This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/31991a-bdb8-4b5b-ae5d-b29812c3e465/1/L--nog6xEzatgFx0vve4F3aMfqg.roa File: L--nog6xEzatgFx0vve4F3aMfqg.roa (raw, json) Hash identifier: bT7m47/vJSRP8Nb+CoGFbdUeEIOeotqAaMuhhj16mOg= Subject key identifier: 2F:EF:A7:A2:0E:B1:13:36:AD:80:5C:74:BE:F7:B8:17:76:8C:7E:A8 Certificate issuer: /CN=ae0a5a1b38617cc161f60613d98e179b5360c054 Certificate serial: 019B7910FEB0C7DC3BC76DB8A2FCEEE5662D Authority key identifier: AE:0A:5A:1B:38:61:7C:C1:61:F6:06:13:D9:8E:17:9B:53:60:C0:54 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/31991a-bdb8-4b5b-ae5d-b29812c3e465/1/L--nog6xEzatgFx0vve4F3aMfqg.roa Signing time: Thu 01 Jan 2026 10:18:35 +0000 ROA not before: Thu 01 Jan 2026 10:18:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20825 IP address blocks: 192.109.211.0/24 maxlen: 24 192.109.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/31991a-bdb8-4b5b-ae5d-b29812c3e465/1/rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.crl rsync://rpki.ripe.net/repository/DEFAULT/38/31991a-bdb8-4b5b-ae5d-b29812c3e465/1/rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.mft rsync://rpki.ripe.net/repository/DEFAULT/rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:fe:b0:c7:dc:3b:c7:6d:b8:a2:fc:ee:e5:66:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ae0a5a1b38617cc161f60613d98e179b5360c054 Validity Not Before: Jan 1 10:18:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2fefa7a20eb11336ad805c74bef7b817768c7ea8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:68:2f:b8:40:72:13:a1:4b:68:fe:6d:73:26: 88:ce:f0:a3:1e:ec:dd:fd:83:19:48:43:e1:9e:cd: 06:9e:1d:4a:77:12:db:cf:5f:7d:40:4e:b5:82:e5: 72:7a:13:ee:ab:e4:47:ec:87:fe:20:a0:32:7e:8a: 54:50:e8:fb:26:0b:3c:c2:e8:ed:4a:e4:fb:00:bd: ed:f6:74:5c:a7:7b:2f:98:24:f3:8a:81:84:15:89: e4:11:28:8c:56:55:8e:69:a4:a9:07:95:c1:70:76: 22:71:b8:26:04:a2:24:ff:38:59:d5:7c:47:e4:a1: 31:f2:54:6f:65:fc:96:55:cd:14:e5:cb:b1:aa:09: ba:b4:e4:2a:d4:9d:d0:46:c5:a4:f4:84:57:73:c6: 0e:fb:dd:3e:e0:98:16:89:af:7e:0c:9e:db:0a:4b: f9:5a:37:12:aa:0a:3f:44:df:d7:ae:b9:c6:e2:79: 6d:a4:61:5f:b9:77:43:af:ec:40:d3:30:01:8e:49: a7:4b:29:9e:17:63:b4:84:78:ec:ff:10:5e:b3:af: 82:0c:db:ee:32:5b:28:85:59:84:de:57:cc:43:63: 24:d6:87:94:15:90:d2:e4:80:9f:1b:1a:ee:ed:93: 07:cb:17:ec:8e:3c:39:73:c9:39:7b:f3:26:72:1f: 76:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:EF:A7:A2:0E:B1:13:36:AD:80:5C:74:BE:F7:B8:17:76:8C:7E:A8 X509v3 Authority Key Identifier: keyid:AE:0A:5A:1B:38:61:7C:C1:61:F6:06:13:D9:8E:17:9B:53:60:C0:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/31991a-bdb8-4b5b-ae5d-b29812c3e465/1/L--nog6xEzatgFx0vve4F3aMfqg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/31991a-bdb8-4b5b-ae5d-b29812c3e465/1/rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.109.211.0-192.109.212.255 Signature Algorithm: sha256WithRSAEncryption 3b:c8:55:2c:03:45:2d:3a:58:88:32:79:c6:24:a3:a5:70:0c: 4e:c0:dd:f6:e7:02:a9:73:9c:ad:f9:41:00:0c:64:92:ed:a7: 48:ac:05:44:2c:18:2e:4d:3e:1a:77:29:e1:18:f4:42:ec:a3: 29:b6:bf:ee:dd:df:41:ee:a4:26:66:7f:da:71:28:5d:4b:57: a6:ef:82:6c:e0:9d:b3:96:35:7c:14:46:a9:07:ac:17:c5:b8: b3:b5:16:95:ab:1e:ba:78:e1:42:5c:3d:b4:59:d6:6a:7c:25: 1d:90:7f:79:68:b5:25:9f:e4:72:50:0a:e7:f4:3f:59:1f:ee: be:66:90:01:b9:7d:a5:1e:43:75:f5:9e:07:e7:67:fe:d7:c8: 14:2d:c3:f4:e4:93:26:91:a7:89:b2:79:0e:f7:09:d7:b9:4a: 23:9a:6f:8e:94:41:1e:04:9d:39:52:0f:f8:4e:84:47:2c:0a: 0b:d3:54:e7:66:30:cf:fa:6f:85:2f:fd:55:39:02:b8:90:76: c3:fe:ce:a2:a5:2e:96:e9:25:f0:96:ce:31:60:f8:db:f4:c1: a3:ed:7c:19:7d:bb:9b:e9:23:b9:e8:71:2d:1f:68:7b:27:da: 2d:0e:15:e8:d5:63:cb:c6:5d:b1:e6:cf:0c:59:43:b5:7c:86: a0:2b:ac:9a -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt5EP6wx9w7x224ovzu5WYtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlMGE1YTFiMzg2MTdjYzE2MWY2MDYxM2Q5OGUxNzliNTM2 MGMwNTQwHhcNMjYwMTAxMTAxODM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZmVmYTdhMjBlYjExMzM2YWQ4MDVjNzRiZWY3YjgxNzc2OGM3ZWE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0mgvuEByE6FLaP5tcyaIzvCjHuzd /YMZSEPhns0Gnh1KdxLbz199QE61guVyehPuq+RH7If+IKAyfopUUOj7Jgs8wujt SuT7AL3t9nRcp3svmCTzioGEFYnkESiMVlWOaaSpB5XBcHYicbgmBKIk/zhZ1XxH 5KEx8lRvZfyWVc0U5cuxqgm6tOQq1J3QRsWk9IRXc8YO+90+4JgWia9+DJ7bCkv5 WjcSqgo/RN/XrrnG4nltpGFfuXdDr+xA0zABjkmnSymeF2O0hHjs/xBes6+CDNvu MlsohVmE3lfMQ2Mk1oeUFZDS5ICfGxru7ZMHyxfsjjw5c8k5e/Mmch92zwIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFC/vp6IOsRM2rYBcdL73uBd2jH6oMB8GA1UdIwQY MBaAFK4KWhs4YXzBYfYGE9mOF5tTYMBUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcmdwYUd6aGhmTUZoOWdZVDJZNFhtMU5nd0ZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8zMTk5MWEtYmRiOC00YjViLWFlNWQt YjI5ODEyYzNlNDY1LzEvTC0tbm9nNnhFemF0Z0Z4MHZ2ZTRGM2FNZnFnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC8zMTk5MWEtYmRiOC00YjViLWFlNWQtYjI5ODEyYzNlNDY1 LzEvcmdwYUd6aGhmTUZoOWdZVDJZNFhtMU5nd0ZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBADAbdMD BADAbdQwDQYJKoZIhvcNAQELBQADggEBADvIVSwDRS06WIgyecYko6VwDE7A3fbn AqlznK35QQAMZJLtp0isBUQsGC5NPhp3KeEY9ELsoym2v+7d30HupCZmf9pxKF1L V6bvgmzgnbOWNXwURqkHrBfFuLO1FpWrHrp44UJcPbRZ1mp8JR2Qf3lotSWf5HJQ Cuf0P1kf7r5mkAG5faUeQ3X1ngfnZ/7XyBQtw/TkkyaRp4myeQ73Cde5SiOab46U QR4EnTlSD/hOhEcsCgvTVOdmMM/6b4Uv/VU5AriQdsP+zqKlLpbpJfCWzjFg+Nv0 waPtfBl9u5vpI7nocS0faHsn2i0OFejVY8vGXbHmzwxZQ7V8hqArrJo= -----END CERTIFICATE-----Generated at Mon Jan 12 03:48:09 2026 by rpki-client