This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/71c608-1cc2-4899-a5fa-846aaf0eb1ad/1/1k_gsLYQzZ2auoJeJkWUzu7Ie1o.roa File: 1k_gsLYQzZ2auoJeJkWUzu7Ie1o.roa (raw, json) Hash identifier: QopUlfrOmMWf3HhqNYkuS7EjOhnM84v1jbZHx5PFkcs= Subject key identifier: D6:4F:E0:B0:B6:10:CD:9D:9A:BA:82:5E:26:45:94:CE:EE:C8:7B:5A Certificate issuer: /CN=2ee96208925d836f8d037d179980a83a1b0c1342 Certificate serial: 019B7F8535F518A26B3FCC208813658892F7 Authority key identifier: 2E:E9:62:08:92:5D:83:6F:8D:03:7D:17:99:80:A8:3A:1B:0C:13:42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LuliCJJdg2-NA30XmYCoOhsME0I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/71c608-1cc2-4899-a5fa-846aaf0eb1ad/1/1k_gsLYQzZ2auoJeJkWUzu7Ie1o.roa Signing time: Fri 02 Jan 2026 16:23:15 +0000 ROA not before: Fri 02 Jan 2026 16:23:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43824 IP address blocks: 193.30.96.0/24 maxlen: 24 193.30.97.0/24 maxlen: 24 193.30.98.0/24 maxlen: 24 193.30.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/71c608-1cc2-4899-a5fa-846aaf0eb1ad/1/LuliCJJdg2-NA30XmYCoOhsME0I.crl rsync://rpki.ripe.net/repository/DEFAULT/60/71c608-1cc2-4899-a5fa-846aaf0eb1ad/1/LuliCJJdg2-NA30XmYCoOhsME0I.mft rsync://rpki.ripe.net/repository/DEFAULT/LuliCJJdg2-NA30XmYCoOhsME0I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:35:f5:18:a2:6b:3f:cc:20:88:13:65:88:92:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ee96208925d836f8d037d179980a83a1b0c1342 Validity Not Before: Jan 2 16:23:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d64fe0b0b610cd9d9aba825e264594ceeec87b5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:a7:01:bc:39:43:35:17:f8:f8:0f:69:da:00: d3:c7:e8:5a:1b:6f:c3:4f:3b:a4:5f:c7:47:51:90: 1d:8c:76:f0:91:6b:e6:a6:d9:f0:80:36:b8:18:48: 9a:4d:2c:02:ae:a1:82:27:d3:63:14:fb:c7:0a:9b: 39:45:8f:4d:94:03:48:fd:fe:a0:2d:e6:b5:09:ae: 7d:87:81:73:29:a2:76:d3:98:53:87:17:24:c7:38: 7a:6e:16:88:8f:c0:d0:41:6c:42:71:47:cd:b6:7b: e4:2c:66:e7:fb:1f:40:57:d3:44:58:e8:9a:0b:7e: 16:96:64:b4:7b:81:79:00:06:69:75:db:1c:b8:c9: 6f:b2:98:7a:6c:10:90:7a:05:be:e6:06:f9:bd:9d: 3d:9b:21:c3:27:9b:9b:60:b1:64:7a:fb:7e:fa:e5: c8:65:51:de:b5:88:74:96:25:01:cd:c4:8a:5d:6e: 68:5f:28:69:9a:a7:92:01:1c:69:30:da:cd:14:ab: f5:eb:83:80:e4:fc:a0:f4:e3:ab:a8:70:03:81:2f: 16:cb:37:5f:66:4a:dc:c0:a7:dd:ad:93:53:58:40: a9:b9:69:d8:72:10:fc:7d:79:71:f8:4c:e1:df:f0: a4:dc:05:24:20:c1:af:3b:7d:f2:ae:cd:cf:4d:ac: ec:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:4F:E0:B0:B6:10:CD:9D:9A:BA:82:5E:26:45:94:CE:EE:C8:7B:5A X509v3 Authority Key Identifier: keyid:2E:E9:62:08:92:5D:83:6F:8D:03:7D:17:99:80:A8:3A:1B:0C:13:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LuliCJJdg2-NA30XmYCoOhsME0I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/71c608-1cc2-4899-a5fa-846aaf0eb1ad/1/1k_gsLYQzZ2auoJeJkWUzu7Ie1o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/71c608-1cc2-4899-a5fa-846aaf0eb1ad/1/LuliCJJdg2-NA30XmYCoOhsME0I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.30.96.0/22 Signature Algorithm: sha256WithRSAEncryption 90:83:8f:28:ce:8c:a0:30:ce:46:16:a5:99:e1:f2:cd:bf:1c: c3:99:5e:76:3e:d8:70:6c:97:d5:ca:61:5f:2f:f2:c3:6e:32: d9:82:3f:38:2f:b2:1c:58:4f:fa:81:63:ba:a6:1e:2f:b0:f8: ce:8c:cf:34:10:39:0f:74:b2:cb:23:03:c9:4f:80:4d:46:9f: f6:4b:27:ed:a3:50:2a:1f:13:f2:7e:68:6d:9b:c2:1f:02:2d: af:0d:83:bd:8a:ba:83:d5:00:cf:2d:7a:07:76:54:1f:38:3e: f5:75:96:57:1d:28:4b:11:98:29:00:3a:50:4a:c3:8a:aa:7d: 6a:67:19:85:80:b1:9b:f0:99:77:e2:fb:3d:25:33:95:73:cd: 90:75:43:47:25:f6:d5:ce:db:4f:17:55:df:54:a4:b5:8c:9c: 40:64:29:df:2f:1b:88:9c:bb:a5:cc:4d:41:74:d1:b4:75:7b: 14:db:78:23:ba:62:32:b1:2c:c1:e7:29:3e:c1:ed:69:78:37: 5a:57:9e:a8:38:32:d2:ca:fd:3f:5a:e5:4e:18:8e:c6:62:e7: db:9b:08:26:ab:47:36:d0:06:2d:0c:a2:55:96:cf:33:21:81: 34:c4:b1:f1:6a:d9:76:52:02:c1:96:da:01:41:61:f0:37:7c: 8b:48:74:ec -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hTX1GKJrP8wgiBNliJL3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlZTk2MjA4OTI1ZDgzNmY4ZDAzN2QxNzk5ODBhODNhMWIw YzEzNDIwHhcNMjYwMTAyMTYyMzE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNjRmZTBiMGI2MTBjZDlkOWFiYTgyNWUyNjQ1OTRjZWVlYzg3YjVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmqcBvDlDNRf4+A9p2gDTx+haG2/D TzukX8dHUZAdjHbwkWvmptnwgDa4GEiaTSwCrqGCJ9NjFPvHCps5RY9NlANI/f6g Lea1Ca59h4FzKaJ205hThxckxzh6bhaIj8DQQWxCcUfNtnvkLGbn+x9AV9NEWOia C34WlmS0e4F5AAZpddscuMlvsph6bBCQegW+5gb5vZ09myHDJ5ubYLFkevt++uXI ZVHetYh0liUBzcSKXW5oXyhpmqeSARxpMNrNFKv164OA5Pyg9OOrqHADgS8Wyzdf ZkrcwKfdrZNTWECpuWnYchD8fXlx+Ezh3/Ck3AUkIMGvO33yrs3PTazsUwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNZP4LC2EM2dmrqCXiZFlM7uyHtaMB8GA1UdIwQY MBaAFC7pYgiSXYNvjQN9F5mAqDobDBNCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTHVsaUNKSmRnMi1OQTMwWG1ZQ29PaHNNRTBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC83MWM2MDgtMWNjMi00ODk5LWE1ZmEt ODQ2YWFmMGViMWFkLzEvMWtfZ3NMWVF6WjJhdW9KZUprV1V6dTdJZTFvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC83MWM2MDgtMWNjMi00ODk5LWE1ZmEtODQ2YWFmMGViMWFk LzEvTHVsaUNKSmRnMi1OQTMwWG1ZQ29PaHNNRTBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwR5gMA0G CSqGSIb3DQEBCwUAA4IBAQCQg48ozoygMM5GFqWZ4fLNvxzDmV52PthwbJfVymFf L/LDbjLZgj84L7IcWE/6gWO6ph4vsPjOjM80EDkPdLLLIwPJT4BNRp/2Syfto1Aq HxPyfmhtm8IfAi2vDYO9irqD1QDPLXoHdlQfOD71dZZXHShLEZgpADpQSsOKqn1q ZxmFgLGb8Jl34vs9JTOVc82QdUNHJfbVzttPF1XfVKS1jJxAZCnfLxuInLulzE1B dNG0dXsU23gjumIysSzB5yk+we1peDdaV56oODLSyv0/WuVOGI7GYufbmwgmq0c2 0AYtDKJVls8zIYE0xLHxatl2UgLBltoBQWHwN3yLSHTs -----END CERTIFICATE-----Generated at Mon Jan 26 01:43:35 2026 by rpki-client