This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/V9bz-LIlrLlNcy_JnZK_x-nhl2s.roa File: V9bz-LIlrLlNcy_JnZK_x-nhl2s.roa (raw, json) Hash identifier: EweRvUyQqzzdZsQlbOmurMzzeItcgxBnOe1Rf0PMP7c= Subject key identifier: 57:D6:F3:F8:B2:25:AC:B9:4D:73:2F:C9:9D:92:BF:C7:E9:E1:97:6B Certificate issuer: /CN=efa5b62347a1b64cea49a2ab3ab4983c34861fb2 Certificate serial: 019B79112A3C95D2221DE7FCF68D95047C04 Authority key identifier: EF:A5:B6:23:47:A1:B6:4C:EA:49:A2:AB:3A:B4:98:3C:34:86:1F:B2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/76W2I0ehtkzqSaKrOrSYPDSGH7I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/V9bz-LIlrLlNcy_JnZK_x-nhl2s.roa Signing time: Thu 01 Jan 2026 10:18:46 +0000 ROA not before: Thu 01 Jan 2026 10:18:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214068 IP address blocks: 93.157.142.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/76W2I0ehtkzqSaKrOrSYPDSGH7I.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/76W2I0ehtkzqSaKrOrSYPDSGH7I.mft rsync://rpki.ripe.net/repository/DEFAULT/76W2I0ehtkzqSaKrOrSYPDSGH7I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:2a:3c:95:d2:22:1d:e7:fc:f6:8d:95:04:7c:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=efa5b62347a1b64cea49a2ab3ab4983c34861fb2 Validity Not Before: Jan 1 10:18:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=57d6f3f8b225acb94d732fc99d92bfc7e9e1976b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:fb:28:f7:f9:69:f2:54:56:ac:e7:fc:df:5b: c5:8b:90:d6:c3:86:ad:1b:90:a0:2d:76:df:02:c4: bd:d7:fa:16:04:04:09:2b:5d:cf:22:e5:c9:7e:07: c5:77:c0:30:76:73:10:88:f2:bf:9e:18:21:78:e6: 97:0c:40:b3:06:55:5a:4f:9b:eb:fd:21:47:d4:ef: 36:6e:83:b0:02:e3:e7:d2:ab:65:20:95:35:30:74: 05:8d:ff:c3:a9:e7:a9:6d:c2:3c:2a:53:9e:41:61: 43:3f:f3:0b:ac:a2:02:b6:8e:ee:df:5b:6b:7d:6b: 37:f9:14:e8:99:8c:d6:bf:2f:d5:ea:3f:27:c7:fb: 26:33:21:b7:d6:e6:bb:03:64:46:40:07:22:d1:24: d7:ec:57:6b:8f:38:4b:99:62:69:a7:4f:5a:62:6b: 27:5d:6a:62:a7:32:90:c0:6e:93:b3:7b:7d:9c:e5: e1:41:47:16:de:a0:0f:f3:44:aa:6e:d1:21:c0:06: 10:58:9b:e4:42:62:1d:da:b9:6d:ad:30:88:cd:45: 3a:f6:d2:51:0d:4e:e5:6e:dc:11:1d:12:72:4a:36: 96:43:43:6b:d0:4b:30:81:3b:07:2e:64:30:e8:d8: 69:fd:18:81:37:50:10:7b:0d:5b:f7:34:93:41:5c: 17:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:D6:F3:F8:B2:25:AC:B9:4D:73:2F:C9:9D:92:BF:C7:E9:E1:97:6B X509v3 Authority Key Identifier: keyid:EF:A5:B6:23:47:A1:B6:4C:EA:49:A2:AB:3A:B4:98:3C:34:86:1F:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/76W2I0ehtkzqSaKrOrSYPDSGH7I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/V9bz-LIlrLlNcy_JnZK_x-nhl2s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/76W2I0ehtkzqSaKrOrSYPDSGH7I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.157.142.0/24 Signature Algorithm: sha256WithRSAEncryption 56:65:92:8f:d7:f5:bb:91:bf:84:a8:72:46:ad:2b:bc:b2:8d: 20:2a:0e:65:2e:01:a1:16:e7:8d:49:e8:4f:e7:d8:90:79:e5: c3:b2:9e:a6:20:7e:65:cd:17:43:9d:07:9d:88:3c:ac:a6:cf: 10:19:ff:73:f2:63:de:91:d6:8b:45:1b:dc:7c:10:9d:ff:9a: 21:94:8e:92:28:fd:71:21:8b:52:45:46:e2:4a:46:91:67:4b: fd:03:cb:60:87:d8:b7:e8:68:0d:6f:45:20:0a:44:c3:e6:65: 7e:c3:78:b2:ab:33:fb:f2:8f:c7:df:21:43:cd:c8:55:55:3c: 36:15:cf:e0:e7:50:34:16:9f:23:12:48:b4:68:8e:b1:51:bb: 16:19:76:20:ed:c8:2d:c6:68:e0:49:65:bb:9c:14:b6:82:87: 27:bd:48:f0:4b:af:0e:e8:4b:ce:ec:b4:e7:91:05:31:f5:92: fb:31:51:44:f4:11:69:7f:74:87:32:2f:71:42:de:e0:e1:a3: 8a:5c:e5:9e:89:bd:c4:90:ee:69:e9:58:ea:da:a5:45:47:2c: a8:bf:38:91:a1:ec:8a:71:78:ec:1c:42:ae:f5:d6:fa:70:f4: 24:fd:fb:9a:2d:0f:ea:fc:27:c5:3f:b6:e6:1b:e7:06:a4:fc: bd:6c:de:36 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5ESo8ldIiHef89o2VBHwEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmYTViNjIzNDdhMWI2NGNlYTQ5YTJhYjNhYjQ5ODNjMzQ4 NjFmYjIwHhcNMjYwMTAxMTAxODQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1N2Q2ZjNmOGIyMjVhY2I5NGQ3MzJmYzk5ZDkyYmZjN2U5ZTE5NzZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlfso9/lp8lRWrOf831vFi5DWw4at G5CgLXbfAsS91/oWBAQJK13PIuXJfgfFd8AwdnMQiPK/nhgheOaXDECzBlVaT5vr /SFH1O82boOwAuPn0qtlIJU1MHQFjf/DqeepbcI8KlOeQWFDP/MLrKICto7u31tr fWs3+RTomYzWvy/V6j8nx/smMyG31ua7A2RGQAci0STX7FdrjzhLmWJpp09aYmsn XWpipzKQwG6Ts3t9nOXhQUcW3qAP80SqbtEhwAYQWJvkQmId2rltrTCIzUU69tJR DU7lbtwRHRJySjaWQ0Nr0EswgTsHLmQw6Nhp/RiBN1AQew1b9zSTQVwXHwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFfW8/iyJay5TXMvyZ2Sv8fp4ZdrMB8GA1UdIwQY MBaAFO+ltiNHobZM6kmiqzq0mDw0hh+yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNzZXMkkwZWh0a3pxU2FLck9yU1lQRFNHSDdJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8yNGRiMjEtZWZiOS00MDdlLTk2YWQt MDEzZDJhMTFjMGE1LzEvVjliei1MSWxyTGxOY3lfSm5aS194LW5obDJzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy8yNGRiMjEtZWZiOS00MDdlLTk2YWQtMDEzZDJhMTFjMGE1 LzEvNzZXMkkwZWh0a3pxU2FLck9yU1lQRFNHSDdJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXZ2OMA0G CSqGSIb3DQEBCwUAA4IBAQBWZZKP1/W7kb+EqHJGrSu8so0gKg5lLgGhFueNSehP 59iQeeXDsp6mIH5lzRdDnQediDysps8QGf9z8mPekdaLRRvcfBCd/5ohlI6SKP1x IYtSRUbiSkaRZ0v9A8tgh9i36GgNb0UgCkTD5mV+w3iyqzP78o/H3yFDzchVVTw2 Fc/g51A0Fp8jEki0aI6xUbsWGXYg7cgtxmjgSWW7nBS2gocnvUjwS68O6EvO7LTn kQUx9ZL7MVFE9BFpf3SHMi9xQt7g4aOKXOWeib3EkO5p6Vjq2qVFRyyovziRoeyK cXjsHEKu9db6cPQk/fuaLQ/q/CfFP7bmG+cGpPy9bN42 -----END CERTIFICATE-----Generated at Mon Jan 26 01:16:40 2026 by rpki-client