This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/1nmLtwr3_xN50X0yyl7WQKTVv98.roa File: 1nmLtwr3_xN50X0yyl7WQKTVv98.roa (raw, json) Hash identifier: uJrw+w0+LATHhQU+jXTMfZ98iGwXOHwn/VgBuobhVEA= Subject key identifier: D6:79:8B:B7:0A:F7:FF:13:79:D1:7D:32:CA:5E:D6:40:A4:D5:BF:DF Certificate issuer: /CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b Certificate serial: 019B7D5D140C813F83CDC65419912FBDEC0F Authority key identifier: F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/1nmLtwr3_xN50X0yyl7WQKTVv98.roa Signing time: Fri 02 Jan 2026 06:20:10 +0000 ROA not before: Fri 02 Jan 2026 06:20:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12301 IP address blocks: 84.1.236.0/24 maxlen: 24 84.2.54.0/24 maxlen: 24 195.228.4.0/24 maxlen: 24 195.228.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.crl rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.mft rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:14:0c:81:3f:83:cd:c6:54:19:91:2f:bd:ec:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b Validity Not Before: Jan 2 06:20:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d6798bb70af7ff1379d17d32ca5ed640a4d5bfdf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:05:fe:c6:00:1c:79:54:1b:0f:12:ee:e7:df: db:46:0b:e5:41:39:26:b8:34:e5:4b:4f:26:93:02: 74:26:2b:d9:fd:85:96:5f:6d:c4:3a:2c:0a:f0:8e: 33:05:db:f1:bc:8d:9c:21:35:3b:4d:a3:56:79:3a: 91:3c:93:db:08:95:28:b4:a1:e2:95:15:e0:ff:ba: bc:d6:51:4f:86:8b:27:71:8d:37:5f:e0:a6:9b:37: b0:a9:8a:d3:ce:a7:d9:5a:65:a1:a9:b5:7b:c2:de: 01:70:32:0c:db:cb:be:0f:56:c4:e9:c8:07:03:77: 7a:ef:85:27:12:77:79:6d:fa:d9:94:7c:41:00:64: d8:75:d7:7f:70:b5:f1:af:bd:7a:fb:d9:ba:79:50: b1:d7:d2:34:29:bd:78:bb:1c:bc:47:3b:1b:15:00: 5c:8e:96:bf:92:e5:82:04:fd:5f:43:ce:70:78:d9: 57:c4:19:af:20:98:14:12:81:4e:d6:25:2d:16:58: ef:20:f0:70:f1:a4:23:b6:50:c1:d0:53:db:c7:ba: e0:68:4f:49:0b:20:1d:1b:aa:82:53:eb:22:bb:b0: 98:68:38:f1:00:bf:fc:1f:a2:a6:95:39:ea:97:f9: 19:56:79:53:6e:db:e4:aa:61:cc:09:06:44:40:ee: d6:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:79:8B:B7:0A:F7:FF:13:79:D1:7D:32:CA:5E:D6:40:A4:D5:BF:DF X509v3 Authority Key Identifier: keyid:F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/1nmLtwr3_xN50X0yyl7WQKTVv98.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.1.236.0/24 84.2.54.0/24 195.228.4.0/24 195.228.112.0/24 Signature Algorithm: sha256WithRSAEncryption 5f:a9:05:ef:4c:9a:60:62:49:a2:87:cc:ed:bf:31:4e:8e:9a: a2:ac:16:3b:79:47:3d:a1:78:22:47:cc:a9:a1:55:ea:89:4f: 6f:a2:20:75:a6:50:6c:5a:62:66:fb:1f:b5:9b:d7:c9:6b:6a: 05:2a:35:31:5a:56:80:a0:18:39:dd:d0:ea:3c:34:5d:5d:28: c3:36:17:b7:9d:9b:e8:13:dd:d0:13:45:63:04:e9:0b:f9:51: e5:83:95:53:1b:6f:0a:77:bd:44:9c:09:94:d1:0b:0a:80:4f: 66:96:aa:11:20:85:b0:89:1b:d5:17:8b:21:a5:01:eb:ed:4f: 77:23:ed:67:04:2c:ef:51:44:9a:22:46:c7:42:75:58:7e:e3: b4:2d:e6:d8:15:da:83:8d:88:97:57:0d:c3:21:04:42:53:bc: 70:8b:6c:cf:96:86:cc:af:5c:d4:25:37:e6:ff:c9:b0:0f:d0: 99:02:f6:d8:f0:d0:70:94:e2:45:13:ea:e3:06:09:95:bc:e1: 76:0b:de:d6:e0:1f:78:90:9f:b1:7c:e6:55:04:1b:f9:f8:c9: 79:6e:e8:a6:ab:15:d9:85:e8:ac:26:9b:4a:d2:ea:86:17:2c: 02:a6:81:2a:fb:f4:a9:5a:12:f8:64:e9:94:4c:ac:00:b2:df: 55:dd:97:64 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt9XRQMgT+DzcZUGZEvvewPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwMmRhYzYwNWY0NjU5NzE4YzBhMTVlMWY3MzJjYmQ0ZjQ4 YWFlN2IwHhcNMjYwMTAyMDYyMDEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNjc5OGJiNzBhZjdmZjEzNzlkMTdkMzJjYTVlZDY0MGE0ZDViZmRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwwX+xgAceVQbDxLu59/bRgvlQTkm uDTlS08mkwJ0JivZ/YWWX23EOiwK8I4zBdvxvI2cITU7TaNWeTqRPJPbCJUotKHi lRXg/7q81lFPhosncY03X+CmmzewqYrTzqfZWmWhqbV7wt4BcDIM28u+D1bE6cgH A3d674UnEnd5bfrZlHxBAGTYddd/cLXxr716+9m6eVCx19I0Kb14uxy8RzsbFQBc jpa/kuWCBP1fQ85weNlXxBmvIJgUEoFO1iUtFljvIPBw8aQjtlDB0FPbx7rgaE9J CyAdG6qCU+siu7CYaDjxAL/8H6KmlTnql/kZVnlTbtvkqmHMCQZEQO7WzwIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFNZ5i7cK9/8TedF9Mspe1kCk1b/fMB8GA1UdIwQY MBaAFPAtrGBfRllxjAoV4fcyy9T0iq57MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEMyc1lGOUdXWEdNQ2hYaDl6TEwxUFNLcm5zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC9lOTA5NzYtM2RkMS00NzE2LWJiZjYt MjkyYWU0NmU2MzAyLzEvMW5tTHR3cjNfeE41MFgweXlsN1dRS1RWdjk4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZC9lOTA5NzYtM2RkMS00NzE2LWJiZjYtMjkyYWU0NmU2MzAy LzEvOEMyc1lGOUdXWEdNQ2hYaDl6TEwxUFNLcm5zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAVAHsAwQA VAI2AwQAw+QEAwQAw+RwMA0GCSqGSIb3DQEBCwUAA4IBAQBfqQXvTJpgYkmih8zt vzFOjpqirBY7eUc9oXgiR8ypoVXqiU9voiB1plBsWmJm+x+1m9fJa2oFKjUxWlaA oBg53dDqPDRdXSjDNhe3nZvoE93QE0VjBOkL+VHlg5VTG28Kd71EnAmU0QsKgE9m lqoRIIWwiRvVF4shpQHr7U93I+1nBCzvUUSaIkbHQnVYfuO0LebYFdqDjYiXVw3D IQRCU7xwi2zPlobMr1zUJTfm/8mwD9CZAvbY8NBwlOJFE+rjBgmVvOF2C97W4B94 kJ+xfOZVBBv5+Ml5buimqxXZheisJptK0uqGFywCpoEq+/SpWhL4ZOmUTKwAst9V 3Zdk -----END CERTIFICATE-----Generated at Sun Jan 25 15:37:43 2026 by rpki-client