This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/9a0eb2-e994-4719-a166-5d6dd0ba52cf/1/n1Cgw1hB_M-JwsTRUDUDk0hkx0I.roa File: n1Cgw1hB_M-JwsTRUDUDk0hkx0I.roa (raw, json) Hash identifier: X0eM+VJX4804vZu0ss2zy1CUVizErDWKqV14QA7ZUik= Subject key identifier: 9F:50:A0:C3:58:41:FC:CF:89:C2:C4:D1:50:35:03:93:48:64:C7:42 Certificate issuer: /CN=97cca0952db8aa9fe5e5703c6f189a06a57f4bb1 Certificate serial: 019B7E393A66E453A7E725EBC46BEA82960C Authority key identifier: 97:CC:A0:95:2D:B8:AA:9F:E5:E5:70:3C:6F:18:9A:06:A5:7F:4B:B1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l8yglS24qp_l5XA8bxiaBqV_S7E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/9a0eb2-e994-4719-a166-5d6dd0ba52cf/1/n1Cgw1hB_M-JwsTRUDUDk0hkx0I.roa Signing time: Fri 02 Jan 2026 10:20:38 +0000 ROA not before: Fri 02 Jan 2026 10:20:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60606 IP address blocks: 95.173.203.0/24 maxlen: 24 95.173.212.0/24 maxlen: 24 185.2.42.0/24 maxlen: 24 2a06:5d80::/32 maxlen: 40 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/9a0eb2-e994-4719-a166-5d6dd0ba52cf/1/l8yglS24qp_l5XA8bxiaBqV_S7E.crl rsync://rpki.ripe.net/repository/DEFAULT/17/9a0eb2-e994-4719-a166-5d6dd0ba52cf/1/l8yglS24qp_l5XA8bxiaBqV_S7E.mft rsync://rpki.ripe.net/repository/DEFAULT/l8yglS24qp_l5XA8bxiaBqV_S7E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:3a:66:e4:53:a7:e7:25:eb:c4:6b:ea:82:96:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97cca0952db8aa9fe5e5703c6f189a06a57f4bb1 Validity Not Before: Jan 2 10:20:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9f50a0c35841fccf89c2c4d1503503934864c742 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:92:df:8d:18:da:53:4c:b6:0e:63:c8:bd:d7: 1c:c5:c8:e9:5f:fe:73:a5:8a:4d:e3:87:29:d9:5b: 4a:a3:1c:15:99:c1:9d:21:c0:4b:ea:09:39:f7:e5: db:a5:ad:c1:5f:bf:ce:af:b7:11:65:ae:f4:cf:3f: fa:a0:8a:d2:09:e3:b0:56:65:63:17:11:7e:00:33: 91:9d:4b:3e:80:07:e8:d6:4a:10:fb:17:98:d5:fa: be:54:1e:e3:86:3a:16:e1:e6:e2:e0:9d:84:6e:c2: 2f:4d:ee:81:e2:e1:27:84:5a:1a:04:1c:0d:bd:3d: 11:35:53:2c:ad:67:f2:98:34:44:eb:d3:c7:36:3a: 6a:b0:c0:96:df:28:c4:10:54:0d:18:62:5d:06:d9: 81:95:c4:2f:a9:89:e9:6a:2b:9b:2d:9d:f2:da:73: d8:f1:ff:32:99:eb:0e:dd:96:bc:15:6f:ee:2a:d4: 47:51:16:aa:b2:c3:2f:d7:ed:17:aa:97:ac:b9:f0: e4:44:5d:b6:0f:80:d6:60:6c:62:25:d8:8c:20:9f: 79:6b:60:12:57:84:23:27:ce:95:20:dd:b1:da:47: f6:a6:d8:10:66:09:92:65:71:b9:88:42:de:91:f8: 51:ee:10:45:ee:73:ed:99:6a:64:2e:80:98:0a:27: db:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:50:A0:C3:58:41:FC:CF:89:C2:C4:D1:50:35:03:93:48:64:C7:42 X509v3 Authority Key Identifier: keyid:97:CC:A0:95:2D:B8:AA:9F:E5:E5:70:3C:6F:18:9A:06:A5:7F:4B:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l8yglS24qp_l5XA8bxiaBqV_S7E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/9a0eb2-e994-4719-a166-5d6dd0ba52cf/1/n1Cgw1hB_M-JwsTRUDUDk0hkx0I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/9a0eb2-e994-4719-a166-5d6dd0ba52cf/1/l8yglS24qp_l5XA8bxiaBqV_S7E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.173.203.0/24 95.173.212.0/24 185.2.42.0/24 IPv6: 2a06:5d80::/32 Signature Algorithm: sha256WithRSAEncryption 7f:65:3c:f8:f8:3f:fa:e5:b1:53:f1:95:d7:7a:83:71:0c:10: ca:47:bd:a9:65:b3:85:bd:0d:48:db:c0:07:94:13:37:4b:03: 4d:e6:d9:52:5d:68:14:17:a1:b9:89:69:ee:7a:37:77:b5:91: e1:36:c6:97:82:42:62:f4:39:fe:56:6a:4b:45:5a:b3:c3:c1: ef:32:9c:ff:96:49:59:cd:d9:f6:1e:c6:65:02:e0:88:fe:64: eb:19:db:ec:9d:88:4f:6a:90:10:f4:ec:bb:69:a5:6f:19:28: 8b:68:74:3f:06:87:67:41:3c:08:b6:bc:79:8e:ec:60:ca:eb: eb:66:db:46:23:3a:ca:d1:63:ce:a6:9c:e6:78:b8:52:47:c7: 51:8c:82:9b:bc:c0:77:22:bc:1a:3f:d7:1d:2c:4e:a1:1d:76: aa:10:a7:8d:db:5e:fb:f9:23:e7:97:66:4f:fe:93:11:4a:92: 91:35:91:69:20:39:f9:f0:81:fb:ff:07:d9:1b:86:e8:4f:e4: b8:10:c0:cf:3e:14:46:d1:c6:0a:cc:c5:cf:d3:73:6a:90:cf: 26:82:b2:af:2f:6b:29:aa:27:d7:26:b8:0e:c3:bf:f0:c8:87: 19:13:e0:67:a8:81:8e:ca:01:be:2f:e1:1b:10:44:89:8f:22: 03:2a:20:b5 -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt+OTpm5FOn5yXrxGvqgpYMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3Y2NhMDk1MmRiOGFhOWZlNWU1NzAzYzZmMTg5YTA2YTU3 ZjRiYjEwHhcNMjYwMTAyMTAyMDM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZjUwYTBjMzU4NDFmY2NmODljMmM0ZDE1MDM1MDM5MzQ4NjRjNzQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1JLfjRjaU0y2DmPIvdccxcjpX/5z pYpN44cp2VtKoxwVmcGdIcBL6gk59+Xbpa3BX7/Or7cRZa70zz/6oIrSCeOwVmVj FxF+ADORnUs+gAfo1koQ+xeY1fq+VB7jhjoW4ebi4J2EbsIvTe6B4uEnhFoaBBwN vT0RNVMsrWfymDRE69PHNjpqsMCW3yjEEFQNGGJdBtmBlcQvqYnpaiubLZ3y2nPY 8f8ymesO3Za8FW/uKtRHURaqssMv1+0XqpesufDkRF22D4DWYGxiJdiMIJ95a2AS V4QjJ86VIN2x2kf2ptgQZgmSZXG5iELekfhR7hBF7nPtmWpkLoCYCifbOwIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFJ9QoMNYQfzPicLE0VA1A5NIZMdCMB8GA1UdIwQY MBaAFJfMoJUtuKqf5eVwPG8Ymgalf0uxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbDh5Z2xTMjRxcF9sNVhBOGJ4aWFCcVZfUzdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy85YTBlYjItZTk5NC00NzE5LWExNjYt NWQ2ZGQwYmE1MmNmLzEvbjFDZ3cxaEJfTS1Kd3NUUlVEVURrMGhreDBJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy85YTBlYjItZTk5NC00NzE5LWExNjYtNWQ2ZGQwYmE1MmNm LzEvbDh5Z2xTMjRxcF9sNVhBOGJ4aWFCcVZfUzdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQAX63LAwQA X63UAwQAuQIqMA0EAgACMAcDBQAqBl2AMA0GCSqGSIb3DQEBCwUAA4IBAQB/ZTz4 +D/65bFT8ZXXeoNxDBDKR72pZbOFvQ1I28AHlBM3SwNN5tlSXWgUF6G5iWnuejd3 tZHhNsaXgkJi9Dn+VmpLRVqzw8HvMpz/lklZzdn2HsZlAuCI/mTrGdvsnYhPapAQ 9Oy7aaVvGSiLaHQ/BodnQTwItrx5juxgyuvrZttGIzrK0WPOppzmeLhSR8dRjIKb vMB3IrwaP9cdLE6hHXaqEKeN2177+SPnl2ZP/pMRSpKRNZFpIDn58IH7/wfZG4bo T+S4EMDPPhRG0cYKzMXP03NqkM8mgrKvL2spqifXJrgOw7/wyIcZE+BnqIGOygG+ L+EbEESJjyIDKiC1 -----END CERTIFICATE-----Generated at Mon Jan 26 13:10:46 2026 by rpki-client