This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/4bfd9d-6afc-4bd7-bb43-badafca3944f/1/L__0IImxx17mcLd4F54xkQpwTiA.roa File: L__0IImxx17mcLd4F54xkQpwTiA.roa (raw, json) Hash identifier: qZizn0ANyVYa2kNvNDiG/vr4PQkqJyC3jj8cfvISE4A= Subject key identifier: 2F:FF:F4:20:89:B1:C7:5E:E6:70:B7:78:17:9E:31:91:0A:70:4E:20 Certificate issuer: /CN=f2262faf4376420024aad72983ac3e87944ea7a5 Certificate serial: 019B7CEE05C25554A721F1D37BDBD18A3B7C Authority key identifier: F2:26:2F:AF:43:76:42:00:24:AA:D7:29:83:AC:3E:87:94:4E:A7:A5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8iYvr0N2QgAkqtcpg6w-h5ROp6U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bfd9d-6afc-4bd7-bb43-badafca3944f/1/L__0IImxx17mcLd4F54xkQpwTiA.roa Signing time: Fri 02 Jan 2026 04:18:52 +0000 ROA not before: Fri 02 Jan 2026 04:18:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211248 IP address blocks: 185.45.104.0/22 maxlen: 22 193.35.44.0/24 maxlen: 24 2a04:2a40::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bfd9d-6afc-4bd7-bb43-badafca3944f/1/8iYvr0N2QgAkqtcpg6w-h5ROp6U.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/4bfd9d-6afc-4bd7-bb43-badafca3944f/1/8iYvr0N2QgAkqtcpg6w-h5ROp6U.mft rsync://rpki.ripe.net/repository/DEFAULT/8iYvr0N2QgAkqtcpg6w-h5ROp6U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 10:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:05:c2:55:54:a7:21:f1:d3:7b:db:d1:8a:3b:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f2262faf4376420024aad72983ac3e87944ea7a5 Validity Not Before: Jan 2 04:18:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2ffff42089b1c75ee670b778179e31910a704e20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:d3:12:cd:e2:35:06:cd:98:33:e6:40:8a:21: 97:55:5c:b8:03:0b:d2:b2:b6:ad:da:d8:a0:5a:d8: ac:ac:3b:72:2e:87:56:75:19:75:7e:28:e1:3d:01: 6e:3c:6a:58:a7:52:d4:86:29:6c:32:3e:40:a6:7c: ad:c6:4d:44:cb:e7:29:58:a7:40:a3:2e:65:7a:34: 8c:45:ed:04:fe:d9:b4:32:6f:cb:b0:66:97:f5:ca: ff:8e:e9:d6:86:49:89:c1:9f:6f:b1:90:76:25:1b: a6:60:f3:16:b9:98:7f:a1:a5:88:bf:92:25:6d:26: 93:57:3e:fe:34:f8:cf:c8:a2:77:82:b1:52:90:94: 17:5b:0e:ba:f3:8a:a5:93:42:e8:e6:15:09:e2:6d: f6:5e:27:dd:c6:b6:78:bc:c8:53:ed:a2:96:04:32: 28:d6:89:f8:17:dc:20:98:a3:d1:62:d1:1f:c7:33: 14:05:6b:2e:e4:62:81:90:6f:96:b1:c2:ec:4b:fc: 03:18:d6:16:63:3c:7a:96:41:f2:81:2f:3d:25:58: c1:19:c4:bc:e5:aa:1b:3e:bc:1f:10:3d:66:b3:62: 24:d7:05:ea:08:e5:7e:f9:dd:b0:af:f3:2a:69:9b: f2:11:7a:f0:0d:1b:01:e6:67:09:9a:41:75:33:5b: e9:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:FF:F4:20:89:B1:C7:5E:E6:70:B7:78:17:9E:31:91:0A:70:4E:20 X509v3 Authority Key Identifier: keyid:F2:26:2F:AF:43:76:42:00:24:AA:D7:29:83:AC:3E:87:94:4E:A7:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8iYvr0N2QgAkqtcpg6w-h5ROp6U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bfd9d-6afc-4bd7-bb43-badafca3944f/1/L__0IImxx17mcLd4F54xkQpwTiA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bfd9d-6afc-4bd7-bb43-badafca3944f/1/8iYvr0N2QgAkqtcpg6w-h5ROp6U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.45.104.0/22 193.35.44.0/24 IPv6: 2a04:2a40::/29 Signature Algorithm: sha256WithRSAEncryption 57:3b:09:64:51:3b:96:08:59:80:50:76:77:09:fb:a9:6d:2a: 5d:89:32:25:b9:58:b3:49:99:a9:d2:77:a4:73:b8:99:9a:e1: 02:dc:27:66:5e:80:6b:ed:ea:3e:10:09:b1:00:20:f2:12:23: d3:be:07:a3:55:68:ea:54:9b:fc:b1:81:a5:86:35:4e:da:f5: 34:41:59:9f:a1:26:3e:95:64:7f:fc:3a:74:4f:a7:89:ba:63: 78:15:02:98:36:66:75:8a:f9:64:af:54:79:76:7c:6a:2a:5d: 3a:a5:4e:aa:71:dc:16:fe:5b:76:21:5e:2c:d1:39:de:76:77: 66:f3:11:23:92:79:ad:34:58:86:41:fb:d2:6a:96:4c:e5:7a: 9d:f9:39:c0:f7:c9:36:57:2d:3a:88:ff:8f:aa:44:10:0a:51: 2f:5f:43:8e:49:4a:52:f6:b5:cf:5a:16:1c:28:48:28:0b:a5: f6:04:d8:ff:8f:bc:cb:be:1c:d5:c5:b3:04:20:d5:32:28:7b: 5f:f3:e3:87:b0:11:54:a6:bc:40:7a:89:20:c6:5d:fe:a7:22: a3:60:1b:39:db:1a:2c:af:94:01:c5:c5:a7:c3:a5:83:e8:48: b1:92:56:98:7c:a2:23:6a:59:63:73:3c:43:15:bd:97:b7:55: 97:ec:b3:53 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt87gXCVVSnIfHTe9vRijt8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYyMjYyZmFmNDM3NjQyMDAyNGFhZDcyOTgzYWMzZTg3OTQ0 ZWE3YTUwHhcNMjYwMTAyMDQxODUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZmZmZjQyMDg5YjFjNzVlZTY3MGI3NzgxNzllMzE5MTBhNzA0ZTIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxdMSzeI1Bs2YM+ZAiiGXVVy4AwvS srat2tigWtisrDtyLodWdRl1fijhPQFuPGpYp1LUhilsMj5Apnytxk1Ey+cpWKdA oy5lejSMRe0E/tm0Mm/LsGaX9cr/junWhkmJwZ9vsZB2JRumYPMWuZh/oaWIv5Il bSaTVz7+NPjPyKJ3grFSkJQXWw6684qlk0Lo5hUJ4m32XifdxrZ4vMhT7aKWBDIo 1on4F9wgmKPRYtEfxzMUBWsu5GKBkG+WscLsS/wDGNYWYzx6lkHygS89JVjBGcS8 5aobPrwfED1ms2Ik1wXqCOV++d2wr/MqaZvyEXrwDRsB5mcJmkF1M1vpGQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFC//9CCJscde5nC3eBeeMZEKcE4gMB8GA1UdIwQY MBaAFPImL69DdkIAJKrXKYOsPoeUTqelMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOGlZdnIwTjJRZ0FrcXRjcGc2dy1oNVJPcDZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS80YmZkOWQtNmFmYy00YmQ3LWJiNDMt YmFkYWZjYTM5NDRmLzEvTF9fMElJbXh4MTdtY0xkNEY1NHhrUXB3VGlBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS80YmZkOWQtNmFmYy00YmQ3LWJiNDMtYmFkYWZjYTM5NDRm LzEvOGlZdnIwTjJRZ0FrcXRjcGc2dy1oNVJPcDZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCuS1oAwQA wSMsMA0EAgACMAcDBQMqBCpAMA0GCSqGSIb3DQEBCwUAA4IBAQBXOwlkUTuWCFmA UHZ3CfupbSpdiTIluVizSZmp0nekc7iZmuEC3CdmXoBr7eo+EAmxACDyEiPTvgej VWjqVJv8sYGlhjVO2vU0QVmfoSY+lWR//Dp0T6eJumN4FQKYNmZ1ivlkr1R5dnxq Kl06pU6qcdwW/lt2IV4s0Tnedndm8xEjknmtNFiGQfvSapZM5Xqd+TnA98k2Vy06 iP+PqkQQClEvX0OOSUpS9rXPWhYcKEgoC6X2BNj/j7zLvhzVxbMEINUyKHtf8+OH sBFUprxAeokgxl3+pyKjYBs52xosr5QBxcWnw6WD6EixklaYfKIjalljczxDFb2X t1WX7LNT -----END CERTIFICATE-----Generated at Sun Jan 25 20:46:37 2026 by rpki-client