This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/99dd6e-0856-4a27-aecd-d8928f5e1b40/1/L0pkYoARJXEFc-gB4c5J8VXY3Mg.roa File: L0pkYoARJXEFc-gB4c5J8VXY3Mg.roa (raw, json) Hash identifier: 1faOAUcr0h7qDHU3+7FacAnxC8gdfFMLQm2JVMNKznA= Subject key identifier: 2F:4A:64:62:80:11:25:71:05:73:E8:01:E1:CE:49:F1:55:D8:DC:C8 Certificate issuer: /CN=6a9d6d26e56c132ddbbc005ac424fb536acba020 Certificate serial: 019B7AC9209A2D743F9F9F4C914CCE16891F Authority key identifier: 6A:9D:6D:26:E5:6C:13:2D:DB:BC:00:5A:C4:24:FB:53:6A:CB:A0:20 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ap1tJuVsEy3bvABaxCT7U2rLoCA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/99dd6e-0856-4a27-aecd-d8928f5e1b40/1/L0pkYoARJXEFc-gB4c5J8VXY3Mg.roa Signing time: Thu 01 Jan 2026 18:19:20 +0000 ROA not before: Thu 01 Jan 2026 18:19:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 559 IP address blocks: 193.5.152.0/22 maxlen: 22 193.246.121.0/24 maxlen: 24 193.247.182.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/99dd6e-0856-4a27-aecd-d8928f5e1b40/1/ap1tJuVsEy3bvABaxCT7U2rLoCA.crl rsync://rpki.ripe.net/repository/DEFAULT/30/99dd6e-0856-4a27-aecd-d8928f5e1b40/1/ap1tJuVsEy3bvABaxCT7U2rLoCA.mft rsync://rpki.ripe.net/repository/DEFAULT/ap1tJuVsEy3bvABaxCT7U2rLoCA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c9:20:9a:2d:74:3f:9f:9f:4c:91:4c:ce:16:89:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6a9d6d26e56c132ddbbc005ac424fb536acba020 Validity Not Before: Jan 1 18:19:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2f4a6462801125710573e801e1ce49f155d8dcc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:f7:95:34:a7:a3:8f:a7:ea:b2:12:02:28:11: a6:c2:14:8e:b1:e5:f0:0b:82:6f:1e:0f:cd:d7:2a: 83:c7:00:6b:03:c9:3a:0e:1e:1c:03:be:64:40:d7: 99:58:e9:f8:f0:a2:67:11:e4:62:08:1c:75:69:35: 9e:36:35:d9:43:0b:da:c3:1c:43:87:bb:35:e5:00: 9e:30:af:2a:9d:76:da:95:dd:73:01:d6:56:8f:2d: 7a:ad:26:fb:ec:65:f9:69:6a:e1:fe:28:c8:d6:92: b1:ce:95:1b:dd:1a:86:8d:3b:20:a2:4c:8c:e3:12: 7e:a6:06:a9:84:48:05:55:18:d1:f5:56:18:ab:58: 4f:e5:be:1f:f9:29:25:07:3d:d9:fc:6f:11:c6:98: 3a:71:67:a6:83:41:f1:0f:86:4a:06:77:d3:cc:da: 69:7a:00:86:76:aa:b8:a6:40:dc:bb:03:a4:84:c4: ec:31:dc:d1:9c:fb:dd:dc:8c:f2:b6:92:f0:88:3f: 69:cb:3c:04:df:35:d5:ce:3b:23:2f:8a:8f:74:26: 81:a5:08:6a:48:9a:ad:70:3b:cb:10:3b:6e:34:4e: c2:e7:11:35:8a:fa:d7:44:a4:d7:88:bc:d7:50:cb: 8d:98:4f:50:fe:1f:50:02:26:a9:5b:86:c9:67:7c: 09:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:4A:64:62:80:11:25:71:05:73:E8:01:E1:CE:49:F1:55:D8:DC:C8 X509v3 Authority Key Identifier: keyid:6A:9D:6D:26:E5:6C:13:2D:DB:BC:00:5A:C4:24:FB:53:6A:CB:A0:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ap1tJuVsEy3bvABaxCT7U2rLoCA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/99dd6e-0856-4a27-aecd-d8928f5e1b40/1/L0pkYoARJXEFc-gB4c5J8VXY3Mg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/99dd6e-0856-4a27-aecd-d8928f5e1b40/1/ap1tJuVsEy3bvABaxCT7U2rLoCA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.5.152.0/22 193.246.121.0/24 193.247.182.0/24 Signature Algorithm: sha256WithRSAEncryption 6d:3d:65:91:a6:ed:76:63:74:05:9f:34:3f:da:fc:80:af:b4: 94:d8:c0:77:19:1e:e4:a0:33:05:f9:37:bb:e1:fc:92:8d:49: 5e:ae:cb:c2:59:cb:1c:47:7a:5c:92:af:11:53:77:d0:b6:12: b0:4d:e5:9d:6f:98:b6:fd:65:f9:d3:03:63:e3:c7:75:69:df: 51:fe:04:d7:90:04:b3:1e:30:04:9b:d6:0b:ec:0b:ce:06:e0: 02:2b:dc:c9:e3:76:9d:51:0d:27:db:75:60:eb:f1:7f:d1:45: ac:5a:c7:9f:ee:6f:b3:ce:91:2e:7d:4a:2a:64:08:b3:52:5d: a2:ed:3b:bc:c1:93:a5:cf:1e:56:ab:3c:6c:9a:26:b6:d1:ba: 0f:80:c4:a0:c8:ae:b7:d0:02:68:31:99:86:41:4c:6e:96:33: f3:32:04:fc:06:8e:54:6e:35:b1:f3:04:0f:fc:e6:07:98:32: c2:fe:b4:51:eb:b1:ce:52:1c:6b:b5:a6:ad:75:5f:fb:1b:49: 65:88:6d:97:19:26:c2:b1:8a:4a:74:0a:b0:05:cc:2d:e8:6c: 5a:89:aa:9d:dc:04:a3:fb:7d:71:60:df:ee:a4:2a:1e:e2:7d: 03:65:43:51:92:9d:c3:63:40:0f:7f:6e:90:d5:0c:38:fd:f4: 30:12:a3:a6 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt6ySCaLXQ/n59MkUzOFokfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZhOWQ2ZDI2ZTU2YzEzMmRkYmJjMDA1YWM0MjRmYjUzNmFj YmEwMjAwHhcNMjYwMTAxMTgxOTIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZjRhNjQ2MjgwMTEyNTcxMDU3M2U4MDFlMWNlNDlmMTU1ZDhkY2M4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkPeVNKejj6fqshICKBGmwhSOseXw C4JvHg/N1yqDxwBrA8k6Dh4cA75kQNeZWOn48KJnEeRiCBx1aTWeNjXZQwvawxxD h7s15QCeMK8qnXbald1zAdZWjy16rSb77GX5aWrh/ijI1pKxzpUb3RqGjTsgokyM 4xJ+pgaphEgFVRjR9VYYq1hP5b4f+SklBz3Z/G8Rxpg6cWemg0HxD4ZKBnfTzNpp egCGdqq4pkDcuwOkhMTsMdzRnPvd3IzytpLwiD9pyzwE3zXVzjsjL4qPdCaBpQhq SJqtcDvLEDtuNE7C5xE1ivrXRKTXiLzXUMuNmE9Q/h9QAiapW4bJZ3wJ3wIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFC9KZGKAESVxBXPoAeHOSfFV2NzIMB8GA1UdIwQY MBaAFGqdbSblbBMt27wAWsQk+1Nqy6AgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYXAxdEp1VnNFeTNidkFCYXhDVDdVMnJMb0NBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC85OWRkNmUtMDg1Ni00YTI3LWFlY2Qt ZDg5MjhmNWUxYjQwLzEvTDBwa1lvQVJKWEVGYy1nQjRjNUo4VlhZM01nLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC85OWRkNmUtMDg1Ni00YTI3LWFlY2QtZDg5MjhmNWUxYjQw LzEvYXAxdEp1VnNFeTNidkFCYXhDVDdVMnJMb0NBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCwQWYAwQA wfZ5AwQAwfe2MA0GCSqGSIb3DQEBCwUAA4IBAQBtPWWRpu12Y3QFnzQ/2vyAr7SU 2MB3GR7koDMF+Te74fySjUlersvCWcscR3pckq8RU3fQthKwTeWdb5i2/WX50wNj 48d1ad9R/gTXkASzHjAEm9YL7AvOBuACK9zJ43adUQ0n23Vg6/F/0UWsWsef7m+z zpEufUoqZAizUl2i7Tu8wZOlzx5Wqzxsmia20boPgMSgyK630AJoMZmGQUxuljPz MgT8Bo5UbjWx8wQP/OYHmDLC/rRR67HOUhxrtaatdV/7G0lliG2XGSbCsYpKdAqw Bcwt6Gxaiaqd3ASj+31xYN/upCoe4n0DZUNRkp3DY0APf26Q1Qw4/fQwEqOm -----END CERTIFICATE-----Generated at Mon Jan 26 09:24:19 2026 by rpki-client