This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/df6f5f-e1ec-4343-9a21-a5cee11bbae8/1/l9oX7II_w-llh2I63jLu_-Eu6cw.roa File: l9oX7II_w-llh2I63jLu_-Eu6cw.roa (raw, json) Hash identifier: siOBRu8v54PGLQMvk6KGn+p4zT0cbKX2GmhessBUGEg= Subject key identifier: 97:DA:17:EC:82:3F:C3:E9:65:87:62:3A:DE:32:EE:FF:E1:2E:E9:CC Certificate issuer: /CN=0e9a5c3283a6a16b4d205a7c564a382641cd8691 Certificate serial: 019B7E3765EAC5F54123D7C484BB4E10E9CD Authority key identifier: 0E:9A:5C:32:83:A6:A1:6B:4D:20:5A:7C:56:4A:38:26:41:CD:86:91 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DppcMoOmoWtNIFp8Vko4JkHNhpE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/df6f5f-e1ec-4343-9a21-a5cee11bbae8/1/l9oX7II_w-llh2I63jLu_-Eu6cw.roa Signing time: Fri 02 Jan 2026 10:18:38 +0000 ROA not before: Fri 02 Jan 2026 10:18:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204804 IP address blocks: 89.20.48.0/24 maxlen: 24 185.239.145.0/24 maxlen: 24 185.239.146.0/24 maxlen: 24 193.162.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/df6f5f-e1ec-4343-9a21-a5cee11bbae8/1/DppcMoOmoWtNIFp8Vko4JkHNhpE.crl rsync://rpki.ripe.net/repository/DEFAULT/9d/df6f5f-e1ec-4343-9a21-a5cee11bbae8/1/DppcMoOmoWtNIFp8Vko4JkHNhpE.mft rsync://rpki.ripe.net/repository/DEFAULT/DppcMoOmoWtNIFp8Vko4JkHNhpE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 10:02:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:65:ea:c5:f5:41:23:d7:c4:84:bb:4e:10:e9:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e9a5c3283a6a16b4d205a7c564a382641cd8691 Validity Not Before: Jan 2 10:18:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=97da17ec823fc3e96587623ade32eeffe12ee9cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:99:8a:e7:ca:61:06:97:bb:6d:1e:ce:30:ba: 2b:87:73:5c:be:33:81:21:c3:65:32:2d:6c:ab:af: 33:30:d6:2c:bd:89:d2:43:eb:fa:65:27:40:5f:a5: 82:b4:ff:70:59:7e:1b:a5:e6:d2:cb:dc:5e:1c:28: 6b:5b:de:a7:7b:68:54:b1:28:4a:e1:ba:a1:19:8f: af:93:e9:9e:e9:c9:9c:62:fc:03:89:0c:77:a5:77: b1:e8:d5:88:73:08:f6:5b:fe:9e:cf:74:f9:02:1d: 0b:3e:7c:6f:dd:3c:35:a6:cd:b0:18:d9:21:72:1a: 22:fa:77:db:03:4c:a1:2e:0f:8d:be:25:7e:25:7d: 70:f2:9f:df:8a:65:cc:cc:46:0f:ba:1e:c1:3b:17: 8f:17:88:0e:e1:c8:b2:12:a1:08:e2:56:94:34:75: 17:4d:ab:b7:0b:31:b0:0a:18:78:83:fb:c1:be:f0: 1a:42:85:28:8b:e5:09:8f:6c:c3:01:8e:dc:2d:dd: 2c:94:5d:88:6e:b2:0d:60:ee:61:c1:6a:9c:4d:a2: 94:d1:bf:b9:48:9a:53:4c:02:cb:e9:9b:aa:a4:51: 03:6e:7a:a8:f7:ef:78:7a:fa:5d:fc:77:1b:a3:b3: 2a:e6:5e:95:9e:fc:1a:b3:ed:ca:bc:5a:50:13:55: f2:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:DA:17:EC:82:3F:C3:E9:65:87:62:3A:DE:32:EE:FF:E1:2E:E9:CC X509v3 Authority Key Identifier: keyid:0E:9A:5C:32:83:A6:A1:6B:4D:20:5A:7C:56:4A:38:26:41:CD:86:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DppcMoOmoWtNIFp8Vko4JkHNhpE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/df6f5f-e1ec-4343-9a21-a5cee11bbae8/1/l9oX7II_w-llh2I63jLu_-Eu6cw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/df6f5f-e1ec-4343-9a21-a5cee11bbae8/1/DppcMoOmoWtNIFp8Vko4JkHNhpE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.20.48.0/24 185.239.145.0-185.239.146.255 193.162.28.0/24 Signature Algorithm: sha256WithRSAEncryption 28:db:c3:f7:b4:f6:e0:56:c3:f7:4e:92:8b:25:b7:4e:bf:a3: 64:d7:fb:bc:88:65:88:cf:b5:8b:a1:f6:c6:12:6a:0b:39:9e: 44:f1:02:71:e7:81:b4:42:41:43:7a:63:62:85:68:cf:f6:01: bc:b8:e9:f9:28:3b:b5:12:aa:a5:89:fd:1a:6e:ec:a2:c4:cd: 48:7d:2b:b3:c2:f9:a1:09:9a:21:0b:bc:4d:37:66:c6:9b:ab: 85:9e:26:3d:92:c9:df:b9:cd:ee:24:7c:33:74:98:e8:ff:64: 08:19:74:e6:2c:06:ea:2f:e9:18:ee:88:09:ad:10:61:7c:c7: c4:10:1f:a6:46:73:70:c4:29:d1:b6:00:14:8e:20:dd:dc:96: 34:1f:48:35:3b:d5:52:87:b6:8c:9a:ca:e2:44:1c:d5:30:93: 21:c8:7e:35:10:0b:4e:75:dc:bd:26:1b:93:97:b4:f5:74:b8: 4c:ca:35:ee:e0:f3:31:46:42:fc:54:c9:78:f6:4d:36:e7:4c: 00:b6:28:f1:35:1f:36:d2:a3:9e:b1:9b:ff:82:4a:0a:ae:dd: d3:00:39:aa:68:3a:10:c4:af:b4:1d:bc:df:47:0e:65:0f:5f: 57:54:8f:c5:25:53:42:d6:92:3a:45:4a:6d:d1:9f:6a:2f:70: 37:2f:cc:47 -----BEGIN CERTIFICATE----- MIIFETCCA/mgAwIBAgISAZt+N2XqxfVBI9fEhLtOEOnNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlOWE1YzMyODNhNmExNmI0ZDIwNWE3YzU2NGEzODI2NDFj ZDg2OTEwHhcNMjYwMTAyMTAxODM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5N2RhMTdlYzgyM2ZjM2U5NjU4NzYyM2FkZTMyZWVmZmUxMmVlOWNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoZmK58phBpe7bR7OMLorh3NcvjOB IcNlMi1sq68zMNYsvYnSQ+v6ZSdAX6WCtP9wWX4bpebSy9xeHChrW96ne2hUsShK 4bqhGY+vk+me6cmcYvwDiQx3pXex6NWIcwj2W/6ez3T5Ah0LPnxv3Tw1ps2wGNkh choi+nfbA0yhLg+NviV+JX1w8p/fimXMzEYPuh7BOxePF4gO4ciyEqEI4laUNHUX Tau3CzGwChh4g/vBvvAaQoUoi+UJj2zDAY7cLd0slF2IbrINYO5hwWqcTaKU0b+5 SJpTTALL6ZuqpFEDbnqo9+94evpd/Hcbo7Mq5l6Vnvwas+3KvFpQE1XymQIDAQAB o4ICHTCCAhkwHQYDVR0OBBYEFJfaF+yCP8PpZYdiOt4y7v/hLunMMB8GA1UdIwQY MBaAFA6aXDKDpqFrTSBafFZKOCZBzYaRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRHBwY01vT21vV3ROSUZwOFZrbzRKa0hOaHBFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC9kZjZmNWYtZTFlYy00MzQzLTlhMjEt YTVjZWUxMWJiYWU4LzEvbDlvWDdJSV93LWxsaDJJNjNqTHVfLUV1NmN3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZC9kZjZmNWYtZTFlYy00MzQzLTlhMjEtYTVjZWUxMWJiYWU4 LzEvRHBwY01vT21vV3ROSUZwOFZrbzRKa0hOaHBFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQAWRQwMAwD BAC575EDBAC575IDBADBohwwDQYJKoZIhvcNAQELBQADggEBACjbw/e09uBWw/dO koslt06/o2TX+7yIZYjPtYuh9sYSags5nkTxAnHngbRCQUN6Y2KFaM/2Aby46fko O7USqqWJ/Rpu7KLEzUh9K7PC+aEJmiELvE03Zsabq4WeJj2Syd+5ze4kfDN0mOj/ ZAgZdOYsBuov6RjuiAmtEGF8x8QQH6ZGc3DEKdG2ABSOIN3cljQfSDU71VKHtoya yuJEHNUwkyHIfjUQC0513L0mG5OXtPV0uEzKNe7g8zFGQvxUyXj2TTbnTAC2KPE1 HzbSo56xm/+CSgqu3dMAOapoOhDEr7QdvN9HDmUPX1dUj8UlU0LWkjpFSm3Rn2ov cDcvzEc= -----END CERTIFICATE-----Generated at Mon Jan 12 16:07:00 2026 by rpki-client