This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/3362c6-a03a-4f9f-a091-b762c0175f27/1/L4LAQO4VcvKCv24QKmqbiEkYgfw.roa File: L4LAQO4VcvKCv24QKmqbiEkYgfw.roa (raw, json) Hash identifier: 1I8k1k9yQTnnGWoQ4DNv1fL4gSGoExl590fVU6xPg8Y= Subject key identifier: 2F:82:C0:40:EE:15:72:F2:82:BF:6E:10:2A:6A:9B:88:49:18:81:FC Certificate issuer: /CN=ca1c7571596e444aa32371cbab724d46d3c3c52c Certificate serial: 019B7910DE4E92A70558057BFDDB1CC765C3 Authority key identifier: CA:1C:75:71:59:6E:44:4A:A3:23:71:CB:AB:72:4D:46:D3:C3:C5:2C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yhx1cVluREqjI3HLq3JNRtPDxSw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/3362c6-a03a-4f9f-a091-b762c0175f27/1/L4LAQO4VcvKCv24QKmqbiEkYgfw.roa Signing time: Thu 01 Jan 2026 10:18:27 +0000 ROA not before: Thu 01 Jan 2026 10:18:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48552 IP address blocks: 89.208.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/3362c6-a03a-4f9f-a091-b762c0175f27/1/yhx1cVluREqjI3HLq3JNRtPDxSw.crl rsync://rpki.ripe.net/repository/DEFAULT/be/3362c6-a03a-4f9f-a091-b762c0175f27/1/yhx1cVluREqjI3HLq3JNRtPDxSw.mft rsync://rpki.ripe.net/repository/DEFAULT/yhx1cVluREqjI3HLq3JNRtPDxSw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:de:4e:92:a7:05:58:05:7b:fd:db:1c:c7:65:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ca1c7571596e444aa32371cbab724d46d3c3c52c Validity Not Before: Jan 1 10:18:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2f82c040ee1572f282bf6e102a6a9b88491881fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:cc:a7:e4:21:04:6e:ea:2c:5e:11:59:16:f1: e1:d7:41:60:70:1b:fb:4e:7f:b9:29:54:35:73:bb: 42:37:14:f5:02:da:50:8d:a6:a3:e4:17:d8:f9:8c: 39:62:c4:9c:8b:c8:d7:40:2a:12:36:2d:e1:b2:88: c7:3a:0f:cf:6e:df:e1:ca:bf:84:59:08:09:11:ce: 49:f0:2c:5b:33:36:f1:af:7a:7f:d8:6a:3e:f2:a3: 90:84:d3:cc:b5:f2:db:72:9c:bd:40:4c:3c:69:e0: cc:62:f7:af:3e:c6:25:f5:54:79:bc:71:f3:17:c8: 42:d6:a9:f3:32:9f:8b:36:38:79:54:ea:c3:bc:91: cf:d7:a2:bd:82:74:4a:b8:17:b1:9f:c4:0d:27:f3: 82:48:e4:5e:a1:56:36:38:e4:70:35:0a:53:7f:86: ef:8b:e6:96:49:22:3d:0f:36:6b:1a:09:ba:9c:ef: 5b:52:d1:99:f3:d9:81:a6:2c:fa:97:f6:a1:c3:d7: 2c:88:5d:ab:f0:18:fc:97:75:c5:82:7d:ca:5e:08: b8:1c:ef:c1:97:68:e3:34:60:ae:72:c3:00:82:79: cc:f8:ee:00:4a:48:a9:56:11:0b:13:f5:e8:02:62: 09:78:7a:c7:50:e5:a3:72:7a:c9:7f:2b:05:1b:b8: 7b:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:82:C0:40:EE:15:72:F2:82:BF:6E:10:2A:6A:9B:88:49:18:81:FC X509v3 Authority Key Identifier: keyid:CA:1C:75:71:59:6E:44:4A:A3:23:71:CB:AB:72:4D:46:D3:C3:C5:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yhx1cVluREqjI3HLq3JNRtPDxSw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3362c6-a03a-4f9f-a091-b762c0175f27/1/L4LAQO4VcvKCv24QKmqbiEkYgfw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3362c6-a03a-4f9f-a091-b762c0175f27/1/yhx1cVluREqjI3HLq3JNRtPDxSw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.208.99.0/24 Signature Algorithm: sha256WithRSAEncryption d5:b6:af:1a:b5:31:46:96:b4:ae:75:2b:9c:ab:59:0b:ed:1f: 44:5e:15:07:ce:f6:6a:31:fd:59:5c:56:2f:04:3e:bf:b8:da: 14:e7:11:18:6f:2c:d5:eb:f9:76:e2:56:f3:d7:ce:ff:db:91: bb:6b:13:40:41:87:ea:33:0f:f9:13:6f:96:a4:45:9c:88:51: 65:52:77:8a:99:d1:59:66:6d:5b:f8:17:d2:1f:46:ec:4a:9a: 22:d3:79:8f:c1:8e:8e:02:a8:54:26:d9:87:d7:ce:8d:f3:e6: e7:84:1c:4b:ca:61:6e:70:7f:9f:d9:d8:1a:d7:4c:c4:ee:f8: 2e:2c:f6:19:ff:26:bb:b5:fa:02:54:74:e2:1c:94:8e:93:86: 71:cc:1b:5e:8c:a1:cc:52:a5:a6:e8:66:01:f9:d7:38:b4:a7: 63:ae:84:ae:71:0b:93:63:89:75:20:2f:8c:7a:0d:84:7f:01: 4c:c7:4f:47:42:4f:0b:9e:ed:36:10:6a:89:aa:a3:82:7e:1b: f8:94:c7:49:b1:c4:d5:d9:51:ad:cb:bc:db:5d:f3:ba:86:7c: 1f:08:e1:07:32:84:66:2d:69:68:c4:86:43:f5:07:3e:c1:fe: dc:79:87:45:15:42:db:73:9d:3c:8d:5a:b3:10:93:74:8d:d6: c0:3e:14:97 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EN5OkqcFWAV7/dscx2XDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhMWM3NTcxNTk2ZTQ0NGFhMzIzNzFjYmFiNzI0ZDQ2ZDNj M2M1MmMwHhcNMjYwMTAxMTAxODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZjgyYzA0MGVlMTU3MmYyODJiZjZlMTAyYTZhOWI4ODQ5MTg4MWZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA18yn5CEEbuosXhFZFvHh10FgcBv7 Tn+5KVQ1c7tCNxT1AtpQjaaj5BfY+Yw5YsSci8jXQCoSNi3hsojHOg/Pbt/hyr+E WQgJEc5J8CxbMzbxr3p/2Go+8qOQhNPMtfLbcpy9QEw8aeDMYvevPsYl9VR5vHHz F8hC1qnzMp+LNjh5VOrDvJHP16K9gnRKuBexn8QNJ/OCSOReoVY2OORwNQpTf4bv i+aWSSI9DzZrGgm6nO9bUtGZ89mBpiz6l/ahw9csiF2r8Bj8l3XFgn3KXgi4HO/B l2jjNGCucsMAgnnM+O4ASkipVhELE/XoAmIJeHrHUOWjcnrJfysFG7h7uQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFC+CwEDuFXLygr9uECpqm4hJGIH8MB8GA1UdIwQY MBaAFMocdXFZbkRKoyNxy6tyTUbTw8UsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWh4MWNWbHVSRXFqSTNITHEzSk5SdFBEeFN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS8zMzYyYzYtYTAzYS00ZjlmLWEwOTEt Yjc2MmMwMTc1ZjI3LzEvTDRMQVFPNFZjdktDdjI0UUttcWJpRWtZZ2Z3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS8zMzYyYzYtYTAzYS00ZjlmLWEwOTEtYjc2MmMwMTc1ZjI3 LzEveWh4MWNWbHVSRXFqSTNITHEzSk5SdFBEeFN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWdBjMA0G CSqGSIb3DQEBCwUAA4IBAQDVtq8atTFGlrSudSucq1kL7R9EXhUHzvZqMf1ZXFYv BD6/uNoU5xEYbyzV6/l24lbz187/25G7axNAQYfqMw/5E2+WpEWciFFlUneKmdFZ Zm1b+BfSH0bsSpoi03mPwY6OAqhUJtmH186N8+bnhBxLymFucH+f2dga10zE7vgu LPYZ/ya7tfoCVHTiHJSOk4ZxzBtejKHMUqWm6GYB+dc4tKdjroSucQuTY4l1IC+M eg2EfwFMx09HQk8Lnu02EGqJqqOCfhv4lMdJscTV2VGty7zbXfO6hnwfCOEHMoRm LWloxIZD9Qc+wf7ceYdFFULbc508jVqzEJN0jdbAPhSX -----END CERTIFICATE-----Generated at Sun Jan 25 21:28:50 2026 by rpki-client