:d3:7f:73:e1:aa:d0:c8:0e:be:a1:9d: 58:e2:5b:8b:24:48:8a:51:6a:7f:19:46:06:df:98:52:0f:a0: a5:15:d0:4a:7e:c5:37:5f:c7:aa:59:3b:d0:a4:01:b7:6d:d3: 22:f5:0d:c9:b8:b8:67:b8:56:fc:c2:bf:5b:33:2c:e5:43:7c: 84:f5:f8:f1:22:b8:67:d4:0d:be:1f:d5:50:1f:d1:00:2f:03: 4d:05:9d:a7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZvGcReg8QmZdzfSQxIwVDcqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlOGIwMjhkMTgyNzRkMjFhNzMxNmFlYTNjY2NlOTE1OGI1 NGY0ODEwHhcNMjYwMTE2MTA1NDE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NzYxY2NmNTM4YzA5YTU0MzlkNGE4ZTliZWVhZjlkMjIxY2NjOTQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtN8oEz+uzJqBrNHiaqa8rV3QhGKy 8b+p0x5oI80XtponyzTykBuQSWSwcSlvoxSIeuNDH6vEFM0NMjsiyg2oxQ1C19Qw CpytU9t72GaH58gkHpxw7mLruune6n/PDgISlmb/QIl3dhT34q+NSpVWF4KQaSF4 FLATFjM3DNMIB7nkXayvRoftVZj1I1eZoV2z/rmv2/kfX9FbI0VsPEM0BLhP0TmZ GzhxUoRRgknlaqK9VOs/alqx3+ewG7+WvwRmbjHluythqjRjV9FnIKAU5okF8vBg 4SfGrtPjdAAOuRhPn4UmqoiTeLlEPbBe13HXzpEPa3GJxX+WgkW+xeqviwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJdhzPU4wJpUOdSo6b7q+dIhzMlCMB8GA1UdIwQY MBaAFG6LAo0YJ00hpzFq6jzM6RWLVPSBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYm9zQ2pSZ25UU0duTVdycVBNenBGWXRVOUlFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi8wOTZlYWYtNjM0Yi00YzQ5LWI2OGUt YzJjNjE1MTg1ODlmLzEvbDJITTlUakFtbFE1MUtqcHZ1cjUwaUhNeVVJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi8wOTZlYWYtNjM0Yi00YzQ5LWI2OGUtYzJjNjE1MTg1ODlm LzEvYm9zQ2pSZ25UU0duTVdycVBNenBGWXRVOUlFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwxSFMA0G CSqGSIb3DQEBCwUAA4IBAQBFlHgCvGobmxWsCdQxqDDT9NtSkR6F7LLTHxg5TwbJ 9s45AeJFelAyj/68MhADNpjlIHTD5wYLlN6X4gl4oG8J1uY7puH4iGmfoWb7nODK OdNpRBN+eiQeS4DD1VbH48sDOdUHGioQ6aMs36gSIsd5B/MgQwfzG/AlAl9Bzyp/ MTXRqh0u07/LT/xsgtSAXmysJiOAVT+5bolJGxC8h+8r+JPDzvgmfIzY039z4arQ yA6+oZ1Y4luLJEiKUWp/GUYG35hSD6ClFdBKfsU3X8eqWTvQpAG3bdMi9Q3JuLhn uFb8wr9bMyzlQ3yE9fjxIrhn1A2+H9VQH9EALwNNBZ2n -----END CERTIFICATE-----Generated at Mon Feb 9 18:22:34 2026 by rpki-client