This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/c1ab26-28b0-4637-b51b-3992c54e187b/1/LtE8in6FERFIEpRVKUfnYcuzmpQ.roa File: LtE8in6FERFIEpRVKUfnYcuzmpQ.roa (raw, json) Hash identifier: q4RfQwClDkZ6vDi0Ca1x3tfdzvX5MK4MZ7S3KpJaJns= Subject key identifier: 2E:D1:3C:8A:7E:85:11:11:48:12:94:55:29:47:E7:61:CB:B3:9A:94 Certificate issuer: /CN=47aa878f76b50947cbd7deca04ac832e287b514d Certificate serial: 019B7D5ABA8A981BABF172DB6F46FC53471C Authority key identifier: 47:AA:87:8F:76:B5:09:47:CB:D7:DE:CA:04:AC:83:2E:28:7B:51:4D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R6qHj3a1CUfL197KBKyDLih7UU0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/c1ab26-28b0-4637-b51b-3992c54e187b/1/LtE8in6FERFIEpRVKUfnYcuzmpQ.roa Signing time: Fri 02 Jan 2026 06:17:36 +0000 ROA not before: Fri 02 Jan 2026 06:17:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15814 IP address blocks: 194.36.224.0/20 maxlen: 24 2a03:98c0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/c1ab26-28b0-4637-b51b-3992c54e187b/1/R6qHj3a1CUfL197KBKyDLih7UU0.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/c1ab26-28b0-4637-b51b-3992c54e187b/1/R6qHj3a1CUfL197KBKyDLih7UU0.mft rsync://rpki.ripe.net/repository/DEFAULT/R6qHj3a1CUfL197KBKyDLih7UU0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 03:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5a:ba:8a:98:1b:ab:f1:72:db:6f:46:fc:53:47:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47aa878f76b50947cbd7deca04ac832e287b514d Validity Not Before: Jan 2 06:17:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2ed13c8a7e851111481294552947e761cbb39a94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:88:92:0b:4c:fd:a2:32:9b:11:2b:60:f0:c1: be:33:f1:30:49:18:3b:de:b4:74:cf:87:9a:aa:d0: 5b:fa:5d:bb:01:bb:b8:0e:d5:78:96:92:8d:f6:3d: b5:25:0c:a6:02:b5:46:3c:e0:e0:df:d7:7c:41:8e: 21:41:7f:16:a3:b7:a2:45:96:78:9b:96:98:bd:4c: fb:72:e5:bf:a7:ca:1b:40:14:e9:47:2b:9e:5f:52: ee:48:da:bd:a9:fc:f2:86:51:1c:a7:e0:b2:7f:e8: 2c:c7:24:54:a0:02:8c:c1:e9:39:43:bc:de:3e:ba: eb:65:d1:f1:b2:dc:60:6b:95:f8:b4:2b:05:6b:8c: 74:50:ca:e3:be:12:e6:b1:c1:e7:ec:5d:59:f4:ed: 2f:89:14:fb:68:60:ba:1b:17:0a:2e:72:39:cf:ac: 6b:98:05:6d:1c:d5:ed:f5:37:a7:88:68:7b:be:6d: c8:d3:f7:1e:2b:9e:e5:fa:59:b4:c2:b2:6b:11:90: 99:64:84:9c:8f:51:d7:fb:aa:fe:e6:a9:43:69:5d: b2:24:87:af:a1:00:6b:25:db:b0:89:e5:fd:46:8d: fa:9a:33:07:88:e1:5f:87:11:39:55:fb:4e:24:30: fa:48:85:b3:29:e8:d4:78:59:2d:50:67:53:22:1b: 90:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:D1:3C:8A:7E:85:11:11:48:12:94:55:29:47:E7:61:CB:B3:9A:94 X509v3 Authority Key Identifier: keyid:47:AA:87:8F:76:B5:09:47:CB:D7:DE:CA:04:AC:83:2E:28:7B:51:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R6qHj3a1CUfL197KBKyDLih7UU0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/c1ab26-28b0-4637-b51b-3992c54e187b/1/LtE8in6FERFIEpRVKUfnYcuzmpQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/c1ab26-28b0-4637-b51b-3992c54e187b/1/R6qHj3a1CUfL197KBKyDLih7UU0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.36.224.0/20 IPv6: 2a03:98c0::/32 Signature Algorithm: sha256WithRSAEncryption b5:6d:9e:34:0c:41:43:f6:31:74:67:45:73:94:49:d3:9b:9c: 7d:c8:77:a8:99:70:62:93:9d:13:cb:87:73:d5:32:24:11:51: 9d:b6:98:c3:a4:19:be:0d:fc:a5:0d:01:d7:92:1d:ef:c6:73: fd:4b:b9:4d:a2:d7:f6:3b:ae:51:ae:eb:e6:5d:44:96:9a:32: 7a:04:f4:f1:2f:9e:0f:a9:03:95:85:c9:55:82:28:b7:fc:3e: ac:8c:5b:43:69:3c:6b:bc:db:57:dd:dc:d6:d1:16:b0:f2:f8: 04:89:9e:48:60:cd:14:5a:94:1d:e3:be:ae:80:50:53:13:31: 9e:2d:87:83:d3:c4:f3:c7:03:86:fe:30:f8:ce:01:9f:a9:3c: 79:a4:38:fc:b6:56:8c:82:a5:dc:09:bf:8e:ee:87:2e:69:1f: aa:f5:ae:f5:33:f5:11:20:6e:31:d8:5a:0e:53:37:d1:4f:b4: 79:94:82:75:86:8d:cf:a1:09:c6:74:e3:52:c4:5b:99:00:04: 1e:06:b7:af:53:20:09:f2:46:39:76:ee:c6:82:2d:5b:a4:b8: 78:24:27:b6:43:b4:95:10:80:b1:75:dc:33:ff:e2:56:34:8a: 20:f0:c7:11:28:d1:be:a7:e3:3b:8c:79:79:65:8f:9c:81:17: 78:df:3b:44 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt9WrqKmBur8XLbb0b8U0ccMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ3YWE4NzhmNzZiNTA5NDdjYmQ3ZGVjYTA0YWM4MzJlMjg3 YjUxNGQwHhcNMjYwMTAyMDYxNzM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZWQxM2M4YTdlODUxMTExNDgxMjk0NTUyOTQ3ZTc2MWNiYjM5YTk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3IiSC0z9ojKbEStg8MG+M/EwSRg7 3rR0z4eaqtBb+l27Abu4DtV4lpKN9j21JQymArVGPODg39d8QY4hQX8Wo7eiRZZ4 m5aYvUz7cuW/p8obQBTpRyueX1LuSNq9qfzyhlEcp+Cyf+gsxyRUoAKMwek5Q7ze PrrrZdHxstxga5X4tCsFa4x0UMrjvhLmscHn7F1Z9O0viRT7aGC6GxcKLnI5z6xr mAVtHNXt9TeniGh7vm3I0/ceK57l+lm0wrJrEZCZZIScj1HX+6r+5qlDaV2yJIev oQBrJduwieX9Ro36mjMHiOFfhxE5VftOJDD6SIWzKejUeFktUGdTIhuQQQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFC7RPIp+hRERSBKUVSlH52HLs5qUMB8GA1UdIwQY MBaAFEeqh492tQlHy9feygSsgy4oe1FNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUjZxSGozYTFDVWZMMTk3S0JLeURMaWg3VVUwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9jMWFiMjYtMjhiMC00NjM3LWI1MWIt Mzk5MmM1NGUxODdiLzEvTHRFOGluNkZFUkZJRXBSVktVZm5ZY3V6bXBRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS9jMWFiMjYtMjhiMC00NjM3LWI1MWItMzk5MmM1NGUxODdi LzEvUjZxSGozYTFDVWZMMTk3S0JLeURMaWg3VVUwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQEwiTgMA0E AgACMAcDBQAqA5jAMA0GCSqGSIb3DQEBCwUAA4IBAQC1bZ40DEFD9jF0Z0VzlEnT m5x9yHeomXBik50Ty4dz1TIkEVGdtpjDpBm+DfylDQHXkh3vxnP9S7lNotf2O65R ruvmXUSWmjJ6BPTxL54PqQOVhclVgii3/D6sjFtDaTxrvNtX3dzW0Raw8vgEiZ5I YM0UWpQd476ugFBTEzGeLYeD08TzxwOG/jD4zgGfqTx5pDj8tlaMgqXcCb+O7ocu aR+q9a71M/URIG4x2FoOUzfRT7R5lIJ1ho3PoQnGdONSxFuZAAQeBrevUyAJ8kY5 du7Ggi1bpLh4JCe2Q7SVEICxddwz/+JWNIog8McRKNG+p+M7jHl5ZY+cgRd43ztE -----END CERTIFICATE-----Generated at Sun Jan 25 13:54:06 2026 by rpki-client