This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/L4lFHkLJt1uS1_bWx1U_cbnZZCg.roa File: L4lFHkLJt1uS1_bWx1U_cbnZZCg.roa (raw, json) Hash identifier: 37S9g2qnX02p0EDXbM8ytH19Aitp9sPfTHFnApo2L8U= Subject key identifier: 2F:89:45:1E:42:C9:B7:5B:92:D7:F6:D6:C7:55:3F:71:B9:D9:64:28 Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Certificate serial: 019C08D7E33B96BC1998252AED4A68670C34 Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/L4lFHkLJt1uS1_bWx1U_cbnZZCg.roa Signing time: Thu 29 Jan 2026 08:21:32 +0000 ROA not before: Thu 29 Jan 2026 08:21:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 2.59.252.0/24 maxlen: 24 185.216.70.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 30 Jan 2026 11:23:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:08:d7:e3:3b:96:bc:19:98:25:2a:ed:4a:68:67:0c:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Validity Not Before: Jan 29 08:21:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2f89451e42c9b75b92d7f6d6c7553f71b9d96428 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:3b:f6:78:f7:38:54:92:eb:35:30:89:77:75: 14:ab:7f:68:06:cc:82:ef:11:94:29:72:70:8f:a8: 91:c5:fc:3b:da:8d:bf:fa:66:3a:a2:32:24:15:19: 3c:e5:0a:81:e7:0f:fc:0f:31:c7:ef:5e:fd:ed:01: 7f:30:78:b2:a6:6a:a3:fd:ee:b0:d8:d1:a7:9d:59: b9:a0:2a:9e:a4:45:50:15:72:61:93:03:7d:71:0c: 34:20:a8:d2:59:99:b3:95:0c:4f:76:1d:53:a1:57: 7d:81:a7:fd:41:b2:a8:be:aa:1a:32:68:83:50:eb: 57:1a:2a:75:4f:1a:d0:71:37:0e:0c:42:b0:76:ea: 81:29:40:bb:ec:91:f2:75:12:84:b6:31:92:38:3d: 93:83:4b:85:41:f9:99:8e:b1:06:6a:3b:28:69:55: f9:98:fe:0f:01:d4:8b:62:3c:a7:a9:40:5f:38:0c: 74:0b:2b:47:e6:83:e1:db:b2:1e:cf:d4:2c:d1:61: 7b:3f:a5:07:ec:41:03:e2:3b:fd:dd:a4:93:03:29: ef:fa:1f:4e:14:6f:15:b3:99:68:c2:0a:ff:54:2c: f9:4c:90:72:1a:a3:22:13:52:1a:fe:b6:20:ce:fe: ee:4a:dc:b3:89:5c:9c:0d:98:6c:42:48:23:9d:56: ad:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:89:45:1E:42:C9:B7:5B:92:D7:F6:D6:C7:55:3F:71:B9:D9:64:28 X509v3 Authority Key Identifier: keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/L4lFHkLJt1uS1_bWx1U_cbnZZCg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.59.252.0/24 185.216.70.0/24 Signature Algorithm: sha256WithRSAEncryption 77:9d:5a:04:a9:73:58:c1:38:99:90:a3:4d:0f:2a:20:9a:cd: d9:02:ef:0b:06:ae:96:1b:31:fe:bb:88:d5:a3:f8:a3:d4:5d: 90:55:1b:02:02:05:49:0f:e5:83:ea:cb:12:67:e1:87:5e:7b: d2:26:a7:49:ed:c1:c7:29:61:fa:2d:53:ce:fd:80:e5:8f:d8: f5:94:89:bc:72:59:32:64:35:9d:8e:f1:c4:6f:52:d5:11:f8: bc:e7:e3:5b:09:56:88:f7:44:a2:1d:b5:45:9f:8e:11:da:3b: 8d:4f:79:67:36:61:92:3d:78:0c:22:c7:b2:c3:b8:3e:d5:fe: 4a:9b:cc:30:bf:bc:f1:d2:f4:80:fe:05:06:8d:be:c6:b0:e6: 23:8c:3e:5d:47:47:c9:9e:37:ea:4c:30:24:37:48:0a:7f:17: 4e:f1:c3:cf:00:4a:74:44:e6:ee:81:a7:5d:86:82:e1:00:0b: fa:0e:56:82:13:3d:10:39:6d:6c:83:38:c1:f7:26:16:6d:dc: 88:14:f3:2a:7a:31:3c:34:e5:f1:48:f8:67:06:a6:c7:74:40: 83:bd:a4:52:af:59:bd:8c:b5:bd:83:ac:a6:c5:bf:60:47:94: 1e:1a:a8:01:b0:94:88:9b:c3:58:ad:ea:a8:e9:71:d5:36:fc: 99:a9:c9:b6 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZwI1+M7lrwZmCUq7UpoZww0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3 NzVlOWQwHhcNMjYwMTI5MDgyMTMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZjg5NDUxZTQyYzliNzViOTJkN2Y2ZDZjNzU1M2Y3MWI5ZDk2NDI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsTv2ePc4VJLrNTCJd3UUq39oBsyC 7xGUKXJwj6iRxfw72o2/+mY6ojIkFRk85QqB5w/8DzHH71797QF/MHiypmqj/e6w 2NGnnVm5oCqepEVQFXJhkwN9cQw0IKjSWZmzlQxPdh1ToVd9gaf9QbKovqoaMmiD UOtXGip1TxrQcTcODEKwduqBKUC77JHydRKEtjGSOD2Tg0uFQfmZjrEGajsoaVX5 mP4PAdSLYjynqUBfOAx0CytH5oPh27Iez9Qs0WF7P6UH7EED4jv93aSTAynv+h9O FG8Vs5lowgr/VCz5TJByGqMiE1Ia/rYgzv7uStyziVycDZhsQkgjnVatdwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFC+JRR5Cybdbktf21sdVP3G52WQoMB8GA1UdIwQY MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct Y2QzY2E1OTc1NzEyLzEvTDRsRkhrTEp0MXVTMV9iV3gxVV9jYm5aWkNnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAAjv8AwQA udhGMA0GCSqGSIb3DQEBCwUAA4IBAQB3nVoEqXNYwTiZkKNNDyogms3ZAu8LBq6W GzH+u4jVo/ij1F2QVRsCAgVJD+WD6ssSZ+GHXnvSJqdJ7cHHKWH6LVPO/YDlj9j1 lIm8clkyZDWdjvHEb1LVEfi85+NbCVaI90SiHbVFn44R2juNT3lnNmGSPXgMIsey w7g+1f5Km8wwv7zx0vSA/gUGjb7GsOYjjD5dR0fJnjfqTDAkN0gKfxdO8cPPAEp0 RObugaddhoLhAAv6DlaCEz0QOW1sgzjB9yYWbdyIFPMqejE8NOXxSPhnBqbHdECD vaRSr1m9jLW9g6ymxb9gR5QeGqgBsJSIm8NYreqo6XHVNvyZqcm2 -----END CERTIFICATE-----Generated at Thu Jan 29 14:49:56 2026 by rpki-client