This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/IdGgLSVePL4Ag35cTRp5zqyuBEc.roa File: IdGgLSVePL4Ag35cTRp5zqyuBEc.roa (raw, json) Hash identifier: D5yVGulGMze85HvjnmBTSvUEhpL48qjlTFI0cEv/IxU= Subject key identifier: 21:D1:A0:2D:25:5E:3C:BE:00:83:7E:5C:4D:1A:79:CE:AC:AE:04:47 Certificate issuer: /CN=9e459aa4602bffa2d2650ba66818458c89fc4582 Certificate serial: 019B7910D352EC376B1274B814EF5F8885DA Authority key identifier: 9E:45:9A:A4:60:2B:FF:A2:D2:65:0B:A6:68:18:45:8C:89:FC:45:82 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkWapGAr_6LSZQumaBhFjIn8RYI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/IdGgLSVePL4Ag35cTRp5zqyuBEc.roa Signing time: Thu 01 Jan 2026 10:18:24 +0000 ROA not before: Thu 01 Jan 2026 10:18:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12310 IP address blocks: 80.86.96.0/19 maxlen: 19 80.86.96.0/20 maxlen: 20 83.166.192.0/19 maxlen: 19 84.247.64.0/18 maxlen: 18 89.42.16.0/21 maxlen: 21 89.149.0.0/18 maxlen: 18 188.240.8.0/22 maxlen: 22 188.240.216.0/22 maxlen: 22 194.102.203.0/24 maxlen: 24 195.95.228.0/23 maxlen: 23 2a02:2a00::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/nkWapGAr_6LSZQumaBhFjIn8RYI.crl rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/nkWapGAr_6LSZQumaBhFjIn8RYI.mft rsync://rpki.ripe.net/repository/DEFAULT/nkWapGAr_6LSZQumaBhFjIn8RYI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 10:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:d3:52:ec:37:6b:12:74:b8:14:ef:5f:88:85:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e459aa4602bffa2d2650ba66818458c89fc4582 Validity Not Before: Jan 1 10:18:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=21d1a02d255e3cbe00837e5c4d1a79ceacae0447 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:70:25:e4:04:49:0d:9e:e0:66:a4:11:18:ad: 62:ed:45:ad:59:ae:da:cd:4e:81:9a:be:0a:4e:fc: 78:c7:3b:3b:ae:ed:0c:e9:f4:ef:f9:c7:7e:8b:89: cc:08:92:ee:68:ab:80:dc:45:a3:c8:52:17:da:a3: 62:78:ca:42:5d:ad:52:0d:92:d6:c8:66:ad:59:d0: 5f:44:d5:b3:72:c1:e1:d1:40:34:36:03:d0:be:2f: ef:be:13:08:a5:a8:48:f4:44:85:2d:cf:05:78:97: ba:31:1e:b0:ec:d7:1d:b1:02:fb:4b:6f:ca:8d:48: 5e:52:98:62:1f:96:80:67:2b:9b:95:1d:52:1c:54: c5:7a:52:9a:20:78:ba:c2:d4:67:9b:95:2d:48:74: 38:1f:24:65:88:31:7c:3f:0d:68:63:b2:52:6c:34: a5:3c:b9:78:23:11:0e:b8:6b:e6:8f:fe:14:42:21: 8b:ef:95:d8:9f:ec:36:22:35:14:cc:64:08:71:41: c1:f5:ba:99:c4:05:06:b7:00:a1:59:88:d9:09:7e: 08:62:cc:2c:db:b3:66:cd:a2:3a:7e:c9:5f:4c:0b: 48:9e:c1:8b:fe:58:a3:5e:b3:ea:c2:03:ad:d5:d4: d7:39:9f:37:e0:40:84:f9:58:18:8c:3f:21:c3:00: 97:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:D1:A0:2D:25:5E:3C:BE:00:83:7E:5C:4D:1A:79:CE:AC:AE:04:47 X509v3 Authority Key Identifier: keyid:9E:45:9A:A4:60:2B:FF:A2:D2:65:0B:A6:68:18:45:8C:89:FC:45:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkWapGAr_6LSZQumaBhFjIn8RYI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/IdGgLSVePL4Ag35cTRp5zqyuBEc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/nkWapGAr_6LSZQumaBhFjIn8RYI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.86.96.0/19 83.166.192.0/19 84.247.64.0/18 89.42.16.0/21 89.149.0.0/18 188.240.8.0/22 188.240.216.0/22 194.102.203.0/24 195.95.228.0/23 IPv6: 2a02:2a00::/32 Signature Algorithm: sha256WithRSAEncryption 1d:87:90:71:17:9c:27:0a:3b:ac:f0:df:70:92:60:fa:d9:0e: 27:18:6e:a8:a4:01:e1:cd:ee:db:f9:57:8e:2b:05:5d:1e:28: 57:3c:bb:92:6f:ea:80:b3:4c:54:5b:00:fa:2b:3a:76:cc:af: da:85:38:ea:ab:1d:9c:0a:c7:f9:3e:5a:cd:30:7d:72:04:aa: 03:a9:fc:31:f2:c1:4b:aa:c5:61:18:5f:48:59:0e:e1:97:69: 7a:59:57:69:28:65:7f:0e:58:6a:9f:c2:15:b4:ef:47:61:d1: 72:b3:4f:a4:e5:ba:fb:d4:a4:42:43:dd:a4:0e:ba:78:54:59: 5e:74:74:3b:4b:bd:1b:33:16:70:94:ec:f2:4b:f4:c4:44:09: ae:19:18:fe:ac:bd:44:75:c5:70:c5:88:e5:6d:65:da:5d:32: 7d:97:bd:71:e3:3a:fb:55:90:c9:c9:73:9e:52:4c:81:1f:d2: aa:aa:ce:a5:6c:63:a1:ee:1f:f0:14:79:d2:a0:a2:6e:6f:04: 81:2c:33:10:96:c6:fa:b6:c1:f5:66:50:68:64:ce:22:1d:bc: 46:ac:85:19:4a:1b:c8:76:6a:1e:91:c7:51:23:be:58:94:c6: 53:b4:05:28:97:c9:af:68:e9:3d:25:5e:ab:b6:77:ef:1e:ad: 4e:c7:8f:4b -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgISAZt5ENNS7DdrEnS4FO9fiIXaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllNDU5YWE0NjAyYmZmYTJkMjY1MGJhNjY4MTg0NThjODlm YzQ1ODIwHhcNMjYwMTAxMTAxODI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMWQxYTAyZDI1NWUzY2JlMDA4MzdlNWM0ZDFhNzljZWFjYWUwNDQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAunAl5ARJDZ7gZqQRGK1i7UWtWa7a zU6Bmr4KTvx4xzs7ru0M6fTv+cd+i4nMCJLuaKuA3EWjyFIX2qNieMpCXa1SDZLW yGatWdBfRNWzcsHh0UA0NgPQvi/vvhMIpahI9ESFLc8FeJe6MR6w7NcdsQL7S2/K jUheUphiH5aAZyublR1SHFTFelKaIHi6wtRnm5UtSHQ4HyRliDF8Pw1oY7JSbDSl PLl4IxEOuGvmj/4UQiGL75XYn+w2IjUUzGQIcUHB9bqZxAUGtwChWYjZCX4IYsws 27NmzaI6fslfTAtInsGL/lijXrPqwgOt1dTXOZ834ECE+VgYjD8hwwCXpQIDAQAB o4ICSDCCAkQwHQYDVR0OBBYEFCHRoC0lXjy+AIN+XE0aec6srgRHMB8GA1UdIwQY MBaAFJ5FmqRgK/+i0mULpmgYRYyJ/EWCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmtXYXBHQXJfNkxTWlF1bWFCaEZqSW44UllJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi85Y2MzMzMtNjhkNS00NjkyLTljNWIt MjhhODQxZGEwYmZkLzEvSWRHZ0xTVmVQTDRBZzM1Y1RScDV6cXl1QkVjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yi85Y2MzMzMtNjhkNS00NjkyLTljNWItMjhhODQxZGEwYmZk LzEvbmtXYXBHQXJfNkxTWlF1bWFCaEZqSW44UllJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMF4GCCsGAQUFBwEHAQH/BE8wTTA8BAIAATA2AwQFUFZgAwQF U6bAAwQGVPdAAwQDWSoQAwQGWZUAAwQCvPAIAwQCvPDYAwQAwmbLAwQBw1/kMA0E AgACMAcDBQAqAioAMA0GCSqGSIb3DQEBCwUAA4IBAQAdh5BxF5wnCjus8N9wkmD6 2Q4nGG6opAHhze7b+VeOKwVdHihXPLuSb+qAs0xUWwD6Kzp2zK/ahTjqqx2cCsf5 PlrNMH1yBKoDqfwx8sFLqsVhGF9IWQ7hl2l6WVdpKGV/Dlhqn8IVtO9HYdFys0+k 5br71KRCQ92kDrp4VFledHQ7S70bMxZwlOzyS/TERAmuGRj+rL1EdcVwxYjlbWXa XTJ9l71x4zr7VZDJyXOeUkyBH9Kqqs6lbGOh7h/wFHnSoKJubwSBLDMQlsb6tsH1 ZlBoZM4iHbxGrIUZShvIdmoekcdRI75YlMZTtAUol8mvaOk9JV6rtnfvHq1Ox49L -----END CERTIFICATE-----Generated at Sun Jan 25 19:17:29 2026 by rpki-client