This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/f1eea2-9582-4a65-b5be-603aa1f209d8/1/lRo9q02GzXTO-VdLgUyky_WucDQ.roa File: lRo9q02GzXTO-VdLgUyky_WucDQ.roa (raw, json) Hash identifier: qdBqdNSlAa567AWHXHUkkyLxccIE0UG651WDqdBe+uA= Subject key identifier: 95:1A:3D:AB:4D:86:CD:74:CE:F9:57:4B:81:4C:A4:CB:F5:AE:70:34 Certificate issuer: /CN=ef477ca3b449bbc41247e8c921e4c8dabfc1afae Certificate serial: 019B775881BC91D78068AAB890DB96574BF5 Authority key identifier: EF:47:7C:A3:B4:49:BB:C4:12:47:E8:C9:21:E4:C8:DA:BF:C1:AF:AE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/70d8o7RJu8QSR-jJIeTI2r_Br64.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/f1eea2-9582-4a65-b5be-603aa1f209d8/1/lRo9q02GzXTO-VdLgUyky_WucDQ.roa Signing time: Thu 01 Jan 2026 02:17:27 +0000 ROA not before: Thu 01 Jan 2026 02:17:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209242 IP address blocks: 193.17.206.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/f1eea2-9582-4a65-b5be-603aa1f209d8/1/70d8o7RJu8QSR-jJIeTI2r_Br64.crl rsync://rpki.ripe.net/repository/DEFAULT/12/f1eea2-9582-4a65-b5be-603aa1f209d8/1/70d8o7RJu8QSR-jJIeTI2r_Br64.mft rsync://rpki.ripe.net/repository/DEFAULT/70d8o7RJu8QSR-jJIeTI2r_Br64.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:81:bc:91:d7:80:68:aa:b8:90:db:96:57:4b:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef477ca3b449bbc41247e8c921e4c8dabfc1afae Validity Not Before: Jan 1 02:17:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=951a3dab4d86cd74cef9574b814ca4cbf5ae7034 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:56:42:7d:65:4b:22:b9:52:ba:ca:b7:a4:35: 84:1e:66:d3:83:40:cc:31:ea:15:19:a6:55:a9:d3: 55:2e:e6:bb:1d:e2:12:49:72:78:29:da:72:cd:61: 40:5e:69:f1:fa:c9:b0:8d:38:be:09:a4:23:e1:18: 64:15:27:21:ac:d5:09:26:4f:19:db:06:87:cb:52: 49:fd:9f:d6:b1:49:50:26:27:6e:5d:30:8e:30:1f: 1b:a6:a2:31:5f:5b:e3:53:69:d0:93:fc:94:ce:ba: bf:a8:fa:c3:77:a1:a3:a5:91:9d:62:01:c0:dd:a5: b8:b9:55:a1:6d:21:7d:ae:3d:0a:c9:fe:2b:f7:c9: ff:fc:e4:a1:ba:39:d5:ee:2a:f8:d7:af:12:16:3a: b3:5d:f5:a3:d3:84:e4:be:79:f3:c8:19:2b:3f:c4: e6:c2:33:c6:2d:7c:75:eb:e1:01:f6:4d:42:de:5b: 74:19:fc:a9:25:66:79:66:2c:0a:fe:0f:08:c9:fe: 80:f1:58:17:08:f2:6b:f5:ca:29:1e:2a:e5:1e:24: 00:39:6f:54:23:f6:60:7a:ba:d0:89:3b:20:6b:02: d2:0d:74:dd:e8:7c:76:ea:fc:12:96:c7:4f:e3:81: 6c:23:65:93:fe:7a:25:66:9d:45:b8:ce:65:ab:b9: 45:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:1A:3D:AB:4D:86:CD:74:CE:F9:57:4B:81:4C:A4:CB:F5:AE:70:34 X509v3 Authority Key Identifier: keyid:EF:47:7C:A3:B4:49:BB:C4:12:47:E8:C9:21:E4:C8:DA:BF:C1:AF:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/70d8o7RJu8QSR-jJIeTI2r_Br64.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/f1eea2-9582-4a65-b5be-603aa1f209d8/1/lRo9q02GzXTO-VdLgUyky_WucDQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/f1eea2-9582-4a65-b5be-603aa1f209d8/1/70d8o7RJu8QSR-jJIeTI2r_Br64.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.17.206.0/24 Signature Algorithm: sha256WithRSAEncryption 0f:1d:b9:50:67:d4:73:7a:bc:e3:9b:21:2e:2e:e1:d4:79:bf: c2:ba:bc:96:f5:7b:32:33:2f:7d:f2:44:8a:fa:04:92:c9:a6: f4:e8:4c:4b:3f:95:a5:6f:51:34:f7:4d:4b:ab:04:2b:9f:06: 89:d6:92:80:ca:89:63:d7:dd:15:17:c7:5f:36:b5:1a:4c:2e: 88:5d:22:32:fa:d1:4a:87:5b:3c:a9:07:61:59:e9:59:33:e0: 78:83:45:ce:19:be:80:6f:f4:fd:b2:f9:c1:26:2b:b2:47:42: 60:6f:0a:88:02:ba:fa:96:54:34:7a:e7:5f:52:f8:25:6b:f3: c0:e0:e4:55:d2:45:27:34:d9:e1:9d:d4:d4:5d:cf:8e:9e:b7: d6:65:30:39:da:6a:f5:f2:6f:01:cf:93:bf:eb:da:8c:36:be: 9e:f2:17:1c:37:ee:0f:e6:75:db:2d:09:d7:10:90:56:b2:4d: 45:e5:41:9d:29:f8:18:a6:a0:4f:82:7e:68:cb:1d:ff:6b:f5: eb:13:28:7b:5a:f4:67:d3:38:01:59:78:ec:8a:f7:c0:eb:63: 82:76:e2:57:dd:a8:11:01:e5:7f:2a:97:f3:35:38:34:b2:5e: 8f:53:04:1b:b4:22:3a:fe:59:3f:c6:dc:71:f4:12:c0:cd:34: 96:f4:60:c9 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WIG8kdeAaKq4kNuWV0v1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmNDc3Y2EzYjQ0OWJiYzQxMjQ3ZThjOTIxZTRjOGRhYmZj MWFmYWUwHhcNMjYwMTAxMDIxNzI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NTFhM2RhYjRkODZjZDc0Y2VmOTU3NGI4MTRjYTRjYmY1YWU3MDM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmlZCfWVLIrlSusq3pDWEHmbTg0DM MeoVGaZVqdNVLua7HeISSXJ4KdpyzWFAXmnx+smwjTi+CaQj4RhkFSchrNUJJk8Z 2waHy1JJ/Z/WsUlQJiduXTCOMB8bpqIxX1vjU2nQk/yUzrq/qPrDd6GjpZGdYgHA 3aW4uVWhbSF9rj0Kyf4r98n//OShujnV7ir4168SFjqzXfWj04TkvnnzyBkrP8Tm wjPGLXx16+EB9k1C3lt0GfypJWZ5ZiwK/g8Iyf6A8VgXCPJr9copHirlHiQAOW9U I/ZgerrQiTsgawLSDXTd6Hx26vwSlsdP44FsI2WT/nolZp1FuM5lq7lFrwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJUaPatNhs10zvlXS4FMpMv1rnA0MB8GA1UdIwQY MBaAFO9HfKO0SbvEEkfoySHkyNq/wa+uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNzBkOG83Ukp1OFFTUi1qSkllVEkycl9CcjY0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9mMWVlYTItOTU4Mi00YTY1LWI1YmUt NjAzYWExZjIwOWQ4LzEvbFJvOXEwMkd6WFRPLVZkTGdVeWt5X1d1Y0RRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi9mMWVlYTItOTU4Mi00YTY1LWI1YmUtNjAzYWExZjIwOWQ4 LzEvNzBkOG83Ukp1OFFTUi1qSkllVEkycl9CcjY0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwRHOMA0G CSqGSIb3DQEBCwUAA4IBAQAPHblQZ9RzerzjmyEuLuHUeb/CuryW9XsyMy998kSK +gSSyab06ExLP5Wlb1E0901LqwQrnwaJ1pKAyolj190VF8dfNrUaTC6IXSIy+tFK h1s8qQdhWelZM+B4g0XOGb6Ab/T9svnBJiuyR0JgbwqIArr6llQ0eudfUvgla/PA 4ORV0kUnNNnhndTUXc+OnrfWZTA52mr18m8Bz5O/69qMNr6e8hccN+4P5nXbLQnX EJBWsk1F5UGdKfgYpqBPgn5oyx3/a/XrEyh7WvRn0zgBWXjsivfA62OCduJX3agR AeV/KpfzNTg0sl6PUwQbtCI6/lk/xtxx9BLAzTSW9GDJ -----END CERTIFICATE-----Generated at Sun Jan 25 09:18:19 2026 by rpki-client