This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/8a322f-dc28-422f-b570-58b64d557c0c/1/LvfTa413By2E_F6yYl2dyQqtQ6g.roa File: LvfTa413By2E_F6yYl2dyQqtQ6g.roa (raw, json) Hash identifier: r8Aaf6zbkZr6mR+oKR2km59CiVJuLPU3L/XJZeMBCjE= Subject key identifier: 2E:F7:D3:6B:8D:77:07:2D:84:FC:5E:B2:62:5D:9D:C9:0A:AD:43:A8 Certificate issuer: /CN=f9e00abe184a625b76f8d1fbceef817aaf71415b Certificate serial: 019B7F13D41FE4A8F92B6B559B9A6CEC60EF Authority key identifier: F9:E0:0A:BE:18:4A:62:5B:76:F8:D1:FB:CE:EF:81:7A:AF:71:41:5B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-eAKvhhKYlt2-NH7zu-Beq9xQVs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/8a322f-dc28-422f-b570-58b64d557c0c/1/LvfTa413By2E_F6yYl2dyQqtQ6g.roa Signing time: Fri 02 Jan 2026 14:19:24 +0000 ROA not before: Fri 02 Jan 2026 14:19:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43581 IP address blocks: 89.169.5.0/24 maxlen: 24 89.169.6.0/24 maxlen: 24 89.169.8.0/24 maxlen: 24 89.169.9.0/24 maxlen: 24 89.169.10.0/24 maxlen: 24 89.169.11.0/24 maxlen: 24 93.183.68.0/24 maxlen: 24 93.183.69.0/24 maxlen: 24 93.183.70.0/24 maxlen: 24 93.183.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/8a322f-dc28-422f-b570-58b64d557c0c/1/1-eAKvhhKYlt2-NH7zu-Beq9xQVs.crl rsync://rpki.ripe.net/repository/DEFAULT/9f/8a322f-dc28-422f-b570-58b64d557c0c/1/1-eAKvhhKYlt2-NH7zu-Beq9xQVs.mft rsync://rpki.ripe.net/repository/DEFAULT/1-eAKvhhKYlt2-NH7zu-Beq9xQVs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:13:d4:1f:e4:a8:f9:2b:6b:55:9b:9a:6c:ec:60:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f9e00abe184a625b76f8d1fbceef817aaf71415b Validity Not Before: Jan 2 14:19:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2ef7d36b8d77072d84fc5eb2625d9dc90aad43a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:aa:2f:ae:9a:50:c4:6b:d2:06:9d:50:0a:17: 9e:71:7f:14:2a:30:ab:e4:ea:58:9e:ae:91:ff:7d: ca:6a:9b:41:ad:4f:f6:bd:6a:9f:b1:9c:81:73:16: b2:39:52:6c:40:f2:b8:30:b7:55:ff:49:ad:5f:27: fe:df:61:c2:94:97:30:1b:47:a7:4d:f1:81:66:e2: ee:df:f5:e8:f0:80:6f:99:e9:1b:f1:14:e6:0a:95: b6:cf:07:39:dc:0e:9c:46:32:13:73:37:97:e6:85: df:38:1d:03:c0:4f:9c:58:1c:d3:83:0d:a1:9d:72: d8:07:cb:f3:20:d0:92:69:43:fd:ff:59:5d:6c:ac: 4e:e5:c2:84:f8:09:ab:4e:c6:ca:66:2c:3f:88:80: b3:be:72:fb:90:6d:75:c0:79:37:81:d7:27:fa:e6: 08:f2:cb:ae:0d:82:8d:85:d4:63:fe:bb:46:23:7d: 41:36:ac:b4:b1:9d:19:43:2e:da:4c:39:3c:2f:d3: 9e:a0:63:ed:9d:40:51:dd:39:3d:49:65:f8:5a:36: 64:74:ca:ba:3a:62:a3:09:b2:76:f0:76:b8:fc:14: 0e:4e:4e:6f:43:d1:cf:30:b9:ff:da:d9:73:ea:26: 76:53:93:21:bc:a6:8d:01:f8:a4:d5:46:79:24:c9: b5:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:F7:D3:6B:8D:77:07:2D:84:FC:5E:B2:62:5D:9D:C9:0A:AD:43:A8 X509v3 Authority Key Identifier: keyid:F9:E0:0A:BE:18:4A:62:5B:76:F8:D1:FB:CE:EF:81:7A:AF:71:41:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-eAKvhhKYlt2-NH7zu-Beq9xQVs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/8a322f-dc28-422f-b570-58b64d557c0c/1/LvfTa413By2E_F6yYl2dyQqtQ6g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/8a322f-dc28-422f-b570-58b64d557c0c/1/1-eAKvhhKYlt2-NH7zu-Beq9xQVs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.169.5.0-89.169.6.255 89.169.8.0/22 93.183.68.0/22 Signature Algorithm: sha256WithRSAEncryption 18:33:40:f7:2f:b8:68:22:99:60:8a:1e:6a:e8:fe:27:b8:50: 0d:1d:d6:d5:d4:75:fa:f6:61:30:ec:ac:52:a1:17:8c:ec:60: 70:be:43:f2:13:75:de:c0:3c:c5:aa:93:bc:f0:05:d3:db:01: 11:37:c4:eb:5f:6f:f3:0b:cc:0a:3f:c8:45:a1:7d:8b:12:25: bd:ff:ee:73:66:65:17:a6:8c:b4:54:27:0d:36:b0:73:35:07: ab:fe:48:de:01:e8:38:00:66:a3:41:79:c0:48:76:59:b6:73: ad:07:46:5b:b9:0a:7c:39:17:dc:e1:d1:54:f3:eb:b1:ba:d5: 9c:df:3c:23:3b:0e:2c:5c:d0:5e:93:fa:e9:3a:71:10:bf:40: d4:d7:bb:25:c0:13:e8:7e:90:9b:ff:35:2f:9c:12:a6:f8:3f: 43:90:fd:90:6c:04:b7:3a:33:69:42:83:4c:16:19:1e:10:45: 44:b3:de:85:9d:02:58:6f:a5:dc:29:00:61:6b:45:f2:74:96: fd:46:fd:da:18:19:81:d2:fc:a3:7e:19:c1:88:5d:e7:ba:13: 2b:6a:25:50:0c:f2:62:52:e1:c0:cd:25:5b:ef:04:26:f7:96: 7e:d6:81:1d:b5:a0:ff:ff:43:02:7b:8c:50:5b:f8:bc:52:0e: de:3d:7e:12 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgISAZt/E9Qf5Kj5K2tVm5ps7GDvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY5ZTAwYWJlMTg0YTYyNWI3NmY4ZDFmYmNlZWY4MTdhYWY3 MTQxNWIwHhcNMjYwMTAyMTQxOTI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZWY3ZDM2YjhkNzcwNzJkODRmYzVlYjI2MjVkOWRjOTBhYWQ0M2E4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzqovrppQxGvSBp1QCheecX8UKjCr 5OpYnq6R/33KaptBrU/2vWqfsZyBcxayOVJsQPK4MLdV/0mtXyf+32HClJcwG0en TfGBZuLu3/Xo8IBvmekb8RTmCpW2zwc53A6cRjITczeX5oXfOB0DwE+cWBzTgw2h nXLYB8vzINCSaUP9/1ldbKxO5cKE+AmrTsbKZiw/iICzvnL7kG11wHk3gdcn+uYI 8suuDYKNhdRj/rtGI31BNqy0sZ0ZQy7aTDk8L9OeoGPtnUBR3Tk9SWX4WjZkdMq6 OmKjCbJ28Ha4/BQOTk5vQ9HPMLn/2tlz6iZ2U5MhvKaNAfik1UZ5JMm1ywIDAQAB o4ICHzCCAhswHQYDVR0OBBYEFC7302uNdwcthPxesmJdnckKrUOoMB8GA1UdIwQY MBaAFPngCr4YSmJbdvjR+87vgXqvcUFbMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1lQUt2aGhLWWx0Mi1OSDd6dS1CZXE5eFFWcy5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWYvOGEzMjJmLWRjMjgtNDIyZi1iNTcw LTU4YjY0ZDU1N2MwYy8xL0x2ZlRhNDEzQnkyRV9GNnlZbDJkeVFxdFE2Zy5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvOWYvOGEzMjJmLWRjMjgtNDIyZi1iNTcwLTU4YjY0ZDU1N2Mw Yy8xLzEtZUFLdmhoS1lsdDItTkg3enUtQmVxOXhRVnMuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwMwYIKwYBBQUHAQcBAf8EJDAiMCAEAgABMBowDAMEAFmp BQMEAFmpBgMEAlmpCAMEAl23RDANBgkqhkiG9w0BAQsFAAOCAQEAGDNA9y+4aCKZ YIoeauj+J7hQDR3W1dR1+vZhMOysUqEXjOxgcL5D8hN13sA8xaqTvPAF09sBETfE 619v8wvMCj/IRaF9ixIlvf/uc2ZlF6aMtFQnDTawczUHq/5I3gHoOABmo0F5wEh2 WbZzrQdGW7kKfDkX3OHRVPPrsbrVnN88IzsOLFzQXpP66TpxEL9A1Ne7JcAT6H6Q m/81L5wSpvg/Q5D9kGwEtzozaUKDTBYZHhBFRLPehZ0CWG+l3CkAYWtF8nSW/Ub9 2hgZgdL8o34ZwYhd57oTK2olUAzyYlLhwM0lW+8EJveWftaBHbWg//9DAnuMUFv4 vFIO3j1+Eg== -----END CERTIFICATE-----Generated at Sun Jan 25 13:02:49 2026 by rpki-client