This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/b404c7-bd3d-4752-8ade-31fcc455575e/1/lSqq2t5j5uhQNwBWbI6WL7tpfgY.roa File: lSqq2t5j5uhQNwBWbI6WL7tpfgY.roa (raw, json) Hash identifier: O4mt9ymqocsZDQGjjG1ro7L0no6+r2S8A/5/+O3vsZ4= Subject key identifier: 95:2A:AA:DA:DE:63:E6:E8:50:37:00:56:6C:8E:96:2F:BB:69:7E:06 Certificate issuer: /CN=099da06b80fa749068028b597be3e50e8b118786 Certificate serial: 019B7EA6B8A6E9BA35283FAC0DDA8BC6FC0C Authority key identifier: 09:9D:A0:6B:80:FA:74:90:68:02:8B:59:7B:E3:E5:0E:8B:11:87:86 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CZ2ga4D6dJBoAotZe-PlDosRh4Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/b404c7-bd3d-4752-8ade-31fcc455575e/1/lSqq2t5j5uhQNwBWbI6WL7tpfgY.roa Signing time: Fri 02 Jan 2026 12:20:14 +0000 ROA not before: Fri 02 Jan 2026 12:20:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15096 IP address blocks: 193.24.27.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/b404c7-bd3d-4752-8ade-31fcc455575e/1/CZ2ga4D6dJBoAotZe-PlDosRh4Y.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/b404c7-bd3d-4752-8ade-31fcc455575e/1/CZ2ga4D6dJBoAotZe-PlDosRh4Y.mft rsync://rpki.ripe.net/repository/DEFAULT/CZ2ga4D6dJBoAotZe-PlDosRh4Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:b8:a6:e9:ba:35:28:3f:ac:0d:da:8b:c6:fc:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=099da06b80fa749068028b597be3e50e8b118786 Validity Not Before: Jan 2 12:20:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=952aaadade63e6e8503700566c8e962fbb697e06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:c5:30:63:25:22:e1:3c:16:8b:41:f5:1e:3d: 97:92:0b:c1:6b:2e:7e:f2:a5:5b:0a:57:f7:c9:86: 60:47:b0:16:5a:af:f4:42:19:f4:c0:5b:6b:6b:5c: 02:01:cb:df:29:28:ba:75:05:66:3a:a3:8e:32:eb: 45:63:d8:ef:be:f9:19:cd:af:8e:a3:84:b1:9c:13: 53:28:16:3f:2c:dc:a4:7f:27:a8:18:7b:80:f1:84: e8:1c:74:46:b6:6b:82:b8:7e:57:67:17:01:13:64: d3:38:5e:bd:7e:f9:fb:1b:69:fc:d8:7d:ee:51:1c: d3:0c:12:57:db:22:2d:13:81:ac:99:42:f3:40:af: 21:d3:5b:02:06:fe:ec:e7:00:29:81:de:02:44:f0: 72:a9:75:48:54:e4:e1:a2:65:e3:16:f6:d5:6f:03: d1:6c:1f:3e:03:51:6d:9f:eb:9f:88:47:92:89:69: f0:a9:da:d4:78:dc:27:90:3b:58:e3:24:d5:db:8d: 99:ad:a6:69:a6:39:55:10:c8:4b:cf:20:11:16:20: 6c:cd:d2:0f:82:22:a6:7e:3a:fd:01:e7:dc:65:3f: 7b:2b:38:d5:9e:e6:98:86:5b:89:55:2a:ee:ef:9c: 15:5b:f3:c4:e8:97:17:56:72:60:e0:28:f8:98:fa: 6c:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:2A:AA:DA:DE:63:E6:E8:50:37:00:56:6C:8E:96:2F:BB:69:7E:06 X509v3 Authority Key Identifier: keyid:09:9D:A0:6B:80:FA:74:90:68:02:8B:59:7B:E3:E5:0E:8B:11:87:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CZ2ga4D6dJBoAotZe-PlDosRh4Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/b404c7-bd3d-4752-8ade-31fcc455575e/1/lSqq2t5j5uhQNwBWbI6WL7tpfgY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/b404c7-bd3d-4752-8ade-31fcc455575e/1/CZ2ga4D6dJBoAotZe-PlDosRh4Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.24.27.0/24 Signature Algorithm: sha256WithRSAEncryption 07:64:61:ce:dc:77:29:61:d2:21:8b:19:36:b8:b5:a5:63:51: 2c:64:e7:bb:cd:a8:1a:39:a9:14:0c:a9:64:1b:9a:56:7d:3e: b8:ce:d9:c4:b8:77:14:27:a9:ed:41:08:7c:dc:52:3c:5a:66: 10:05:72:01:ab:fc:22:38:df:54:be:ba:3f:dc:df:a7:32:56: 33:f7:f2:82:64:53:5c:5e:b4:b5:6c:2d:98:57:d4:88:55:92: 66:26:5f:6b:ab:c0:cd:b3:db:28:23:80:c5:6d:97:f0:e4:ff: 1d:5f:72:9b:da:21:85:a3:6b:4e:f6:58:15:af:7f:4e:cf:e4: 60:2a:27:99:83:56:fe:b3:cc:94:fc:e5:32:30:24:0d:7d:be: 37:22:97:94:c1:6e:69:92:77:b8:dc:5c:85:c4:96:d0:2b:12: 32:65:4e:22:b4:7a:c2:06:b4:e2:17:b5:7d:84:bf:77:da:4d: e8:29:05:5a:7e:f8:ac:24:cf:23:7a:58:f6:0a:25:05:55:c7: 71:f3:6d:92:81:23:c1:74:86:8a:db:2e:8b:6c:1b:3b:97:ef: 12:84:89:40:54:45:41:5c:e0:72:25:94:7f:3a:51:50:b9:68: ad:ee:db:9f:26:51:9f:e7:3c:3c:c4:fa:09:31:73:77:81:92: 92:77:9c:c4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+prim6bo1KD+sDdqLxvwMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5OWRhMDZiODBmYTc0OTA2ODAyOGI1OTdiZTNlNTBlOGIx MTg3ODYwHhcNMjYwMTAyMTIyMDE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NTJhYWFkYWRlNjNlNmU4NTAzNzAwNTY2YzhlOTYyZmJiNjk3ZTA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkcUwYyUi4TwWi0H1Hj2XkgvBay5+ 8qVbClf3yYZgR7AWWq/0Qhn0wFtra1wCAcvfKSi6dQVmOqOOMutFY9jvvvkZza+O o4SxnBNTKBY/LNykfyeoGHuA8YToHHRGtmuCuH5XZxcBE2TTOF69fvn7G2n82H3u URzTDBJX2yItE4GsmULzQK8h01sCBv7s5wApgd4CRPByqXVIVOThomXjFvbVbwPR bB8+A1Ftn+ufiEeSiWnwqdrUeNwnkDtY4yTV242ZraZppjlVEMhLzyARFiBszdIP giKmfjr9AefcZT97KzjVnuaYhluJVSru75wVW/PE6JcXVnJg4Cj4mPpsSwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJUqqtreY+boUDcAVmyOli+7aX4GMB8GA1UdIwQY MBaAFAmdoGuA+nSQaAKLWXvj5Q6LEYeGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1oyZ2E0RDZkSkJvQW90WmUtUGxEb3NSaDRZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9iNDA0YzctYmQzZC00NzUyLThhZGUt MzFmY2M0NTU1NzVlLzEvbFNxcTJ0NWo1dWhRTndCV2JJNldMN3RwZmdZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS9iNDA0YzctYmQzZC00NzUyLThhZGUtMzFmY2M0NTU1NzVl LzEvQ1oyZ2E0RDZkSkJvQW90WmUtUGxEb3NSaDRZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwRgbMA0G CSqGSIb3DQEBCwUAA4IBAQAHZGHO3HcpYdIhixk2uLWlY1EsZOe7zagaOakUDKlk G5pWfT64ztnEuHcUJ6ntQQh83FI8WmYQBXIBq/wiON9Uvro/3N+nMlYz9/KCZFNc XrS1bC2YV9SIVZJmJl9rq8DNs9soI4DFbZfw5P8dX3Kb2iGFo2tO9lgVr39Oz+Rg KieZg1b+s8yU/OUyMCQNfb43IpeUwW5pkne43FyFxJbQKxIyZU4itHrCBrTiF7V9 hL932k3oKQVafvisJM8jelj2CiUFVcdx822SgSPBdIaK2y6LbBs7l+8ShIlAVEVB XOByJZR/OlFQuWit7tufJlGf5zw8xPoJMXN3gZKSd5zE -----END CERTIFICATE-----Generated at Mon Jan 26 00:37:32 2026 by rpki-client