This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/ae324f-54f5-41da-bebf-03077e37c61a/1/l9mq3dtlYUJYwqPz2hM7UKcrn8U.roa File: l9mq3dtlYUJYwqPz2hM7UKcrn8U.roa (raw, json) Hash identifier: HVy6JnYfA7DiKZs/nj6ujUr8Qm/xOl9atbOQ23YdxGo= Subject key identifier: 97:D9:AA:DD:DB:65:61:42:58:C2:A3:F3:DA:13:3B:50:A7:2B:9F:C5 Certificate issuer: /CN=f1808f1abef8e6b59cd4359a6b4481fc7c9631d1 Certificate serial: 019B7E382E8746015588B2D64BC5DF15597F Authority key identifier: F1:80:8F:1A:BE:F8:E6:B5:9C:D4:35:9A:6B:44:81:FC:7C:96:31:D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8YCPGr745rWc1DWaa0SB_HyWMdE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/ae324f-54f5-41da-bebf-03077e37c61a/1/l9mq3dtlYUJYwqPz2hM7UKcrn8U.roa Signing time: Fri 02 Jan 2026 10:19:29 +0000 ROA not before: Fri 02 Jan 2026 10:19:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50469 IP address blocks: 153.92.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/ae324f-54f5-41da-bebf-03077e37c61a/1/8YCPGr745rWc1DWaa0SB_HyWMdE.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/ae324f-54f5-41da-bebf-03077e37c61a/1/8YCPGr745rWc1DWaa0SB_HyWMdE.mft rsync://rpki.ripe.net/repository/DEFAULT/8YCPGr745rWc1DWaa0SB_HyWMdE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:2e:87:46:01:55:88:b2:d6:4b:c5:df:15:59:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f1808f1abef8e6b59cd4359a6b4481fc7c9631d1 Validity Not Before: Jan 2 10:19:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=97d9aadddb65614258c2a3f3da133b50a72b9fc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:10:a0:67:0d:f0:6c:92:a8:53:b6:3b:6a:17: db:17:1c:e4:1d:50:ab:4a:ed:e7:8e:29:88:89:1b: 25:ff:77:00:72:e0:e4:e6:07:02:17:3a:fb:5e:fb: e2:30:f9:14:37:67:37:5d:61:2f:f0:fa:4f:04:db: 89:45:65:2a:49:47:38:7b:65:b5:22:f4:0c:68:96: 99:a2:5c:3f:8c:4d:64:1d:04:cb:8a:8e:35:ca:2d: fb:75:5d:c6:1d:0f:ad:ec:29:fc:d5:51:f1:6c:16: 0d:99:99:80:bb:3c:a9:b4:79:eb:52:ee:bd:65:56: 48:a5:dd:47:34:98:50:32:95:ec:21:be:1b:13:89: b3:ea:e4:f3:e3:f8:07:e2:86:55:5f:06:ae:0f:f9: 09:55:ce:39:d8:77:79:7a:11:02:73:e3:8b:00:00: 99:bf:a1:c1:af:65:fd:ab:08:50:62:1b:99:6f:46: ee:5e:de:fc:11:63:b5:82:f8:12:46:0b:b1:09:93: a1:33:de:cf:31:d2:15:8e:b6:8f:6d:3f:e0:42:86: 29:ef:ef:e2:a7:de:cc:16:53:9d:f0:ca:b0:9b:99: a0:1c:44:84:13:5f:5d:6e:fd:58:ea:8e:6c:e2:63: 89:86:e0:97:2b:51:cd:57:d2:67:2b:f6:3f:d3:64: ee:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:D9:AA:DD:DB:65:61:42:58:C2:A3:F3:DA:13:3B:50:A7:2B:9F:C5 X509v3 Authority Key Identifier: keyid:F1:80:8F:1A:BE:F8:E6:B5:9C:D4:35:9A:6B:44:81:FC:7C:96:31:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8YCPGr745rWc1DWaa0SB_HyWMdE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/ae324f-54f5-41da-bebf-03077e37c61a/1/l9mq3dtlYUJYwqPz2hM7UKcrn8U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/ae324f-54f5-41da-bebf-03077e37c61a/1/8YCPGr745rWc1DWaa0SB_HyWMdE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 153.92.187.0/24 Signature Algorithm: sha256WithRSAEncryption 5f:37:c8:24:0b:b2:78:5c:31:7b:9d:92:c4:d1:45:8a:27:d2: 37:b3:81:a5:50:24:2c:77:87:48:2c:d1:d9:2b:bd:3a:55:3d: 10:fd:93:73:51:c8:1c:07:98:4f:62:4d:fc:01:f6:d5:0d:bb: 6b:fb:32:67:39:6b:ed:f5:3c:5f:cd:3e:83:97:21:78:ea:a2: 92:92:b0:74:c3:73:61:7a:e6:23:b0:14:c6:c9:35:a5:0f:23: 4a:e2:b3:9a:b7:31:e8:23:56:ee:7a:6b:c7:ac:03:f3:30:1e: 0c:3e:3f:41:53:09:dd:49:4a:9c:2a:98:b0:0f:21:8f:ea:be: cb:2e:6b:88:41:41:f2:bc:b2:df:bd:f3:15:92:6b:fd:e0:08: 0a:71:e6:18:4c:b8:13:4c:6d:c9:06:a8:17:35:69:65:88:30: 22:d2:69:ff:92:3b:32:a0:cf:e6:81:9a:6a:7f:9f:b3:b7:b8: 75:20:6e:82:84:ee:cb:98:a4:7d:80:20:22:87:8d:e4:d3:01: 9b:6a:af:b2:30:7b:87:1b:10:50:31:b9:e0:cd:1d:a3:a0:13: 17:d4:72:af:43:13:5a:30:dd:42:9c:69:80:bf:89:e9:86:08: 14:76:05:80:0b:97:77:5b:5a:a1:dc:00:da:ac:25:1e:83:bb: ba:6d:6f:d8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OC6HRgFViLLWS8XfFVl/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxODA4ZjFhYmVmOGU2YjU5Y2Q0MzU5YTZiNDQ4MWZjN2M5 NjMxZDEwHhcNMjYwMTAyMTAxOTI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5N2Q5YWFkZGRiNjU2MTQyNThjMmEzZjNkYTEzM2I1MGE3MmI5ZmM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxBCgZw3wbJKoU7Y7ahfbFxzkHVCr Su3njimIiRsl/3cAcuDk5gcCFzr7XvviMPkUN2c3XWEv8PpPBNuJRWUqSUc4e2W1 IvQMaJaZolw/jE1kHQTLio41yi37dV3GHQ+t7Cn81VHxbBYNmZmAuzyptHnrUu69 ZVZIpd1HNJhQMpXsIb4bE4mz6uTz4/gH4oZVXwauD/kJVc452Hd5ehECc+OLAACZ v6HBr2X9qwhQYhuZb0buXt78EWO1gvgSRguxCZOhM97PMdIVjraPbT/gQoYp7+/i p97MFlOd8Mqwm5mgHESEE19dbv1Y6o5s4mOJhuCXK1HNV9JnK/Y/02TutwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJfZqt3bZWFCWMKj89oTO1CnK5/FMB8GA1UdIwQY MBaAFPGAjxq++Oa1nNQ1mmtEgfx8ljHRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOFlDUEdyNzQ1cldjMURXYWEwU0JfSHlXTWRFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC9hZTMyNGYtNTRmNS00MWRhLWJlYmYt MDMwNzdlMzdjNjFhLzEvbDltcTNkdGxZVUpZd3FQejJoTTdVS2NybjhVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC9hZTMyNGYtNTRmNS00MWRhLWJlYmYtMDMwNzdlMzdjNjFh LzEvOFlDUEdyNzQ1cldjMURXYWEwU0JfSHlXTWRFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmVy7MA0G CSqGSIb3DQEBCwUAA4IBAQBfN8gkC7J4XDF7nZLE0UWKJ9I3s4GlUCQsd4dILNHZ K706VT0Q/ZNzUcgcB5hPYk38AfbVDbtr+zJnOWvt9TxfzT6DlyF46qKSkrB0w3Nh euYjsBTGyTWlDyNK4rOatzHoI1buemvHrAPzMB4MPj9BUwndSUqcKpiwDyGP6r7L LmuIQUHyvLLfvfMVkmv94AgKceYYTLgTTG3JBqgXNWlliDAi0mn/kjsyoM/mgZpq f5+zt7h1IG6ChO7LmKR9gCAih43k0wGbaq+yMHuHGxBQMbngzR2joBMX1HKvQxNa MN1CnGmAv4nphggUdgWAC5d3W1qh3ADarCUeg7u6bW/Y -----END CERTIFICATE-----Generated at Sun Jan 25 16:40:46 2026 by rpki-client