This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/lpVuaNvBfP-iYJgoLdsEk0kN8zE.roa File: lpVuaNvBfP-iYJgoLdsEk0kN8zE.roa (raw, json) Hash identifier: oG08WFdJbYwhO18D6DR4kE8KKO3FcdNiFZYrJ+i3b3c= Subject key identifier: 96:95:6E:68:DB:C1:7C:FF:A2:60:98:28:2D:DB:04:93:49:0D:F3:31 Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0 Certificate serial: 019B77C75EB3EB077A36A4A5E1C94744466B Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/lpVuaNvBfP-iYJgoLdsEk0kN8zE.roa Signing time: Thu 01 Jan 2026 04:18:33 +0000 ROA not before: Thu 01 Jan 2026 04:18:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12396 IP address blocks: 91.219.124.0/22 maxlen: 22 194.247.168.0/23 maxlen: 23 195.8.34.0/23 maxlen: 23 195.49.192.0/21 maxlen: 21 212.109.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.mft rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:5e:b3:eb:07:7a:36:a4:a5:e1:c9:47:44:46:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0 Validity Not Before: Jan 1 04:18:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=96956e68dbc17cffa26098282ddb0493490df331 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:ac:b8:8a:54:e1:5c:41:d3:ef:57:5a:8d:2a: bf:e1:c6:1f:5d:31:47:90:9b:2b:03:b5:18:1d:f5: 54:b2:f7:43:d4:d8:f8:39:73:ac:e3:82:80:aa:86: a1:52:e4:3b:88:45:90:0b:a6:f5:5d:1f:14:9a:37: 04:23:c6:fb:23:4f:e9:46:2f:5d:4d:96:67:b8:36: 8c:4c:06:12:4e:85:61:82:ce:f9:c6:bc:4e:2a:72: fd:6f:ee:2b:d5:af:3c:65:65:2b:64:12:9d:ff:48: dc:9c:b0:aa:d5:cc:fc:c8:01:43:b5:c9:9d:20:ac: 75:50:31:3c:ed:53:13:24:66:57:86:21:6c:64:3c: 7b:b2:a4:42:90:1a:49:c0:0d:fd:82:bd:9a:ba:9b: fa:2c:c8:94:b6:50:b2:05:06:e0:26:77:8a:b1:c4: 7b:19:49:3e:2f:55:5c:e0:c2:e9:1a:b1:a9:24:bc: 22:8e:df:2e:fe:c6:eb:cb:4a:5b:98:11:ad:11:19: 45:87:f9:29:08:4e:8a:22:6f:70:86:80:6a:ac:32: e1:b8:5b:29:c4:a3:85:44:06:75:76:ff:5f:b6:e8: a0:77:f8:aa:62:7b:2e:09:4e:57:27:19:5b:96:f1: b2:ed:ea:39:cb:6a:0d:1a:1f:d8:c0:10:87:b9:77: 42:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:95:6E:68:DB:C1:7C:FF:A2:60:98:28:2D:DB:04:93:49:0D:F3:31 X509v3 Authority Key Identifier: keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/lpVuaNvBfP-iYJgoLdsEk0kN8zE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.219.124.0/22 194.247.168.0/23 195.8.34.0/23 195.49.192.0/21 212.109.175.0/24 Signature Algorithm: sha256WithRSAEncryption 03:36:86:4f:3a:95:3c:1b:67:52:4c:c6:2f:fa:bc:35:62:b2: 5c:84:e3:1e:7d:d7:3b:97:31:2d:51:96:23:3f:3b:8c:a6:37: b1:88:d4:6a:fb:db:a4:13:ec:6d:1a:6b:a0:ab:2a:e3:83:b7: 47:f5:00:4d:0c:d5:da:eb:eb:32:2f:bb:f8:87:4a:be:5d:20: f8:58:f5:7a:44:0e:ed:aa:7a:23:f6:47:5d:3a:a7:c4:01:6a: 5c:be:65:9f:83:ba:e6:0f:06:af:2d:dc:f4:7a:5b:8f:ed:0b: e0:72:45:4b:c6:6a:ec:5c:ac:f3:1a:31:d2:31:aa:bf:99:bb: 15:9b:8c:45:93:d9:d5:5f:20:91:0d:55:7b:dd:d1:3f:04:86: b0:c0:ff:bb:fa:bc:f6:bb:7d:75:b9:a7:a6:c1:f7:03:a2:03: e5:31:54:5c:87:d8:b5:06:c5:11:7c:e2:bc:98:0c:35:5a:87: 09:14:f3:f5:e5:e4:ff:fe:bd:f9:5d:77:26:ec:a8:22:13:a0: 3f:21:96:19:39:41:da:53:64:9d:71:c3:cd:a2:05:7e:28:2f: b9:89:3d:25:60:50:13:3f:09:3c:c6:d5:4a:80:b0:b9:a3:dc: 37:df:c8:6f:d2:9f:e5:0e:84:ba:a6:2e:dd:61:6c:08:aa:ce: af:3b:f0:89 -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZt3x16z6wd6NqSl4clHREZrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyZDdjMmExMDcyZDczNTA3YWRiZjY1MDdkZTY4YWFhYzAx Nzg1YzAwHhcNMjYwMTAxMDQxODMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5Njk1NmU2OGRiYzE3Y2ZmYTI2MDk4MjgyZGRiMDQ5MzQ5MGRmMzMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyay4ilThXEHT71dajSq/4cYfXTFH kJsrA7UYHfVUsvdD1Nj4OXOs44KAqoahUuQ7iEWQC6b1XR8UmjcEI8b7I0/pRi9d TZZnuDaMTAYSToVhgs75xrxOKnL9b+4r1a88ZWUrZBKd/0jcnLCq1cz8yAFDtcmd IKx1UDE87VMTJGZXhiFsZDx7sqRCkBpJwA39gr2aupv6LMiUtlCyBQbgJneKscR7 GUk+L1Vc4MLpGrGpJLwijt8u/sbry0pbmBGtERlFh/kpCE6KIm9whoBqrDLhuFsp xKOFRAZ1dv9ftuigd/iqYnsuCU5XJxlblvGy7eo5y2oNGh/YwBCHuXdCkQIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFJaVbmjbwXz/omCYKC3bBJNJDfMxMB8GA1UdIwQY MBaAFJLXwqEHLXNQetv2UH3miqrAF4XAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTct ODllNTZjODBkMWQwLzEvbHBWdWFOdkJmUC1pWUpnb0xkc0VrMGtOOHpFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTctODllNTZjODBkMWQw LzEva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQCW9t8AwQB wveoAwQBwwgiAwQDwzHAAwQA1G2vMA0GCSqGSIb3DQEBCwUAA4IBAQADNoZPOpU8 G2dSTMYv+rw1YrJchOMefdc7lzEtUZYjPzuMpjexiNRq+9ukE+xtGmugqyrjg7dH 9QBNDNXa6+syL7v4h0q+XSD4WPV6RA7tqnoj9kddOqfEAWpcvmWfg7rmDwavLdz0 eluP7QvgckVLxmrsXKzzGjHSMaq/mbsVm4xFk9nVXyCRDVV73dE/BIawwP+7+rz2 u311uaemwfcDogPlMVRch9i1BsURfOK8mAw1WocJFPP15eT//r35XXcm7KgiE6A/ IZYZOUHaU2SdccPNogV+KC+5iT0lYFATPwk8xtVKgLC5o9w338hv0p/lDoS6pi7d YWwIqs6vO/CJ -----END CERTIFICATE-----Generated at Sun Jan 25 22:42:22 2026 by rpki-client