This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/7a6e21-d40b-4eeb-b3cb-00ed90269bb4/1/l0La-cqh0YtCqpb_P_ploY3jtxY.roa File: l0La-cqh0YtCqpb_P_ploY3jtxY.roa (raw, json) Hash identifier: 96uWLiEvgAqq8mEo7+VReaVgrIrRgh/p9r34i4OMLOw= Subject key identifier: 97:42:DA:F9:CA:A1:D1:8B:42:AA:96:FF:3F:FA:65:A1:8D:E3:B7:16 Certificate issuer: /CN=9d8f112756f1458dcf3e387a4be890f30ea949b3 Certificate serial: 019B7BA523C3930C5F2B496015CA022A8824 Authority key identifier: 9D:8F:11:27:56:F1:45:8D:CF:3E:38:7A:4B:E8:90:F3:0E:A9:49:B3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nY8RJ1bxRY3PPjh6S-iQ8w6pSbM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/7a6e21-d40b-4eeb-b3cb-00ed90269bb4/1/l0La-cqh0YtCqpb_P_ploY3jtxY.roa Signing time: Thu 01 Jan 2026 22:19:38 +0000 ROA not before: Thu 01 Jan 2026 22:19:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60243 IP address blocks: 185.34.48.0/24 maxlen: 24 185.34.49.0/24 maxlen: 24 185.34.50.0/24 maxlen: 24 185.34.51.0/24 maxlen: 24 2a04:5e80::/32 maxlen: 32 2a04:5e81::/32 maxlen: 32 2a04:5e82::/32 maxlen: 32 2a04:5e83::/32 maxlen: 32 2a04:5e84::/32 maxlen: 32 2a04:5e85::/32 maxlen: 32 2a04:5e86::/32 maxlen: 32 2a04:5e87::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/7a6e21-d40b-4eeb-b3cb-00ed90269bb4/1/nY8RJ1bxRY3PPjh6S-iQ8w6pSbM.crl rsync://rpki.ripe.net/repository/DEFAULT/18/7a6e21-d40b-4eeb-b3cb-00ed90269bb4/1/nY8RJ1bxRY3PPjh6S-iQ8w6pSbM.mft rsync://rpki.ripe.net/repository/DEFAULT/nY8RJ1bxRY3PPjh6S-iQ8w6pSbM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 14 Jan 2026 01:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:23:c3:93:0c:5f:2b:49:60:15:ca:02:2a:88:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d8f112756f1458dcf3e387a4be890f30ea949b3 Validity Not Before: Jan 1 22:19:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9742daf9caa1d18b42aa96ff3ffa65a18de3b716 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:3f:81:7d:c5:5d:36:22:2c:9e:68:86:09:9a: e9:57:0b:67:61:85:41:06:08:a7:02:d2:5f:33:11: 30:77:69:9d:18:ef:d2:fe:24:d6:09:58:4a:7a:26: 67:e6:f1:d3:17:48:18:a8:79:a3:65:aa:f8:6e:9b: 7f:c9:0e:d7:21:7b:ce:d5:87:83:04:d0:90:38:aa: 89:85:39:e0:a9:5c:bc:39:ff:d5:92:b8:51:00:b6: f1:32:11:8a:6b:02:99:b7:f9:c0:65:85:62:be:56: b1:d5:41:d2:9e:44:97:2a:ab:52:77:9a:d2:13:c1: ad:64:ed:79:98:44:4f:ce:cf:62:67:a4:90:2d:4c: a5:53:c5:42:d3:82:50:3f:b3:97:ed:a8:8d:e5:8f: 95:6d:8a:17:6a:72:ff:83:18:34:37:8a:59:60:52: 22:f9:2e:68:6b:05:0f:2d:ad:2c:fc:9e:ff:3b:88: be:d2:d7:51:58:35:98:b8:d1:a8:7b:7a:9e:e4:ab: d7:1e:97:52:6f:ed:de:a1:2a:2d:e3:25:84:a5:aa: 47:c7:84:5a:03:96:de:8c:36:49:a7:db:f8:6d:af: 8c:ea:71:f6:8f:84:fc:ec:eb:d5:29:47:7c:0e:65: 21:60:02:ec:27:84:40:28:bc:62:59:c0:39:75:b4: 82:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:42:DA:F9:CA:A1:D1:8B:42:AA:96:FF:3F:FA:65:A1:8D:E3:B7:16 X509v3 Authority Key Identifier: keyid:9D:8F:11:27:56:F1:45:8D:CF:3E:38:7A:4B:E8:90:F3:0E:A9:49:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nY8RJ1bxRY3PPjh6S-iQ8w6pSbM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/7a6e21-d40b-4eeb-b3cb-00ed90269bb4/1/l0La-cqh0YtCqpb_P_ploY3jtxY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/7a6e21-d40b-4eeb-b3cb-00ed90269bb4/1/nY8RJ1bxRY3PPjh6S-iQ8w6pSbM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.34.48.0/22 IPv6: 2a04:5e80::/29 Signature Algorithm: sha256WithRSAEncryption aa:a5:61:f7:88:5a:f9:d2:7b:0c:79:01:47:03:5c:37:13:ee: 47:4d:86:82:1a:45:bd:76:4f:ca:77:b4:e6:f6:89:b6:5d:1b: c8:b5:7d:e4:5e:20:b3:9e:4d:e1:a4:ed:ba:b0:85:74:cf:56: 73:39:1f:f7:11:8a:4d:bd:cc:7e:54:b6:78:99:b9:38:a9:d7: 47:79:6a:aa:0f:16:12:cb:59:5e:55:87:56:9c:0e:e8:a2:51: 21:a9:36:09:d2:22:c6:4b:00:19:7c:44:09:1c:49:ed:71:4d: 5e:9c:63:3d:38:6d:0b:81:13:bb:d0:c8:d7:8e:ef:19:6e:51: f8:f3:fa:f8:a9:46:17:09:5b:94:b4:1e:3b:ea:e3:df:79:13: c8:ac:4b:74:88:23:6a:ea:2d:d6:20:68:b7:11:f4:59:6d:30: 23:b0:c9:a7:cc:30:ce:21:8c:61:3e:48:7d:04:d5:0c:9c:15: 95:fa:03:b3:24:98:56:03:1a:3e:6d:52:07:78:1c:12:47:e5: e6:9a:fa:50:67:a7:04:41:f5:e3:84:5a:e7:fd:71:a6:05:1d: 0e:5c:9f:ff:5b:b4:e4:6a:81:6b:05:dd:92:57:61:f0:41:59: e2:6d:e1:3a:c2:48:6e:ee:77:d1:43:9d:21:7a:44:c4:3c:10: 75:fc:86:c5 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt7pSPDkwxfK0lgFcoCKogkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkOGYxMTI3NTZmMTQ1OGRjZjNlMzg3YTRiZTg5MGYzMGVh OTQ5YjMwHhcNMjYwMTAxMjIxOTM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NzQyZGFmOWNhYTFkMThiNDJhYTk2ZmYzZmZhNjVhMThkZTNiNzE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoT+BfcVdNiIsnmiGCZrpVwtnYYVB BginAtJfMxEwd2mdGO/S/iTWCVhKeiZn5vHTF0gYqHmjZar4bpt/yQ7XIXvO1YeD BNCQOKqJhTngqVy8Of/VkrhRALbxMhGKawKZt/nAZYVivlax1UHSnkSXKqtSd5rS E8GtZO15mERPzs9iZ6SQLUylU8VC04JQP7OX7aiN5Y+VbYoXanL/gxg0N4pZYFIi +S5oawUPLa0s/J7/O4i+0tdRWDWYuNGoe3qe5KvXHpdSb+3eoSot4yWEpapHx4Ra A5bejDZJp9v4ba+M6nH2j4T87OvVKUd8DmUhYALsJ4RAKLxiWcA5dbSCYwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFJdC2vnKodGLQqqW/z/6ZaGN47cWMB8GA1UdIwQY MBaAFJ2PESdW8UWNzz44ekvokPMOqUmzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvblk4UkoxYnhSWTNQUGpoNlMtaVE4dzZwU2JNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC83YTZlMjEtZDQwYi00ZWViLWIzY2It MDBlZDkwMjY5YmI0LzEvbDBMYS1jcWgwWXRDcXBiX1BfcGxvWTNqdHhZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC83YTZlMjEtZDQwYi00ZWViLWIzY2ItMDBlZDkwMjY5YmI0 LzEvblk4UkoxYnhSWTNQUGpoNlMtaVE4dzZwU2JNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuSIwMA0E AgACMAcDBQMqBF6AMA0GCSqGSIb3DQEBCwUAA4IBAQCqpWH3iFr50nsMeQFHA1w3 E+5HTYaCGkW9dk/Kd7Tm9om2XRvItX3kXiCznk3hpO26sIV0z1ZzOR/3EYpNvcx+ VLZ4mbk4qddHeWqqDxYSy1leVYdWnA7oolEhqTYJ0iLGSwAZfEQJHEntcU1enGM9 OG0LgRO70MjXju8ZblH48/r4qUYXCVuUtB476uPfeRPIrEt0iCNq6i3WIGi3EfRZ bTAjsMmnzDDOIYxhPkh9BNUMnBWV+gOzJJhWAxo+bVIHeBwSR+XmmvpQZ6cEQfXj hFrn/XGmBR0OXJ//W7TkaoFrBd2SV2HwQVnibeE6wkhu7nfRQ50hekTEPBB1/IbF -----END CERTIFICATE-----Generated at Tue Jan 13 06:19:43 2026 by rpki-client