This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/Lc6h2Z7e4ef61w03VqWmwQ119T8.roa File: Lc6h2Z7e4ef61w03VqWmwQ119T8.roa (raw, json) Hash identifier: 6kD68s6rm9LBHxMnI0DhCIpXjpVHuCenzyxRQYAQVaY= Subject key identifier: 2D:CE:A1:D9:9E:DE:E1:E7:FA:D7:0D:37:56:A5:A6:C1:0D:75:F5:3F Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Certificate serial: 019B78345E38F39084C641E92E8C17D41357 Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/Lc6h2Z7e4ef61w03VqWmwQ119T8.roa Signing time: Thu 01 Jan 2026 06:17:36 +0000 ROA not before: Thu 01 Jan 2026 06:17:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43853 IP address blocks: 193.234.166.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:5e:38:f3:90:84:c6:41:e9:2e:8c:17:d4:13:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Validity Not Before: Jan 1 06:17:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2dcea1d99edee1e7fad70d3756a5a6c10d75f53f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:bf:30:41:36:6e:8f:cd:a3:dd:63:19:09:f0: 93:9a:53:1d:c9:83:2b:7c:99:c2:0d:e7:d3:e7:05: 9c:a5:5e:31:57:d2:39:d8:66:c2:c8:74:c7:23:de: 17:9d:08:67:aa:4b:2a:1f:97:f7:6e:1b:97:7f:e0: 76:3d:e5:fd:ee:59:10:3a:25:6e:0a:e2:86:68:87: 31:68:fe:85:23:3a:93:5b:45:b8:58:97:db:5d:30: 55:9d:f8:93:f2:77:8b:b8:26:4b:4b:e8:26:51:c9: a5:8f:8e:0f:4a:66:c9:42:7a:88:a7:13:80:d7:e2: ac:fa:0c:30:54:70:a4:d1:cb:54:73:2e:7e:91:96: 36:c6:a9:a9:5d:0d:da:3d:0e:88:56:83:39:18:de: 6d:43:86:ac:a5:4a:66:f4:bd:ff:00:3d:65:63:8d: dc:7a:4d:ab:ea:15:bf:43:16:7c:b6:a4:85:7d:58: be:64:ec:ad:d1:94:27:f6:70:e3:04:c3:b8:a5:8a: 7e:34:de:ed:46:b3:17:4d:e1:df:9b:aa:ff:94:11: 2b:c1:ec:44:d6:df:08:36:f5:3e:97:7c:da:13:bc: bb:d9:73:7b:3e:d2:25:26:06:5d:04:b1:e8:fd:06: 27:a1:f9:ff:3d:09:25:29:e7:20:c9:15:0c:97:51: a5:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:CE:A1:D9:9E:DE:E1:E7:FA:D7:0D:37:56:A5:A6:C1:0D:75:F5:3F X509v3 Authority Key Identifier: keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/Lc6h2Z7e4ef61w03VqWmwQ119T8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.234.166.0/24 Signature Algorithm: sha256WithRSAEncryption 2f:8d:1e:c2:6c:96:41:ac:2a:22:fc:8d:51:3d:94:b0:32:0b: 30:59:72:cc:23:b7:9f:62:ac:9f:35:ef:6e:8a:aa:63:52:fa: f2:3e:64:cf:ec:7a:78:fb:cc:b0:86:20:b5:a3:8b:7d:83:70: 9b:48:b7:94:a5:30:90:5c:9e:c6:7f:71:fa:c6:37:ab:ea:6a: fc:70:bc:c9:85:57:4d:a0:9e:14:db:91:0b:8d:19:82:d5:63: c0:06:2c:90:cd:fb:f2:25:f2:6c:60:a0:83:19:2a:0c:2b:21: 2a:d6:96:b7:ce:20:db:e9:0f:19:43:1d:ef:e5:47:b4:9a:fe: 43:a7:aa:54:3b:86:f9:81:84:ea:3e:9c:2b:48:d7:91:3b:fe: b1:d5:ee:f9:fc:bc:d7:40:b6:f3:2b:5b:7b:f1:d7:2e:af:96: 15:6b:8c:32:82:e9:61:2c:34:7c:b6:a7:fa:ba:ab:e1:af:26: 05:bd:d3:30:d5:f8:5d:33:64:f1:cb:8b:4c:ba:a7:86:4d:cb: e3:7c:21:b6:1b:18:b1:62:21:9b:52:88:dd:03:54:d1:5d:39: 60:cb:79:0d:2e:3f:7d:e4:20:3c:fc:67:39:12:b8:ce:2f:95: 5b:27:2e:9d:50:c9:7a:e7:a7:b9:39:28:4f:be:9b:1a:10:87: 39:72:c9:e8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NF4485CExkHpLowX1BNXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxMzVjN2Y1NzFlZWZlYjY3NDA0YWI2YzQ1ZmQ0NzU1NTFh ZGFmMWIwHhcNMjYwMTAxMDYxNzM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZGNlYTFkOTllZGVlMWU3ZmFkNzBkMzc1NmE1YTZjMTBkNzVmNTNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmr8wQTZuj82j3WMZCfCTmlMdyYMr fJnCDefT5wWcpV4xV9I52GbCyHTHI94XnQhnqksqH5f3bhuXf+B2PeX97lkQOiVu CuKGaIcxaP6FIzqTW0W4WJfbXTBVnfiT8neLuCZLS+gmUcmlj44PSmbJQnqIpxOA 1+Ks+gwwVHCk0ctUcy5+kZY2xqmpXQ3aPQ6IVoM5GN5tQ4aspUpm9L3/AD1lY43c ek2r6hW/QxZ8tqSFfVi+ZOyt0ZQn9nDjBMO4pYp+NN7tRrMXTeHfm6r/lBErwexE 1t8INvU+l3zaE7y72XN7PtIlJgZdBLHo/QYnofn/PQklKecgyRUMl1GlxwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFC3Oodme3uHn+tcNN1alpsENdfU/MB8GA1UdIwQY MBaAFCE1x/Vx7v62dASrbEX9R1VRra8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDIt OTQzZDAzMzIxMzI2LzEvTGM2aDJaN2U0ZWY2MXcwM1ZxV213UTExOVQ4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDItOTQzZDAzMzIxMzI2 LzEvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAweqmMA0G CSqGSIb3DQEBCwUAA4IBAQAvjR7CbJZBrCoi/I1RPZSwMgswWXLMI7efYqyfNe9u iqpjUvryPmTP7Hp4+8ywhiC1o4t9g3CbSLeUpTCQXJ7Gf3H6xjer6mr8cLzJhVdN oJ4U25ELjRmC1WPABiyQzfvyJfJsYKCDGSoMKyEq1pa3ziDb6Q8ZQx3v5Ue0mv5D p6pUO4b5gYTqPpwrSNeRO/6x1e75/LzXQLbzK1t78dcur5YVa4wygulhLDR8tqf6 uqvhryYFvdMw1fhdM2Txy4tMuqeGTcvjfCG2GxixYiGbUojdA1TRXTlgy3kNLj99 5CA8/Gc5ErjOL5VbJy6dUMl656e5OShPvpsaEIc5csno -----END CERTIFICATE-----Generated at Sun Jan 25 09:03:35 2026 by rpki-client