This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/LE2awT7rVhTgn1binznSNNNqBKw.roa File: LE2awT7rVhTgn1binznSNNNqBKw.roa (raw, json) Hash identifier: 5L4jHaTQ3Ysq4fdiPU8q1opHiwb0D25zJy6KhXBqiZQ= Subject key identifier: 2C:4D:9A:C1:3E:EB:56:14:E0:9F:56:E2:9F:39:D2:34:D3:6A:04:AC Certificate issuer: /CN=ff82309a6814678ad72e3f31a4fe0272f40bd986 Certificate serial: 019B7F810E6BC9E9F8DBCFA63FD4A578F26D Authority key identifier: FF:82:30:9A:68:14:67:8A:D7:2E:3F:31:A4:FE:02:72:F4:0B:D9:86 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/LE2awT7rVhTgn1binznSNNNqBKw.roa Signing time: Fri 02 Jan 2026 16:18:42 +0000 ROA not before: Fri 02 Jan 2026 16:18:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42423 IP address blocks: 193.168.184.0/23 maxlen: 24 194.1.167.0/24 maxlen: 24 2a09:1400::/30 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.mft rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:81:0e:6b:c9:e9:f8:db:cf:a6:3f:d4:a5:78:f2:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff82309a6814678ad72e3f31a4fe0272f40bd986 Validity Not Before: Jan 2 16:18:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2c4d9ac13eeb5614e09f56e29f39d234d36a04ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:ee:1c:df:8c:be:c6:46:57:f8:55:a3:78:6e: 31:07:c8:d6:ca:2a:a1:3c:2f:dc:f7:7c:97:ed:eb: 1e:2c:db:0d:26:04:78:a7:01:20:28:3d:3b:34:4a: 0a:46:b9:b8:ef:73:9f:73:2a:0e:e0:04:d4:4e:cc: f4:13:8e:2d:64:fb:8b:b6:bf:96:ab:f5:37:0e:aa: 7e:90:fc:a4:e0:58:47:6f:cf:a5:04:73:d7:2c:97: 36:20:fb:b2:29:d3:96:8b:03:9d:cd:e2:1c:37:2b: 3c:d9:4a:bd:cd:6e:b5:f7:d6:53:fd:25:c3:93:76: ad:fb:8b:68:ab:76:4c:bc:c8:90:ec:bb:a3:31:27: b1:ce:08:0d:e5:dd:cd:d5:93:b2:74:f2:7d:c5:3c: 6e:7c:5b:3b:6b:91:0c:e0:f7:90:97:19:90:2f:e0: 63:0b:d5:e4:b6:80:2f:dc:17:2f:22:d0:13:14:48: 62:b2:fd:67:79:e8:a0:48:33:a2:b4:ce:4f:09:52: 89:86:ff:65:81:89:f7:9d:0d:93:25:8e:39:16:d6: 3a:30:70:f2:00:40:51:59:bc:f4:94:1c:9c:37:bd: 46:92:df:f6:f3:db:35:66:6a:fa:7f:7a:60:9c:e9: d8:a3:ec:cf:43:5e:a3:49:29:64:c1:c0:69:75:7a: 8e:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:4D:9A:C1:3E:EB:56:14:E0:9F:56:E2:9F:39:D2:34:D3:6A:04:AC X509v3 Authority Key Identifier: keyid:FF:82:30:9A:68:14:67:8A:D7:2E:3F:31:A4:FE:02:72:F4:0B:D9:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/LE2awT7rVhTgn1binznSNNNqBKw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.168.184.0/23 194.1.167.0/24 IPv6: 2a09:1400::/30 Signature Algorithm: sha256WithRSAEncryption 79:e9:20:ce:b6:43:56:bb:0b:1c:eb:0f:e6:d5:a5:78:db:b9: 48:c2:25:bd:34:21:8e:bf:94:3c:3c:2e:c3:7c:aa:45:ca:b2: b5:8f:19:d6:62:e3:ad:91:5c:ec:2c:3c:2f:b9:68:b5:bc:f0: 9a:60:b5:cb:a2:3c:52:e2:59:13:76:94:8f:92:f4:c6:33:c7: 54:f3:12:8a:30:ae:a6:e3:80:58:4f:3a:4a:81:cd:3e:94:fa: e2:17:67:b8:82:c0:65:4d:fb:db:93:f4:69:91:b5:66:25:52: 83:64:91:62:d1:5d:69:8d:10:d2:54:47:22:54:8c:61:51:97: d1:f8:bc:10:7c:73:34:51:ec:71:3b:12:78:d0:fd:06:94:c7: 57:cb:1f:63:ff:0b:77:2e:bd:69:bb:2c:80:7c:db:4b:18:ab: 6b:14:0b:b1:a0:12:ce:bc:aa:ae:f2:b9:b6:84:b2:aa:ae:74: a1:14:12:57:37:9f:fa:63:91:2b:0b:bd:99:3a:03:93:ef:43: c6:7d:aa:a7:38:76:0d:6b:6b:2b:1e:8c:10:f5:0d:75:5e:da: 76:cc:c4:62:b4:10:e5:3f:6f:2d:92:87:d4:56:b3:21:85:e6: 7c:0d:1f:ae:95:3d:b4:78:22:e1:e1:14:d3:6a:2a:b5:97:90: 59:21:77:36 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt/gQ5ryen428+mP9SlePJtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmODIzMDlhNjgxNDY3OGFkNzJlM2YzMWE0ZmUwMjcyZjQw YmQ5ODYwHhcNMjYwMTAyMTYxODQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYzRkOWFjMTNlZWI1NjE0ZTA5ZjU2ZTI5ZjM5ZDIzNGQzNmEwNGFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn+4c34y+xkZX+FWjeG4xB8jWyiqh PC/c93yX7eseLNsNJgR4pwEgKD07NEoKRrm473OfcyoO4ATUTsz0E44tZPuLtr+W q/U3Dqp+kPyk4FhHb8+lBHPXLJc2IPuyKdOWiwOdzeIcNys82Uq9zW6199ZT/SXD k3at+4toq3ZMvMiQ7LujMSexzggN5d3N1ZOydPJ9xTxufFs7a5EM4PeQlxmQL+Bj C9XktoAv3BcvItATFEhisv1neeigSDOitM5PCVKJhv9lgYn3nQ2TJY45FtY6MHDy AEBRWbz0lBycN71Gkt/289s1Zmr6f3pgnOnYo+zPQ16jSSlkwcBpdXqOHwIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFCxNmsE+61YU4J9W4p850jTTagSsMB8GA1UdIwQY MBaAFP+CMJpoFGeK1y4/MaT+AnL0C9mGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzRJd21tZ1VaNHJYTGo4eHBQNENjdlFMMllZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC85ZmE4M2QtYjJhMy00NWU0LTg0OTkt ZjUyNTgxNjQwMmJkLzEvTEUyYXdUN3JWaFRnbjFiaW56blNOTk5xQkt3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC85ZmE4M2QtYjJhMy00NWU0LTg0OTktZjUyNTgxNjQwMmJk LzEvXzRJd21tZ1VaNHJYTGo4eHBQNENjdlFMMllZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQBwai4AwQA wgGnMA0EAgACMAcDBQIqCRQAMA0GCSqGSIb3DQEBCwUAA4IBAQB56SDOtkNWuwsc 6w/m1aV427lIwiW9NCGOv5Q8PC7DfKpFyrK1jxnWYuOtkVzsLDwvuWi1vPCaYLXL ojxS4lkTdpSPkvTGM8dU8xKKMK6m44BYTzpKgc0+lPriF2e4gsBlTfvbk/RpkbVm JVKDZJFi0V1pjRDSVEciVIxhUZfR+LwQfHM0UexxOxJ40P0GlMdXyx9j/wt3Lr1p uyyAfNtLGKtrFAuxoBLOvKqu8rm2hLKqrnShFBJXN5/6Y5ErC72ZOgOT70PGfaqn OHYNa2srHowQ9Q11Xtp2zMRitBDlP28tkofUVrMhheZ8DR+ulT20eCLh4RTTaiq1 l5BZIXc2 -----END CERTIFICATE-----Generated at Sun Jan 25 13:01:28 2026 by rpki-client