This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/e31804-6270-4246-9100-f06e23432273/1/lgAFjN4gHYopIT8heunPXH1vt8E.roa File: lgAFjN4gHYopIT8heunPXH1vt8E.roa (raw, json) Hash identifier: r+8mwmWirHpSDxWo288I4eaMHGJth/6WbvlwodVcooQ= Subject key identifier: 96:00:05:8C:DE:20:1D:8A:29:21:3F:21:7A:E9:CF:5C:7D:6F:B7:C1 Certificate issuer: /CN=dce670a6ed4c78fdd77686792f7e087598906f73 Certificate serial: 019B77C673D17E8DCB4EE4400E9004E4AEF9 Authority key identifier: DC:E6:70:A6:ED:4C:78:FD:D7:76:86:79:2F:7E:08:75:98:90:6F:73 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3OZwpu1MeP3XdoZ5L34IdZiQb3M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/e31804-6270-4246-9100-f06e23432273/1/lgAFjN4gHYopIT8heunPXH1vt8E.roa Signing time: Thu 01 Jan 2026 04:17:32 +0000 ROA not before: Thu 01 Jan 2026 04:17:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 5089 IP address blocks: 193.39.183.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/e31804-6270-4246-9100-f06e23432273/1/3OZwpu1MeP3XdoZ5L34IdZiQb3M.crl rsync://rpki.ripe.net/repository/DEFAULT/0a/e31804-6270-4246-9100-f06e23432273/1/3OZwpu1MeP3XdoZ5L34IdZiQb3M.mft rsync://rpki.ripe.net/repository/DEFAULT/3OZwpu1MeP3XdoZ5L34IdZiQb3M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 04:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:73:d1:7e:8d:cb:4e:e4:40:0e:90:04:e4:ae:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dce670a6ed4c78fdd77686792f7e087598906f73 Validity Not Before: Jan 1 04:17:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9600058cde201d8a29213f217ae9cf5c7d6fb7c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:e3:b2:9d:06:bf:23:c3:7b:37:96:09:a0:a8: ab:dc:6b:bc:6a:21:57:44:d3:17:07:0b:50:ff:dc: 5a:71:ce:82:01:96:41:54:69:59:c7:0c:ff:9b:15: 60:dc:40:93:58:bb:cc:70:d7:f2:a6:3d:62:c0:c9: 16:46:67:69:f0:81:91:fb:fb:a0:a1:e8:63:35:92: b8:de:0e:90:9b:75:1d:d9:6e:1f:85:3b:c1:de:23: dc:41:60:a9:d8:8b:5d:a7:f4:d5:b3:86:1c:af:17: d4:01:95:9b:61:cf:d2:6e:21:da:64:f4:11:e5:d4: 6d:11:1d:60:2f:b7:ba:5c:e3:48:e5:cb:9a:cd:62: dc:18:4d:f2:80:c7:a8:1b:38:a0:13:37:d2:76:95: d8:51:67:43:24:60:e8:8c:7b:d9:33:db:b9:63:27: 4a:76:cd:72:3a:92:81:cf:d2:6b:c5:56:51:6f:7d: 55:df:4c:69:56:2d:9c:56:99:03:9b:59:e7:77:37: ac:ef:b3:2c:86:10:c2:38:93:4a:6e:a6:74:ec:03: e5:33:7f:77:c2:40:d8:94:b9:42:81:c9:33:a1:5d: fc:30:7a:76:77:d5:41:f7:6f:ff:86:bd:33:1a:d1: ee:7a:4b:2b:92:bf:b8:34:82:f5:d2:44:5d:dc:67: 25:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:00:05:8C:DE:20:1D:8A:29:21:3F:21:7A:E9:CF:5C:7D:6F:B7:C1 X509v3 Authority Key Identifier: keyid:DC:E6:70:A6:ED:4C:78:FD:D7:76:86:79:2F:7E:08:75:98:90:6F:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3OZwpu1MeP3XdoZ5L34IdZiQb3M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/e31804-6270-4246-9100-f06e23432273/1/lgAFjN4gHYopIT8heunPXH1vt8E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/e31804-6270-4246-9100-f06e23432273/1/3OZwpu1MeP3XdoZ5L34IdZiQb3M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.39.183.0/24 Signature Algorithm: sha256WithRSAEncryption 2a:c1:7d:44:2b:98:31:c8:31:17:46:6d:79:e6:88:8c:b9:7a: 23:9b:e3:24:09:dd:73:41:38:a0:33:6a:19:3d:df:b5:90:72: 9d:89:c8:52:2b:f2:ed:5f:c4:94:08:67:21:d5:fd:c0:0e:99: 38:fb:08:d3:88:c2:7c:e0:d2:88:1d:3a:3a:8a:5b:74:65:d3: 74:81:50:e3:89:c5:a2:13:4c:04:fc:ae:6b:7e:2a:de:bc:f9: 99:79:bb:59:2b:a3:ff:48:47:74:b4:90:e8:a2:03:a9:c1:ab: cb:12:93:7f:13:50:7f:b9:0c:7c:bf:4d:93:21:6b:78:1f:5a: bc:04:88:a4:59:36:01:2a:29:8b:6f:95:d2:da:d9:06:2a:c6: fd:18:06:d8:38:39:fd:96:c8:d7:9e:d2:0a:cc:c9:d3:25:fc: 9d:40:ee:d7:d3:99:7a:bf:9e:74:85:0a:28:5f:f7:c8:48:5d: 05:21:7c:6e:75:b8:6b:8d:8e:8c:df:3c:58:53:08:a8:de:4e: 2a:ac:94:06:e5:4c:9c:65:67:d6:24:77:6c:fc:61:56:b4:0d: 2e:07:33:b3:36:b5:8d:50:a8:2e:b7:f2:ee:d3:32:64:66:93: 94:7e:9c:2f:55:54:8a:f6:0b:5f:11:12:19:4b:09:84:84:27: 0c:b7:a0:c6 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xnPRfo3LTuRADpAE5K75MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjZTY3MGE2ZWQ0Yzc4ZmRkNzc2ODY3OTJmN2UwODc1OTg5 MDZmNzMwHhcNMjYwMTAxMDQxNzMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NjAwMDU4Y2RlMjAxZDhhMjkyMTNmMjE3YWU5Y2Y1YzdkNmZiN2MxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3OOynQa/I8N7N5YJoKir3Gu8aiFX RNMXBwtQ/9xacc6CAZZBVGlZxwz/mxVg3ECTWLvMcNfypj1iwMkWRmdp8IGR+/ug oehjNZK43g6Qm3Ud2W4fhTvB3iPcQWCp2Itdp/TVs4YcrxfUAZWbYc/SbiHaZPQR 5dRtER1gL7e6XONI5cuazWLcGE3ygMeoGzigEzfSdpXYUWdDJGDojHvZM9u5YydK ds1yOpKBz9JrxVZRb31V30xpVi2cVpkDm1nndzes77MshhDCOJNKbqZ07APlM393 wkDYlLlCgckzoV38MHp2d9VB92//hr0zGtHueksrkr+4NIL10kRd3GclJwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJYABYzeIB2KKSE/IXrpz1x9b7fBMB8GA1UdIwQY MBaAFNzmcKbtTHj913aGeS9+CHWYkG9zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM09ad3B1MU1lUDNYZG9aNUwzNElkWmlRYjNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS9lMzE4MDQtNjI3MC00MjQ2LTkxMDAt ZjA2ZTIzNDMyMjczLzEvbGdBRmpONGdIWW9wSVQ4aGV1blBYSDF2dDhFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYS9lMzE4MDQtNjI3MC00MjQ2LTkxMDAtZjA2ZTIzNDMyMjcz LzEvM09ad3B1MU1lUDNYZG9aNUwzNElkWmlRYjNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwSe3MA0G CSqGSIb3DQEBCwUAA4IBAQAqwX1EK5gxyDEXRm155oiMuXojm+MkCd1zQTigM2oZ Pd+1kHKdichSK/LtX8SUCGch1f3ADpk4+wjTiMJ84NKIHTo6ilt0ZdN0gVDjicWi E0wE/K5rfirevPmZebtZK6P/SEd0tJDoogOpwavLEpN/E1B/uQx8v02TIWt4H1q8 BIikWTYBKimLb5XS2tkGKsb9GAbYODn9lsjXntIKzMnTJfydQO7X05l6v550hQoo X/fISF0FIXxudbhrjY6M3zxYUwio3k4qrJQG5UycZWfWJHds/GFWtA0uBzOzNrWN UKgut/Lu0zJkZpOUfpwvVVSK9gtfERIZSwmEhCcMt6DG -----END CERTIFICATE-----Generated at Sun Jan 25 13:08:48 2026 by rpki-client