This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/_LeL1BNmnES7Us_tgk-2zM9WYz4.roa File: _LeL1BNmnES7Us_tgk-2zM9WYz4.roa (raw, json) Hash identifier: 6CIKHs+5sFlyV+xFBJTDb1/TPrK1K1Sk3+HBhp50WvE= Subject key identifier: FC:B7:8B:D4:13:66:9C:44:BB:52:CF:ED:82:4F:B6:CC:CF:56:63:3E Certificate issuer: /CN=89a6cd9f4beb7b0c04d31ffe5c674a87a7739d21 Certificate serial: 019B76EAF8977C90D8EA85C81F5A60D0FF42 Authority key identifier: 89:A6:CD:9F:4B:EB:7B:0C:04:D3:1F:FE:5C:67:4A:87:A7:73:9D:21 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iabNn0vrewwE0x_-XGdKh6dznSE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/_LeL1BNmnES7Us_tgk-2zM9WYz4.roa Signing time: Thu 01 Jan 2026 00:17:49 +0000 ROA not before: Thu 01 Jan 2026 00:17:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16276 IP address blocks: 95.131.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/iabNn0vrewwE0x_-XGdKh6dznSE.crl rsync://rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/iabNn0vrewwE0x_-XGdKh6dznSE.mft rsync://rpki.ripe.net/repository/DEFAULT/iabNn0vrewwE0x_-XGdKh6dznSE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:f8:97:7c:90:d8:ea:85:c8:1f:5a:60:d0:ff:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89a6cd9f4beb7b0c04d31ffe5c674a87a7739d21 Validity Not Before: Jan 1 00:17:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fcb78bd413669c44bb52cfed824fb6cccf56633e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:be:41:35:d3:fd:00:b6:c8:f1:b6:ff:7b:d0: 3b:9d:4c:6d:ee:3d:21:49:98:18:8e:b3:ab:ea:78: 8b:8f:17:1f:0d:b8:b5:70:b3:28:ad:74:8b:73:0e: 81:4e:0a:55:03:d2:d8:9e:69:32:d8:62:de:4f:c3: 6f:35:b8:5d:c9:d9:6d:ee:61:e6:82:37:fa:bc:cb: db:20:d7:aa:07:74:32:ce:a8:52:79:8c:5d:d3:98: 14:1b:e6:7e:4a:50:f9:2a:df:69:2f:41:26:48:9d: a9:af:20:b8:70:e4:e6:8b:36:a3:29:60:3d:54:70: 94:f2:d3:95:51:9e:f7:12:9a:6f:0b:d0:5a:04:7e: 77:fc:71:6b:b2:bd:62:d9:e3:30:d0:61:33:04:9c: ed:61:4c:06:e7:f2:9e:71:f9:5a:1f:b0:5c:20:db: 7a:4c:eb:d6:66:a6:41:eb:31:d0:9d:38:8e:d5:5c: 04:4e:58:82:dc:c6:8c:4e:2a:48:cf:f4:47:0f:04: 07:ff:39:a1:90:a6:1a:5e:b2:f8:da:6c:ea:e7:f8: 61:b7:6f:5e:dd:a9:92:8e:0b:7f:eb:8a:f8:b5:82: 92:6b:4a:e6:87:9c:8c:e5:f1:de:1f:40:b4:34:81: 6f:9c:0c:30:1d:41:27:30:f8:ce:55:fb:16:4f:ec: 1e:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:B7:8B:D4:13:66:9C:44:BB:52:CF:ED:82:4F:B6:CC:CF:56:63:3E X509v3 Authority Key Identifier: keyid:89:A6:CD:9F:4B:EB:7B:0C:04:D3:1F:FE:5C:67:4A:87:A7:73:9D:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iabNn0vrewwE0x_-XGdKh6dznSE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/_LeL1BNmnES7Us_tgk-2zM9WYz4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/iabNn0vrewwE0x_-XGdKh6dznSE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.131.32.0/24 Signature Algorithm: sha256WithRSAEncryption 8a:30:88:17:4d:00:01:97:58:ce:ba:ef:2b:d1:d5:0d:b7:f2: 8a:54:6c:62:ca:5c:6b:73:4a:e3:2b:3d:2b:59:03:a5:0b:57: 8d:8f:20:a5:fd:a3:56:4e:bc:24:ce:b5:c8:d9:8c:40:ff:7e: d2:85:e5:3a:c6:13:02:6a:25:29:56:51:0e:27:d7:45:da:23: ce:02:f7:87:ee:b2:c9:7d:51:90:dc:41:34:50:6e:c2:97:d6: 73:c2:15:95:08:e3:b9:6f:58:44:f1:84:a5:ab:e8:bc:0d:44: 15:bc:15:be:1a:e2:a9:30:32:ef:b1:a6:c8:6e:48:f6:18:e9: 89:08:f6:59:4c:fb:35:47:2c:3d:ff:e5:3d:63:a5:ca:3e:85: f5:33:20:87:5b:95:12:2b:45:1a:ca:17:d8:11:ec:d7:05:14: 92:13:ab:ec:d8:43:a1:58:4e:e3:54:4a:15:67:7f:a1:76:fa: 44:85:7b:ef:77:46:53:98:25:52:88:02:99:b2:cf:60:4b:aa: bc:13:e3:42:1f:2f:b9:4f:84:b0:e3:c8:f8:92:80:9c:c5:ab: 64:66:a7:ea:e6:e4:30:18:6c:f0:3a:65:00:63:c1:3b:22:1c: af:60:f4:93:da:d1:4a:2a:ac:28:b2:b0:af:27:ea:52:7f:64: 93:6f:dc:ac -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt26viXfJDY6oXIH1pg0P9CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5YTZjZDlmNGJlYjdiMGMwNGQzMWZmZTVjNjc0YTg3YTc3 MzlkMjEwHhcNMjYwMTAxMDAxNzQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmY2I3OGJkNDEzNjY5YzQ0YmI1MmNmZWQ4MjRmYjZjY2NmNTY2MzNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtr5BNdP9ALbI8bb/e9A7nUxt7j0h SZgYjrOr6niLjxcfDbi1cLMorXSLcw6BTgpVA9LYnmky2GLeT8NvNbhdydlt7mHm gjf6vMvbINeqB3QyzqhSeYxd05gUG+Z+SlD5Kt9pL0EmSJ2pryC4cOTmizajKWA9 VHCU8tOVUZ73EppvC9BaBH53/HFrsr1i2eMw0GEzBJztYUwG5/KecflaH7BcINt6 TOvWZqZB6zHQnTiO1VwETliC3MaMTipIz/RHDwQH/zmhkKYaXrL42mzq5/hht29e 3amSjgt/64r4tYKSa0rmh5yM5fHeH0C0NIFvnAwwHUEnMPjOVfsWT+wefQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPy3i9QTZpxEu1LP7YJPtszPVmM+MB8GA1UdIwQY MBaAFImmzZ9L63sMBNMf/lxnSoenc50hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWFiTm4wdnJld3dFMHhfLVhHZEtoNmR6blNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni85OWE0Y2MtNDcyMC00YTY0LWFhMDYt MWY5MjQ0OTVmY2RkLzEvX0xlTDFCTm1uRVM3VXNfdGdrLTJ6TTlXWXo0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ni85OWE0Y2MtNDcyMC00YTY0LWFhMDYtMWY5MjQ0OTVmY2Rk LzEvaWFiTm4wdnJld3dFMHhfLVhHZEtoNmR6blNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAX4MgMA0G CSqGSIb3DQEBCwUAA4IBAQCKMIgXTQABl1jOuu8r0dUNt/KKVGxiylxrc0rjKz0r WQOlC1eNjyCl/aNWTrwkzrXI2YxA/37SheU6xhMCaiUpVlEOJ9dF2iPOAveH7rLJ fVGQ3EE0UG7Cl9ZzwhWVCOO5b1hE8YSlq+i8DUQVvBW+GuKpMDLvsabIbkj2GOmJ CPZZTPs1Ryw9/+U9Y6XKPoX1MyCHW5USK0UayhfYEezXBRSSE6vs2EOhWE7jVEoV Z3+hdvpEhXvvd0ZTmCVSiAKZss9gS6q8E+NCHy+5T4Sw48j4koCcxatkZqfq5uQw GGzwOmUAY8E7IhyvYPST2tFKKqwosrCvJ+pSf2STb9ys -----END CERTIFICATE-----Generated at Sun Jan 25 12:02:37 2026 by rpki-client