This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/3edb47-fd6e-4c59-a7ab-e42a58064a63/1/lIx0KubEd0NAwKbnWvfavDgfMLw.roa File: lIx0KubEd0NAwKbnWvfavDgfMLw.roa (raw, json) Hash identifier: Z1acY8ho4rEFuqnBBBvS7eEzd1qsRchpuvE7DncwSZE= Subject key identifier: 94:8C:74:2A:E6:C4:77:43:40:C0:A6:E7:5A:F7:DA:BC:38:1F:30:BC Certificate issuer: /CN=e10d5c29a3439703d89b5abf03a75d861771bef4 Certificate serial: 019B7C11EF9EB23BA8BF793C2709A5A2058C Authority key identifier: E1:0D:5C:29:A3:43:97:03:D8:9B:5A:BF:03:A7:5D:86:17:71:BE:F4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/3edb47-fd6e-4c59-a7ab-e42a58064a63/1/lIx0KubEd0NAwKbnWvfavDgfMLw.roa Signing time: Fri 02 Jan 2026 00:18:28 +0000 ROA not before: Fri 02 Jan 2026 00:18:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34736 IP address blocks: 188.119.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/3edb47-fd6e-4c59-a7ab-e42a58064a63/1/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.crl rsync://rpki.ripe.net/repository/DEFAULT/24/3edb47-fd6e-4c59-a7ab-e42a58064a63/1/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.mft rsync://rpki.ripe.net/repository/DEFAULT/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:ef:9e:b2:3b:a8:bf:79:3c:27:09:a5:a2:05:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e10d5c29a3439703d89b5abf03a75d861771bef4 Validity Not Before: Jan 2 00:18:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=948c742ae6c4774340c0a6e75af7dabc381f30bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:99:5a:79:4c:4f:74:7b:62:d2:0f:0e:37:f0: 86:b1:5b:f9:88:87:8f:49:ec:72:98:46:47:28:37: e7:b3:c4:39:39:3f:36:be:8b:40:91:e7:78:51:c6: 67:f0:38:7d:c8:03:4e:60:ab:02:ab:a8:b2:07:fc: 15:ac:f4:a7:e9:97:c3:ae:fa:e9:94:c2:0d:fb:9d: b2:fb:18:81:ce:ee:67:2c:14:e0:45:7b:7a:1b:c4: b8:15:c3:e4:2f:72:0f:3e:46:9e:a9:e6:d7:85:5e: 8e:4b:8c:6a:8d:f7:e1:58:a3:1a:3c:7c:ad:ef:e2: 60:bc:bc:29:f1:e0:4a:f7:cf:48:9a:7f:d9:98:0a: ee:a6:74:e5:b1:a7:b4:ea:eb:aa:5b:6a:25:fd:24: 47:22:9b:b9:34:83:8d:f0:9d:a4:8d:3b:0a:e0:37: bd:49:e6:b5:ed:f2:74:1b:32:98:6c:71:04:42:7d: e6:26:72:d4:c9:3b:1d:54:1c:00:ae:76:7f:b6:77: 9e:03:f0:d0:5d:ff:6c:b3:11:a4:ac:8b:83:f5:b7: c2:1f:11:d9:22:fd:de:d7:6f:81:78:2c:5e:24:cd: ca:d5:63:cd:30:19:97:5e:e5:bc:41:41:9e:69:6c: 5b:b5:41:db:5c:fe:59:b1:a3:84:25:31:99:aa:2f: a6:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:8C:74:2A:E6:C4:77:43:40:C0:A6:E7:5A:F7:DA:BC:38:1F:30:BC X509v3 Authority Key Identifier: keyid:E1:0D:5C:29:A3:43:97:03:D8:9B:5A:BF:03:A7:5D:86:17:71:BE:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/3edb47-fd6e-4c59-a7ab-e42a58064a63/1/lIx0KubEd0NAwKbnWvfavDgfMLw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/3edb47-fd6e-4c59-a7ab-e42a58064a63/1/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.119.28.0/24 Signature Algorithm: sha256WithRSAEncryption 52:0f:4f:5f:bc:c2:41:f5:63:b6:ba:bc:ea:88:87:2d:f5:2d: af:93:2d:a2:8a:6f:0e:d9:6b:1a:e1:39:f9:95:78:d1:1c:03: 9a:b6:27:d9:b7:34:e1:f9:90:d9:4d:c4:f2:da:30:b0:48:e6: ac:d9:75:03:35:22:a2:19:6b:c6:ff:3b:e1:49:a5:ad:36:f1: ec:47:3d:71:b8:61:62:83:e4:41:35:f1:df:01:39:13:c9:f3: 08:d2:9f:de:d8:c7:0e:55:82:3f:f3:ac:6a:ed:58:cd:d4:bd: 06:bf:09:61:dd:9d:d1:60:03:fa:12:0b:24:5f:e1:fd:30:c0: 83:e2:5a:f7:8e:81:a7:2c:88:ab:30:b6:1f:68:88:f3:24:8c: cc:42:16:d6:16:79:b9:0a:c0:57:72:24:9a:c2:a2:02:25:cd: 9b:e8:ba:29:9c:f7:95:bf:90:54:ab:11:6d:97:c2:71:ef:5f: 73:ef:fa:de:f5:da:12:7d:ee:68:76:9e:78:95:c6:e0:53:26: df:e1:a7:75:fb:a4:e7:8d:42:ad:83:03:9f:de:f6:09:e6:6e: 3f:7d:16:f4:b9:5e:12:6f:37:43:4e:94:20:1c:70:35:da:2d: a1:ad:2c:51:2e:cd:08:0e:39:35:41:ce:09:e1:4e:2d:2a:ee: fb:3c:e5:c9 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8Ee+esjuov3k8JwmlogWMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxMGQ1YzI5YTM0Mzk3MDNkODliNWFiZjAzYTc1ZDg2MTc3 MWJlZjQwHhcNMjYwMTAyMDAxODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NDhjNzQyYWU2YzQ3NzQzNDBjMGE2ZTc1YWY3ZGFiYzM4MWYzMGJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkZlaeUxPdHti0g8ON/CGsVv5iIeP SexymEZHKDfns8Q5OT82votAked4UcZn8Dh9yANOYKsCq6iyB/wVrPSn6ZfDrvrp lMIN+52y+xiBzu5nLBTgRXt6G8S4FcPkL3IPPkaeqebXhV6OS4xqjffhWKMaPHyt 7+JgvLwp8eBK989Imn/ZmArupnTlsae06uuqW2ol/SRHIpu5NION8J2kjTsK4De9 Sea17fJ0GzKYbHEEQn3mJnLUyTsdVBwArnZ/tneeA/DQXf9ssxGkrIuD9bfCHxHZ Iv3e12+BeCxeJM3K1WPNMBmXXuW8QUGeaWxbtUHbXP5ZsaOEJTGZqi+mdQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJSMdCrmxHdDQMCm51r32rw4HzC8MB8GA1UdIwQY MBaAFOENXCmjQ5cD2JtavwOnXYYXcb70MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNFExY0thTkRsd1BZbTFxX0E2ZGRoaGR4dnZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC8zZWRiNDctZmQ2ZS00YzU5LWE3YWIt ZTQyYTU4MDY0YTYzLzEvbEl4MEt1YkVkME5Bd0tibld2ZmF2RGdmTUx3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC8zZWRiNDctZmQ2ZS00YzU5LWE3YWItZTQyYTU4MDY0YTYz LzEvNFExY0thTkRsd1BZbTFxX0E2ZGRoaGR4dnZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvHccMA0G CSqGSIb3DQEBCwUAA4IBAQBSD09fvMJB9WO2urzqiIct9S2vky2iim8O2Wsa4Tn5 lXjRHAOatifZtzTh+ZDZTcTy2jCwSOas2XUDNSKiGWvG/zvhSaWtNvHsRz1xuGFi g+RBNfHfATkTyfMI0p/e2McOVYI/86xq7VjN1L0Gvwlh3Z3RYAP6EgskX+H9MMCD 4lr3joGnLIirMLYfaIjzJIzMQhbWFnm5CsBXciSawqICJc2b6LopnPeVv5BUqxFt l8Jx719z7/re9doSfe5odp54lcbgUybf4ad1+6TnjUKtgwOf3vYJ5m4/fRb0uV4S bzdDTpQgHHA12i2hrSxRLs0IDjk1Qc4J4U4tKu77POXJ -----END CERTIFICATE-----Generated at Mon Jan 26 14:16:41 2026 by rpki-client