This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/9c2508-f69b-444b-b860-dc0e81a9d7b4/1/lLChUBZNxYsI76RgX__pDESB_OA.roa File: lLChUBZNxYsI76RgX__pDESB_OA.roa (raw, json) Hash identifier: 5jzvmBS7qQYnrtTH7wbbIQMDBZ7lUHZfG/KhrPJAXYA= Subject key identifier: 94:B0:A1:50:16:4D:C5:8B:08:EF:A4:60:5F:FF:E9:0C:44:81:FC:E0 Certificate issuer: /CN=32ad80d411acb93685f558aa7e12f46bd170a7fb Certificate serial: 019B79101AF463422877B6F6D06B44EFF40C Authority key identifier: 32:AD:80:D4:11:AC:B9:36:85:F5:58:AA:7E:12:F4:6B:D1:70:A7:FB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mq2A1BGsuTaF9ViqfhL0a9Fwp_s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/9c2508-f69b-444b-b860-dc0e81a9d7b4/1/lLChUBZNxYsI76RgX__pDESB_OA.roa Signing time: Thu 01 Jan 2026 10:17:37 +0000 ROA not before: Thu 01 Jan 2026 10:17:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 147.189.18.0/24 maxlen: 24 147.189.19.0/24 maxlen: 24 147.189.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/9c2508-f69b-444b-b860-dc0e81a9d7b4/1/Mq2A1BGsuTaF9ViqfhL0a9Fwp_s.crl rsync://rpki.ripe.net/repository/DEFAULT/01/9c2508-f69b-444b-b860-dc0e81a9d7b4/1/Mq2A1BGsuTaF9ViqfhL0a9Fwp_s.mft rsync://rpki.ripe.net/repository/DEFAULT/Mq2A1BGsuTaF9ViqfhL0a9Fwp_s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:1a:f4:63:42:28:77:b6:f6:d0:6b:44:ef:f4:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32ad80d411acb93685f558aa7e12f46bd170a7fb Validity Not Before: Jan 1 10:17:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=94b0a150164dc58b08efa4605fffe90c4481fce0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:4f:c2:06:d1:57:61:01:7d:11:5a:58:03:a4: 62:41:fc:da:25:5b:24:d9:13:b4:12:38:99:b4:93: e9:df:80:e0:4e:8e:e1:dc:37:6e:c9:cc:07:86:45: 4d:f3:91:59:5e:86:0b:f6:fa:08:8d:c6:00:d1:c9: a4:b5:cc:2f:e2:66:31:e7:69:0f:3d:72:a2:0c:c7: e7:89:da:1f:eb:a4:33:0e:3c:a5:ac:c3:2f:82:37: 3e:ee:64:b2:29:b3:58:36:3d:11:ee:96:f9:19:b1: c8:4c:79:4d:44:0c:92:66:04:6c:25:da:38:b8:87: 0d:64:fd:ac:b8:25:be:cf:ed:52:c5:e0:13:41:d2: 7c:25:58:0e:ea:13:96:3f:1c:35:07:02:4a:5e:b8: a2:df:ca:5b:b8:31:dc:9f:17:5e:45:87:e8:e9:8e: 27:e1:1c:a3:8b:ab:66:91:96:9c:02:4b:35:f5:24: 4e:01:6e:c9:5e:4f:9e:60:7d:f5:42:d9:7b:11:e6: aa:25:b1:0c:94:5c:b9:09:54:90:e5:81:a3:9e:ae: 6b:e2:8e:45:ca:3e:7d:72:59:a7:c4:e0:0a:25:d6: df:d9:9c:a1:49:af:10:b3:79:a5:07:97:ef:8e:ca: 87:32:56:da:b7:14:ba:24:e1:ed:cb:8c:7c:95:89: bc:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:B0:A1:50:16:4D:C5:8B:08:EF:A4:60:5F:FF:E9:0C:44:81:FC:E0 X509v3 Authority Key Identifier: keyid:32:AD:80:D4:11:AC:B9:36:85:F5:58:AA:7E:12:F4:6B:D1:70:A7:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mq2A1BGsuTaF9ViqfhL0a9Fwp_s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/9c2508-f69b-444b-b860-dc0e81a9d7b4/1/lLChUBZNxYsI76RgX__pDESB_OA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/9c2508-f69b-444b-b860-dc0e81a9d7b4/1/Mq2A1BGsuTaF9ViqfhL0a9Fwp_s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.189.18.0-147.189.20.255 Signature Algorithm: sha256WithRSAEncryption 68:09:d5:e5:8f:f3:6d:12:4c:35:5d:d6:a2:78:c4:1f:89:53: 0a:23:88:82:92:b3:0a:f5:c7:fd:e1:49:4e:fb:ea:e6:59:4c: 90:cb:55:ae:db:f0:3d:a2:db:31:4b:78:44:0f:20:aa:33:77: ef:6d:77:27:b5:85:78:85:82:4c:73:45:60:4b:2d:f9:95:c6: 6b:95:0c:53:00:f8:65:29:56:56:e2:06:48:67:2c:db:35:39: 25:65:48:5c:8a:ff:6f:14:25:be:96:88:d3:a6:ba:11:6f:05: d3:29:fa:2f:91:73:88:cd:45:e3:d0:33:67:13:f0:76:df:c3: b7:65:f1:f0:a9:7d:63:ba:32:19:f8:47:a0:98:d0:12:bb:a7: 69:c3:16:bd:b4:3d:8d:3c:57:4b:39:d5:d2:9c:de:b3:be:a6: 6e:bb:75:84:89:86:26:2c:42:b8:34:87:b7:00:3c:41:33:9e: b4:44:2c:ad:8b:4c:97:33:f4:ed:f3:99:fe:e0:39:e7:0f:64: 3d:8c:de:1b:c4:a8:8d:9f:25:57:34:59:75:01:ad:d6:27:07: ff:c0:a7:82:e1:b9:d7:d5:35:c9:5e:55:8c:47:42:0b:b0:ce: f7:ce:7a:5e:d6:0e:bf:ad:c9:eb:8d:5a:7b:50:d9:64:25:67: 93:85:b1:62 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt5EBr0Y0Iod7b20GtE7/QMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyYWQ4MGQ0MTFhY2I5MzY4NWY1NThhYTdlMTJmNDZiZDE3 MGE3ZmIwHhcNMjYwMTAxMTAxNzM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NGIwYTE1MDE2NGRjNThiMDhlZmE0NjA1ZmZmZTkwYzQ0ODFmY2UwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyU/CBtFXYQF9EVpYA6RiQfzaJVsk 2RO0EjiZtJPp34DgTo7h3DduycwHhkVN85FZXoYL9voIjcYA0cmktcwv4mYx52kP PXKiDMfnidof66QzDjylrMMvgjc+7mSyKbNYNj0R7pb5GbHITHlNRAySZgRsJdo4 uIcNZP2suCW+z+1SxeATQdJ8JVgO6hOWPxw1BwJKXrii38pbuDHcnxdeRYfo6Y4n 4Ryji6tmkZacAks19SROAW7JXk+eYH31Qtl7EeaqJbEMlFy5CVSQ5YGjnq5r4o5F yj59clmnxOAKJdbf2ZyhSa8Qs3mlB5fvjsqHMlbatxS6JOHty4x8lYm8iQIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFJSwoVAWTcWLCO+kYF//6QxEgfzgMB8GA1UdIwQY MBaAFDKtgNQRrLk2hfVYqn4S9GvRcKf7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTXEyQTFCR3N1VGFGOVZpcWZoTDBhOUZ3cF9zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS85YzI1MDgtZjY5Yi00NDRiLWI4NjAt ZGMwZTgxYTlkN2I0LzEvbExDaFVCWk54WXNJNzZSZ1hfX3BERVNCX09BLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS85YzI1MDgtZjY5Yi00NDRiLWI4NjAtZGMwZTgxYTlkN2I0 LzEvTXEyQTFCR3N1VGFGOVZpcWZoTDBhOUZ3cF9zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAGTvRID BACTvRQwDQYJKoZIhvcNAQELBQADggEBAGgJ1eWP820STDVd1qJ4xB+JUwojiIKS swr1x/3hSU776uZZTJDLVa7b8D2i2zFLeEQPIKozd+9tdye1hXiFgkxzRWBLLfmV xmuVDFMA+GUpVlbiBkhnLNs1OSVlSFyK/28UJb6WiNOmuhFvBdMp+i+Rc4jNRePQ M2cT8Hbfw7dl8fCpfWO6Mhn4R6CY0BK7p2nDFr20PY08V0s51dKc3rO+pm67dYSJ hiYsQrg0h7cAPEEznrRELK2LTJcz9O3zmf7gOecPZD2M3hvEqI2fJVc0WXUBrdYn B//Ap4LhudfVNcleVYxHQguwzvfOel7WDr+tyeuNWntQ2WQlZ5OFsWI= -----END CERTIFICATE-----Generated at Fri Jan 2 09:27:06 2026 by rpki-client