This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/b0deec-7233-42f3-8767-b5503a32edfe/1/Q2LlNZpjm7QSfpQ8SxDMKPen6fs.roa File: Q2LlNZpjm7QSfpQ8SxDMKPen6fs.roa (raw, json) Hash identifier: +LvudqksRpkI5ThHyJo6o0SESZrwUB4lFuLcKBfvGGo= Subject key identifier: 43:62:E5:35:9A:63:9B:B4:12:7E:94:3C:4B:10:CC:28:F7:A7:E9:FB Certificate issuer: /CN=bf239c7790fc3d577626d5bbf1861e59c9b470ae Certificate serial: 019B7E39057AC556C689863907A0D25CAF8C Authority key identifier: BF:23:9C:77:90:FC:3D:57:76:26:D5:BB:F1:86:1E:59:C9:B4:70:AE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vyOcd5D8PVd2JtW78YYeWcm0cK4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/b0deec-7233-42f3-8767-b5503a32edfe/1/Q2LlNZpjm7QSfpQ8SxDMKPen6fs.roa Signing time: Fri 02 Jan 2026 10:20:24 +0000 ROA not before: Fri 02 Jan 2026 10:20:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 93.174.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/b0deec-7233-42f3-8767-b5503a32edfe/1/vyOcd5D8PVd2JtW78YYeWcm0cK4.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/b0deec-7233-42f3-8767-b5503a32edfe/1/vyOcd5D8PVd2JtW78YYeWcm0cK4.mft rsync://rpki.ripe.net/repository/DEFAULT/vyOcd5D8PVd2JtW78YYeWcm0cK4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 10:21:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:05:7a:c5:56:c6:89:86:39:07:a0:d2:5c:af:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf239c7790fc3d577626d5bbf1861e59c9b470ae Validity Not Before: Jan 2 10:20:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4362e5359a639bb4127e943c4b10cc28f7a7e9fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:a4:d7:4e:86:41:0a:5c:22:f1:c3:0d:1e:e1: b6:87:e3:8f:81:79:80:bf:6e:81:8e:b6:10:5a:de: 96:3a:e3:30:59:0b:da:7a:fc:6e:ba:96:31:bf:46: 09:98:e4:c8:1a:27:08:ee:0c:cc:97:bd:c8:35:1d: 21:86:bb:c4:cf:6b:7a:91:e7:02:e6:08:6b:f0:7c: cf:42:20:d0:3f:a3:f6:48:b1:0d:b5:e0:bd:a7:87: b5:0e:9d:14:5f:48:48:b7:f6:aa:75:61:9d:0c:d4: 50:7d:12:fb:bf:f1:c6:2e:c8:d5:62:bc:ae:39:95: b6:7f:5d:1e:43:85:54:b4:95:1b:82:b1:49:c1:68: dd:4c:6e:1e:b8:43:07:17:bb:1c:69:75:d1:57:db: e8:a1:be:ea:b5:25:3d:b4:7c:27:e7:62:85:1b:f4: 7d:44:e0:30:25:ef:96:5f:11:b8:2c:b9:d9:91:57: a9:72:f2:5d:b8:32:27:b6:cf:0c:2e:92:cd:64:71: e8:b3:fa:d3:c8:79:61:93:12:60:85:7e:64:32:80: 2a:9c:4e:25:af:90:52:0b:5c:fb:07:70:1f:41:b9: d0:96:9a:b5:16:69:1e:72:6c:3c:fc:5b:ee:bf:bb: 8b:3c:3c:c5:15:d8:67:52:9f:a6:43:ee:a9:f7:18: cc:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:62:E5:35:9A:63:9B:B4:12:7E:94:3C:4B:10:CC:28:F7:A7:E9:FB X509v3 Authority Key Identifier: keyid:BF:23:9C:77:90:FC:3D:57:76:26:D5:BB:F1:86:1E:59:C9:B4:70:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vyOcd5D8PVd2JtW78YYeWcm0cK4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/b0deec-7233-42f3-8767-b5503a32edfe/1/Q2LlNZpjm7QSfpQ8SxDMKPen6fs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/b0deec-7233-42f3-8767-b5503a32edfe/1/vyOcd5D8PVd2JtW78YYeWcm0cK4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.174.208.0/24 Signature Algorithm: sha256WithRSAEncryption 3a:60:b1:6f:09:2a:01:41:60:f0:d9:f9:8c:13:e5:e4:91:e1: 34:2f:51:fa:d2:4f:d6:de:78:8c:b7:de:04:5c:63:7f:92:c6: 94:9d:46:f3:09:da:09:e0:cd:58:f6:8b:c6:02:80:51:9c:84: 21:5b:55:69:c6:c1:44:a2:46:73:66:6f:2b:0b:b2:a5:3c:9a: 55:a2:47:5f:f4:cd:f3:c8:70:e5:d3:9d:78:77:c6:dc:e2:1a: 81:9c:a0:5d:a1:47:c4:d1:c7:a0:3b:ca:20:eb:9b:79:9a:76: 64:96:7f:8c:73:bc:6c:24:9b:d0:40:68:80:2e:e8:39:85:84: 67:7d:d3:19:aa:0d:9f:05:08:a1:ed:37:eb:38:be:d2:fb:0b: b3:6c:67:54:4d:b2:0f:89:f5:75:09:1f:38:17:14:19:ba:41: f6:fa:75:1c:89:2e:28:fb:37:30:7f:97:b0:2b:23:50:75:3a: 3c:e4:9d:77:7f:14:fc:dd:ee:3a:d3:64:0d:57:3e:f9:68:ca: 97:3b:76:fc:34:61:f6:bc:12:86:90:1e:83:c5:65:44:5e:19: 9a:5b:c9:73:84:37:9e:1c:3c:6e:04:81:58:f3:51:4b:2f:82: 45:f6:1c:49:09:43:db:ff:48:1b:74:b5:08:ee:05:03:a6:33: 65:55:b3:c8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OQV6xVbGiYY5B6DSXK+MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmMjM5Yzc3OTBmYzNkNTc3NjI2ZDViYmYxODYxZTU5Yzli NDcwYWUwHhcNMjYwMTAyMTAyMDI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MzYyZTUzNTlhNjM5YmI0MTI3ZTk0M2M0YjEwY2MyOGY3YTdlOWZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuqTXToZBClwi8cMNHuG2h+OPgXmA v26BjrYQWt6WOuMwWQvaevxuupYxv0YJmOTIGicI7gzMl73INR0hhrvEz2t6kecC 5ghr8HzPQiDQP6P2SLENteC9p4e1Dp0UX0hIt/aqdWGdDNRQfRL7v/HGLsjVYryu OZW2f10eQ4VUtJUbgrFJwWjdTG4euEMHF7scaXXRV9voob7qtSU9tHwn52KFG/R9 ROAwJe+WXxG4LLnZkVepcvJduDInts8MLpLNZHHos/rTyHlhkxJghX5kMoAqnE4l r5BSC1z7B3AfQbnQlpq1Fmkecmw8/Fvuv7uLPDzFFdhnUp+mQ+6p9xjM2wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFENi5TWaY5u0En6UPEsQzCj3p+n7MB8GA1UdIwQY MBaAFL8jnHeQ/D1XdibVu/GGHlnJtHCuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdnlPY2Q1RDhQVmQySnRXNzhZWWVXY20wY0s0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9iMGRlZWMtNzIzMy00MmYzLTg3Njct YjU1MDNhMzJlZGZlLzEvUTJMbE5acGptN1FTZnBROFN4RE1LUGVuNmZzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy9iMGRlZWMtNzIzMy00MmYzLTg3NjctYjU1MDNhMzJlZGZl LzEvdnlPY2Q1RDhQVmQySnRXNzhZWWVXY20wY0s0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXa7QMA0G CSqGSIb3DQEBCwUAA4IBAQA6YLFvCSoBQWDw2fmME+XkkeE0L1H60k/W3niMt94E XGN/ksaUnUbzCdoJ4M1Y9ovGAoBRnIQhW1VpxsFEokZzZm8rC7KlPJpVokdf9M3z yHDl0514d8bc4hqBnKBdoUfE0cegO8og65t5mnZkln+Mc7xsJJvQQGiALug5hYRn fdMZqg2fBQih7TfrOL7S+wuzbGdUTbIPifV1CR84FxQZukH2+nUciS4o+zcwf5ew KyNQdTo85J13fxT83e4602QNVz75aMqXO3b8NGH2vBKGkB6DxWVEXhmaW8lzhDee HDxuBIFY81FLL4JF9hxJCUPb/0gbdLUI7gUDpjNlVbPI -----END CERTIFICATE-----Generated at Fri Jan 2 14:45:39 2026 by rpki-client