This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/lJsbBXLg_uWqYLX--KLHtMBviXU.roa File: lJsbBXLg_uWqYLX--KLHtMBviXU.roa (raw, json) Hash identifier: PhLEwHd59fOcvbQh+xXBryMID3Ta479cbQK9NwBrmRM= Subject key identifier: 94:9B:1B:05:72:E0:FE:E5:AA:60:B5:FE:F8:A2:C7:B4:C0:6F:89:75 Certificate issuer: /CN=beba48c7e2c9e05eda546d899146b89f799df85d Certificate serial: 019B7A5B1FB5242A9835F8B27BBAB98CD415 Authority key identifier: BE:BA:48:C7:E2:C9:E0:5E:DA:54:6D:89:91:46:B8:9F:79:9D:F8:5D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vrpIx-LJ4F7aVG2JkUa4n3md-F0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/lJsbBXLg_uWqYLX--KLHtMBviXU.roa Signing time: Thu 01 Jan 2026 16:19:10 +0000 ROA not before: Thu 01 Jan 2026 16:19:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44899 IP address blocks: 193.110.236.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/vrpIx-LJ4F7aVG2JkUa4n3md-F0.crl rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/vrpIx-LJ4F7aVG2JkUa4n3md-F0.mft rsync://rpki.ripe.net/repository/DEFAULT/vrpIx-LJ4F7aVG2JkUa4n3md-F0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:1f:b5:24:2a:98:35:f8:b2:7b:ba:b9:8c:d4:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=beba48c7e2c9e05eda546d899146b89f799df85d Validity Not Before: Jan 1 16:19:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=949b1b0572e0fee5aa60b5fef8a2c7b4c06f8975 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:67:6e:23:9c:c0:4d:58:0b:9f:c5:33:42:f2: 4f:01:d6:ce:92:f6:fc:c0:32:b3:1d:06:11:99:50: a8:56:9e:00:f7:fd:0a:bb:51:bf:51:3c:fb:3c:8c: db:55:c4:c7:fa:af:e7:a8:8c:16:a5:df:ef:3a:c3: 72:1e:47:5a:1a:4f:da:be:5e:3a:10:93:a2:6c:1d: 6c:05:db:71:2c:ce:9f:22:b2:6e:0c:b9:87:3b:ab: dc:de:d6:5a:d2:1f:31:0e:b6:fa:b8:84:09:63:4d: aa:14:63:06:c0:16:66:bc:b7:be:34:8b:c7:c2:c8: 04:50:80:0e:26:0d:2a:e4:11:20:d3:51:14:2a:4f: f1:f4:63:3f:9a:af:03:06:e7:e6:c5:ff:ed:ce:11: 82:8c:76:70:4c:cc:c7:03:c0:d4:a3:42:97:4a:23: 19:f0:1f:c3:b5:a6:de:20:0c:8e:62:27:c9:82:5e: 52:14:9b:1e:cf:55:56:9d:d8:b3:38:00:81:5a:c0: 48:a9:59:df:46:4f:41:c2:a9:b0:88:e1:72:ed:a7: 6b:ae:7a:a8:ac:9f:55:9d:ae:25:4d:ce:30:f1:ad: 9a:da:c3:42:e8:67:a4:fc:3d:64:9a:de:ef:c2:e1: 09:28:64:e7:ed:c4:65:7f:e3:78:13:68:d9:fe:4d: 3c:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:9B:1B:05:72:E0:FE:E5:AA:60:B5:FE:F8:A2:C7:B4:C0:6F:89:75 X509v3 Authority Key Identifier: keyid:BE:BA:48:C7:E2:C9:E0:5E:DA:54:6D:89:91:46:B8:9F:79:9D:F8:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vrpIx-LJ4F7aVG2JkUa4n3md-F0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/lJsbBXLg_uWqYLX--KLHtMBviXU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/vrpIx-LJ4F7aVG2JkUa4n3md-F0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.110.236.0/22 Signature Algorithm: sha256WithRSAEncryption 27:c5:37:91:15:9f:2d:3c:0c:2a:56:a4:09:17:de:3a:48:ab: e8:9d:1e:ae:67:b4:a2:07:1c:2f:53:86:cc:5b:2c:d0:05:9f: de:0a:8d:f0:c2:35:2f:1b:db:68:70:53:5c:7c:ad:3f:d5:90: 37:74:ce:9c:0e:07:3c:90:e5:e0:90:72:0e:3e:4f:f0:69:72: 19:ea:e8:e3:f1:82:47:f7:22:3c:92:1d:1c:9e:84:7a:28:87: 57:9d:18:26:98:1d:bc:51:6c:57:ba:b7:19:f5:22:d0:bc:a1: 6a:c9:c7:7f:e1:1c:fb:c7:8d:c3:34:79:a9:44:3c:cb:3f:69: 43:ca:20:84:af:c5:91:28:cb:1e:7c:2d:3e:02:cd:bb:36:c7: db:36:57:80:19:7d:35:69:54:58:8c:15:0f:ca:21:93:1b:93: af:08:97:a2:fd:dc:58:05:f6:78:b1:43:6d:f4:cd:da:c3:04: 8f:38:21:86:3b:f5:52:0e:1a:9c:b7:e4:61:6c:38:7a:1f:f9: 8d:20:6c:10:a1:54:b2:44:c1:23:a1:4a:b0:2e:97:14:85:82: d4:97:81:56:8c:07:85:76:35:96:c9:64:bb:98:dc:df:0b:9c: aa:bd:1b:4c:4f:e2:68:3a:58:e5:89:3c:23:da:d4:b8:1f:a0: bf:00:c4:95 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6Wx+1JCqYNfiye7q5jNQVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJlYmE0OGM3ZTJjOWUwNWVkYTU0NmQ4OTkxNDZiODlmNzk5 ZGY4NWQwHhcNMjYwMTAxMTYxOTEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NDliMWIwNTcyZTBmZWU1YWE2MGI1ZmVmOGEyYzdiNGMwNmY4OTc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuWduI5zATVgLn8UzQvJPAdbOkvb8 wDKzHQYRmVCoVp4A9/0Ku1G/UTz7PIzbVcTH+q/nqIwWpd/vOsNyHkdaGk/avl46 EJOibB1sBdtxLM6fIrJuDLmHO6vc3tZa0h8xDrb6uIQJY02qFGMGwBZmvLe+NIvH wsgEUIAOJg0q5BEg01EUKk/x9GM/mq8DBufmxf/tzhGCjHZwTMzHA8DUo0KXSiMZ 8B/DtabeIAyOYifJgl5SFJsez1VWndizOACBWsBIqVnfRk9BwqmwiOFy7adrrnqo rJ9Vna4lTc4w8a2a2sNC6Gek/D1kmt7vwuEJKGTn7cRlf+N4E2jZ/k08ewIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJSbGwVy4P7lqmC1/viix7TAb4l1MB8GA1UdIwQY MBaAFL66SMfiyeBe2lRtiZFGuJ95nfhdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdnJwSXgtTEo0RjdhVkcySmtVYTRuM21kLUYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC83Zjg4MjEtMTU2Ni00M2Y0LWFiMjYt M2Q1MjIxODFhMmM0LzEvbEpzYkJYTGdfdVdxWUxYLS1LTEh0TUJ2aVhVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZC83Zjg4MjEtMTU2Ni00M2Y0LWFiMjYtM2Q1MjIxODFhMmM0 LzEvdnJwSXgtTEo0RjdhVkcySmtVYTRuM21kLUYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwW7sMA0G CSqGSIb3DQEBCwUAA4IBAQAnxTeRFZ8tPAwqVqQJF946SKvonR6uZ7SiBxwvU4bM WyzQBZ/eCo3wwjUvG9tocFNcfK0/1ZA3dM6cDgc8kOXgkHIOPk/waXIZ6ujj8YJH 9yI8kh0cnoR6KIdXnRgmmB28UWxXurcZ9SLQvKFqycd/4Rz7x43DNHmpRDzLP2lD yiCEr8WRKMsefC0+As27NsfbNleAGX01aVRYjBUPyiGTG5OvCJei/dxYBfZ4sUNt 9M3awwSPOCGGO/VSDhqct+RhbDh6H/mNIGwQoVSyRMEjoUqwLpcUhYLUl4FWjAeF djWWyWS7mNzfC5yqvRtMT+JoOljliTwj2tS4H6C/AMSV -----END CERTIFICATE-----Generated at Mon Jan 26 05:14:34 2026 by rpki-client