This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/d2ef5f-2ae9-486a-8bd7-51f077f30d3f/1/L6IkYa1mFzPLtO5LIkQRCCe9jl4.roa File: L6IkYa1mFzPLtO5LIkQRCCe9jl4.roa (raw, json) Hash identifier: Ld5O0t2bBeigoCJRn7m3gG44EpWV7A+830bMM7yTOtE= Subject key identifier: 2F:A2:24:61:AD:66:17:33:CB:B4:EE:4B:22:44:11:08:27:BD:8E:5E Certificate issuer: /CN=194e10a956fa52516e8fd3b9318e84a55383d62b Certificate serial: 019B7F1571A97A7C7EF67592E7E7E15E8579 Authority key identifier: 19:4E:10:A9:56:FA:52:51:6E:8F:D3:B9:31:8E:84:A5:53:83:D6:2B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GU4QqVb6UlFuj9O5MY6EpVOD1is.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/d2ef5f-2ae9-486a-8bd7-51f077f30d3f/1/L6IkYa1mFzPLtO5LIkQRCCe9jl4.roa Signing time: Fri 02 Jan 2026 14:21:10 +0000 ROA not before: Fri 02 Jan 2026 14:21:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202391 IP address blocks: 176.10.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/d2ef5f-2ae9-486a-8bd7-51f077f30d3f/1/GU4QqVb6UlFuj9O5MY6EpVOD1is.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/d2ef5f-2ae9-486a-8bd7-51f077f30d3f/1/GU4QqVb6UlFuj9O5MY6EpVOD1is.mft rsync://rpki.ripe.net/repository/DEFAULT/GU4QqVb6UlFuj9O5MY6EpVOD1is.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 20:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:71:a9:7a:7c:7e:f6:75:92:e7:e7:e1:5e:85:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=194e10a956fa52516e8fd3b9318e84a55383d62b Validity Not Before: Jan 2 14:21:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2fa22461ad661733cbb4ee4b2244110827bd8e5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:eb:f8:50:9f:6b:3b:f9:de:42:71:f3:71:6d: 76:b9:07:c3:f5:c4:2b:38:59:41:19:8b:ca:26:4a: 69:99:cd:d1:78:c7:c9:5e:48:bd:fa:be:d2:17:e1: 71:1a:c1:e2:f2:b7:42:64:6a:ff:a7:63:90:b8:b1: 3d:8d:bb:54:d1:7c:01:1b:9c:d6:49:f3:47:f6:84: 2e:4b:55:e1:d7:52:56:f6:19:0f:b3:7b:51:ed:aa: 7a:9e:53:85:a1:76:1c:e6:83:86:2d:02:51:86:f4: c7:8e:6a:03:34:01:87:9c:35:28:4b:4e:1e:52:0d: 1a:ad:8f:ab:c4:f6:ed:5e:41:ea:9c:63:57:22:4c: 8e:c2:f8:d4:f3:8f:db:30:9f:e6:4c:84:c5:09:27: 48:15:cf:d7:10:36:95:e7:46:4d:32:09:d9:4a:4e: ff:6e:da:1d:88:f0:d9:40:ab:3c:0e:51:0e:d7:21: f1:25:34:d5:43:19:af:de:fe:c3:01:0d:81:4d:de: d0:de:4d:8c:c1:f1:b4:8c:11:49:66:10:ac:96:ec: bd:20:15:8b:cc:e0:34:76:ad:f4:6d:58:4f:e3:d8: 27:1c:3b:36:d3:b3:5e:6d:f7:4f:cc:f5:ad:6d:ff: 2d:4e:92:8c:47:75:21:b6:b5:a1:04:b9:ea:39:02: 1a:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:A2:24:61:AD:66:17:33:CB:B4:EE:4B:22:44:11:08:27:BD:8E:5E X509v3 Authority Key Identifier: keyid:19:4E:10:A9:56:FA:52:51:6E:8F:D3:B9:31:8E:84:A5:53:83:D6:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GU4QqVb6UlFuj9O5MY6EpVOD1is.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d2ef5f-2ae9-486a-8bd7-51f077f30d3f/1/L6IkYa1mFzPLtO5LIkQRCCe9jl4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d2ef5f-2ae9-486a-8bd7-51f077f30d3f/1/GU4QqVb6UlFuj9O5MY6EpVOD1is.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.10.95.0/24 Signature Algorithm: sha256WithRSAEncryption 6d:a5:f2:71:3d:d5:45:d6:7a:19:53:3b:ee:34:8d:fd:da:21: 84:77:45:e9:8d:14:15:f7:7a:c5:8e:3c:4c:e7:09:a3:bf:72: 59:18:7f:18:91:29:fe:1e:be:49:1c:82:30:59:97:9f:c3:39: 86:d8:ce:86:c3:9a:36:92:cb:5d:50:03:38:03:de:9f:c6:9a: 20:ea:31:75:ab:19:e2:cd:03:33:44:af:21:a2:4d:b8:88:ff: 92:2e:d4:5d:02:58:c2:f1:c4:5e:3f:07:a1:30:c3:e3:4a:51: 8a:ef:f5:0f:3c:2a:e4:a6:3c:66:6f:28:94:e1:f1:6c:a4:30: 1c:74:3f:73:f7:b2:16:77:06:fe:9f:d8:b4:6f:a7:e1:40:17: a9:44:54:05:19:40:7f:bd:7a:5f:63:77:d3:14:af:78:83:b5: b9:c9:35:ff:a1:5e:d7:01:e5:b6:5a:bc:fd:8b:2e:46:ef:8d: 2a:e1:b5:a0:ad:ea:39:b8:72:3a:70:66:95:e1:51:32:57:9b: 34:23:8b:c8:b6:ae:b5:cf:c7:72:54:e6:41:ba:f2:8d:70:29: e6:04:8f:4c:83:87:2e:37:64:e2:85:dc:45:17:f2:52:fc:97: 7b:d3:b8:b8:a4:4e:13:f1:90:99:5b:ba:d7:44:be:94:aa:e8: 84:a8:8a:24 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FXGpenx+9nWS5+fhXoV5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5NGUxMGE5NTZmYTUyNTE2ZThmZDNiOTMxOGU4NGE1NTM4 M2Q2MmIwHhcNMjYwMTAyMTQyMTEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZmEyMjQ2MWFkNjYxNzMzY2JiNGVlNGIyMjQ0MTEwODI3YmQ4ZTVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzuv4UJ9rO/neQnHzcW12uQfD9cQr OFlBGYvKJkppmc3ReMfJXki9+r7SF+FxGsHi8rdCZGr/p2OQuLE9jbtU0XwBG5zW SfNH9oQuS1Xh11JW9hkPs3tR7ap6nlOFoXYc5oOGLQJRhvTHjmoDNAGHnDUoS04e Ug0arY+rxPbtXkHqnGNXIkyOwvjU84/bMJ/mTITFCSdIFc/XEDaV50ZNMgnZSk7/ btodiPDZQKs8DlEO1yHxJTTVQxmv3v7DAQ2BTd7Q3k2MwfG0jBFJZhCsluy9IBWL zOA0dq30bVhP49gnHDs207NebfdPzPWtbf8tTpKMR3UhtrWhBLnqOQIaCwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFC+iJGGtZhczy7TuSyJEEQgnvY5eMB8GA1UdIwQY MBaAFBlOEKlW+lJRbo/TuTGOhKVTg9YrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR1U0UXFWYjZVbEZ1ajlPNU1ZNkVwVk9EMWlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi9kMmVmNWYtMmFlOS00ODZhLThiZDct NTFmMDc3ZjMwZDNmLzEvTDZJa1lhMW1GelBMdE81TElrUVJDQ2U5amw0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi9kMmVmNWYtMmFlOS00ODZhLThiZDctNTFmMDc3ZjMwZDNm LzEvR1U0UXFWYjZVbEZ1ajlPNU1ZNkVwVk9EMWlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsApfMA0G CSqGSIb3DQEBCwUAA4IBAQBtpfJxPdVF1noZUzvuNI392iGEd0XpjRQV93rFjjxM 5wmjv3JZGH8YkSn+Hr5JHIIwWZefwzmG2M6Gw5o2kstdUAM4A96fxpog6jF1qxni zQMzRK8hok24iP+SLtRdAljC8cRePwehMMPjSlGK7/UPPCrkpjxmbyiU4fFspDAc dD9z97IWdwb+n9i0b6fhQBepRFQFGUB/vXpfY3fTFK94g7W5yTX/oV7XAeW2Wrz9 iy5G740q4bWgreo5uHI6cGaV4VEyV5s0I4vItq61z8dyVOZBuvKNcCnmBI9Mg4cu N2TihdxFF/JS/Jd707i4pE4T8ZCZW7rXRL6UquiEqIok -----END CERTIFICATE-----Generated at Mon Jan 26 03:56:43 2026 by rpki-client