This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/LRA4NHTbI8YXizMExMEwZmftiGo.roa File: LRA4NHTbI8YXizMExMEwZmftiGo.roa (raw, json) Hash identifier: bddukW4NN3VgJ3W7MosH1zHBKP/OQlmEdiyKELJTiSc= Subject key identifier: 2D:10:38:34:74:DB:23:C6:17:8B:33:04:C4:C1:30:66:67:ED:88:6A Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Certificate serial: 019B78348CA6DF7EB356C3F3909EC2B7F1BD Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/LRA4NHTbI8YXizMExMEwZmftiGo.roa Signing time: Thu 01 Jan 2026 06:17:48 +0000 ROA not before: Thu 01 Jan 2026 06:17:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208514 IP address blocks: 192.121.55.0/24 maxlen: 24 193.181.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 09:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:8c:a6:df:7e:b3:56:c3:f3:90:9e:c2:b7:f1:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Validity Not Before: Jan 1 06:17:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2d10383474db23c6178b3304c4c1306667ed886a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:e0:90:65:99:7a:eb:1f:d0:49:fb:31:36:10: 42:c2:e6:a3:4d:b0:2b:96:d4:c7:12:74:4e:87:02: 6a:0d:b6:f8:08:77:1c:cb:61:99:5c:c5:62:a7:f2: 30:ed:d2:af:9a:ab:60:0e:9f:e6:73:1e:c1:f9:7f: f9:00:ad:35:98:65:1c:f1:63:b1:f9:3f:6a:c5:b4: bc:bf:f3:bc:70:1c:46:f5:c0:8d:d0:e4:35:85:2c: a6:91:c9:1f:6d:70:29:00:64:28:4c:10:7a:e6:ee: 3e:db:e6:7a:2f:33:4c:30:59:f8:92:1e:34:af:be: de:5b:39:ab:7a:13:bc:a9:ae:d6:c6:94:59:a7:1c: 0b:0f:59:ca:28:e8:aa:25:a2:af:97:9c:1f:b6:9c: 50:d2:c5:f4:4b:a6:ca:fc:54:d7:b0:4b:08:2e:f0: 26:9c:4d:40:e6:33:e1:70:15:89:e9:9b:26:3b:00: a1:cd:7f:e9:6d:f1:d1:dc:f6:e9:3c:e8:43:0d:81: df:0c:c6:26:fb:0b:be:25:b1:de:9d:fb:19:c9:21: 83:89:90:4c:1b:55:52:6d:17:f6:24:43:fe:69:60: c3:56:1a:79:8c:74:8d:cd:82:a4:9f:d1:2c:bf:53: 4b:44:31:01:02:d6:cb:cb:9a:42:39:ce:0c:a5:f4: 91:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:10:38:34:74:DB:23:C6:17:8B:33:04:C4:C1:30:66:67:ED:88:6A X509v3 Authority Key Identifier: keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/LRA4NHTbI8YXizMExMEwZmftiGo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.121.55.0/24 193.181.33.0/24 Signature Algorithm: sha256WithRSAEncryption 55:2f:74:cb:c0:8a:e1:fe:f5:d4:aa:ec:f5:9a:41:c9:67:d9: 21:26:3c:b3:34:c8:9a:78:05:10:6a:9a:b7:ba:b8:17:fe:0d: 02:19:eb:dc:66:5f:ba:89:45:50:b2:11:10:6e:cc:84:b2:87: 44:08:dc:2b:8d:a6:3d:73:79:66:2e:f9:79:d1:87:09:2a:34: 3d:cc:52:2c:7b:33:1f:48:02:0b:3b:8b:4b:51:a2:fa:07:cf: 16:49:3e:86:38:96:ba:1d:3b:a8:3e:a5:de:9d:3b:18:b5:90: de:6f:3f:b7:31:db:cc:a5:f8:df:aa:87:07:9f:1a:79:c8:be: da:65:42:e6:48:cc:54:e8:95:00:c7:20:30:35:12:c7:bc:dc: 0f:79:73:21:e9:43:52:8b:f4:19:ad:9c:b1:5b:1a:1b:58:9f: 53:47:df:f5:07:28:1c:ea:2f:d2:1f:ff:e3:e9:66:73:e5:13: e5:cd:52:2b:d9:f6:ea:cc:d4:00:95:e4:90:12:5c:0f:69:57: 16:78:ac:5c:cf:ab:4f:af:c9:d6:21:57:6e:3d:62:0a:0c:3e: ef:3e:c8:0e:5c:70:06:cc:3f:11:3f:e8:47:5a:72:55:fd:f3: 35:f4:b5:8e:3e:d8:2b:94:06:9d:31:ea:38:fb:fb:29:d8:56: cd:a0:4f:77 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt4NIym336zVsPzkJ7Ct/G9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxMzVjN2Y1NzFlZWZlYjY3NDA0YWI2YzQ1ZmQ0NzU1NTFh ZGFmMWIwHhcNMjYwMTAxMDYxNzQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZDEwMzgzNDc0ZGIyM2M2MTc4YjMzMDRjNGMxMzA2NjY3ZWQ4ODZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo+CQZZl66x/QSfsxNhBCwuajTbAr ltTHEnROhwJqDbb4CHccy2GZXMVip/Iw7dKvmqtgDp/mcx7B+X/5AK01mGUc8WOx +T9qxbS8v/O8cBxG9cCN0OQ1hSymkckfbXApAGQoTBB65u4+2+Z6LzNMMFn4kh40 r77eWzmrehO8qa7WxpRZpxwLD1nKKOiqJaKvl5wftpxQ0sX0S6bK/FTXsEsILvAm nE1A5jPhcBWJ6ZsmOwChzX/pbfHR3PbpPOhDDYHfDMYm+wu+JbHenfsZySGDiZBM G1VSbRf2JEP+aWDDVhp5jHSNzYKkn9Esv1NLRDEBAtbLy5pCOc4MpfSRewIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFC0QODR02yPGF4szBMTBMGZn7YhqMB8GA1UdIwQY MBaAFCE1x/Vx7v62dASrbEX9R1VRra8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDIt OTQzZDAzMzIxMzI2LzEvTFJBNE5IVGJJOFlYaXpNRXhNRXdabWZ0aUdvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDItOTQzZDAzMzIxMzI2 LzEvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwHk3AwQA wbUhMA0GCSqGSIb3DQEBCwUAA4IBAQBVL3TLwIrh/vXUquz1mkHJZ9khJjyzNMia eAUQapq3urgX/g0CGevcZl+6iUVQshEQbsyEsodECNwrjaY9c3lmLvl50YcJKjQ9 zFIsezMfSAILO4tLUaL6B88WST6GOJa6HTuoPqXenTsYtZDebz+3MdvMpfjfqocH nxp5yL7aZULmSMxU6JUAxyAwNRLHvNwPeXMh6UNSi/QZrZyxWxobWJ9TR9/1Bygc 6i/SH//j6WZz5RPlzVIr2fbqzNQAleSQElwPaVcWeKxcz6tPr8nWIVduPWIKDD7v PsgOXHAGzD8RP+hHWnJV/fM19LWOPtgrlAadMeo4+/sp2FbNoE93 -----END CERTIFICATE-----Generated at Thu Jan 8 13:45:32 2026 by rpki-client