This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/c2e18c-c63f-4dd3-8921-05116c9f8aef/1/L4Nkof_0pZhXN5_BFlFOSMgeaiY.roa File: L4Nkof_0pZhXN5_BFlFOSMgeaiY.roa (raw, json) Hash identifier: bde5kTukmqHATGWW/dQkhnT+bwSXC3+2TUXQVaF4eRk= Subject key identifier: 2F:83:64:A1:FF:F4:A5:98:57:37:9F:C1:16:51:4E:48:C8:1E:6A:26 Certificate issuer: /CN=cd7cb97b523c73f1406d63c767c73d9c957d433b Certificate serial: 019B7C7EE133CF93CEECE7FD0DDBE7560A61 Authority key identifier: CD:7C:B9:7B:52:3C:73:F1:40:6D:63:C7:67:C7:3D:9C:95:7D:43:3B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zXy5e1I8c_FAbWPHZ8c9nJV9Qzs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/c2e18c-c63f-4dd3-8921-05116c9f8aef/1/L4Nkof_0pZhXN5_BFlFOSMgeaiY.roa Signing time: Fri 02 Jan 2026 02:17:28 +0000 ROA not before: Fri 02 Jan 2026 02:17:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44328 IP address blocks: 193.163.224.0/20 maxlen: 20 193.163.224.0/21 maxlen: 21 193.163.232.0/22 maxlen: 22 193.163.236.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/c2e18c-c63f-4dd3-8921-05116c9f8aef/1/zXy5e1I8c_FAbWPHZ8c9nJV9Qzs.crl rsync://rpki.ripe.net/repository/DEFAULT/05/c2e18c-c63f-4dd3-8921-05116c9f8aef/1/zXy5e1I8c_FAbWPHZ8c9nJV9Qzs.mft rsync://rpki.ripe.net/repository/DEFAULT/zXy5e1I8c_FAbWPHZ8c9nJV9Qzs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7e:e1:33:cf:93:ce:ec:e7:fd:0d:db:e7:56:0a:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd7cb97b523c73f1406d63c767c73d9c957d433b Validity Not Before: Jan 2 02:17:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2f8364a1fff4a59857379fc116514e48c81e6a26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:b7:68:2d:5f:54:56:bc:75:a5:c6:6e:ce:a5: 9f:76:e5:2b:12:38:f1:49:a9:c3:a6:1e:91:63:80: 15:4f:7e:33:49:2b:fa:78:47:7e:8e:e7:a2:08:4e: ec:3f:36:79:15:e5:29:6c:94:54:0a:89:79:0c:33: 35:a2:52:5e:5e:c7:9d:99:51:14:52:5a:b0:93:c4: 09:4e:da:8a:c9:20:4c:19:e9:ea:c1:0b:08:d4:c8: 66:50:d7:54:07:10:3f:eb:3e:bd:5f:da:0b:00:41: 0f:5f:91:46:3c:c0:f5:8b:8f:8c:63:44:d1:4b:7b: 12:eb:fa:98:f8:4e:4a:75:30:8e:3e:46:fc:d5:a6: 92:8b:58:29:7f:d3:b1:a4:82:b1:46:2e:02:83:ba: e5:f2:66:0f:5a:53:56:fb:be:d2:3c:f6:d9:4f:11: 9a:c4:5a:58:a1:cd:f8:2b:65:c2:e2:73:ef:40:7d: 44:25:49:50:cc:7a:de:90:f7:43:a0:83:bd:36:0f: d6:81:84:86:21:41:c9:6d:ce:de:5e:49:5f:d6:65: 94:f8:68:30:a8:b0:4d:2f:af:ec:62:d2:50:2e:40: 69:8d:9a:3d:6a:0f:6b:6b:0c:c4:3a:04:76:90:29: 57:fb:a2:87:4d:fe:8a:b7:86:be:dd:c8:b0:5f:24: 53:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:83:64:A1:FF:F4:A5:98:57:37:9F:C1:16:51:4E:48:C8:1E:6A:26 X509v3 Authority Key Identifier: keyid:CD:7C:B9:7B:52:3C:73:F1:40:6D:63:C7:67:C7:3D:9C:95:7D:43:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zXy5e1I8c_FAbWPHZ8c9nJV9Qzs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/c2e18c-c63f-4dd3-8921-05116c9f8aef/1/L4Nkof_0pZhXN5_BFlFOSMgeaiY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/c2e18c-c63f-4dd3-8921-05116c9f8aef/1/zXy5e1I8c_FAbWPHZ8c9nJV9Qzs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.163.224.0/20 Signature Algorithm: sha256WithRSAEncryption 3c:3f:5c:0a:60:90:8e:ed:dd:75:82:bd:00:63:eb:65:8d:8c: 78:5f:44:30:1a:38:32:5d:98:37:5c:63:92:69:96:6d:56:dd: 40:f9:55:ff:02:7b:ef:6f:51:04:23:a3:09:ad:a6:07:62:a6: dd:d6:22:49:c7:fd:bb:76:9e:d4:59:7b:b7:d7:2c:e6:c6:22: 94:6c:c1:97:4a:82:5e:17:f8:1d:44:b8:9c:3d:bf:fe:0c:a4: 4d:ab:5f:66:53:a4:d8:dd:26:da:ee:44:ed:5d:ee:c5:35:4f: f4:ce:ab:a0:29:98:b6:38:a1:b2:8d:2c:b5:0c:54:a7:83:3c: 58:40:8c:a6:3e:36:46:70:25:81:6e:30:19:c1:2c:e7:b4:88: 1a:4f:b9:09:4e:ef:ef:95:c1:a1:03:04:81:52:84:d9:95:45: 58:8f:b4:42:92:75:84:1e:3e:a5:39:d4:28:55:0e:4f:a1:a7: ac:e1:43:f3:c9:09:3f:2a:5a:b4:27:2a:ba:cf:81:bd:10:e1: f7:d4:51:40:09:9e:af:13:eb:17:3b:5c:c2:e7:1d:5e:89:b0: e5:3e:5e:4e:0a:cc:91:33:8b:bb:0e:69:c3:91:95:22:f9:d8: 2a:37:65:6d:93:93:63:2f:c4:6b:81:8a:23:aa:49:b5:8d:06: 4a:b2:bc:e2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8fuEzz5PO7Of9DdvnVgphMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkN2NiOTdiNTIzYzczZjE0MDZkNjNjNzY3YzczZDljOTU3 ZDQzM2IwHhcNMjYwMTAyMDIxNzI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZjgzNjRhMWZmZjRhNTk4NTczNzlmYzExNjUxNGU0OGM4MWU2YTI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxrdoLV9UVrx1pcZuzqWfduUrEjjx SanDph6RY4AVT34zSSv6eEd+jueiCE7sPzZ5FeUpbJRUCol5DDM1olJeXsedmVEU Ulqwk8QJTtqKySBMGenqwQsI1MhmUNdUBxA/6z69X9oLAEEPX5FGPMD1i4+MY0TR S3sS6/qY+E5KdTCOPkb81aaSi1gpf9OxpIKxRi4Cg7rl8mYPWlNW+77SPPbZTxGa xFpYoc34K2XC4nPvQH1EJUlQzHrekPdDoIO9Ng/WgYSGIUHJbc7eXklf1mWU+Ggw qLBNL6/sYtJQLkBpjZo9ag9rawzEOgR2kClX+6KHTf6Kt4a+3ciwXyRTbwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFC+DZKH/9KWYVzefwRZRTkjIHmomMB8GA1UdIwQY MBaAFM18uXtSPHPxQG1jx2fHPZyVfUM7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvelh5NWUxSThjX0ZBYldQSFo4YzluSlY5UXpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS9jMmUxOGMtYzYzZi00ZGQzLTg5MjEt MDUxMTZjOWY4YWVmLzEvTDROa29mXzBwWmhYTjVfQkZsRk9TTWdlYWlZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS9jMmUxOGMtYzYzZi00ZGQzLTg5MjEtMDUxMTZjOWY4YWVm LzEvelh5NWUxSThjX0ZBYldQSFo4YzluSlY5UXpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEwaPgMA0G CSqGSIb3DQEBCwUAA4IBAQA8P1wKYJCO7d11gr0AY+tljYx4X0QwGjgyXZg3XGOS aZZtVt1A+VX/Anvvb1EEI6MJraYHYqbd1iJJx/27dp7UWXu31yzmxiKUbMGXSoJe F/gdRLicPb/+DKRNq19mU6TY3Sba7kTtXe7FNU/0zqugKZi2OKGyjSy1DFSngzxY QIymPjZGcCWBbjAZwSzntIgaT7kJTu/vlcGhAwSBUoTZlUVYj7RCknWEHj6lOdQo VQ5Poaes4UPzyQk/Klq0Jyq6z4G9EOH31FFACZ6vE+sXO1zC5x1eibDlPl5OCsyR M4u7DmnDkZUi+dgqN2Vtk5NjL8RrgYojqkm1jQZKsrzi -----END CERTIFICATE-----Generated at Mon Feb 9 22:36:53 2026 by rpki-client