This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/e445e4-26bd-48c9-83db-7a0ece9c0af8/1/Lte4Gj7HvnpBCaOGUd7AOzRaBV0.roa File: Lte4Gj7HvnpBCaOGUd7AOzRaBV0.roa (raw, json) Hash identifier: yVkM1zt/EykUfazBUe+F76pn3O1M/hLY9A7dh99ee7E= Subject key identifier: 2E:D7:B8:1A:3E:C7:BE:7A:41:09:A3:86:51:DE:C0:3B:34:5A:05:5D Certificate issuer: /CN=8aad9c0ce5ba3905b41970a04e51976076c67e00 Certificate serial: 019B7F1576023A2E7EA0D9333CD8E12CD29A Authority key identifier: 8A:AD:9C:0C:E5:BA:39:05:B4:19:70:A0:4E:51:97:60:76:C6:7E:00 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iq2cDOW6OQW0GXCgTlGXYHbGfgA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/e445e4-26bd-48c9-83db-7a0ece9c0af8/1/Lte4Gj7HvnpBCaOGUd7AOzRaBV0.roa Signing time: Fri 02 Jan 2026 14:21:11 +0000 ROA not before: Fri 02 Jan 2026 14:21:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8075 IP address blocks: 193.135.40.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/e445e4-26bd-48c9-83db-7a0ece9c0af8/1/iq2cDOW6OQW0GXCgTlGXYHbGfgA.crl rsync://rpki.ripe.net/repository/DEFAULT/22/e445e4-26bd-48c9-83db-7a0ece9c0af8/1/iq2cDOW6OQW0GXCgTlGXYHbGfgA.mft rsync://rpki.ripe.net/repository/DEFAULT/iq2cDOW6OQW0GXCgTlGXYHbGfgA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 23:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:76:02:3a:2e:7e:a0:d9:33:3c:d8:e1:2c:d2:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8aad9c0ce5ba3905b41970a04e51976076c67e00 Validity Not Before: Jan 2 14:21:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2ed7b81a3ec7be7a4109a38651dec03b345a055d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:73:76:d1:ca:d3:e5:45:e4:ed:7d:21:f4:56: 5e:1f:72:63:eb:18:c0:b4:8a:09:32:8d:92:9d:75: 18:2e:c4:51:ce:fe:03:d8:dd:f0:e3:3c:4f:a7:26: 93:94:49:a9:0e:2f:44:47:ae:ce:47:83:c7:1e:70: 5d:71:bd:fb:17:83:49:13:5c:c5:ac:28:70:86:37: 04:88:53:12:de:be:58:76:82:82:81:43:8e:44:b9: 57:b5:53:58:4a:11:ac:db:bb:40:a3:60:a7:37:43: 98:b3:8c:2d:46:27:0c:e1:6f:d9:5f:84:8e:1c:5b: 8b:8f:8b:da:10:28:b9:0a:bb:10:d3:ec:a8:50:59: 3a:59:00:f3:ee:7f:5d:71:9c:b9:dc:1f:78:98:43: 84:bc:0e:12:79:16:3b:de:63:cc:3d:1e:90:43:98: b9:b1:a1:22:fb:7d:b9:4f:35:9e:99:f5:15:70:71: 0c:cf:62:23:18:f4:52:52:db:d0:55:b6:c2:ba:f2: 31:f9:e9:ce:ff:a0:33:ea:87:fb:bb:80:f8:7d:67: 72:f8:ce:80:6a:f0:d7:e7:e1:76:e0:6a:7b:3f:66: f2:55:4b:16:71:02:94:73:e6:7a:c6:96:7a:8d:3a: 53:e8:be:5e:b7:22:c6:66:42:a6:67:7e:96:a1:f4: dd:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:D7:B8:1A:3E:C7:BE:7A:41:09:A3:86:51:DE:C0:3B:34:5A:05:5D X509v3 Authority Key Identifier: keyid:8A:AD:9C:0C:E5:BA:39:05:B4:19:70:A0:4E:51:97:60:76:C6:7E:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iq2cDOW6OQW0GXCgTlGXYHbGfgA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e445e4-26bd-48c9-83db-7a0ece9c0af8/1/Lte4Gj7HvnpBCaOGUd7AOzRaBV0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e445e4-26bd-48c9-83db-7a0ece9c0af8/1/iq2cDOW6OQW0GXCgTlGXYHbGfgA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.135.40.0/21 Signature Algorithm: sha256WithRSAEncryption 51:90:0a:03:a5:c9:76:47:65:06:b3:9c:07:22:21:31:fd:d5: 9c:41:bc:65:b5:ae:22:32:08:52:2a:e7:8c:38:73:4d:dd:54: 76:88:28:c4:d5:c4:99:f0:a4:88:d5:e8:ed:4f:0c:06:32:86: c9:e7:5a:04:aa:53:40:c1:17:04:87:28:8c:82:d0:8f:5d:d2: f3:c7:f3:27:1e:0a:f9:bf:41:4a:23:73:ce:2d:ac:be:39:f4: 29:b2:12:5d:1b:58:b2:d1:bd:5a:a7:8c:c1:d6:f2:51:e6:95: 81:50:8d:fc:7e:05:57:64:23:6d:d4:6a:c4:ee:51:19:ec:fc: 21:28:68:c0:bd:ef:c9:aa:9c:29:da:91:e1:94:23:76:f4:ab: 0e:e5:46:0f:05:69:14:11:43:09:97:36:be:02:a1:64:a4:b1: c1:21:82:db:b0:27:ba:0a:03:fe:d7:2b:34:d4:09:f8:c2:29: 91:93:33:a0:e0:2e:d9:34:f6:0c:30:e4:8a:3c:cc:9b:32:7b: c8:fe:e9:08:dd:7e:4f:a9:be:52:d0:fd:b8:15:f2:95:5e:58: b7:37:92:cd:5c:42:af:c4:11:00:0f:00:d9:a5:06:94:38:db: 32:44:cd:4a:d9:2b:71:73:e2:39:31:4c:dd:59:74:4a:ae:4e: 2d:b9:fd:93 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FXYCOi5+oNkzPNjhLNKaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhYWQ5YzBjZTViYTM5MDViNDE5NzBhMDRlNTE5NzYwNzZj NjdlMDAwHhcNMjYwMTAyMTQyMTExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZWQ3YjgxYTNlYzdiZTdhNDEwOWEzODY1MWRlYzAzYjM0NWEwNTVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApHN20crT5UXk7X0h9FZeH3Jj6xjA tIoJMo2SnXUYLsRRzv4D2N3w4zxPpyaTlEmpDi9ER67OR4PHHnBdcb37F4NJE1zF rChwhjcEiFMS3r5YdoKCgUOORLlXtVNYShGs27tAo2CnN0OYs4wtRicM4W/ZX4SO HFuLj4vaECi5CrsQ0+yoUFk6WQDz7n9dcZy53B94mEOEvA4SeRY73mPMPR6QQ5i5 saEi+325TzWemfUVcHEMz2IjGPRSUtvQVbbCuvIx+enO/6Az6of7u4D4fWdy+M6A avDX5+F24Gp7P2byVUsWcQKUc+Z6xpZ6jTpT6L5etyLGZkKmZ36WofTdTwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFC7XuBo+x756QQmjhlHewDs0WgVdMB8GA1UdIwQY MBaAFIqtnAzlujkFtBlwoE5Rl2B2xn4AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaXEyY0RPVzZPUVcwR1hDZ1RsR1hZSGJHZmdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi9lNDQ1ZTQtMjZiZC00OGM5LTgzZGIt N2EwZWNlOWMwYWY4LzEvTHRlNEdqN0h2bnBCQ2FPR1VkN0FPelJhQlYwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi9lNDQ1ZTQtMjZiZC00OGM5LTgzZGItN2EwZWNlOWMwYWY4 LzEvaXEyY0RPVzZPUVcwR1hDZ1RsR1hZSGJHZmdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDwYcoMA0G CSqGSIb3DQEBCwUAA4IBAQBRkAoDpcl2R2UGs5wHIiEx/dWcQbxlta4iMghSKueM OHNN3VR2iCjE1cSZ8KSI1ejtTwwGMobJ51oEqlNAwRcEhyiMgtCPXdLzx/MnHgr5 v0FKI3POLay+OfQpshJdG1iy0b1ap4zB1vJR5pWBUI38fgVXZCNt1GrE7lEZ7Pwh KGjAve/Jqpwp2pHhlCN29KsO5UYPBWkUEUMJlza+AqFkpLHBIYLbsCe6CgP+1ys0 1An4wimRkzOg4C7ZNPYMMOSKPMybMnvI/ukI3X5Pqb5S0P24FfKVXli3N5LNXEKv xBEADwDZpQaUONsyRM1K2Stxc+I5MUzdWXRKrk4tuf2T -----END CERTIFICATE-----Generated at Sat Jan 10 07:54:12 2026 by rpki-client