This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/c791dd-8b17-49c5-a1ef-6cf1ca508d1a/1/Dl93bq_-cgvRcw-PhtUvvM6vei0.roa File: Dl93bq_-cgvRcw-PhtUvvM6vei0.roa (raw, json) Hash identifier: c9+943kBN1nH/iz48xI8TW6h5ATYqwjyAVBz6mPrBUM= Subject key identifier: 0E:5F:77:6E:AF:FE:72:0B:D1:73:0F:8F:86:D5:2F:BC:CE:AF:7A:2D Certificate issuer: /CN=2c6f3cc5d785942e6048093c7433973aeb15fe22 Certificate serial: 019B7A5B287FF0544F6EE10C386AE7B6ADFC Authority key identifier: 2C:6F:3C:C5:D7:85:94:2E:60:48:09:3C:74:33:97:3A:EB:15:FE:22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LG88xdeFlC5gSAk8dDOXOusV_iI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/c791dd-8b17-49c5-a1ef-6cf1ca508d1a/1/Dl93bq_-cgvRcw-PhtUvvM6vei0.roa Signing time: Thu 01 Jan 2026 16:19:13 +0000 ROA not before: Thu 01 Jan 2026 16:19:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25057 IP address blocks: 195.216.214.0/23 maxlen: 24 2001:67c:214::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/c791dd-8b17-49c5-a1ef-6cf1ca508d1a/1/LG88xdeFlC5gSAk8dDOXOusV_iI.crl rsync://rpki.ripe.net/repository/DEFAULT/48/c791dd-8b17-49c5-a1ef-6cf1ca508d1a/1/LG88xdeFlC5gSAk8dDOXOusV_iI.mft rsync://rpki.ripe.net/repository/DEFAULT/LG88xdeFlC5gSAk8dDOXOusV_iI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:28:7f:f0:54:4f:6e:e1:0c:38:6a:e7:b6:ad:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2c6f3cc5d785942e6048093c7433973aeb15fe22 Validity Not Before: Jan 1 16:19:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0e5f776eaffe720bd1730f8f86d52fbcceaf7a2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:85:5a:bb:6f:ed:e1:65:5d:4e:e7:a0:5c:e9: 31:00:8e:bf:d6:41:b1:69:47:02:5f:86:ab:c6:12: 64:ef:69:20:e2:b5:b3:c6:b0:5f:17:db:bc:38:65: d2:16:c4:23:6d:ab:ed:fc:75:6b:c7:b8:94:95:31: 81:8a:e7:1d:b8:53:60:c4:77:84:57:a9:f9:e1:cc: 66:1b:02:e7:b7:bd:92:38:32:b3:97:45:5d:8d:7a: bc:d9:44:67:8f:1a:7e:51:a7:fa:9a:ad:e1:29:5c: 68:9d:7c:95:9b:a4:c1:70:5e:6a:43:e5:8a:d7:af: c3:79:c8:9b:b0:b7:a9:2c:12:d8:64:f0:84:d1:83: f9:3a:43:76:d3:1a:b0:55:2a:4c:71:17:eb:b3:75: c5:39:c5:a5:ae:9e:ea:dd:a8:40:75:00:65:42:a9: 42:b8:72:3f:e7:27:d0:79:e2:17:ab:51:46:aa:70: 58:13:ee:c5:6b:7a:b1:44:25:4b:57:e5:fb:89:5f: d9:1a:7d:bd:a4:56:f4:d4:6a:be:5f:c2:7d:e1:0a: b3:a2:12:1d:2a:bf:45:99:66:31:81:5d:29:0a:6c: d8:6b:bc:60:66:8c:56:b1:e0:09:68:34:ec:dd:df: 10:0e:1e:c9:a0:3e:d3:13:5b:9f:35:72:10:4b:55: 85:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:5F:77:6E:AF:FE:72:0B:D1:73:0F:8F:86:D5:2F:BC:CE:AF:7A:2D X509v3 Authority Key Identifier: keyid:2C:6F:3C:C5:D7:85:94:2E:60:48:09:3C:74:33:97:3A:EB:15:FE:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LG88xdeFlC5gSAk8dDOXOusV_iI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/c791dd-8b17-49c5-a1ef-6cf1ca508d1a/1/Dl93bq_-cgvRcw-PhtUvvM6vei0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/c791dd-8b17-49c5-a1ef-6cf1ca508d1a/1/LG88xdeFlC5gSAk8dDOXOusV_iI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.216.214.0/23 IPv6: 2001:67c:214::/48 Signature Algorithm: sha256WithRSAEncryption 0a:cb:e5:13:72:f3:34:93:97:3a:9d:fd:fb:81:b8:b1:f2:f7: 26:f0:30:aa:62:b8:81:5f:fd:9a:a6:e5:04:4f:31:bc:9f:c5: 84:e0:d1:92:30:01:73:2a:ec:a5:ec:91:9e:d7:f3:7d:14:57: 72:31:12:f9:04:56:e1:8b:0a:fe:a1:63:47:fe:c5:bd:73:35: fd:27:7b:f7:02:39:d1:80:0d:39:27:d2:09:4c:b4:44:6d:83: 64:28:02:44:09:4b:30:b1:f5:a7:34:85:8a:0a:f6:09:c8:d8: b9:a7:3c:7e:ce:5d:aa:b0:b7:1b:64:ad:91:1e:62:f6:16:23: 5f:9b:39:c7:17:3f:f1:60:df:80:00:66:33:7a:f5:30:28:cb: 0a:96:bc:6d:3a:aa:b2:27:9a:48:fd:f2:d1:91:ed:01:15:af: a4:67:af:1e:66:63:bb:d6:5c:34:21:96:66:a4:65:a9:86:59: 15:0c:91:03:22:58:b1:c4:19:7a:fa:c5:17:c4:78:68:62:8d: 60:98:ae:75:99:39:53:3a:cb:1d:28:c2:0d:58:a8:24:a0:97: 76:19:2a:9d:24:ac:c5:70:28:c4:ad:14:6b:92:fd:45:05:2d: 72:36:5f:d5:dd:23:ca:96:68:5a:d0:82:ac:a4:f0:ea:95:77: ce:ea:16:55 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt6Wyh/8FRPbuEMOGrntq38MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJjNmYzY2M1ZDc4NTk0MmU2MDQ4MDkzYzc0MzM5NzNhZWIx NWZlMjIwHhcNMjYwMTAxMTYxOTEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZTVmNzc2ZWFmZmU3MjBiZDE3MzBmOGY4NmQ1MmZiY2NlYWY3YTJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsoVau2/t4WVdTuegXOkxAI6/1kGx aUcCX4arxhJk72kg4rWzxrBfF9u8OGXSFsQjbavt/HVrx7iUlTGBiucduFNgxHeE V6n54cxmGwLnt72SODKzl0VdjXq82URnjxp+Uaf6mq3hKVxonXyVm6TBcF5qQ+WK 16/DecibsLepLBLYZPCE0YP5OkN20xqwVSpMcRfrs3XFOcWlrp7q3ahAdQBlQqlC uHI/5yfQeeIXq1FGqnBYE+7Fa3qxRCVLV+X7iV/ZGn29pFb01Gq+X8J94QqzohId Kr9FmWYxgV0pCmzYa7xgZoxWseAJaDTs3d8QDh7JoD7TE1ufNXIQS1WFmQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFA5fd26v/nIL0XMPj4bVL7zOr3otMB8GA1UdIwQY MBaAFCxvPMXXhZQuYEgJPHQzlzrrFf4iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTEc4OHhkZUZsQzVnU0FrOGRET1hPdXNWX2lJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC9jNzkxZGQtOGIxNy00OWM1LWExZWYt NmNmMWNhNTA4ZDFhLzEvRGw5M2JxXy1jZ3ZSY3ctUGh0VXZ2TTZ2ZWkwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC9jNzkxZGQtOGIxNy00OWM1LWExZWYtNmNmMWNhNTA4ZDFh LzEvTEc4OHhkZUZsQzVnU0FrOGRET1hPdXNWX2lJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBw9jWMA8E AgACMAkDBwAgAQZ8AhQwDQYJKoZIhvcNAQELBQADggEBAArL5RNy8zSTlzqd/fuB uLHy9ybwMKpiuIFf/Zqm5QRPMbyfxYTg0ZIwAXMq7KXskZ7X830UV3IxEvkEVuGL Cv6hY0f+xb1zNf0ne/cCOdGADTkn0glMtERtg2QoAkQJSzCx9ac0hYoK9gnI2Lmn PH7OXaqwtxtkrZEeYvYWI1+bOccXP/Fg34AAZjN69TAoywqWvG06qrInmkj98tGR 7QEVr6Rnrx5mY7vWXDQhlmakZamGWRUMkQMiWLHEGXr6xRfEeGhijWCYrnWZOVM6 yx0owg1YqCSgl3YZKp0krMVwKMStFGuS/UUFLXI2X9XdI8qWaFrQgqyk8OqVd87q FlU= -----END CERTIFICATE-----Generated at Mon Jan 26 02:24:22 2026 by rpki-client