This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/942efa-18a5-4649-9929-7be713679608/1/lRWtCCIDuQJq2Ldkhpx2iidtBtA.roa File: lRWtCCIDuQJq2Ldkhpx2iidtBtA.roa (raw, json) Hash identifier: m3V7ZxeKJCHLbCgiwkcpzW9KXHJYWP9eJffVKGhevf4= Subject key identifier: 95:15:AD:08:22:03:B9:02:6A:D8:B7:64:86:9C:76:8A:27:6D:06:D0 Certificate issuer: /CN=fae27b8c1de6b161c798ab7b85153d6ba379efbe Certificate serial: 019B77C70F219E1FB8DD0C80A96948598334 Authority key identifier: FA:E2:7B:8C:1D:E6:B1:61:C7:98:AB:7B:85:15:3D:6B:A3:79:EF:BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-uJ7jB3msWHHmKt7hRU9a6N5774.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/942efa-18a5-4649-9929-7be713679608/1/lRWtCCIDuQJq2Ldkhpx2iidtBtA.roa Signing time: Thu 01 Jan 2026 04:18:12 +0000 ROA not before: Thu 01 Jan 2026 04:18:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51114 IP address blocks: 193.111.34.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/942efa-18a5-4649-9929-7be713679608/1/1-uJ7jB3msWHHmKt7hRU9a6N5774.crl rsync://rpki.ripe.net/repository/DEFAULT/08/942efa-18a5-4649-9929-7be713679608/1/1-uJ7jB3msWHHmKt7hRU9a6N5774.mft rsync://rpki.ripe.net/repository/DEFAULT/1-uJ7jB3msWHHmKt7hRU9a6N5774.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:0f:21:9e:1f:b8:dd:0c:80:a9:69:48:59:83:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fae27b8c1de6b161c798ab7b85153d6ba379efbe Validity Not Before: Jan 1 04:18:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9515ad082203b9026ad8b764869c768a276d06d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:4a:a9:47:e4:b9:b5:99:1e:5c:bb:6d:1c:48: d0:fb:cd:3b:da:a0:23:84:50:10:78:45:ae:cb:16: 1c:a0:e4:58:0a:44:1f:99:94:61:47:17:8f:01:4f: 1f:49:48:62:12:d5:12:cc:f7:43:eb:19:4a:c7:8b: dc:ea:05:b0:92:5f:2d:71:0c:d4:f7:ab:80:7c:49: 6e:39:a4:1e:aa:4e:4d:96:a3:d8:2e:ba:a1:94:d4: 53:a0:71:6c:54:f8:5a:f4:f9:80:f6:ce:42:37:98: 2a:43:04:07:16:49:73:cf:d9:49:3f:b3:bf:94:c3: 6c:28:e9:d6:d4:ea:44:eb:c5:d4:6e:3d:36:c5:e7: 5d:0c:2a:04:50:cd:c0:3e:0f:7d:ba:a8:9b:5c:e7: 5b:47:25:af:4d:16:96:dc:16:7b:3e:2e:13:22:e2: 56:f8:75:07:cc:d6:86:76:f3:ba:51:97:06:4d:9a: fe:85:38:ed:42:6b:26:3a:f5:e9:dd:c0:ff:1b:4f: 56:69:fb:53:2f:c7:98:e9:26:e8:51:ef:1e:e0:8e: 84:fa:b5:cd:de:ab:12:05:fa:54:d8:64:d2:a5:0e: d6:f7:fe:92:ba:68:f5:b5:f0:38:7f:74:12:7e:70: 96:4b:11:fe:19:2d:44:ad:19:89:d5:18:95:12:89: de:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:15:AD:08:22:03:B9:02:6A:D8:B7:64:86:9C:76:8A:27:6D:06:D0 X509v3 Authority Key Identifier: keyid:FA:E2:7B:8C:1D:E6:B1:61:C7:98:AB:7B:85:15:3D:6B:A3:79:EF:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-uJ7jB3msWHHmKt7hRU9a6N5774.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/942efa-18a5-4649-9929-7be713679608/1/lRWtCCIDuQJq2Ldkhpx2iidtBtA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/942efa-18a5-4649-9929-7be713679608/1/1-uJ7jB3msWHHmKt7hRU9a6N5774.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.111.34.0/24 Signature Algorithm: sha256WithRSAEncryption 9c:6b:88:f9:a0:f4:1a:75:00:d8:08:37:73:b3:9d:ba:fe:f6: 7a:5d:f5:93:0e:cc:8b:86:72:6d:74:b7:2e:b5:b0:a5:d4:a2: 04:63:53:d5:dd:d8:86:63:45:ae:82:10:2b:ef:34:86:01:e1: 16:97:b8:1d:6f:cd:33:da:13:ff:c1:90:b2:d4:be:a6:af:9f: 02:66:a0:95:09:e0:cf:7e:53:be:01:ce:78:56:47:76:25:0c: 4c:e7:fc:97:c0:d9:68:f5:94:27:ee:fe:41:5f:17:7f:9c:ef: ce:b0:c2:64:8a:6c:96:62:b3:32:30:b7:65:78:bb:4b:dc:aa: 02:89:c5:7b:b5:98:f8:13:5d:56:5d:7e:ee:e1:33:21:a3:98: 44:6f:b8:e6:1b:c1:1f:61:3c:87:03:a4:dc:be:6b:9d:63:1f: 0a:9b:2a:b9:5e:fa:aa:8f:b9:5c:ff:d5:86:e5:dd:f1:62:35: 8c:fc:0d:f3:4c:b3:50:fe:d9:64:61:af:7c:ae:d7:86:ce:e2: d2:c4:36:5d:87:e0:ce:27:0f:c7:ca:d1:03:68:d7:18:01:15: fc:14:92:84:ea:2c:74:b4:25:6c:af:3a:ef:5f:22:4b:74:32: 83:f4:c0:93:03:2c:fb:b1:3b:28:40:73:b3:d7:d8:d7:0a:2b: fa:af:2d:58 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt3xw8hnh+43QyAqWlIWYM0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhZTI3YjhjMWRlNmIxNjFjNzk4YWI3Yjg1MTUzZDZiYTM3 OWVmYmUwHhcNMjYwMTAxMDQxODEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NTE1YWQwODIyMDNiOTAyNmFkOGI3NjQ4NjljNzY4YTI3NmQwNmQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmEqpR+S5tZkeXLttHEjQ+8072qAj hFAQeEWuyxYcoORYCkQfmZRhRxePAU8fSUhiEtUSzPdD6xlKx4vc6gWwkl8tcQzU 96uAfEluOaQeqk5NlqPYLrqhlNRToHFsVPha9PmA9s5CN5gqQwQHFklzz9lJP7O/ lMNsKOnW1OpE68XUbj02xeddDCoEUM3APg99uqibXOdbRyWvTRaW3BZ7Pi4TIuJW +HUHzNaGdvO6UZcGTZr+hTjtQmsmOvXp3cD/G09WaftTL8eY6SboUe8e4I6E+rXN 3qsSBfpU2GTSpQ7W9/6Sumj1tfA4f3QSfnCWSxH+GS1ErRmJ1RiVEone2QIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFJUVrQgiA7kCati3ZIacdoonbQbQMB8GA1UdIwQY MBaAFPrie4wd5rFhx5ire4UVPWujee++MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS11SjdqQjNtc1dISG1LdDdoUlU5YTZONTc3NC5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDgvOTQyZWZhLTE4YTUtNDY0OS05OTI5 LTdiZTcxMzY3OTYwOC8xL2xSV3RDQ0lEdVFKcTJMZGtocHgyaWlkdEJ0QS5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvMDgvOTQyZWZhLTE4YTUtNDY0OS05OTI5LTdiZTcxMzY3OTYw OC8xLzEtdUo3akIzbXNXSEhtS3Q3aFJVOWE2TjU3NzQuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADBbyIw DQYJKoZIhvcNAQELBQADggEBAJxriPmg9Bp1ANgIN3Oznbr+9npd9ZMOzIuGcm10 ty61sKXUogRjU9Xd2IZjRa6CECvvNIYB4RaXuB1vzTPaE//BkLLUvqavnwJmoJUJ 4M9+U74BznhWR3YlDEzn/JfA2Wj1lCfu/kFfF3+c786wwmSKbJZiszIwt2V4u0vc qgKJxXu1mPgTXVZdfu7hMyGjmERvuOYbwR9hPIcDpNy+a51jHwqbKrle+qqPuVz/ 1Ybl3fFiNYz8DfNMs1D+2WRhr3yu14bO4tLENl2H4M4nD8fK0QNo1xgBFfwUkoTq LHS0JWyvOu9fIkt0MoP0wJMDLPuxOyhAc7PX2NcKK/qvLVg= -----END CERTIFICATE-----Generated at Fri Jan 2 09:57:09 2026 by rpki-client