This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/c7417c-4cab-4d51-b5ad-e30387b3f211/1/LRUYfg6USsKj2QtL2hsG4I_Xo-c.roa File: LRUYfg6USsKj2QtL2hsG4I_Xo-c.roa (raw, json) Hash identifier: 2GklllL0UBZh20Fr2fNv23BY6CPenyVwkECk1lNGsHo= Subject key identifier: 2D:15:18:7E:0E:94:4A:C2:A3:D9:0B:4B:DA:1B:06:E0:8F:D7:A3:E7 Certificate issuer: /CN=c8cc8bda0c63e7d2d65c19ed7043b5a2d791c1f1 Certificate serial: 019B7CEDFFB3B1EF78927FFCA915F8162A59 Authority key identifier: C8:CC:8B:DA:0C:63:E7:D2:D6:5C:19:ED:70:43:B5:A2:D7:91:C1:F1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yMyL2gxj59LWXBntcEO1oteRwfE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/c7417c-4cab-4d51-b5ad-e30387b3f211/1/LRUYfg6USsKj2QtL2hsG4I_Xo-c.roa Signing time: Fri 02 Jan 2026 04:18:50 +0000 ROA not before: Fri 02 Jan 2026 04:18:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 19905 IP address blocks: 194.140.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/c7417c-4cab-4d51-b5ad-e30387b3f211/1/yMyL2gxj59LWXBntcEO1oteRwfE.crl rsync://rpki.ripe.net/repository/DEFAULT/09/c7417c-4cab-4d51-b5ad-e30387b3f211/1/yMyL2gxj59LWXBntcEO1oteRwfE.mft rsync://rpki.ripe.net/repository/DEFAULT/yMyL2gxj59LWXBntcEO1oteRwfE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:ff:b3:b1:ef:78:92:7f:fc:a9:15:f8:16:2a:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c8cc8bda0c63e7d2d65c19ed7043b5a2d791c1f1 Validity Not Before: Jan 2 04:18:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2d15187e0e944ac2a3d90b4bda1b06e08fd7a3e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:43:c3:bd:0b:23:9a:d6:00:4d:c2:ff:20:74: c2:ab:b4:07:e9:0f:6d:0a:4c:8c:78:11:9a:64:02: 49:4e:91:3b:b3:35:30:df:bf:05:ba:4d:bd:72:5a: 35:81:d0:35:bb:d6:27:ac:72:11:52:59:01:55:d9: 41:8c:1f:1d:ef:9c:7b:d8:72:79:54:81:b8:41:18: fb:3b:fd:83:a1:b4:00:4a:7e:ae:f8:8c:5b:9d:c9: 0f:27:e2:1b:37:80:ee:2f:1d:6c:be:e4:c8:52:5e: c4:f6:4f:4a:d9:25:5e:00:15:08:a7:53:80:79:1e: 4f:2f:93:32:4c:4a:47:09:ee:8b:19:09:69:be:b2: a6:14:77:cd:1e:78:ce:95:fa:80:4b:4c:fc:99:1a: eb:34:64:36:20:89:c1:c3:a2:e2:87:05:f4:28:eb: f2:ec:bf:1c:61:6e:6f:29:6b:a9:b1:12:4c:d1:de: a1:3c:89:f7:62:a6:0c:b8:aa:b3:35:9e:9f:d8:5a: aa:63:13:d4:3b:97:54:a0:9c:dc:c6:f3:a8:ee:a1: 78:f5:fb:d7:29:76:b8:b0:3c:08:3b:a1:88:1d:6f: 21:cf:6f:1f:e3:35:00:ff:ca:6b:75:19:48:07:50: 09:9d:3d:e8:f1:3d:0d:d8:c6:0e:ab:9c:6a:02:3f: f3:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:15:18:7E:0E:94:4A:C2:A3:D9:0B:4B:DA:1B:06:E0:8F:D7:A3:E7 X509v3 Authority Key Identifier: keyid:C8:CC:8B:DA:0C:63:E7:D2:D6:5C:19:ED:70:43:B5:A2:D7:91:C1:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yMyL2gxj59LWXBntcEO1oteRwfE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c7417c-4cab-4d51-b5ad-e30387b3f211/1/LRUYfg6USsKj2QtL2hsG4I_Xo-c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c7417c-4cab-4d51-b5ad-e30387b3f211/1/yMyL2gxj59LWXBntcEO1oteRwfE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.140.248.0/24 Signature Algorithm: sha256WithRSAEncryption 31:8d:a5:63:94:e2:da:9b:84:9d:b4:16:38:01:ae:cc:d6:d5: f5:8e:e9:f4:31:01:48:d4:e6:3e:84:ab:15:4b:83:d5:62:ed: 36:df:cf:24:f2:03:77:4f:90:1b:e3:75:35:6e:45:da:62:43: 6a:98:66:83:9b:1b:a4:9a:23:bd:03:d4:6f:07:20:f0:9b:5c: 8f:0a:00:73:94:d4:40:f4:07:9e:68:a1:6d:c2:6b:75:86:42: d8:1d:f2:9c:ea:4a:77:f7:96:03:62:e9:10:4e:30:0e:fc:c8: e6:f0:8d:00:69:85:ab:75:28:74:62:0b:4d:ac:8c:94:d2:7f: a9:b7:00:3b:6a:4f:7c:22:a0:31:ec:7b:63:2e:04:85:ea:60: 9d:17:e3:6a:f6:0c:c6:54:b6:b5:5d:44:28:fb:39:18:a3:7a: 33:a6:4d:2a:87:8e:e4:e0:9a:5a:93:6d:5a:e9:89:70:9f:53: 8d:c8:84:a6:5d:41:bc:75:b0:a9:06:cb:00:5f:d5:db:90:ac: b0:a9:21:46:2a:82:64:ac:e1:72:e9:c5:77:35:63:ec:aa:ea: 80:b0:3b:b6:d2:36:d1:9b:b6:70:5e:6d:f4:1f:39:db:db:8d: ab:ce:32:f8:1a:64:db:7c:14:8f:66:2f:18:f3:bd:ce:36:c3: 1b:75:c5:44 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87f+zse94kn/8qRX4FipZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM4Y2M4YmRhMGM2M2U3ZDJkNjVjMTllZDcwNDNiNWEyZDc5 MWMxZjEwHhcNMjYwMTAyMDQxODUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZDE1MTg3ZTBlOTQ0YWMyYTNkOTBiNGJkYTFiMDZlMDhmZDdhM2U3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzkPDvQsjmtYATcL/IHTCq7QH6Q9t CkyMeBGaZAJJTpE7szUw378Fuk29clo1gdA1u9YnrHIRUlkBVdlBjB8d75x72HJ5 VIG4QRj7O/2DobQASn6u+IxbnckPJ+IbN4DuLx1svuTIUl7E9k9K2SVeABUIp1OA eR5PL5MyTEpHCe6LGQlpvrKmFHfNHnjOlfqAS0z8mRrrNGQ2IInBw6LihwX0KOvy 7L8cYW5vKWupsRJM0d6hPIn3YqYMuKqzNZ6f2FqqYxPUO5dUoJzcxvOo7qF49fvX KXa4sDwIO6GIHW8hz28f4zUA/8prdRlIB1AJnT3o8T0N2MYOq5xqAj/zUwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFC0VGH4OlErCo9kLS9obBuCP16PnMB8GA1UdIwQY MBaAFMjMi9oMY+fS1lwZ7XBDtaLXkcHxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveU15TDJneGo1OUxXWEJudGNFTzFvdGVSd2ZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9jNzQxN2MtNGNhYi00ZDUxLWI1YWQt ZTMwMzg3YjNmMjExLzEvTFJVWWZnNlVTc0tqMlF0TDJoc0c0SV9Yby1jLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS9jNzQxN2MtNGNhYi00ZDUxLWI1YWQtZTMwMzg3YjNmMjEx LzEveU15TDJneGo1OUxXWEJudGNFTzFvdGVSd2ZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwoz4MA0G CSqGSIb3DQEBCwUAA4IBAQAxjaVjlOLam4SdtBY4Aa7M1tX1jun0MQFI1OY+hKsV S4PVYu02388k8gN3T5Ab43U1bkXaYkNqmGaDmxukmiO9A9RvByDwm1yPCgBzlNRA 9AeeaKFtwmt1hkLYHfKc6kp395YDYukQTjAO/Mjm8I0AaYWrdSh0YgtNrIyU0n+p twA7ak98IqAx7HtjLgSF6mCdF+Nq9gzGVLa1XUQo+zkYo3ozpk0qh47k4Jpak21a 6Ylwn1ONyISmXUG8dbCpBssAX9XbkKywqSFGKoJkrOFy6cV3NWPsquqAsDu20jbR m7ZwXm30Hznb242rzjL4GmTbfBSPZi8Y873ONsMbdcVE -----END CERTIFICATE-----Generated at Tue Jan 20 01:19:47 2026 by rpki-client