This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/9a1e6f-2e1c-4743-a7a6-06f36628c8a1/1/L4GTgn9egBv7X8ozBy3W1tdX8eU.roa File: L4GTgn9egBv7X8ozBy3W1tdX8eU.roa (raw, json) Hash identifier: WLET1VlxTbzpa1IgY9ty4OjbAIQ5DWuzb+zM7ZHvhBc= Subject key identifier: 2F:81:93:82:7F:5E:80:1B:FB:5F:CA:33:07:2D:D6:D6:D7:57:F1:E5 Certificate issuer: /CN=4b1a238e043fe063a723b63159015393a64afceb Certificate serial: 019B76EB73C2BCA2D654F91016E0D5352BF7 Authority key identifier: 4B:1A:23:8E:04:3F:E0:63:A7:23:B6:31:59:01:53:93:A6:4A:FC:EB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SxojjgQ_4GOnI7YxWQFTk6ZK_Os.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/9a1e6f-2e1c-4743-a7a6-06f36628c8a1/1/L4GTgn9egBv7X8ozBy3W1tdX8eU.roa Signing time: Thu 01 Jan 2026 00:18:20 +0000 ROA not before: Thu 01 Jan 2026 00:18:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12350 IP address blocks: 193.247.107.0/24 maxlen: 24 193.247.108.0/24 maxlen: 24 193.247.110.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/9a1e6f-2e1c-4743-a7a6-06f36628c8a1/1/SxojjgQ_4GOnI7YxWQFTk6ZK_Os.crl rsync://rpki.ripe.net/repository/DEFAULT/22/9a1e6f-2e1c-4743-a7a6-06f36628c8a1/1/SxojjgQ_4GOnI7YxWQFTk6ZK_Os.mft rsync://rpki.ripe.net/repository/DEFAULT/SxojjgQ_4GOnI7YxWQFTk6ZK_Os.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:73:c2:bc:a2:d6:54:f9:10:16:e0:d5:35:2b:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b1a238e043fe063a723b63159015393a64afceb Validity Not Before: Jan 1 00:18:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2f8193827f5e801bfb5fca33072dd6d6d757f1e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:f6:2a:b8:eb:da:29:1a:fd:8d:ad:db:50:31: 85:d9:4f:2a:4e:48:03:07:65:51:1c:1f:f6:d0:95: f0:55:91:86:a2:6e:d5:e5:d3:fe:34:ac:fa:db:1f: f2:82:c4:9b:9e:ab:eb:37:4a:95:3b:bc:c2:ec:50: 73:82:9f:8f:2c:9e:c2:1b:b8:21:be:7a:af:1a:40: df:e6:c7:90:f3:98:2b:22:3e:01:ab:47:fd:92:97: 02:13:9b:91:1c:18:d5:d1:8c:ed:fb:f3:e7:44:aa: 0b:82:df:e1:78:de:fa:5e:59:ed:f1:95:cb:31:f4: 0f:14:97:3d:b9:43:ac:15:93:f8:e0:e1:83:f9:e6: 22:b0:f0:3f:8d:b8:43:f4:68:fb:82:17:4c:19:d0: 9d:05:8e:9d:1a:a8:67:26:62:22:d3:1f:8f:bf:ee: ea:b0:bc:78:9e:ec:96:8f:e3:96:fb:77:c8:36:76: 48:02:ce:92:2b:ec:10:f7:89:97:da:be:59:68:1b: 80:fb:da:53:dc:0d:08:69:e5:11:b6:0a:b4:e6:d9: 16:9b:e3:c2:58:f3:05:ff:c1:92:18:a0:39:c9:b2: db:33:a4:f3:08:84:99:19:d4:2f:e3:08:a3:a5:3c: 4f:a6:84:f3:db:17:d0:94:cb:9b:8d:6a:dd:8c:f6: 60:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:81:93:82:7F:5E:80:1B:FB:5F:CA:33:07:2D:D6:D6:D7:57:F1:E5 X509v3 Authority Key Identifier: keyid:4B:1A:23:8E:04:3F:E0:63:A7:23:B6:31:59:01:53:93:A6:4A:FC:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SxojjgQ_4GOnI7YxWQFTk6ZK_Os.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/9a1e6f-2e1c-4743-a7a6-06f36628c8a1/1/L4GTgn9egBv7X8ozBy3W1tdX8eU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/9a1e6f-2e1c-4743-a7a6-06f36628c8a1/1/SxojjgQ_4GOnI7YxWQFTk6ZK_Os.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.247.107.0-193.247.108.255 193.247.110.0/23 Signature Algorithm: sha256WithRSAEncryption e9:07:88:52:b2:a5:c5:99:79:d0:1c:85:70:c7:28:5f:40:ae: fe:0f:d8:86:19:fc:54:3a:e7:10:f8:38:f9:1c:e3:de:fd:36: d6:64:dd:cd:87:78:41:52:e5:79:bd:58:27:e1:7e:74:51:d0: d1:7f:e1:a6:1c:33:56:70:83:26:e4:c3:bd:76:9d:83:3d:fc: d2:4b:23:44:8b:43:ed:f2:0d:51:5f:2e:cd:ad:8c:55:f8:23: 6e:ce:b6:01:51:42:4a:69:84:a9:db:93:84:c4:c1:4b:11:3a: 61:2c:de:06:cb:f5:6d:15:01:c6:e3:91:f3:a3:5d:38:cf:31: 3e:47:33:86:a0:3d:00:51:8b:76:e8:ff:87:ba:e6:d4:bf:39: 25:a5:f2:ea:01:e5:d0:fc:3f:d7:44:51:39:c6:02:29:d1:39: dd:7c:01:28:ce:f4:1a:ae:52:25:dc:50:fb:4a:fd:6b:84:f3: 97:42:9c:5e:5f:a1:21:ce:47:f4:c3:20:72:d1:e8:c5:b0:5c: e6:4a:04:42:6d:28:d6:85:eb:8b:69:a5:d7:20:9f:4f:b0:69: 5c:ff:8e:dc:24:93:67:09:c8:c5:31:a1:1d:fa:92:f2:32:0d: 4c:61:7f:a9:bc:81:34:3a:e4:b0:68:40:21:2c:f7:a1:99:1f: e8:79:b8:62 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt263PCvKLWVPkQFuDVNSv3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiMWEyMzhlMDQzZmUwNjNhNzIzYjYzMTU5MDE1MzkzYTY0 YWZjZWIwHhcNMjYwMTAxMDAxODIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZjgxOTM4MjdmNWU4MDFiZmI1ZmNhMzMwNzJkZDZkNmQ3NTdmMWU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwvYquOvaKRr9ja3bUDGF2U8qTkgD B2VRHB/20JXwVZGGom7V5dP+NKz62x/ygsSbnqvrN0qVO7zC7FBzgp+PLJ7CG7gh vnqvGkDf5seQ85grIj4Bq0f9kpcCE5uRHBjV0Yzt+/PnRKoLgt/heN76Xlnt8ZXL MfQPFJc9uUOsFZP44OGD+eYisPA/jbhD9Gj7ghdMGdCdBY6dGqhnJmIi0x+Pv+7q sLx4nuyWj+OW+3fINnZIAs6SK+wQ94mX2r5ZaBuA+9pT3A0IaeURtgq05tkWm+PC WPMF/8GSGKA5ybLbM6TzCISZGdQv4wijpTxPpoTz2xfQlMubjWrdjPZgSwIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFC+Bk4J/XoAb+1/KMwct1tbXV/HlMB8GA1UdIwQY MBaAFEsaI44EP+BjpyO2MVkBU5OmSvzrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU3hvampnUV80R09uSTdZeFdRRlRrNlpLX09zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi85YTFlNmYtMmUxYy00NzQzLWE3YTYt MDZmMzY2MjhjOGExLzEvTDRHVGduOWVnQnY3WDhvekJ5M1cxdGRYOGVVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi85YTFlNmYtMmUxYy00NzQzLWE3YTYtMDZmMzY2MjhjOGEx LzEvU3hvampnUV80R09uSTdZeFdRRlRrNlpLX09zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBADB92sD BADB92wDBAHB924wDQYJKoZIhvcNAQELBQADggEBAOkHiFKypcWZedAchXDHKF9A rv4P2IYZ/FQ65xD4OPkc4979NtZk3c2HeEFS5Xm9WCfhfnRR0NF/4aYcM1Zwgybk w712nYM9/NJLI0SLQ+3yDVFfLs2tjFX4I27OtgFRQkpphKnbk4TEwUsROmEs3gbL 9W0VAcbjkfOjXTjPMT5HM4agPQBRi3bo/4e65tS/OSWl8uoB5dD8P9dEUTnGAinR Od18ASjO9BquUiXcUPtK/WuE85dCnF5foSHOR/TDIHLR6MWwXOZKBEJtKNaF64tp pdcgn0+waVz/jtwkk2cJyMUxoR36kvIyDUxhf6m8gTQ65LBoQCEs96GZH+h5uGI= -----END CERTIFICATE-----Generated at Mon Jan 26 08:37:30 2026 by rpki-client