This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/ae9211-c52d-480d-a591-d75869c0c71e/1/L9nqjZgCKM_h4eShTqHdEr9Np6c.roa File: L9nqjZgCKM_h4eShTqHdEr9Np6c.roa (raw, json) Hash identifier: m3EOAebEcr3Ec2NVZh7NKfNA+27GisIbFErRrtFBX6k= Subject key identifier: 2F:D9:EA:8D:98:02:28:CF:E1:E1:E4:A1:4E:A1:DD:12:BF:4D:A7:A7 Certificate issuer: /CN=a6785773df313b91711bf6bc5b149ecc246b9e89 Certificate serial: 019B7CEDE7FF13B2F9ACC347440BBCF7CB70 Authority key identifier: A6:78:57:73:DF:31:3B:91:71:1B:F6:BC:5B:14:9E:CC:24:6B:9E:89 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pnhXc98xO5FxG_a8WxSezCRrnok.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/ae9211-c52d-480d-a591-d75869c0c71e/1/L9nqjZgCKM_h4eShTqHdEr9Np6c.roa Signing time: Fri 02 Jan 2026 04:18:44 +0000 ROA not before: Fri 02 Jan 2026 04:18:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208324 IP address blocks: 185.239.179.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/ae9211-c52d-480d-a591-d75869c0c71e/1/pnhXc98xO5FxG_a8WxSezCRrnok.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/ae9211-c52d-480d-a591-d75869c0c71e/1/pnhXc98xO5FxG_a8WxSezCRrnok.mft rsync://rpki.ripe.net/repository/DEFAULT/pnhXc98xO5FxG_a8WxSezCRrnok.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:e7:ff:13:b2:f9:ac:c3:47:44:0b:bc:f7:cb:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a6785773df313b91711bf6bc5b149ecc246b9e89 Validity Not Before: Jan 2 04:18:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2fd9ea8d980228cfe1e1e4a14ea1dd12bf4da7a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fc:fd:0b:05:af:28:78:9a:28:ff:68:f5:0e:00: 8a:97:cb:d2:e3:6d:64:6d:4b:d8:0e:3f:93:85:9d: 7b:ac:e8:56:d3:e1:e7:96:21:dc:4a:d2:4f:51:f5: 7b:5e:33:72:7d:b3:eb:62:34:ed:d8:8a:63:60:bf: 59:ee:5a:c2:ec:e5:7d:2e:4c:80:d5:6b:d1:b2:e4: 3d:e3:2d:9a:20:d5:e3:7e:a0:1a:68:e0:4d:77:fd: ab:05:f2:e6:02:c2:9f:53:3b:45:61:c1:ab:40:f6: 9b:49:12:f0:45:63:65:d1:8b:63:bc:19:ef:94:00: 5c:fe:30:26:53:59:a2:af:a8:3e:46:d1:3b:9f:fe: 10:62:84:09:61:9b:84:06:b5:9d:9a:d8:82:d3:e3: 1f:69:13:5d:6f:1b:41:ac:32:0b:e2:c4:9a:fa:66: 56:97:40:4d:bc:3d:68:84:ff:08:69:05:15:40:94: 3e:4d:a5:ae:0e:69:50:ee:a3:69:31:0b:ed:bb:c5: 94:d5:e2:37:58:ca:dc:66:fa:8d:fd:6e:ff:d4:cb: 4c:c1:15:ad:16:c9:00:2f:29:14:c8:ea:1c:d6:1e: 8e:cf:4e:12:b4:cc:bb:76:da:d1:73:55:dd:e4:4d: e3:1e:b4:83:0e:0e:3b:e2:40:fc:3c:d3:10:c0:2d: 76:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:D9:EA:8D:98:02:28:CF:E1:E1:E4:A1:4E:A1:DD:12:BF:4D:A7:A7 X509v3 Authority Key Identifier: keyid:A6:78:57:73:DF:31:3B:91:71:1B:F6:BC:5B:14:9E:CC:24:6B:9E:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pnhXc98xO5FxG_a8WxSezCRrnok.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/ae9211-c52d-480d-a591-d75869c0c71e/1/L9nqjZgCKM_h4eShTqHdEr9Np6c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/ae9211-c52d-480d-a591-d75869c0c71e/1/pnhXc98xO5FxG_a8WxSezCRrnok.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.239.179.0/24 Signature Algorithm: sha256WithRSAEncryption 29:3b:4a:ff:82:71:80:62:33:0b:1d:c7:9a:98:8e:42:ab:16: d7:a8:9c:f3:f0:b1:90:ba:8b:0b:96:62:c8:b8:29:50:73:01: 55:53:bf:da:fa:22:6d:15:75:79:5f:e6:00:01:b2:dd:ea:d7: ca:b4:82:ba:85:d1:d3:5b:51:8b:4d:a8:7f:f7:a2:2b:92:c7: cb:96:4a:9d:ea:50:48:e2:a3:97:11:e5:0a:19:47:4a:8f:6f: 69:47:f1:22:aa:5b:c6:a5:a4:68:c7:cc:cb:de:25:0b:6d:04: 1d:98:49:d4:cc:be:f1:e1:83:b9:85:2c:a7:24:60:f5:40:72: 5e:fb:31:bf:32:d8:4d:85:5c:f7:49:1e:66:a2:f2:66:3e:84: 14:27:c6:72:ee:1b:1e:8d:ae:ee:29:da:65:9c:44:5f:a0:26: c1:b5:ad:97:2c:5f:24:ef:87:70:16:14:af:37:f5:b0:a0:73: 54:bc:87:2e:4d:15:b2:3e:4b:a7:8d:48:b5:74:54:45:5f:ef: bd:d7:18:59:8d:24:a0:0c:f1:50:de:ce:8a:ac:2e:3c:4a:a7: 0f:44:6b:88:81:9e:e3:c1:35:01:75:9b:53:37:ca:4a:6c:62: 1c:1c:59:16:03:9b:94:16:60:4d:b5:24:99:68:3f:74:b4:9a: 7a:7d:0a:71 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87ef/E7L5rMNHRAu898twMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2Nzg1NzczZGYzMTNiOTE3MTFiZjZiYzViMTQ5ZWNjMjQ2 YjllODkwHhcNMjYwMTAyMDQxODQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZmQ5ZWE4ZDk4MDIyOGNmZTFlMWU0YTE0ZWExZGQxMmJmNGRhN2E3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/P0LBa8oeJoo/2j1DgCKl8vS421k bUvYDj+ThZ17rOhW0+HnliHcStJPUfV7XjNyfbPrYjTt2IpjYL9Z7lrC7OV9LkyA 1WvRsuQ94y2aINXjfqAaaOBNd/2rBfLmAsKfUztFYcGrQPabSRLwRWNl0YtjvBnv lABc/jAmU1mir6g+RtE7n/4QYoQJYZuEBrWdmtiC0+MfaRNdbxtBrDIL4sSa+mZW l0BNvD1ohP8IaQUVQJQ+TaWuDmlQ7qNpMQvtu8WU1eI3WMrcZvqN/W7/1MtMwRWt FskALykUyOoc1h6Oz04StMy7dtrRc1Xd5E3jHrSDDg474kD8PNMQwC127wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFC/Z6o2YAijP4eHkoU6h3RK/TaenMB8GA1UdIwQY MBaAFKZ4V3PfMTuRcRv2vFsUnswka56JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcG5oWGM5OHhPNUZ4R19hOFd4U2V6Q1Jybm9rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS9hZTkyMTEtYzUyZC00ODBkLWE1OTEt ZDc1ODY5YzBjNzFlLzEvTDlucWpaZ0NLTV9oNGVTaFRxSGRFcjlOcDZjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS9hZTkyMTEtYzUyZC00ODBkLWE1OTEtZDc1ODY5YzBjNzFl LzEvcG5oWGM5OHhPNUZ4R19hOFd4U2V6Q1Jybm9rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAue+zMA0G CSqGSIb3DQEBCwUAA4IBAQApO0r/gnGAYjMLHceamI5CqxbXqJzz8LGQuosLlmLI uClQcwFVU7/a+iJtFXV5X+YAAbLd6tfKtIK6hdHTW1GLTah/96IrksfLlkqd6lBI 4qOXEeUKGUdKj29pR/EiqlvGpaRox8zL3iULbQQdmEnUzL7x4YO5hSynJGD1QHJe +zG/MthNhVz3SR5movJmPoQUJ8Zy7hseja7uKdplnERfoCbBta2XLF8k74dwFhSv N/WwoHNUvIcuTRWyPkunjUi1dFRFX++91xhZjSSgDPFQ3s6KrC48SqcPRGuIgZ7j wTUBdZtTN8pKbGIcHFkWA5uUFmBNtSSZaD90tJp6fQpx -----END CERTIFICATE-----Generated at Sun Jan 25 22:50:06 2026 by rpki-client