This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/Lu9UbwDH3m74aBjs1ViE-RlYLa0.roa File: Lu9UbwDH3m74aBjs1ViE-RlYLa0.roa (raw, json) Hash identifier: P5F0VBzoFw0S2WAZMJ+b5An3sMkQykrod3FOtSQdNQ4= Subject key identifier: 2E:EF:54:6F:00:C7:DE:6E:F8:68:18:EC:D5:58:84:F9:19:58:2D:AD Certificate issuer: /CN=2663f3db152e055ac145bdbb429e018654204c8d Certificate serial: 019B7C130CEDCC4ABF2E6183C453D80FB680 Authority key identifier: 26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/Lu9UbwDH3m74aBjs1ViE-RlYLa0.roa Signing time: Fri 02 Jan 2026 00:19:41 +0000 ROA not before: Fri 02 Jan 2026 00:19:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215891 IP address blocks: 194.6.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.mft rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:0c:ed:cc:4a:bf:2e:61:83:c4:53:d8:0f:b6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2663f3db152e055ac145bdbb429e018654204c8d Validity Not Before: Jan 2 00:19:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2eef546f00c7de6ef86818ecd55884f919582dad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:72:61:b9:bc:0f:fd:29:bb:6c:48:fa:ae:55: c7:c4:08:f6:51:ee:12:c4:af:4a:31:c1:2c:2b:13: b3:d4:32:fd:95:a3:37:ac:f0:0c:3a:90:ae:4c:f4: b2:5e:53:69:d4:3e:2a:58:d8:f3:1d:b9:ce:b5:ef: 25:2e:f6:a4:47:45:ce:bb:42:b2:ff:fb:d9:fe:7f: 7e:2f:95:5a:75:ef:46:64:25:61:18:69:b8:b0:6d: 79:5a:31:e0:65:73:be:5f:81:e8:19:5d:9a:16:4f: de:4d:e4:17:51:52:63:19:b6:f5:ed:b6:2c:14:55: be:25:86:d0:38:61:e7:33:1d:bb:8f:c2:9f:08:10: 75:15:6c:90:f2:c8:6a:5b:d8:fd:9b:ee:75:59:66: 20:7b:f3:f3:2c:7e:04:a5:9b:b3:b8:58:37:fa:81: b3:cd:43:14:8d:8b:08:23:31:ad:df:16:13:d5:fa: c6:a0:fb:3b:cc:8d:b2:33:39:f5:a7:e4:99:fe:59: d1:88:68:84:f5:46:9b:cf:54:17:96:66:c1:f9:ab: b3:58:64:52:0b:3f:c4:08:f2:75:47:ca:72:35:8d: 8c:d3:05:c0:59:0e:44:9f:d8:2e:4c:18:d2:c8:40: 6e:60:cb:06:76:01:f9:96:5a:ff:66:4b:b2:d8:9d: 81:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:EF:54:6F:00:C7:DE:6E:F8:68:18:EC:D5:58:84:F9:19:58:2D:AD X509v3 Authority Key Identifier: keyid:26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/Lu9UbwDH3m74aBjs1ViE-RlYLa0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.6.174.0/24 Signature Algorithm: sha256WithRSAEncryption ab:9a:e4:67:f1:4a:5b:ac:eb:fe:43:f8:ec:0c:d0:9b:36:ea: 43:8d:8a:dc:06:8c:09:11:15:2c:c5:74:a7:f1:0a:50:0d:c3: 5d:af:70:93:ff:d8:ef:4c:c0:fb:06:78:1d:a9:0f:db:d9:47: 74:71:6f:4e:51:c6:38:1e:88:b3:64:8b:20:ef:f2:3d:a3:0d: 53:23:f0:5c:cc:9a:8e:e9:0a:5d:ea:0e:b5:4b:b2:ab:48:46: e1:22:ea:8b:4e:67:88:96:a4:fe:3d:61:35:f1:91:62:2e:8f: f4:ea:24:b0:22:5f:d7:35:f5:ab:cc:27:63:10:9b:9a:e6:c0: c8:f0:11:e6:19:c2:f5:ff:36:c0:cc:76:39:9e:34:36:f7:4e: 17:13:32:60:00:8d:3e:2c:93:b3:5e:d9:bd:dc:e3:cf:18:d5: 1d:06:41:21:b0:6d:d2:3b:3f:12:94:82:0a:14:cd:91:9f:e7: 7f:af:58:9e:92:88:4f:65:59:3f:18:85:d6:06:94:40:83:35: 03:15:9b:92:15:0e:db:ff:c0:0a:2f:89:1f:24:05:50:ac:43: 62:5d:66:d2:b9:5b:35:97:02:cd:9a:0a:9f:34:cb:f9:b7:8c: 48:ab:fb:ec:02:ab:29:61:3e:28:b3:d3:ac:e3:39:20:3c:b0: a1:59:e9:97 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8EwztzEq/LmGDxFPYD7aAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2NjNmM2RiMTUyZTA1NWFjMTQ1YmRiYjQyOWUwMTg2NTQy MDRjOGQwHhcNMjYwMTAyMDAxOTQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZWVmNTQ2ZjAwYzdkZTZlZjg2ODE4ZWNkNTU4ODRmOTE5NTgyZGFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmnJhubwP/Sm7bEj6rlXHxAj2Ue4S xK9KMcEsKxOz1DL9laM3rPAMOpCuTPSyXlNp1D4qWNjzHbnOte8lLvakR0XOu0Ky //vZ/n9+L5Vade9GZCVhGGm4sG15WjHgZXO+X4HoGV2aFk/eTeQXUVJjGbb17bYs FFW+JYbQOGHnMx27j8KfCBB1FWyQ8shqW9j9m+51WWYge/PzLH4EpZuzuFg3+oGz zUMUjYsIIzGt3xYT1frGoPs7zI2yMzn1p+SZ/lnRiGiE9Uabz1QXlmbB+auzWGRS Cz/ECPJ1R8pyNY2M0wXAWQ5En9guTBjSyEBuYMsGdgH5llr/Zkuy2J2BiQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFC7vVG8Ax95u+GgY7NVYhPkZWC2tMB8GA1UdIwQY MBaAFCZj89sVLgVawUW9u0KeAYZUIEyNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSm1QejJ4VXVCVnJCUmIyN1FwNEJobFFnVEkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9jOGM2ZjYtNTk1Yy00NWIxLWE3NmUt YmQxOTI2NzZjOWJiLzEvTHU5VWJ3REgzbTc0YUJqczFWaUUtUmxZTGEwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS9jOGM2ZjYtNTk1Yy00NWIxLWE3NmUtYmQxOTI2NzZjOWJi LzEvSm1QejJ4VXVCVnJCUmIyN1FwNEJobFFnVEkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwgauMA0G CSqGSIb3DQEBCwUAA4IBAQCrmuRn8UpbrOv+Q/jsDNCbNupDjYrcBowJERUsxXSn 8QpQDcNdr3CT/9jvTMD7BngdqQ/b2Ud0cW9OUcY4HoizZIsg7/I9ow1TI/BczJqO 6Qpd6g61S7KrSEbhIuqLTmeIlqT+PWE18ZFiLo/06iSwIl/XNfWrzCdjEJua5sDI 8BHmGcL1/zbAzHY5njQ2904XEzJgAI0+LJOzXtm93OPPGNUdBkEhsG3SOz8SlIIK FM2Rn+d/r1iekohPZVk/GIXWBpRAgzUDFZuSFQ7b/8AKL4kfJAVQrENiXWbSuVs1 lwLNmgqfNMv5t4xIq/vsAqspYT4os9Os4zkgPLChWemX -----END CERTIFICATE-----Generated at Mon Jan 26 17:44:26 2026 by rpki-client