This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/d77a60-1227-4de7-97bb-410061e3576a/1/P1-lVsh39b68C2fcHVD1_sjkJwo.roa File: P1-lVsh39b68C2fcHVD1_sjkJwo.roa (raw, json) Hash identifier: rA4I4sxzVTPzctitCPx83L6sgwq9KNqZHwSs09AGUyM= Subject key identifier: 3F:5F:A5:56:C8:77:F5:BE:BC:0B:67:DC:1D:50:F5:FE:C8:E4:27:0A Certificate issuer: /CN=96eab19bec222c705a1eb03a80df341539d97f14 Certificate serial: 019B7B36725F1DAD7CAFF12D5EDD682BA542 Authority key identifier: 96:EA:B1:9B:EC:22:2C:70:5A:1E:B0:3A:80:DF:34:15:39:D9:7F:14 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/luqxm-wiLHBaHrA6gN80FTnZfxQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/d77a60-1227-4de7-97bb-410061e3576a/1/P1-lVsh39b68C2fcHVD1_sjkJwo.roa Signing time: Thu 01 Jan 2026 20:18:44 +0000 ROA not before: Thu 01 Jan 2026 20:18:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12843 IP address blocks: 193.202.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/d77a60-1227-4de7-97bb-410061e3576a/1/luqxm-wiLHBaHrA6gN80FTnZfxQ.crl rsync://rpki.ripe.net/repository/DEFAULT/33/d77a60-1227-4de7-97bb-410061e3576a/1/luqxm-wiLHBaHrA6gN80FTnZfxQ.mft rsync://rpki.ripe.net/repository/DEFAULT/luqxm-wiLHBaHrA6gN80FTnZfxQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 14:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:72:5f:1d:ad:7c:af:f1:2d:5e:dd:68:2b:a5:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96eab19bec222c705a1eb03a80df341539d97f14 Validity Not Before: Jan 1 20:18:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3f5fa556c877f5bebc0b67dc1d50f5fec8e4270a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:33:21:e2:ea:71:3d:43:21:eb:ee:f4:8e:86: a2:8e:31:63:82:ea:0a:9d:a4:32:c5:78:88:49:2d: f3:26:1b:ac:60:12:15:3a:3f:ba:07:24:b0:38:e7: e2:df:5c:b9:48:93:fd:34:cc:f6:e6:03:70:64:05: 71:49:92:63:83:af:2f:d1:b6:c9:7c:70:f9:1f:a7: 06:65:5d:98:76:91:ed:6c:ae:a9:3a:a8:06:2c:50: 13:ee:e3:97:2d:59:bc:ab:c4:d5:0e:e4:3a:f7:9f: 5d:ad:ea:7c:b8:f5:fa:a2:5e:8f:f6:fb:01:11:39: 1a:2a:d6:7c:9d:89:d2:54:df:0b:d5:7b:1a:86:f8: 4f:48:89:1b:c2:1b:e7:53:24:78:91:ca:1e:57:40: 01:38:92:81:fb:1c:16:14:8c:6d:ef:5e:3b:a3:12: 76:d9:b1:0f:f9:96:ef:64:87:a0:0b:cc:e2:bd:a1: 69:00:18:17:e5:e9:af:bc:ab:f5:68:36:f3:38:b8: 8f:e5:c5:09:6c:44:b2:79:6c:62:54:69:1e:d7:80: bf:14:71:48:9d:0b:cd:6b:24:54:7e:f8:e0:c8:dc: 63:3d:cf:b2:60:9b:bf:4e:4e:6d:3b:2c:69:7e:a7: 22:5e:61:14:4b:df:33:70:f9:8d:ca:c0:66:55:1f: 22:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:5F:A5:56:C8:77:F5:BE:BC:0B:67:DC:1D:50:F5:FE:C8:E4:27:0A X509v3 Authority Key Identifier: keyid:96:EA:B1:9B:EC:22:2C:70:5A:1E:B0:3A:80:DF:34:15:39:D9:7F:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/luqxm-wiLHBaHrA6gN80FTnZfxQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/d77a60-1227-4de7-97bb-410061e3576a/1/P1-lVsh39b68C2fcHVD1_sjkJwo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/d77a60-1227-4de7-97bb-410061e3576a/1/luqxm-wiLHBaHrA6gN80FTnZfxQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.202.119.0/24 Signature Algorithm: sha256WithRSAEncryption a3:e4:cc:b9:aa:ba:c3:c8:19:7e:16:52:34:7c:88:e9:9a:67: a9:57:b7:33:e2:a4:f5:44:cc:6d:cc:91:7d:2c:7d:9a:5f:31: a8:9d:81:5a:c9:1c:5e:a5:14:a5:2a:f2:d7:9e:98:f2:8e:75: b1:cc:51:96:8c:97:25:00:f5:6a:6d:d6:55:27:18:46:47:be: 1c:e8:ad:59:79:a0:54:c0:8f:b6:89:eb:e8:1e:b9:1b:a9:6d: 4a:41:9a:08:72:f5:92:19:b9:04:af:9e:f9:b9:be:a1:bd:0d: 12:3a:dc:33:84:45:7f:eb:c3:f2:80:20:a4:db:f5:e2:8c:5b: c7:7e:14:05:6d:f0:3f:f6:97:e1:0e:b2:c1:32:dd:01:ca:b6: 93:b9:c8:f4:2c:fb:22:a5:02:ac:4e:a6:d2:00:b9:2e:ef:f0: 4f:1e:10:b6:f9:af:42:c0:67:a1:7b:0f:07:1e:bf:8e:ab:74: 59:80:4b:07:f8:ee:78:73:5e:b6:46:e7:25:51:9e:2e:6c:f2: 8e:b2:77:d9:69:3f:86:2c:36:d8:1a:16:11:fe:24:1d:b4:63: 13:e9:91:d0:4e:f8:e6:ac:b7:e0:6d:43:e0:ce:3a:02:bf:82: e2:55:ec:a8:cb:d3:bb:c6:f5:ea:84:5b:d8:93:83:9c:54:b0: 4c:e5:0d:f4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NnJfHa18r/EtXt1oK6VCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2ZWFiMTliZWMyMjJjNzA1YTFlYjAzYTgwZGYzNDE1Mzlk OTdmMTQwHhcNMjYwMTAxMjAxODQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZjVmYTU1NmM4NzdmNWJlYmMwYjY3ZGMxZDUwZjVmZWM4ZTQyNzBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyjMh4upxPUMh6+70joaijjFjguoK naQyxXiISS3zJhusYBIVOj+6BySwOOfi31y5SJP9NMz25gNwZAVxSZJjg68v0bbJ fHD5H6cGZV2YdpHtbK6pOqgGLFAT7uOXLVm8q8TVDuQ6959drep8uPX6ol6P9vsB ETkaKtZ8nYnSVN8L1XsahvhPSIkbwhvnUyR4kcoeV0ABOJKB+xwWFIxt7147oxJ2 2bEP+ZbvZIegC8zivaFpABgX5emvvKv1aDbzOLiP5cUJbESyeWxiVGke14C/FHFI nQvNayRUfvjgyNxjPc+yYJu/Tk5tOyxpfqciXmEUS98zcPmNysBmVR8i7QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFD9fpVbId/W+vAtn3B1Q9f7I5CcKMB8GA1UdIwQY MBaAFJbqsZvsIixwWh6wOoDfNBU52X8UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbHVxeG0td2lMSEJhSHJBNmdOODBGVG5aZnhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy9kNzdhNjAtMTIyNy00ZGU3LTk3YmIt NDEwMDYxZTM1NzZhLzEvUDEtbFZzaDM5YjY4QzJmY0hWRDFfc2prSndvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy9kNzdhNjAtMTIyNy00ZGU3LTk3YmItNDEwMDYxZTM1NzZh LzEvbHVxeG0td2lMSEJhSHJBNmdOODBGVG5aZnhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwcp3MA0G CSqGSIb3DQEBCwUAA4IBAQCj5My5qrrDyBl+FlI0fIjpmmepV7cz4qT1RMxtzJF9 LH2aXzGonYFayRxepRSlKvLXnpjyjnWxzFGWjJclAPVqbdZVJxhGR74c6K1ZeaBU wI+2ievoHrkbqW1KQZoIcvWSGbkEr575ub6hvQ0SOtwzhEV/68PygCCk2/XijFvH fhQFbfA/9pfhDrLBMt0ByraTucj0LPsipQKsTqbSALku7/BPHhC2+a9CwGehew8H Hr+Oq3RZgEsH+O54c162RuclUZ4ubPKOsnfZaT+GLDbYGhYR/iQdtGMT6ZHQTvjm rLfgbUPgzjoCv4LiVeyoy9O7xvXqhFvYk4OcVLBM5Q30 -----END CERTIFICATE-----Generated at Mon Jan 26 19:33:18 2026 by rpki-client