This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/pI2S2lg5Mevtnr1gNuhTMLXlTZk.roa File: pI2S2lg5Mevtnr1gNuhTMLXlTZk.roa (raw, json) Hash identifier: 5cp4WqQX2Fq4/2gG8NNXNJQnzkTkhV+uz8kgPR8ik8M= Subject key identifier: A4:8D:92:DA:58:39:31:EB:ED:9E:BD:60:36:E8:53:30:B5:E5:4D:99 Certificate issuer: /CN=6f3030a4b67f95c2fed902d56657faa2494b5129 Certificate serial: 019B78A331C49BD090DC0C95E0F39F67DDD4 Authority key identifier: 6F:30:30:A4:B6:7F:95:C2:FE:D9:02:D5:66:57:FA:A2:49:4B:51:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bzAwpLZ_lcL-2QLVZlf6oklLUSk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/pI2S2lg5Mevtnr1gNuhTMLXlTZk.roa Signing time: Thu 01 Jan 2026 08:18:39 +0000 ROA not before: Thu 01 Jan 2026 08:18:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 58 IP address blocks: 93.88.72.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/bzAwpLZ_lcL-2QLVZlf6oklLUSk.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/bzAwpLZ_lcL-2QLVZlf6oklLUSk.mft rsync://rpki.ripe.net/repository/DEFAULT/bzAwpLZ_lcL-2QLVZlf6oklLUSk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:31:c4:9b:d0:90:dc:0c:95:e0:f3:9f:67:dd:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f3030a4b67f95c2fed902d56657faa2494b5129 Validity Not Before: Jan 1 08:18:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a48d92da583931ebed9ebd6036e85330b5e54d99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:9a:87:db:63:61:19:8f:5c:83:cf:81:07:77: 7d:e4:6c:95:09:01:2f:dc:0e:75:5a:0c:5b:6d:59: f9:ba:f2:a2:1b:91:31:08:85:15:a3:14:bb:62:83: 47:3f:8f:62:3d:d4:94:ed:74:42:1c:63:28:ee:8f: 14:81:20:dc:78:67:fc:f6:74:44:c3:7e:b4:09:f3: eb:6b:25:b3:5f:6d:ec:e4:7e:ea:36:5a:0a:b2:d9: d8:3a:3f:92:98:ce:b5:d0:a2:b4:64:7d:3d:df:ee: a2:00:03:70:b2:06:37:70:35:1c:ad:3f:69:83:39: f2:31:1e:d2:94:e6:87:13:65:ee:0b:4c:2e:27:0a: 85:38:29:0c:f1:ef:6c:ad:d3:43:49:fd:d6:b5:72: fc:df:32:cf:04:55:35:9f:26:81:b5:b3:bd:8c:71: fc:47:29:75:6d:b9:43:59:d8:dd:3f:81:16:c1:09: 83:40:2f:aa:db:94:2e:69:d0:2f:df:cf:5b:aa:66: f3:47:1f:61:e8:49:c2:b2:7e:01:41:e8:76:7b:5b: 2c:af:0f:a4:a0:5d:1f:77:06:0e:cf:1d:c3:0d:2a: 28:c0:48:3b:10:76:5b:2f:b5:7b:d1:3b:a2:da:cb: f5:87:53:23:30:d1:d2:c4:b1:4d:dd:56:e3:f0:23: 02:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:8D:92:DA:58:39:31:EB:ED:9E:BD:60:36:E8:53:30:B5:E5:4D:99 X509v3 Authority Key Identifier: keyid:6F:30:30:A4:B6:7F:95:C2:FE:D9:02:D5:66:57:FA:A2:49:4B:51:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bzAwpLZ_lcL-2QLVZlf6oklLUSk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/pI2S2lg5Mevtnr1gNuhTMLXlTZk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/bzAwpLZ_lcL-2QLVZlf6oklLUSk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.88.72.0/23 Signature Algorithm: sha256WithRSAEncryption 76:72:91:73:83:ba:8b:81:10:af:aa:7a:94:06:4a:d4:0e:50: da:14:a2:f1:ab:1e:fd:d8:37:0f:82:19:68:57:23:20:f7:8c: a3:9a:cb:7e:97:d8:3c:6e:3a:22:fc:42:10:10:d2:7e:5a:fc: cb:c9:b7:d4:1f:49:63:61:3b:78:17:55:e6:11:ba:79:af:21: db:7f:24:1f:d5:97:17:2d:29:38:c3:1e:23:0c:9b:ab:5c:0a: a4:ff:16:b0:f6:a0:6d:3c:01:bf:f5:5d:5e:3b:74:60:4c:38: b6:f4:54:6c:f3:96:fc:57:02:a2:bf:42:1c:3f:67:2a:39:e2: 78:b0:91:35:62:c6:da:21:38:57:06:3b:90:df:76:78:3d:c6: 90:36:d4:bb:3a:7e:67:05:de:30:49:c2:27:44:15:78:f7:35: 2d:b7:1e:39:a8:28:f8:c7:5c:6c:cb:c6:dd:e7:87:07:ab:e5: d2:38:08:eb:b9:9d:61:38:ae:15:86:0b:4d:92:9c:ba:12:e6: 71:67:34:cd:94:ce:d8:17:82:1e:7d:92:63:39:72:c4:83:6c: 2b:ca:1e:ad:c7:f8:cf:29:9c:2c:57:8c:8e:27:6b:d8:bb:ab: 2c:0a:45:db:3a:25:fe:e4:50:34:72:1e:5b:11:5b:c6:52:de: 7d:c0:86:0f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4ozHEm9CQ3AyV4POfZ93UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmMzAzMGE0YjY3Zjk1YzJmZWQ5MDJkNTY2NTdmYWEyNDk0 YjUxMjkwHhcNMjYwMTAxMDgxODM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNDhkOTJkYTU4MzkzMWViZWQ5ZWJkNjAzNmU4NTMzMGI1ZTU0ZDk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmJqH22NhGY9cg8+BB3d95GyVCQEv 3A51WgxbbVn5uvKiG5ExCIUVoxS7YoNHP49iPdSU7XRCHGMo7o8UgSDceGf89nRE w360CfPrayWzX23s5H7qNloKstnYOj+SmM610KK0ZH093+6iAANwsgY3cDUcrT9p gznyMR7SlOaHE2XuC0wuJwqFOCkM8e9srdNDSf3WtXL83zLPBFU1nyaBtbO9jHH8 Ryl1bblDWdjdP4EWwQmDQC+q25QuadAv389bqmbzRx9h6EnCsn4BQeh2e1ssrw+k oF0fdwYOzx3DDSoowEg7EHZbL7V70Tui2sv1h1MjMNHSxLFN3Vbj8CMC2wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKSNktpYOTHr7Z69YDboUzC15U2ZMB8GA1UdIwQY MBaAFG8wMKS2f5XC/tkC1WZX+qJJS1EpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYnpBd3BMWl9sY0wtMlFMVlpsZjZva2xMVVNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy8yYjk5YTMtZGQ1Zi00ZmZlLTgyZWYt YmYzYjIxYTI3MGYyLzEvcEkyUzJsZzVNZXZ0bnIxZ051aFRNTFhsVFprLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy8yYjk5YTMtZGQ1Zi00ZmZlLTgyZWYtYmYzYjIxYTI3MGYy LzEvYnpBd3BMWl9sY0wtMlFMVlpsZjZva2xMVVNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBXVhIMA0G CSqGSIb3DQEBCwUAA4IBAQB2cpFzg7qLgRCvqnqUBkrUDlDaFKLxqx792DcPghlo VyMg94yjmst+l9g8bjoi/EIQENJ+WvzLybfUH0ljYTt4F1XmEbp5ryHbfyQf1ZcX LSk4wx4jDJurXAqk/xaw9qBtPAG/9V1eO3RgTDi29FRs85b8VwKiv0IcP2cqOeJ4 sJE1YsbaIThXBjuQ33Z4PcaQNtS7On5nBd4wScInRBV49zUttx45qCj4x1xsy8bd 54cHq+XSOAjruZ1hOK4VhgtNkpy6EuZxZzTNlM7YF4IefZJjOXLEg2wryh6tx/jP KZwsV4yOJ2vYu6ssCkXbOiX+5FA0ch5bEVvGUt59wIYP -----END CERTIFICATE-----Generated at Mon Jan 26 07:27:50 2026 by rpki-client