This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/8e0efd-e5de-4df5-a551-4cd3e73216f1/1/L_bdGxJHykWkh6lnI23znPb9ZRc.roa File: L_bdGxJHykWkh6lnI23znPb9ZRc.roa (raw, json) Hash identifier: ZEX+GgljqjjHrDsG1Iee4BuX7n/kzIjwqN8LRfjYRoY= Subject key identifier: 2F:F6:DD:1B:12:47:CA:45:A4:87:A9:67:23:6D:F3:9C:F6:FD:65:17 Certificate issuer: /CN=eec3131976aea27d171c6c267a98d3f382a61a2a Certificate serial: 019B77C7624DB9B5B67AEB774B9713CB048A Authority key identifier: EE:C3:13:19:76:AE:A2:7D:17:1C:6C:26:7A:98:D3:F3:82:A6:1A:2A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7sMTGXauon0XHGwmepjT84KmGio.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/8e0efd-e5de-4df5-a551-4cd3e73216f1/1/L_bdGxJHykWkh6lnI23znPb9ZRc.roa Signing time: Thu 01 Jan 2026 04:18:34 +0000 ROA not before: Thu 01 Jan 2026 04:18:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15943 IP address blocks: 193.101.120.0/23 maxlen: 23 193.102.58.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/8e0efd-e5de-4df5-a551-4cd3e73216f1/1/7sMTGXauon0XHGwmepjT84KmGio.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/8e0efd-e5de-4df5-a551-4cd3e73216f1/1/7sMTGXauon0XHGwmepjT84KmGio.mft rsync://rpki.ripe.net/repository/DEFAULT/7sMTGXauon0XHGwmepjT84KmGio.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:62:4d:b9:b5:b6:7a:eb:77:4b:97:13:cb:04:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eec3131976aea27d171c6c267a98d3f382a61a2a Validity Not Before: Jan 1 04:18:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2ff6dd1b1247ca45a487a967236df39cf6fd6517 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:c2:3d:35:a0:4f:26:68:e6:9e:68:b1:92:88: 59:f8:b4:e7:66:b4:46:01:9f:a9:02:97:d5:06:9e: c5:32:55:e6:a6:82:f5:f3:82:da:f4:ac:06:bf:25: 43:35:42:ae:7a:db:1b:56:fb:8b:c3:a6:66:c3:c9: e3:a6:1a:7d:23:b0:92:ae:78:f3:25:0d:0c:fb:bc: 05:db:f4:09:13:8e:bc:93:d1:31:17:87:7f:ae:4f: 5c:0b:17:eb:20:40:8e:92:15:de:ed:1a:6d:17:cd: 9a:0e:06:de:dc:4a:16:91:a7:fb:dc:40:11:17:96: 7c:fe:0b:68:94:78:ae:e4:a6:c4:c0:16:09:69:15: e6:4a:c9:86:db:76:84:1a:a0:0d:87:65:87:87:3e: 90:c5:77:19:eb:64:dc:e8:55:2b:f4:30:34:91:e4: e1:68:95:bb:81:ac:58:c7:4a:19:6e:86:3b:d9:12: 82:85:33:ad:a9:44:a6:76:36:17:e6:01:14:22:5f: 0c:a1:66:34:d5:ae:8d:da:31:fc:0f:64:d4:92:9e: 75:6e:7f:57:53:c3:6f:71:be:21:f1:d4:6f:3b:dc: ec:f5:1d:4e:8c:3b:36:d8:f5:ae:3e:0c:a5:42:e4: f2:19:47:3b:e2:cd:7b:3b:5b:71:e5:91:1d:30:ed: 38:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:F6:DD:1B:12:47:CA:45:A4:87:A9:67:23:6D:F3:9C:F6:FD:65:17 X509v3 Authority Key Identifier: keyid:EE:C3:13:19:76:AE:A2:7D:17:1C:6C:26:7A:98:D3:F3:82:A6:1A:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7sMTGXauon0XHGwmepjT84KmGio.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8e0efd-e5de-4df5-a551-4cd3e73216f1/1/L_bdGxJHykWkh6lnI23znPb9ZRc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8e0efd-e5de-4df5-a551-4cd3e73216f1/1/7sMTGXauon0XHGwmepjT84KmGio.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.101.120.0/23 193.102.58.0/24 Signature Algorithm: sha256WithRSAEncryption 8d:01:a0:45:4e:87:e6:71:0e:5f:e2:ad:8c:cc:52:3a:9c:c9: 38:db:4c:7f:e1:a8:af:fc:76:75:24:1a:e2:1e:02:05:2c:34: 26:3a:09:0d:ae:f9:03:0f:6d:54:27:32:9d:04:ab:8e:75:38: 54:f6:33:d6:5c:ef:b5:da:79:69:53:d7:b5:b6:f2:48:be:a5: 11:1a:04:05:b1:b7:0e:21:a9:2e:9d:f3:49:e6:79:02:33:28: 6e:0d:99:bc:f7:e5:5a:ba:ef:f7:ff:a1:5a:a8:7e:b5:42:59: 7f:f7:30:ba:46:7c:76:b2:81:03:d0:ab:81:1b:d8:99:ad:e9: e9:c7:e6:e9:62:32:41:49:ea:e2:74:be:fb:d6:a7:48:06:5c: a9:6e:ce:1e:59:6e:b4:7c:f3:74:83:5d:13:f7:5f:1e:9f:4e: 93:24:e1:6c:2b:f7:c3:a8:b9:09:d6:63:19:e4:6a:b2:cd:9c: d5:9e:85:c4:9a:ad:4c:0f:5c:61:18:21:ce:b8:12:ac:a6:cb: 3c:2b:8e:9a:e2:50:5d:c9:0c:ba:2d:bb:67:41:32:8e:b3:e6: 60:9b:ab:3e:f2:d2:32:9f:81:d2:f9:a6:c5:b7:72:6b:4b:f2: c4:fc:27:d8:f3:0c:d8:28:8b:a1:ef:d5:50:01:6c:84:ed:a3: 51:0c:a6:36 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt3x2JNubW2eut3S5cTywSKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlYzMxMzE5NzZhZWEyN2QxNzFjNmMyNjdhOThkM2YzODJh NjFhMmEwHhcNMjYwMTAxMDQxODM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZmY2ZGQxYjEyNDdjYTQ1YTQ4N2E5NjcyMzZkZjM5Y2Y2ZmQ2NTE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvMI9NaBPJmjmnmixkohZ+LTnZrRG AZ+pApfVBp7FMlXmpoL184La9KwGvyVDNUKuetsbVvuLw6Zmw8njphp9I7CSrnjz JQ0M+7wF2/QJE468k9ExF4d/rk9cCxfrIECOkhXe7RptF82aDgbe3EoWkaf73EAR F5Z8/gtolHiu5KbEwBYJaRXmSsmG23aEGqANh2WHhz6QxXcZ62Tc6FUr9DA0keTh aJW7gaxYx0oZboY72RKChTOtqUSmdjYX5gEUIl8MoWY01a6N2jH8D2TUkp51bn9X U8Nvcb4h8dRvO9zs9R1OjDs22PWuPgylQuTyGUc74s17O1tx5ZEdMO04LwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFC/23RsSR8pFpIepZyNt85z2/WUXMB8GA1UdIwQY MBaAFO7DExl2rqJ9FxxsJnqY0/OCphoqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN3NNVEdYYXVvbjBYSEd3bWVwalQ4NEttR2lvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC84ZTBlZmQtZTVkZS00ZGY1LWE1NTEt NGNkM2U3MzIxNmYxLzEvTF9iZEd4Skh5a1draDZsbkkyM3puUGI5WlJjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC84ZTBlZmQtZTVkZS00ZGY1LWE1NTEtNGNkM2U3MzIxNmYx LzEvN3NNVEdYYXVvbjBYSEd3bWVwalQ4NEttR2lvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBwWV4AwQA wWY6MA0GCSqGSIb3DQEBCwUAA4IBAQCNAaBFTofmcQ5f4q2MzFI6nMk420x/4aiv /HZ1JBriHgIFLDQmOgkNrvkDD21UJzKdBKuOdThU9jPWXO+12nlpU9e1tvJIvqUR GgQFsbcOIakunfNJ5nkCMyhuDZm89+Vauu/3/6FaqH61Qll/9zC6Rnx2soED0KuB G9iZrenpx+bpYjJBSeridL771qdIBlypbs4eWW60fPN0g10T918en06TJOFsK/fD qLkJ1mMZ5GqyzZzVnoXEmq1MD1xhGCHOuBKspss8K46a4lBdyQy6LbtnQTKOs+Zg m6s+8tIyn4HS+abFt3JrS/LE/CfY8wzYKIuh79VQAWyE7aNRDKY2 -----END CERTIFICATE-----Generated at Mon Jan 26 03:57:02 2026 by rpki-client