This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/_L8djGrh0ltiLv6oZ1X7HHqdI7c.roa File: _L8djGrh0ltiLv6oZ1X7HHqdI7c.roa (raw, json) Hash identifier: DwVvmmhzGeOduCfg7065EWl2MWaIL6OeqmDXyYbnFWc= Subject key identifier: FC:BF:1D:8C:6A:E1:D2:5B:62:2E:FE:A8:67:55:FB:1C:7A:9D:23:B7 Certificate issuer: /CN=ad243dcff0cb38211f7fe7db3f913169b44cf456 Certificate serial: 019B7E38D38BDB665AE3710BA525E6C9845E Authority key identifier: AD:24:3D:CF:F0:CB:38:21:1F:7F:E7:DB:3F:91:31:69:B4:4C:F4:56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rSQ9z_DLOCEff-fbP5ExabRM9FY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/_L8djGrh0ltiLv6oZ1X7HHqdI7c.roa Signing time: Fri 02 Jan 2026 10:20:11 +0000 ROA not before: Fri 02 Jan 2026 10:20:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49455 IP address blocks: 46.249.224.0/19 maxlen: 19 82.194.192.0/19 maxlen: 19 109.108.192.0/19 maxlen: 19 188.113.64.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.crl rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.mft rsync://rpki.ripe.net/repository/DEFAULT/rSQ9z_DLOCEff-fbP5ExabRM9FY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:d3:8b:db:66:5a:e3:71:0b:a5:25:e6:c9:84:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ad243dcff0cb38211f7fe7db3f913169b44cf456 Validity Not Before: Jan 2 10:20:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fcbf1d8c6ae1d25b622efea86755fb1c7a9d23b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:74:27:95:66:b5:52:8f:e9:9b:92:31:36:96: f3:c7:94:97:09:54:78:cd:35:2f:73:78:3e:1e:c3: e4:af:2a:a5:04:f1:f9:03:42:f7:62:a1:03:12:12: 10:27:9c:88:7b:89:1e:04:31:d0:27:2b:16:52:33: 8f:4d:44:7c:27:de:70:d2:0a:7b:3f:9e:94:ba:56: 67:d3:f8:09:80:bb:45:5f:5f:97:a6:a7:a9:80:05: 59:de:b5:03:69:48:25:de:a1:04:62:20:2e:e7:33: ad:cb:7a:56:b5:78:27:cd:eb:54:a5:7d:a3:95:aa: ab:26:5d:a5:bf:39:24:74:33:5f:65:8d:00:96:cb: ff:cc:bf:35:53:0c:de:2e:af:49:77:9c:f9:47:ba: 81:ce:99:0f:81:5c:a8:61:b7:f3:cd:ea:53:c8:4d: 46:cc:3c:fb:6a:0b:4a:34:35:bc:97:0d:48:27:68: db:02:c0:78:a1:16:18:5e:de:af:c7:5e:4a:0d:60: bf:ea:55:7f:4a:d4:7f:29:ad:81:b7:fb:53:94:93: 61:5e:97:fa:c0:a8:eb:1c:98:c5:c9:d0:3a:c6:52: b1:32:7d:78:97:c1:fd:58:3d:51:b0:98:76:fc:db: c4:91:12:a0:9e:39:37:81:2d:01:36:2e:08:12:db: 18:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:BF:1D:8C:6A:E1:D2:5B:62:2E:FE:A8:67:55:FB:1C:7A:9D:23:B7 X509v3 Authority Key Identifier: keyid:AD:24:3D:CF:F0:CB:38:21:1F:7F:E7:DB:3F:91:31:69:B4:4C:F4:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rSQ9z_DLOCEff-fbP5ExabRM9FY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/_L8djGrh0ltiLv6oZ1X7HHqdI7c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.249.224.0/19 82.194.192.0/19 109.108.192.0/19 188.113.64.0/18 Signature Algorithm: sha256WithRSAEncryption 13:26:7c:1d:c2:4f:94:5f:77:aa:fb:d5:38:2e:7f:d6:90:23: 4c:62:32:bd:45:c6:2f:86:9d:96:d7:78:43:16:e2:72:87:eb: a5:59:a1:e0:a7:05:92:ab:7e:42:2f:26:8d:a2:fe:bf:d1:24: f9:82:10:43:1e:db:e0:3c:4f:e6:d6:b9:c2:10:17:f3:67:21: 1f:a5:cc:fa:44:7f:9f:2b:a8:7e:49:ec:b5:fd:52:0f:1f:0b: e0:65:69:55:aa:b5:50:d9:d7:88:a4:00:7e:e2:b3:04:10:c6: 9f:5f:60:1b:e1:12:b1:02:be:95:8b:4f:f5:3d:fb:68:4a:d3: 82:0e:c8:c2:ad:b5:4c:69:39:02:db:01:a6:62:cd:b5:1f:c5: 54:71:9d:bf:00:64:e3:6e:39:50:ca:dd:2e:fb:60:c3:9f:3c: 5a:1c:79:bc:3d:25:a1:67:72:51:54:17:46:ef:97:c5:b9:d7: ee:97:ac:5c:d2:54:23:d6:1f:2e:ff:15:4c:58:c4:a4:f1:3d: 0e:e0:d9:eb:13:cd:80:f7:cf:c3:da:95:a5:32:04:4e:a3:f8: 0c:dd:e7:a7:75:4d:dc:b2:83:27:9e:08:cd:6b:c4:23:65:97: f0:16:78:bc:49:5d:54:65:67:41:fe:2a:7e:50:a7:70:fb:42: db:95:41:1e -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt+ONOL22Za43ELpSXmyYReMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkMjQzZGNmZjBjYjM4MjExZjdmZTdkYjNmOTEzMTY5YjQ0 Y2Y0NTYwHhcNMjYwMTAyMTAyMDExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmY2JmMWQ4YzZhZTFkMjViNjIyZWZlYTg2NzU1ZmIxYzdhOWQyM2I3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArnQnlWa1Uo/pm5IxNpbzx5SXCVR4 zTUvc3g+HsPkryqlBPH5A0L3YqEDEhIQJ5yIe4keBDHQJysWUjOPTUR8J95w0gp7 P56UulZn0/gJgLtFX1+XpqepgAVZ3rUDaUgl3qEEYiAu5zOty3pWtXgnzetUpX2j laqrJl2lvzkkdDNfZY0Alsv/zL81UwzeLq9Jd5z5R7qBzpkPgVyoYbfzzepTyE1G zDz7agtKNDW8lw1IJ2jbAsB4oRYYXt6vx15KDWC/6lV/StR/Ka2Bt/tTlJNhXpf6 wKjrHJjFydA6xlKxMn14l8H9WD1RsJh2/NvEkRKgnjk3gS0BNi4IEtsYAQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFPy/HYxq4dJbYi7+qGdV+xx6nSO3MB8GA1UdIwQY MBaAFK0kPc/wyzghH3/n2z+RMWm0TPRWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvclNROXpfRExPQ0VmZi1mYlA1RXhhYlJNOUZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9hNWQyN2ItMjZjMC00ZWIzLTg5YmMt YjlmMjk4YTc5OGU0LzEvX0w4ZGpHcmgwbHRpTHY2b1oxWDdISHFkSTdjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy9hNWQyN2ItMjZjMC00ZWIzLTg5YmMtYjlmMjk4YTc5OGU0 LzEvclNROXpfRExPQ0VmZi1mYlA1RXhhYlJNOUZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQFLvngAwQF UsLAAwQFbWzAAwQGvHFAMA0GCSqGSIb3DQEBCwUAA4IBAQATJnwdwk+UX3eq+9U4 Ln/WkCNMYjK9RcYvhp2W13hDFuJyh+ulWaHgpwWSq35CLyaNov6/0ST5ghBDHtvg PE/m1rnCEBfzZyEfpcz6RH+fK6h+Sey1/VIPHwvgZWlVqrVQ2deIpAB+4rMEEMaf X2Ab4RKxAr6Vi0/1PftoStOCDsjCrbVMaTkC2wGmYs21H8VUcZ2/AGTjbjlQyt0u +2DDnzxaHHm8PSWhZ3JRVBdG75fFudful6xc0lQj1h8u/xVMWMSk8T0O4NnrE82A 98/D2pWlMgROo/gM3eendU3csoMnngjNa8QjZZfwFni8SV1UZWdB/ip+UKdw+0Lb lUEe -----END CERTIFICATE-----Generated at Mon Jan 26 10:24:09 2026 by rpki-client