This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/lC8mVQtZgzYCvFwXFlGkBqCpw84.roa File: lC8mVQtZgzYCvFwXFlGkBqCpw84.roa (raw, json) Hash identifier: SarrKRsARvJpAVux4A8mAEIosBVax08KS/WsVU5r/mE= Subject key identifier: 94:2F:26:55:0B:59:83:36:02:BC:5C:17:16:51:A4:06:A0:A9:C3:CE Certificate issuer: /CN=74e3c336972094b1a8c13d41816857d197a3aae9 Certificate serial: 019B7FF214EFA9A22DE028C4AF48AD2E7E63 Authority key identifier: 74:E3:C3:36:97:20:94:B1:A8:C1:3D:41:81:68:57:D1:97:A3:AA:E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dOPDNpcglLGowT1BgWhX0Zejquk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/lC8mVQtZgzYCvFwXFlGkBqCpw84.roa Signing time: Fri 02 Jan 2026 18:22:10 +0000 ROA not before: Fri 02 Jan 2026 18:22:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60298 IP address blocks: 194.183.190.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/dOPDNpcglLGowT1BgWhX0Zejquk.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/dOPDNpcglLGowT1BgWhX0Zejquk.mft rsync://rpki.ripe.net/repository/DEFAULT/dOPDNpcglLGowT1BgWhX0Zejquk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:14:ef:a9:a2:2d:e0:28:c4:af:48:ad:2e:7e:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74e3c336972094b1a8c13d41816857d197a3aae9 Validity Not Before: Jan 2 18:22:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=942f26550b59833602bc5c171651a406a0a9c3ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:cd:c0:f3:09:49:2d:2b:eb:1b:1c:a1:5e:85: d3:01:5e:2c:f9:af:ff:d8:49:55:74:0a:43:d4:7a: 66:0b:36:9c:76:6e:ae:04:7f:b6:af:1b:d4:bc:61: 33:81:39:28:17:f8:9f:7d:f4:c5:16:a7:b7:c5:70: d8:14:da:78:45:5b:09:0d:8a:75:bd:e8:0e:33:47: 13:93:e2:cd:4e:ab:00:b2:72:ed:34:f4:bb:b7:fa: 68:55:19:eb:61:ce:ba:c1:ba:68:6e:ea:88:74:56: 4b:08:25:6b:fe:ab:92:6a:76:61:c6:8c:47:e6:0c: c2:fe:ca:1a:d7:ac:e6:15:b6:32:ef:54:7b:82:35: 4e:48:d0:bb:02:52:62:1b:9e:fc:57:9b:0d:51:3d: 70:47:2c:73:2d:05:d7:fc:b2:e5:59:10:6c:2a:a9: a7:d0:53:8d:5d:61:c1:da:37:f3:22:58:06:ce:30: e0:4b:4e:b9:56:a8:c6:69:fb:43:70:56:8d:4a:59: fb:0e:3b:62:d2:98:95:22:5c:aa:5c:ab:eb:68:f2: eb:a6:3f:d5:49:b4:57:7d:c6:09:f1:17:e8:22:4e: 3e:1d:a5:2a:f5:3a:ca:a4:c0:de:e3:62:bd:23:9d: cc:39:fe:0f:f4:76:0e:91:60:cb:fb:ec:dc:38:19: 21:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:2F:26:55:0B:59:83:36:02:BC:5C:17:16:51:A4:06:A0:A9:C3:CE X509v3 Authority Key Identifier: keyid:74:E3:C3:36:97:20:94:B1:A8:C1:3D:41:81:68:57:D1:97:A3:AA:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dOPDNpcglLGowT1BgWhX0Zejquk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/lC8mVQtZgzYCvFwXFlGkBqCpw84.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/dOPDNpcglLGowT1BgWhX0Zejquk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.183.190.0/24 Signature Algorithm: sha256WithRSAEncryption ce:86:ad:3b:e1:ea:5f:6c:27:d5:64:07:1c:2e:e0:41:85:f0: a5:70:d5:a5:56:44:f9:6c:63:97:12:f5:95:35:e2:b2:f9:6d: d6:12:f0:8a:d7:a6:39:3d:3d:8c:6a:c8:2d:6b:e6:22:d6:6a: ec:40:26:47:67:fc:c3:3b:23:30:56:de:a0:45:e3:49:53:a9: 7e:11:ed:18:f9:41:d8:0f:9c:19:e0:9f:54:95:72:3d:86:28: 7f:4b:f6:68:c7:ee:78:13:1c:09:37:2e:ab:c1:6f:aa:db:3f: 0b:03:26:d4:0d:6a:ca:e6:22:a0:4f:74:f7:ce:2c:a2:1b:b8: 33:8d:1a:32:99:b8:cb:df:31:ce:46:47:ac:0f:37:7d:59:9b: 71:09:d5:9d:5c:25:ce:9b:40:5d:a5:0e:59:f8:16:55:ec:09: a0:db:74:a5:95:a6:25:2a:9f:6f:b1:f1:fc:af:55:23:3f:ec: 86:ca:be:c6:5c:77:bf:93:b3:70:a6:8c:f8:81:d2:70:e5:cd: 47:56:ac:15:c5:b8:54:d6:80:05:4b:e8:c4:05:e5:43:59:b9: e1:03:5b:3d:5e:34:3a:d3:97:0d:4f:36:2c:4a:44:ea:eb:e5: e9:2f:ef:0c:9b:2d:af:bf:96:f3:42:51:20:7a:06:bb:67:2a: ff:c5:dc:d4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/8hTvqaIt4CjEr0itLn5jMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0ZTNjMzM2OTcyMDk0YjFhOGMxM2Q0MTgxNjg1N2QxOTdh M2FhZTkwHhcNMjYwMTAyMTgyMjEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NDJmMjY1NTBiNTk4MzM2MDJiYzVjMTcxNjUxYTQwNmEwYTljM2NlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtc3A8wlJLSvrGxyhXoXTAV4s+a// 2ElVdApD1HpmCzacdm6uBH+2rxvUvGEzgTkoF/ifffTFFqe3xXDYFNp4RVsJDYp1 vegOM0cTk+LNTqsAsnLtNPS7t/poVRnrYc66wbpobuqIdFZLCCVr/quSanZhxoxH 5gzC/soa16zmFbYy71R7gjVOSNC7AlJiG578V5sNUT1wRyxzLQXX/LLlWRBsKqmn 0FONXWHB2jfzIlgGzjDgS065VqjGaftDcFaNSln7Djti0piVIlyqXKvraPLrpj/V SbRXfcYJ8RfoIk4+HaUq9TrKpMDe42K9I53MOf4P9HYOkWDL++zcOBkhkwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJQvJlULWYM2ArxcFxZRpAagqcPOMB8GA1UdIwQY MBaAFHTjwzaXIJSxqME9QYFoV9GXo6rpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZE9QRE5wY2dsTEdvd1QxQmdXaFgwWmVqcXVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi8xOGM0OTgtMjE3MS00ZTFjLThkODAt YTZjNDllYjI4Mjg3LzEvbEM4bVZRdFpnellDdkZ3WEZsR2tCcUNwdzg0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi8xOGM0OTgtMjE3MS00ZTFjLThkODAtYTZjNDllYjI4Mjg3 LzEvZE9QRE5wY2dsTEdvd1QxQmdXaFgwWmVqcXVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwre+MA0G CSqGSIb3DQEBCwUAA4IBAQDOhq074epfbCfVZAccLuBBhfClcNWlVkT5bGOXEvWV NeKy+W3WEvCK16Y5PT2Masgta+Yi1mrsQCZHZ/zDOyMwVt6gReNJU6l+Ee0Y+UHY D5wZ4J9UlXI9hih/S/Zox+54ExwJNy6rwW+q2z8LAybUDWrK5iKgT3T3ziyiG7gz jRoymbjL3zHORkesDzd9WZtxCdWdXCXOm0BdpQ5Z+BZV7Amg23SllaYlKp9vsfH8 r1UjP+yGyr7GXHe/k7Nwpoz4gdJw5c1HVqwVxbhU1oAFS+jEBeVDWbnhA1s9XjQ6 05cNTzYsSkTq6+XpL+8Mmy2vv5bzQlEgega7Zyr/xdzU -----END CERTIFICATE-----Generated at Sun Jan 25 13:43:27 2026 by rpki-client