This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/fb48fd-4ec5-43f1-93cc-8654786e20a9/1/LceaXnMeu276vgP2oQyUQj1pB_Q.roa File: LceaXnMeu276vgP2oQyUQj1pB_Q.roa (raw, json) Hash identifier: HrwRyFbgAYEEHCkLHWw/X0HtmQIyrz8WJ529vkNQigM= Subject key identifier: 2D:C7:9A:5E:73:1E:BB:6E:FA:BE:03:F6:A1:0C:94:42:3D:69:07:F4 Certificate issuer: /CN=6745314516483fe27c0530ccb9707c376d20e7f0 Certificate serial: 019B7AC90D8B48D0D7551931219CA6E25F93 Authority key identifier: 67:45:31:45:16:48:3F:E2:7C:05:30:CC:B9:70:7C:37:6D:20:E7:F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z0UxRRZIP-J8BTDMuXB8N20g5_A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/fb48fd-4ec5-43f1-93cc-8654786e20a9/1/LceaXnMeu276vgP2oQyUQj1pB_Q.roa Signing time: Thu 01 Jan 2026 18:19:15 +0000 ROA not before: Thu 01 Jan 2026 18:19:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 399668 IP address blocks: 193.3.178.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/fb48fd-4ec5-43f1-93cc-8654786e20a9/1/Z0UxRRZIP-J8BTDMuXB8N20g5_A.crl rsync://rpki.ripe.net/repository/DEFAULT/44/fb48fd-4ec5-43f1-93cc-8654786e20a9/1/Z0UxRRZIP-J8BTDMuXB8N20g5_A.mft rsync://rpki.ripe.net/repository/DEFAULT/Z0UxRRZIP-J8BTDMuXB8N20g5_A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c9:0d:8b:48:d0:d7:55:19:31:21:9c:a6:e2:5f:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6745314516483fe27c0530ccb9707c376d20e7f0 Validity Not Before: Jan 1 18:19:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2dc79a5e731ebb6efabe03f6a10c94423d6907f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:d8:e3:5b:54:ac:7c:85:d5:c5:9b:ac:c2:f1: 78:ad:75:b2:a6:75:54:68:92:fb:95:db:3e:a6:5d: df:38:46:98:d5:bf:ac:f0:c2:e1:f8:18:ae:96:ee: 4c:71:43:f5:bd:f3:f8:1c:8f:a2:19:f4:b9:a4:06: 88:e9:fa:5e:b0:c5:e9:35:2e:b5:59:ee:3c:3f:2e: e6:fa:59:1e:82:2a:0a:91:00:2c:94:6d:33:20:17: 57:c5:16:6f:42:11:ba:1a:e9:45:75:e4:2b:60:b6: 88:31:f9:fa:80:e4:18:ef:ce:46:bd:6b:02:3a:0a: ed:63:9e:78:1a:78:60:e2:ea:de:ae:24:e9:df:3b: 28:3e:50:8f:38:88:0f:28:41:bc:22:87:7f:d7:17: af:d4:68:f8:60:e7:bf:34:b0:63:c1:91:bf:40:4b: 4b:f1:3f:95:8e:dc:10:66:36:46:fb:ac:a9:98:42: 73:8c:cc:cb:c8:44:fe:7b:15:ca:92:9d:52:11:98: b7:79:98:a7:38:7f:c1:de:cd:c1:1c:aa:1d:b0:5c: e0:ba:1e:b4:4a:56:b1:16:58:1a:0e:92:f4:c1:33: 78:8b:6d:4a:0a:5d:2a:b9:45:a1:54:b4:f5:c5:85: c3:9d:5a:65:39:4b:c6:d7:eb:54:60:e8:47:95:2e: c2:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:C7:9A:5E:73:1E:BB:6E:FA:BE:03:F6:A1:0C:94:42:3D:69:07:F4 X509v3 Authority Key Identifier: keyid:67:45:31:45:16:48:3F:E2:7C:05:30:CC:B9:70:7C:37:6D:20:E7:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z0UxRRZIP-J8BTDMuXB8N20g5_A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/fb48fd-4ec5-43f1-93cc-8654786e20a9/1/LceaXnMeu276vgP2oQyUQj1pB_Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/fb48fd-4ec5-43f1-93cc-8654786e20a9/1/Z0UxRRZIP-J8BTDMuXB8N20g5_A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.3.178.0/24 Signature Algorithm: sha256WithRSAEncryption 4f:df:ef:d5:63:7b:50:a0:f7:95:f5:d9:d6:18:e9:30:e7:99: 74:59:4a:94:ee:63:f0:02:f1:f4:d5:3e:9e:ad:35:e5:5f:44: 5e:8a:7f:d6:79:10:19:7d:6b:a4:97:23:02:27:ef:61:72:58: 3d:1c:67:9c:88:29:95:94:86:5b:25:76:ab:0f:9c:25:db:ab: 33:28:1b:fa:f1:33:c6:31:f8:98:47:67:b5:d2:ac:4f:9d:1d: 59:99:b1:33:bc:27:66:4a:9c:1a:69:0b:9c:f9:be:c6:71:29: d1:54:c1:15:58:b6:53:57:cb:4b:9f:e2:6b:18:cb:1e:3e:be: 01:a6:4f:f3:b8:8d:eb:cc:f2:98:96:fa:d3:e8:04:e2:b1:1a: bc:38:70:ba:92:33:bf:a0:92:25:3a:b7:fe:12:06:79:c7:26: 0d:0b:df:82:52:80:b8:ea:c6:dd:87:5b:55:b1:71:d9:3b:26: 74:c9:81:3f:30:93:0b:1a:54:e9:12:4d:52:a9:76:17:ce:e1: 2e:0d:51:ad:d1:fb:6f:4c:2b:3e:9f:57:68:a2:2c:a2:41:60: b7:32:27:0a:ce:5a:a7:f2:39:6b:48:ca:ae:9b:a0:b4:e6:b2: 3c:18:0d:1d:c3:c2:28:20:0d:29:64:16:5c:0a:d0:65:1c:a9: 28:16:4f:4a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yQ2LSNDXVRkxIZym4l+TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3NDUzMTQ1MTY0ODNmZTI3YzA1MzBjY2I5NzA3YzM3NmQy MGU3ZjAwHhcNMjYwMTAxMTgxOTE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZGM3OWE1ZTczMWViYjZlZmFiZTAzZjZhMTBjOTQ0MjNkNjkwN2Y0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl9jjW1SsfIXVxZuswvF4rXWypnVU aJL7lds+pl3fOEaY1b+s8MLh+Biulu5McUP1vfP4HI+iGfS5pAaI6fpesMXpNS61 We48Py7m+lkegioKkQAslG0zIBdXxRZvQhG6GulFdeQrYLaIMfn6gOQY785GvWsC OgrtY554Gnhg4ureriTp3zsoPlCPOIgPKEG8Iod/1xev1Gj4YOe/NLBjwZG/QEtL 8T+VjtwQZjZG+6ypmEJzjMzLyET+exXKkp1SEZi3eZinOH/B3s3BHKodsFzguh60 SlaxFlgaDpL0wTN4i21KCl0quUWhVLT1xYXDnVplOUvG1+tUYOhHlS7CswIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFC3Hml5zHrtu+r4D9qEMlEI9aQf0MB8GA1UdIwQY MBaAFGdFMUUWSD/ifAUwzLlwfDdtIOfwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWjBVeFJSWklQLUo4QlRETXVYQjhOMjBnNV9BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC9mYjQ4ZmQtNGVjNS00M2YxLTkzY2Mt ODY1NDc4NmUyMGE5LzEvTGNlYVhuTWV1Mjc2dmdQMm9ReVVRajFwQl9RLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC9mYjQ4ZmQtNGVjNS00M2YxLTkzY2MtODY1NDc4NmUyMGE5 LzEvWjBVeFJSWklQLUo4QlRETXVYQjhOMjBnNV9BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwQOyMA0G CSqGSIb3DQEBCwUAA4IBAQBP3+/VY3tQoPeV9dnWGOkw55l0WUqU7mPwAvH01T6e rTXlX0Rein/WeRAZfWuklyMCJ+9hclg9HGeciCmVlIZbJXarD5wl26szKBv68TPG MfiYR2e10qxPnR1ZmbEzvCdmSpwaaQuc+b7GcSnRVMEVWLZTV8tLn+JrGMsePr4B pk/zuI3rzPKYlvrT6ATisRq8OHC6kjO/oJIlOrf+EgZ5xyYNC9+CUoC46sbdh1tV sXHZOyZ0yYE/MJMLGlTpEk1SqXYXzuEuDVGt0ftvTCs+n1dooiyiQWC3MicKzlqn 8jlrSMqum6C05rI8GA0dw8IoIA0pZBZcCtBlHKkoFk9K -----END CERTIFICATE-----Generated at Sun Jan 25 17:22:20 2026 by rpki-client