This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/012130-8103-4c25-93ba-9928dd3f2f82/1/L4uFGOHvLEPXps89rmc7cieKnGo.roa File: L4uFGOHvLEPXps89rmc7cieKnGo.roa (raw, json) Hash identifier: WAylc2U6EehO6X6NFUAmv8+wiqpowHD6dwxbr/1OINk= Subject key identifier: 2F:8B:85:18:E1:EF:2C:43:D7:A6:CF:3D:AE:67:3B:72:27:8A:9C:6A Certificate issuer: /CN=80d608a14118b1a8dcddebbb40f96ecd48f85c71 Certificate serial: 019B76EB8E02900EA9A2448EC06F3B9D7819 Authority key identifier: 80:D6:08:A1:41:18:B1:A8:DC:DD:EB:BB:40:F9:6E:CD:48:F8:5C:71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gNYIoUEYsajc3eu7QPluzUj4XHE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/012130-8103-4c25-93ba-9928dd3f2f82/1/L4uFGOHvLEPXps89rmc7cieKnGo.roa Signing time: Thu 01 Jan 2026 00:18:27 +0000 ROA not before: Thu 01 Jan 2026 00:18:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 136184 IP address blocks: 185.228.92.0/22 maxlen: 22 185.228.92.0/24 maxlen: 24 185.228.93.0/24 maxlen: 24 185.228.94.0/24 maxlen: 24 185.228.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/012130-8103-4c25-93ba-9928dd3f2f82/1/gNYIoUEYsajc3eu7QPluzUj4XHE.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/012130-8103-4c25-93ba-9928dd3f2f82/1/gNYIoUEYsajc3eu7QPluzUj4XHE.mft rsync://rpki.ripe.net/repository/DEFAULT/gNYIoUEYsajc3eu7QPluzUj4XHE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:8e:02:90:0e:a9:a2:44:8e:c0:6f:3b:9d:78:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=80d608a14118b1a8dcddebbb40f96ecd48f85c71 Validity Not Before: Jan 1 00:18:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2f8b8518e1ef2c43d7a6cf3dae673b72278a9c6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:ee:54:40:6a:d8:c7:6a:c8:1d:b5:bd:ba:e8: 47:b3:a9:df:40:fc:21:42:82:64:76:ff:3b:28:6d: d9:90:63:64:37:6b:f3:ad:fa:06:86:bb:9f:59:03: a1:5c:99:c1:4e:89:e1:b8:14:cf:0e:77:d1:e9:e8: ce:b3:b2:49:d1:34:34:66:af:aa:ad:bd:9d:02:8d: 90:ea:6e:8f:91:f0:42:db:5a:2b:33:08:4c:16:c8: 09:2a:99:64:cd:7d:5f:10:79:d5:64:f1:e2:cb:d7: 5d:56:cd:21:f1:df:29:d8:67:ce:03:20:66:8c:98: dc:40:f8:9f:94:cf:98:15:f2:8d:1b:69:b8:68:b6: 0e:5b:1e:91:b4:5e:7c:75:4e:08:1e:c0:47:cf:6f: 5a:89:28:79:3f:f7:b2:1a:4b:e0:a2:f1:e4:6a:50: 18:55:d7:fe:b4:ae:63:15:35:28:f5:f3:70:34:9c: 70:61:fc:87:50:bd:5f:39:fc:c9:bb:74:a6:01:da: 6a:7b:4a:74:c4:aa:66:4b:99:0e:5a:15:8c:b7:87: 2a:0c:64:07:29:46:b4:bc:9f:90:83:0d:94:e0:19: 68:82:8e:41:98:72:98:62:cb:95:95:4a:29:5e:9c: 0a:5c:bf:07:14:da:ba:10:79:b7:ea:6a:33:56:fc: 31:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:8B:85:18:E1:EF:2C:43:D7:A6:CF:3D:AE:67:3B:72:27:8A:9C:6A X509v3 Authority Key Identifier: keyid:80:D6:08:A1:41:18:B1:A8:DC:DD:EB:BB:40:F9:6E:CD:48:F8:5C:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gNYIoUEYsajc3eu7QPluzUj4XHE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/012130-8103-4c25-93ba-9928dd3f2f82/1/L4uFGOHvLEPXps89rmc7cieKnGo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/012130-8103-4c25-93ba-9928dd3f2f82/1/gNYIoUEYsajc3eu7QPluzUj4XHE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.228.92.0/22 Signature Algorithm: sha256WithRSAEncryption 6f:7d:84:11:46:8e:cb:75:1e:6d:89:c5:4b:cb:88:e4:26:b1: b8:74:41:45:c9:bc:59:f7:71:0a:f3:f8:68:5b:8a:0d:7d:e2: 6e:17:f8:7e:bd:54:f8:6e:0e:b9:6b:25:2f:3f:73:38:28:9d: 08:42:55:b4:13:05:12:2e:32:4c:99:7f:a2:42:11:fe:c5:85: 3f:ae:dd:37:29:8e:11:ea:44:49:87:39:74:64:e9:3d:5d:4e: 8c:63:f4:bb:51:84:3d:f6:9b:cc:78:da:d9:c1:2a:7c:d9:99: c9:6d:66:05:93:08:e9:6b:ee:47:70:46:fa:98:7d:77:60:77: 22:8a:f8:4b:17:5f:79:85:33:86:a3:23:5b:7b:31:00:f5:cb: d7:b3:a0:d4:55:9c:b5:cb:9c:1f:fe:c0:84:b4:63:ff:c3:c8: 68:f3:fe:53:e8:7f:f6:c1:e9:8d:02:9d:bd:7d:fd:a2:53:58: 84:c9:99:62:bd:69:52:02:d7:bf:a8:6e:6e:ee:07:97:94:50: 89:1c:a9:ff:d8:35:9b:76:3f:3f:bd:a7:a1:be:cf:00:67:6d: f9:f3:41:9e:b2:1a:63:82:fe:47:9b:a5:3f:d6:8e:fe:13:97: a9:29:2c:4a:eb:6b:0d:8e:be:7e:f6:0f:58:92:17:c5:03:ba: 64:79:39:6a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt2644CkA6pokSOwG87nXgZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgwZDYwOGExNDExOGIxYThkY2RkZWJiYjQwZjk2ZWNkNDhm ODVjNzEwHhcNMjYwMTAxMDAxODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZjhiODUxOGUxZWYyYzQzZDdhNmNmM2RhZTY3M2I3MjI3OGE5YzZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArO5UQGrYx2rIHbW9uuhHs6nfQPwh QoJkdv87KG3ZkGNkN2vzrfoGhrufWQOhXJnBTonhuBTPDnfR6ejOs7JJ0TQ0Zq+q rb2dAo2Q6m6PkfBC21orMwhMFsgJKplkzX1fEHnVZPHiy9ddVs0h8d8p2GfOAyBm jJjcQPiflM+YFfKNG2m4aLYOWx6RtF58dU4IHsBHz29aiSh5P/eyGkvgovHkalAY Vdf+tK5jFTUo9fNwNJxwYfyHUL1fOfzJu3SmAdpqe0p0xKpmS5kOWhWMt4cqDGQH KUa0vJ+Qgw2U4Blogo5BmHKYYsuVlUopXpwKXL8HFNq6EHm36mozVvwx2QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFC+LhRjh7yxD16bPPa5nO3InipxqMB8GA1UdIwQY MBaAFIDWCKFBGLGo3N3ru0D5bs1I+FxxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ05ZSW9VRVlzYWpjM2V1N1FQbHV6VWo0WEhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8wMTIxMzAtODEwMy00YzI1LTkzYmEt OTkyOGRkM2YyZjgyLzEvTDR1RkdPSHZMRVBYcHM4OXJtYzdjaWVLbkdvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi8wMTIxMzAtODEwMy00YzI1LTkzYmEtOTkyOGRkM2YyZjgy LzEvZ05ZSW9VRVlzYWpjM2V1N1FQbHV6VWo0WEhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCueRcMA0G CSqGSIb3DQEBCwUAA4IBAQBvfYQRRo7LdR5ticVLy4jkJrG4dEFFybxZ93EK8/ho W4oNfeJuF/h+vVT4bg65ayUvP3M4KJ0IQlW0EwUSLjJMmX+iQhH+xYU/rt03KY4R 6kRJhzl0ZOk9XU6MY/S7UYQ99pvMeNrZwSp82ZnJbWYFkwjpa+5HcEb6mH13YHci ivhLF195hTOGoyNbezEA9cvXs6DUVZy1y5wf/sCEtGP/w8ho8/5T6H/2wemNAp29 ff2iU1iEyZlivWlSAte/qG5u7geXlFCJHKn/2DWbdj8/vaehvs8AZ23580Geshpj gv5Hm6U/1o7+E5epKSxK62sNjr5+9g9YkhfFA7pkeTlq -----END CERTIFICATE-----Generated at Sun Jan 25 17:19:59 2026 by rpki-client