This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/23190c-e1a0-4ba4-b1d8-a102be382e51/1/LN8_cQY7bOufbN8b6KXH9urK_bg.roa File: LN8_cQY7bOufbN8b6KXH9urK_bg.roa (raw, json) Hash identifier: rUOowgvajtWogi6N7gRd0qnkYF2z6sSlAMgmfMvvUt0= Subject key identifier: 2C:DF:3F:71:06:3B:6C:EB:9F:6C:DF:1B:E8:A5:C7:F6:EA:CA:FD:B8 Certificate issuer: /CN=ef7fd5d33061a9de920af1c2a13513d46dd24612 Certificate serial: 019B7E37691790B515CB00248D5886169B9B Authority key identifier: EF:7F:D5:D3:30:61:A9:DE:92:0A:F1:C2:A1:35:13:D4:6D:D2:46:12 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/73_V0zBhqd6SCvHCoTUT1G3SRhI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/23190c-e1a0-4ba4-b1d8-a102be382e51/1/LN8_cQY7bOufbN8b6KXH9urK_bg.roa Signing time: Fri 02 Jan 2026 10:18:39 +0000 ROA not before: Fri 02 Jan 2026 10:18:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9230 IP address blocks: 193.32.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/23190c-e1a0-4ba4-b1d8-a102be382e51/1/73_V0zBhqd6SCvHCoTUT1G3SRhI.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/23190c-e1a0-4ba4-b1d8-a102be382e51/1/73_V0zBhqd6SCvHCoTUT1G3SRhI.mft rsync://rpki.ripe.net/repository/DEFAULT/73_V0zBhqd6SCvHCoTUT1G3SRhI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:69:17:90:b5:15:cb:00:24:8d:58:86:16:9b:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef7fd5d33061a9de920af1c2a13513d46dd24612 Validity Not Before: Jan 2 10:18:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2cdf3f71063b6ceb9f6cdf1be8a5c7f6eacafdb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:0c:c6:ae:c8:0d:66:33:85:6d:23:da:d1:23: 3b:0d:a1:d0:93:59:a2:ce:d1:98:a4:62:47:41:8a: d6:66:91:a6:52:cf:f2:51:2a:c6:77:b7:27:1c:84: 77:16:39:7b:e2:b4:44:bc:0c:cb:33:58:fc:9f:f7: d9:4c:99:72:ae:1c:57:b1:5b:de:75:9e:07:90:10: 91:1c:5e:71:1c:c4:d9:d6:10:13:c8:7f:34:27:c8: 4c:f3:5a:ee:7e:18:56:a8:7a:15:83:c1:c2:0b:a6: b7:9e:c4:c9:67:7e:67:5e:5f:a5:c2:69:06:33:9a: 59:5c:46:f6:bc:b0:15:ea:4d:5e:52:f0:a3:2f:75: 0d:87:18:e0:4f:2c:2a:79:8b:ed:cb:56:fc:fb:5d: 6c:2d:30:37:bc:14:28:a2:97:7a:d3:3f:26:74:3f: ed:76:16:85:45:7e:27:71:58:30:08:9b:51:ab:7a: 32:f4:f0:85:76:22:1e:44:94:31:9c:ac:9d:cb:5b: 73:bd:e3:92:f0:cd:ad:67:df:f0:67:9f:51:ad:1a: f4:a5:f7:07:e2:6e:b1:45:2f:16:fc:87:9c:22:02: d7:b4:ac:e8:a1:39:71:15:16:07:87:c2:c3:bd:e8: 31:8f:e2:e1:00:24:47:ea:e9:5d:b0:1a:bd:05:d9: 13:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:DF:3F:71:06:3B:6C:EB:9F:6C:DF:1B:E8:A5:C7:F6:EA:CA:FD:B8 X509v3 Authority Key Identifier: keyid:EF:7F:D5:D3:30:61:A9:DE:92:0A:F1:C2:A1:35:13:D4:6D:D2:46:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/73_V0zBhqd6SCvHCoTUT1G3SRhI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/23190c-e1a0-4ba4-b1d8-a102be382e51/1/LN8_cQY7bOufbN8b6KXH9urK_bg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/23190c-e1a0-4ba4-b1d8-a102be382e51/1/73_V0zBhqd6SCvHCoTUT1G3SRhI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.32.244.0/24 Signature Algorithm: sha256WithRSAEncryption 26:f3:7d:6f:22:fd:71:c3:44:5d:76:7c:ae:b5:4a:d1:fa:67: 2f:2e:31:49:e7:05:75:02:18:a5:a0:e1:1f:56:c8:87:ab:56: ed:f8:1a:20:2d:95:75:c7:58:e6:b2:b1:63:63:79:cb:1d:08: fe:bb:1e:6b:3f:3a:a5:54:4c:ca:f4:8d:54:c8:f3:78:2f:61: f3:e3:f3:3a:75:ef:32:67:cf:0f:7e:95:2f:97:ba:85:15:3e: 8d:dd:3f:ae:fe:c3:23:32:00:e4:fd:b2:ca:38:c5:19:15:39: 65:c3:12:c1:36:fa:61:e0:f1:e0:c1:2f:08:f0:62:d0:2b:7d: 3c:5f:03:57:ea:6c:6a:3a:be:c6:2c:04:7f:6d:cb:ba:a3:e3: 8c:79:8e:53:97:c8:69:70:c6:9f:ed:cd:46:05:c2:85:fd:36: a8:db:64:c6:44:06:3c:bc:27:d5:82:2f:c6:3c:01:e3:0b:a3: c4:52:bf:8d:7b:55:d5:12:f4:48:51:36:70:be:d8:01:f1:f1: c4:9c:6d:c8:b6:49:15:e7:9a:31:19:85:a8:c0:ea:dc:31:e4: e8:48:76:8f:46:5e:bf:8d:4c:04:37:3b:84:ab:b8:d5:e0:37: ca:91:45:6e:7a:98:59:22:50:0b:d5:99:f0:e7:15:6b:99:73: 03:c6:1d:09 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+N2kXkLUVywAkjViGFpubMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmN2ZkNWQzMzA2MWE5ZGU5MjBhZjFjMmExMzUxM2Q0NmRk MjQ2MTIwHhcNMjYwMTAyMTAxODM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyY2RmM2Y3MTA2M2I2Y2ViOWY2Y2RmMWJlOGE1YzdmNmVhY2FmZGI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwQzGrsgNZjOFbSPa0SM7DaHQk1mi ztGYpGJHQYrWZpGmUs/yUSrGd7cnHIR3Fjl74rREvAzLM1j8n/fZTJlyrhxXsVve dZ4HkBCRHF5xHMTZ1hATyH80J8hM81rufhhWqHoVg8HCC6a3nsTJZ35nXl+lwmkG M5pZXEb2vLAV6k1eUvCjL3UNhxjgTywqeYvty1b8+11sLTA3vBQoopd60z8mdD/t dhaFRX4ncVgwCJtRq3oy9PCFdiIeRJQxnKydy1tzveOS8M2tZ9/wZ59RrRr0pfcH 4m6xRS8W/IecIgLXtKzooTlxFRYHh8LDvegxj+LhACRH6uldsBq9BdkTWwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCzfP3EGO2zrn2zfG+ilx/bqyv24MB8GA1UdIwQY MBaAFO9/1dMwYanekgrxwqE1E9Rt0kYSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNzNfVjB6QmhxZDZTQ3ZIQ29UVVQxRzNTUmhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8yMzE5MGMtZTFhMC00YmE0LWIxZDgt YTEwMmJlMzgyZTUxLzEvTE44X2NRWTdiT3VmYk44YjZLWEg5dXJLX2JnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy8yMzE5MGMtZTFhMC00YmE0LWIxZDgtYTEwMmJlMzgyZTUx LzEvNzNfVjB6QmhxZDZTQ3ZIQ29UVVQxRzNTUmhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwSD0MA0G CSqGSIb3DQEBCwUAA4IBAQAm831vIv1xw0RddnyutUrR+mcvLjFJ5wV1AhiloOEf VsiHq1bt+BogLZV1x1jmsrFjY3nLHQj+ux5rPzqlVEzK9I1UyPN4L2Hz4/M6de8y Z88PfpUvl7qFFT6N3T+u/sMjMgDk/bLKOMUZFTllwxLBNvph4PHgwS8I8GLQK308 XwNX6mxqOr7GLAR/bcu6o+OMeY5Tl8hpcMaf7c1GBcKF/Tao22TGRAY8vCfVgi/G PAHjC6PEUr+Ne1XVEvRIUTZwvtgB8fHEnG3ItkkV55oxGYWowOrcMeToSHaPRl6/ jUwENzuEq7jV4DfKkUVuephZIlAL1Znw5xVrmXMDxh0J -----END CERTIFICATE-----Generated at Sun Jan 25 15:13:59 2026 by rpki-client