This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/04c239-8869-46e2-95b7-93b392525175/1/lrT-dpG3LRk20hmeOuSNfVtTTUU.roa File: lrT-dpG3LRk20hmeOuSNfVtTTUU.roa (raw, json) Hash identifier: JUdomAkf1Kcn8Ijb1exHH29GRd544m6/vPrvf50qtAQ= Subject key identifier: 96:B4:FE:76:91:B7:2D:19:36:D2:19:9E:3A:E4:8D:7D:5B:53:4D:45 Certificate issuer: /CN=991c934e08f57a03ef4eba36b5a4da798a252207 Certificate serial: 019B7C125B8DA640CC081A8DA9F0AB61E3F5 Authority key identifier: 99:1C:93:4E:08:F5:7A:03:EF:4E:BA:36:B5:A4:DA:79:8A:25:22:07 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mRyTTgj1egPvTro2taTaeYolIgc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/04c239-8869-46e2-95b7-93b392525175/1/lrT-dpG3LRk20hmeOuSNfVtTTUU.roa Signing time: Fri 02 Jan 2026 00:18:56 +0000 ROA not before: Fri 02 Jan 2026 00:18:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211317 IP address blocks: 193.104.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/04c239-8869-46e2-95b7-93b392525175/1/mRyTTgj1egPvTro2taTaeYolIgc.crl rsync://rpki.ripe.net/repository/DEFAULT/00/04c239-8869-46e2-95b7-93b392525175/1/mRyTTgj1egPvTro2taTaeYolIgc.mft rsync://rpki.ripe.net/repository/DEFAULT/mRyTTgj1egPvTro2taTaeYolIgc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:5b:8d:a6:40:cc:08:1a:8d:a9:f0:ab:61:e3:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=991c934e08f57a03ef4eba36b5a4da798a252207 Validity Not Before: Jan 2 00:18:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=96b4fe7691b72d1936d2199e3ae48d7d5b534d45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:72:e0:92:6a:80:ca:42:02:df:23:46:b4:59: 27:37:04:8a:dc:2a:cc:be:d4:fe:2f:f1:54:d5:6d: aa:a9:c6:58:4a:b6:f3:45:e6:81:98:cf:0b:59:e2: 3a:ba:8c:85:55:9d:53:e8:b9:65:05:b4:35:98:b1: 6f:1c:26:08:98:53:7d:69:85:a2:6d:2b:20:cf:3a: 05:4a:fc:fb:58:46:d0:c9:2a:3b:d8:4c:4e:c2:81: 52:b0:bb:5b:1c:f8:07:bd:d6:aa:6c:5f:94:c9:71: 3c:b8:70:5b:a4:df:1f:b6:f7:a0:b5:0b:f2:51:31: d3:f5:c8:92:20:0e:b8:0e:b3:25:88:4b:dd:a7:1c: 87:2c:6d:76:ae:0f:7a:be:08:a3:4f:45:6d:56:7c: e7:03:b6:39:26:ef:c1:84:4d:09:7c:99:1e:cf:20: a6:2f:2d:8f:22:eb:f6:8e:51:2b:3e:e5:f8:c4:a9: c9:ea:65:94:eb:ab:6f:f2:4d:dc:10:d6:8a:91:51: de:de:a8:ba:87:49:58:14:55:18:e2:1e:d5:79:08: 9e:b1:03:6b:74:4f:60:ed:63:d6:ae:40:0e:7e:eb: 0a:9e:09:c6:0f:06:c5:ff:8f:45:2c:2b:52:ca:8d: c7:18:8d:5e:08:73:7a:a8:7b:95:8b:04:3e:14:9e: 19:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:B4:FE:76:91:B7:2D:19:36:D2:19:9E:3A:E4:8D:7D:5B:53:4D:45 X509v3 Authority Key Identifier: keyid:99:1C:93:4E:08:F5:7A:03:EF:4E:BA:36:B5:A4:DA:79:8A:25:22:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mRyTTgj1egPvTro2taTaeYolIgc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/04c239-8869-46e2-95b7-93b392525175/1/lrT-dpG3LRk20hmeOuSNfVtTTUU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/04c239-8869-46e2-95b7-93b392525175/1/mRyTTgj1egPvTro2taTaeYolIgc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.104.158.0/24 Signature Algorithm: sha256WithRSAEncryption 87:3d:d9:40:06:77:cf:0d:4e:d4:e7:eb:df:ee:e9:a5:0b:aa: 6e:9d:66:e7:9b:5b:54:85:4b:0a:36:5e:f9:31:bb:81:a7:53: b5:81:10:bb:aa:24:9f:67:d2:74:f7:1c:e8:22:84:7a:ed:02: 52:3b:a1:0a:9c:ab:cb:27:f1:d5:66:05:50:e6:e9:c6:34:45: a2:11:88:17:56:f9:57:a7:3f:30:f1:19:6f:5b:64:a6:49:3a: e0:06:50:14:b5:e8:ae:39:c2:5e:30:c1:9a:d4:ea:cc:05:4c: 87:83:21:04:21:41:16:45:70:ce:16:00:fd:0e:ec:7e:9c:69: 1a:a0:3d:9d:5f:e3:df:f9:0c:e8:fd:19:a0:51:e6:da:50:a1: cb:7c:94:c6:30:9d:d8:e4:d3:e4:16:08:c6:76:5b:9d:c5:7b: 93:d0:1c:a3:0e:59:3d:62:ce:4c:3d:fd:6b:f1:4e:90:d7:bb: 79:c4:a2:cb:fa:e4:81:87:1c:ef:a7:c6:81:de:a2:f6:d1:bc: dd:c4:ed:a2:e5:78:d0:a2:cd:0c:de:09:81:71:11:68:55:16: 74:84:e3:a1:bb:25:66:05:9e:77:43:62:6a:55:4b:80:be:cb: 29:1e:c9:bc:38:55:de:d6:79:0f:16:57:fb:8d:8e:d0:3e:f8: 7b:e7:18:46 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8EluNpkDMCBqNqfCrYeP1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5MWM5MzRlMDhmNTdhMDNlZjRlYmEzNmI1YTRkYTc5OGEy NTIyMDcwHhcNMjYwMTAyMDAxODU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NmI0ZmU3NjkxYjcyZDE5MzZkMjE5OWUzYWU0OGQ3ZDViNTM0ZDQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsHLgkmqAykIC3yNGtFknNwSK3CrM vtT+L/FU1W2qqcZYSrbzReaBmM8LWeI6uoyFVZ1T6LllBbQ1mLFvHCYImFN9aYWi bSsgzzoFSvz7WEbQySo72ExOwoFSsLtbHPgHvdaqbF+UyXE8uHBbpN8ftvegtQvy UTHT9ciSIA64DrMliEvdpxyHLG12rg96vgijT0VtVnznA7Y5Ju/BhE0JfJkezyCm Ly2PIuv2jlErPuX4xKnJ6mWU66tv8k3cENaKkVHe3qi6h0lYFFUY4h7VeQiesQNr dE9g7WPWrkAOfusKngnGDwbF/49FLCtSyo3HGI1eCHN6qHuViwQ+FJ4ZhwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJa0/naRty0ZNtIZnjrkjX1bU01FMB8GA1UdIwQY MBaAFJkck04I9XoD7066NrWk2nmKJSIHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbVJ5VFRnajFlZ1B2VHJvMnRhVGFlWW9sSWdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC8wNGMyMzktODg2OS00NmUyLTk1Yjct OTNiMzkyNTI1MTc1LzEvbHJULWRwRzNMUmsyMGhtZU91U05mVnRUVFVVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC8wNGMyMzktODg2OS00NmUyLTk1YjctOTNiMzkyNTI1MTc1 LzEvbVJ5VFRnajFlZ1B2VHJvMnRhVGFlWW9sSWdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwWieMA0G CSqGSIb3DQEBCwUAA4IBAQCHPdlABnfPDU7U5+vf7umlC6punWbnm1tUhUsKNl75 MbuBp1O1gRC7qiSfZ9J09xzoIoR67QJSO6EKnKvLJ/HVZgVQ5unGNEWiEYgXVvlX pz8w8RlvW2SmSTrgBlAUteiuOcJeMMGa1OrMBUyHgyEEIUEWRXDOFgD9Dux+nGka oD2dX+Pf+Qzo/RmgUebaUKHLfJTGMJ3Y5NPkFgjGdludxXuT0ByjDlk9Ys5MPf1r 8U6Q17t5xKLL+uSBhxzvp8aB3qL20bzdxO2i5XjQos0M3gmBcRFoVRZ0hOOhuyVm BZ53Q2JqVUuAvsspHsm8OFXe1nkPFlf7jY7QPvh75xhG -----END CERTIFICATE-----Generated at Tue Feb 10 02:47:14 2026 by rpki-client