This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/lBTf4vPU_bfkqrlJKlqx5etPe0Y.roa File: lBTf4vPU_bfkqrlJKlqx5etPe0Y.roa (raw, json) Hash identifier: h9e65d+C+1ExG3UCZzuhyWqYwQgRaOa51PkbtBezQjY= Subject key identifier: 94:14:DF:E2:F3:D4:FD:B7:E4:AA:B9:49:2A:5A:B1:E5:EB:4F:7B:46 Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Certificate serial: 019B783453BFBE6E63E2FA4D3B329C086C14 Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/lBTf4vPU_bfkqrlJKlqx5etPe0Y.roa Signing time: Thu 01 Jan 2026 06:17:33 +0000 ROA not before: Thu 01 Jan 2026 06:17:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34133 IP address blocks: 193.183.104.0/24 maxlen: 24 193.183.105.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:53:bf:be:6e:63:e2:fa:4d:3b:32:9c:08:6c:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Validity Not Before: Jan 1 06:17:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9414dfe2f3d4fdb7e4aab9492a5ab1e5eb4f7b46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:67:50:ea:fe:8a:47:60:4b:6c:90:45:75:c4: a6:af:44:9c:82:aa:f9:98:09:2b:94:e1:12:49:70: cb:a4:51:d6:77:04:6c:9e:dd:49:00:3f:1d:69:a7: 7d:b2:f9:c8:c7:2b:6b:ca:4f:1a:88:7f:5c:b5:d7: d3:78:05:32:2f:d1:63:54:e5:e2:26:b7:8d:c2:47: 85:d2:81:bc:a0:94:10:59:f8:c2:86:6a:31:5d:9b: 16:8b:cf:3f:c9:68:0c:27:83:6e:c2:52:28:d5:3a: de:d0:26:53:55:fb:8a:1c:19:c6:5f:aa:a4:43:b7: db:14:b7:a8:22:de:37:34:db:71:34:e4:4a:74:7d: 88:9a:20:8b:0c:c5:80:30:8b:f0:88:2a:eb:08:53: 1f:f1:d7:9c:61:5e:d9:9b:2e:68:d5:e2:f4:34:d8: d1:4b:64:07:9b:9d:7d:d5:00:b8:2c:f3:f2:ac:a2: 37:09:ff:6a:0e:e3:25:21:4d:ba:a7:20:fa:88:de: 50:25:7c:0b:8c:36:bc:2f:e8:69:8a:05:3e:33:74: 19:3d:9a:1d:42:d7:d9:6d:fb:1f:76:e8:0b:a4:18: 66:01:98:96:95:fa:8a:4e:19:b4:ac:62:4d:40:01: 6e:13:e7:19:6c:be:d1:29:74:3a:dd:95:a9:14:e5: 8b:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:14:DF:E2:F3:D4:FD:B7:E4:AA:B9:49:2A:5A:B1:E5:EB:4F:7B:46 X509v3 Authority Key Identifier: keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/lBTf4vPU_bfkqrlJKlqx5etPe0Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.183.104.0/23 Signature Algorithm: sha256WithRSAEncryption a3:8a:f7:17:6d:16:67:b8:df:f5:66:c7:22:fc:21:01:bb:6b: fc:dd:eb:a5:6e:56:da:e6:a0:da:d5:87:d6:f5:d4:32:7f:9b: b4:9d:f9:99:38:14:9b:b9:bf:1a:84:30:1e:f3:d0:85:ea:71: ee:f4:78:17:bc:4a:72:93:7e:69:03:98:3b:97:c3:55:9f:f9: 2b:b9:6a:7c:c2:1f:c6:5a:ca:97:47:11:99:f6:d9:35:9b:61: f5:5f:d5:85:fb:f6:08:5f:22:cb:5b:aa:0b:fe:d2:31:14:7c: 2f:58:7c:39:83:59:93:61:95:40:cf:85:ca:4d:c1:fd:60:8b: 02:21:91:3d:c2:dd:00:19:25:c7:83:48:a8:80:80:42:b6:b4: 1a:6c:10:7b:c5:da:cc:af:09:6e:94:46:92:e5:31:41:38:65: c6:b6:fe:cd:a5:a8:5c:92:9a:13:be:39:04:b4:65:90:71:66: 5d:0a:d1:97:1d:ba:bf:34:e7:10:64:58:be:b3:5f:55:fa:fc: 79:56:bb:43:bf:ab:d9:14:ef:69:02:b3:ff:b9:be:c5:65:4e: 22:df:f3:cb:ac:41:49:66:e4:1d:5d:be:3c:9e:f9:23:a2:c1: 36:0e:27:3a:7c:cd:a2:64:76:2f:81:36:ef:16:cb:00:81:23: ea:5d:87:a6 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NFO/vm5j4vpNOzKcCGwUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxMzVjN2Y1NzFlZWZlYjY3NDA0YWI2YzQ1ZmQ0NzU1NTFh ZGFmMWIwHhcNMjYwMTAxMDYxNzMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NDE0ZGZlMmYzZDRmZGI3ZTRhYWI5NDkyYTVhYjFlNWViNGY3YjQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxGdQ6v6KR2BLbJBFdcSmr0Scgqr5 mAkrlOESSXDLpFHWdwRsnt1JAD8daad9svnIxytryk8aiH9ctdfTeAUyL9FjVOXi JreNwkeF0oG8oJQQWfjChmoxXZsWi88/yWgMJ4NuwlIo1Tre0CZTVfuKHBnGX6qk Q7fbFLeoIt43NNtxNORKdH2ImiCLDMWAMIvwiCrrCFMf8decYV7Zmy5o1eL0NNjR S2QHm5191QC4LPPyrKI3Cf9qDuMlIU26pyD6iN5QJXwLjDa8L+hpigU+M3QZPZod QtfZbfsfdugLpBhmAZiWlfqKThm0rGJNQAFuE+cZbL7RKXQ63ZWpFOWLAwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJQU3+Lz1P235Kq5SSpaseXrT3tGMB8GA1UdIwQY MBaAFCE1x/Vx7v62dASrbEX9R1VRra8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDIt OTQzZDAzMzIxMzI2LzEvbEJUZjR2UFVfYmZrcXJsSktscXg1ZXRQZTBZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDItOTQzZDAzMzIxMzI2 LzEvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwbdoMA0G CSqGSIb3DQEBCwUAA4IBAQCjivcXbRZnuN/1Zsci/CEBu2v83eulblba5qDa1YfW 9dQyf5u0nfmZOBSbub8ahDAe89CF6nHu9HgXvEpyk35pA5g7l8NVn/kruWp8wh/G WsqXRxGZ9tk1m2H1X9WF+/YIXyLLW6oL/tIxFHwvWHw5g1mTYZVAz4XKTcH9YIsC IZE9wt0AGSXHg0iogIBCtrQabBB7xdrMrwlulEaS5TFBOGXGtv7NpahckpoTvjkE tGWQcWZdCtGXHbq/NOcQZFi+s19V+vx5VrtDv6vZFO9pArP/ub7FZU4i3/PLrEFJ ZuQdXb48nvkjosE2Dic6fM2iZHYvgTbvFssAgSPqXYem -----END CERTIFICATE-----Generated at Sun Jan 25 11:12:08 2026 by rpki-client