This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/LgqwiddErCeqmONalEAccIe_9ZI.roa File: LgqwiddErCeqmONalEAccIe_9ZI.roa (raw, json) Hash identifier: vUvF2iqoGKYdCngh26+3XZdI1nh5UcCaB/cJvH2Dedw= Subject key identifier: 2E:0A:B0:89:D7:44:AC:27:AA:98:E3:5A:94:40:1C:70:87:BF:F5:92 Certificate issuer: /CN=28855852a4bcd1bf1ec813f3c13b0f1f372f3971 Certificate serial: 019B7DC9D115EE88B99BC05C7B46C08B875D Authority key identifier: 28:85:58:52:A4:BC:D1:BF:1E:C8:13:F3:C1:3B:0F:1F:37:2F:39:71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KIVYUqS80b8eyBPzwTsPHzcvOXE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/LgqwiddErCeqmONalEAccIe_9ZI.roa Signing time: Fri 02 Jan 2026 08:18:56 +0000 ROA not before: Fri 02 Jan 2026 08:18:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205231 IP address blocks: 193.201.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/KIVYUqS80b8eyBPzwTsPHzcvOXE.crl rsync://rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/KIVYUqS80b8eyBPzwTsPHzcvOXE.mft rsync://rpki.ripe.net/repository/DEFAULT/KIVYUqS80b8eyBPzwTsPHzcvOXE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:c9:d1:15:ee:88:b9:9b:c0:5c:7b:46:c0:8b:87:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28855852a4bcd1bf1ec813f3c13b0f1f372f3971 Validity Not Before: Jan 2 08:18:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2e0ab089d744ac27aa98e35a94401c7087bff592 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:e4:e4:1c:ab:d9:bd:0e:09:f7:00:b3:aa:93: c6:eb:8d:e4:96:ea:7d:34:64:71:a4:c9:86:3c:fa: 42:ab:43:d4:1c:02:8d:a8:7c:67:be:2d:64:73:b5: ab:5e:b2:25:87:d9:e8:96:15:8b:fb:7c:93:f4:cd: a8:0e:cb:db:c0:85:17:c0:f7:61:cb:e4:98:f0:e4: f5:cf:5e:24:0f:20:66:4d:9d:a3:26:db:70:88:a3: 92:b6:56:3f:eb:c6:c1:a7:6e:3b:82:a6:e3:ce:0e: 6c:23:11:1c:3b:6c:53:bc:a1:b8:25:54:23:9f:8b: 3e:c0:31:13:a7:e0:f8:d4:b0:b4:90:76:41:03:48: 54:23:fa:79:a5:3c:bb:39:4e:ea:a9:98:e4:cc:46: 60:e7:ae:01:44:65:6c:6a:8d:1d:b0:e4:c7:b8:ef: 63:a2:ae:09:6f:d2:aa:b7:5e:d6:b1:62:00:da:dd: a4:14:39:3a:b8:17:dc:73:37:f5:33:6e:83:18:de: f9:0c:a9:ec:33:a1:24:f9:78:05:d5:aa:b1:26:49: 7f:24:de:2b:b8:42:04:8c:2a:34:ab:dc:25:75:93: 6e:ee:83:aa:3c:00:3d:e3:75:bd:e8:99:c9:9f:58: 47:d2:cf:e6:3e:59:ce:3b:7d:25:8a:2f:33:2b:54: 63:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:0A:B0:89:D7:44:AC:27:AA:98:E3:5A:94:40:1C:70:87:BF:F5:92 X509v3 Authority Key Identifier: keyid:28:85:58:52:A4:BC:D1:BF:1E:C8:13:F3:C1:3B:0F:1F:37:2F:39:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KIVYUqS80b8eyBPzwTsPHzcvOXE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/LgqwiddErCeqmONalEAccIe_9ZI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/KIVYUqS80b8eyBPzwTsPHzcvOXE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.201.11.0/24 Signature Algorithm: sha256WithRSAEncryption 4b:47:43:16:7e:e5:4d:7a:bd:b0:12:5b:2e:01:d9:3d:9b:9c: 3a:5c:6c:43:0d:da:38:bc:25:f2:31:0f:17:2f:ed:6c:b2:7d: f4:a1:23:33:81:eb:f3:a1:47:91:e3:94:b7:96:ff:4a:88:3b: ec:8c:26:f2:1d:38:a6:f5:84:4c:f0:86:7a:f5:14:30:48:67: b9:b3:a9:a3:4a:56:7e:ea:93:6f:ca:b2:23:f2:33:54:58:96: c7:74:39:7e:20:7f:9b:d0:53:60:ad:05:4f:79:de:06:0b:66: 6c:2e:2a:7b:f8:d3:ff:27:11:e3:6e:f4:a2:04:9b:39:a9:73: 01:0a:47:0b:5d:75:bc:d9:20:85:6a:24:63:56:e3:05:28:a9: 5f:76:51:29:da:16:91:6e:82:66:4f:64:d8:a1:08:4b:00:18: b4:eb:bb:91:57:1d:6c:b6:4c:f5:36:78:d9:57:13:d6:bb:0d: c0:69:2d:48:ab:9d:72:cb:c5:fd:7b:47:bc:62:7b:fc:ee:54: dc:11:0d:8e:96:f4:e6:63:c4:d8:cf:53:04:c1:4f:ab:3f:52: 75:ca:01:70:56:eb:ed:77:41:1b:16:2e:e2:c4:bd:9e:f2:bc: 80:a4:7a:24:80:1b:a9:01:d0:c0:80:11:92:12:d8:08:87:cf: 4c:05:22:32 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9ydEV7oi5m8Bce0bAi4ddMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI4ODU1ODUyYTRiY2QxYmYxZWM4MTNmM2MxM2IwZjFmMzcy ZjM5NzEwHhcNMjYwMTAyMDgxODU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZTBhYjA4OWQ3NDRhYzI3YWE5OGUzNWE5NDQwMWM3MDg3YmZmNTkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyOTkHKvZvQ4J9wCzqpPG643klup9 NGRxpMmGPPpCq0PUHAKNqHxnvi1kc7WrXrIlh9nolhWL+3yT9M2oDsvbwIUXwPdh y+SY8OT1z14kDyBmTZ2jJttwiKOStlY/68bBp247gqbjzg5sIxEcO2xTvKG4JVQj n4s+wDETp+D41LC0kHZBA0hUI/p5pTy7OU7qqZjkzEZg564BRGVsao0dsOTHuO9j oq4Jb9Kqt17WsWIA2t2kFDk6uBfcczf1M26DGN75DKnsM6Ek+XgF1aqxJkl/JN4r uEIEjCo0q9wldZNu7oOqPAA943W96JnJn1hH0s/mPlnOO30lii8zK1RjHwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFC4KsInXRKwnqpjjWpRAHHCHv/WSMB8GA1UdIwQY MBaAFCiFWFKkvNG/HsgT88E7Dx83LzlxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS0lWWVVxUzgwYjhleUJQendUc1BIemN2T1hFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8wZTM2ZmMtYmEwYi00Y2U2LWFmNmEt NzA0NDYzZWJhZDM2LzEvTGdxd2lkZEVyQ2VxbU9OYWxFQWNjSWVfOVpJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC8wZTM2ZmMtYmEwYi00Y2U2LWFmNmEtNzA0NDYzZWJhZDM2 LzEvS0lWWVVxUzgwYjhleUJQendUc1BIemN2T1hFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwckLMA0G CSqGSIb3DQEBCwUAA4IBAQBLR0MWfuVNer2wElsuAdk9m5w6XGxDDdo4vCXyMQ8X L+1ssn30oSMzgevzoUeR45S3lv9KiDvsjCbyHTim9YRM8IZ69RQwSGe5s6mjSlZ+ 6pNvyrIj8jNUWJbHdDl+IH+b0FNgrQVPed4GC2ZsLip7+NP/JxHjbvSiBJs5qXMB CkcLXXW82SCFaiRjVuMFKKlfdlEp2haRboJmT2TYoQhLABi067uRVx1stkz1NnjZ VxPWuw3AaS1Iq51yy8X9e0e8Ynv87lTcEQ2OlvTmY8TYz1MEwU+rP1J1ygFwVuvt d0EbFi7ixL2e8ryApHokgBupAdDAgBGSEtgIh89MBSIy -----END CERTIFICATE-----Generated at Mon Jan 26 07:07:11 2026 by rpki-client