This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/tL1Tl9zmF3hdb1BWPFCSKDcR1Go.roa File: tL1Tl9zmF3hdb1BWPFCSKDcR1Go.roa (raw, json) Hash identifier: QmuBppG53RYStdASLaqGl2PS2gbLglSq+UlA/UliIXg= Subject key identifier: B4:BD:53:97:DC:E6:17:78:5D:6F:50:56:3C:50:92:28:37:11:D4:6A Certificate issuer: /CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd Certificate serial: 019BBC4F67F63E14B0864A27BBD93A815A67 Authority key identifier: E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/tL1Tl9zmF3hdb1BWPFCSKDcR1Go.roa Signing time: Wed 14 Jan 2026 11:41:19 +0000 ROA not before: Wed 14 Jan 2026 11:41:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 7106 IP address blocks: 93.177.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.mft rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:bc:4f:67:f6:3e:14:b0:86:4a:27:bb:d9:3a:81:5a:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd Validity Not Before: Jan 14 11:41:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b4bd5397dce617785d6f50563c5092283711d46a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:0b:6a:af:25:08:c0:ad:85:30:54:ff:95:43: 48:33:88:0b:0b:ef:9b:82:76:98:14:e3:ad:07:cf: f5:d2:9f:06:45:80:e5:5a:80:9d:8a:28:c8:06:fc: ae:50:57:9c:4d:0e:a3:ac:dd:36:3d:03:e0:ea:df: b5:f8:35:66:0d:a8:d3:a8:3b:c2:3f:a4:8a:e8:85: 6d:e6:60:85:dc:69:2b:58:59:1f:6a:62:eb:bd:74: 91:94:40:8d:90:c0:d4:57:a7:b6:fd:51:2e:17:61: f2:94:45:a5:74:65:ec:78:14:16:49:75:a6:6c:aa: 14:10:40:3b:61:91:fe:b4:77:cf:d3:ac:d2:94:17: 83:d0:02:de:3e:de:16:c6:8a:e7:25:0b:e5:d1:f4: e6:c4:8c:9f:3c:5d:4e:0a:3f:04:ea:aa:a2:aa:1d: 85:38:9c:de:65:3c:69:4c:85:7a:bc:c5:42:59:09: 09:1b:eb:5b:d2:36:be:57:ec:6b:a3:49:51:f2:59: 11:9a:d8:22:79:7e:3f:6a:97:51:7f:2d:10:25:33: 66:37:50:c9:43:c5:e2:85:07:bf:11:28:5f:5b:fe: 38:2e:e6:2c:7d:61:1a:f0:5d:4d:e6:d1:08:e6:e7: 52:87:9b:d2:4f:41:24:24:c9:ff:19:b8:3f:a5:45: 26:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:BD:53:97:DC:E6:17:78:5D:6F:50:56:3C:50:92:28:37:11:D4:6A X509v3 Authority Key Identifier: keyid:E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/tL1Tl9zmF3hdb1BWPFCSKDcR1Go.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.177.108.0/24 Signature Algorithm: sha256WithRSAEncryption a6:8a:da:6f:bc:ff:dc:41:1b:07:f9:e6:51:c5:bc:05:e4:67: 73:b6:b5:d2:43:c6:fc:4e:e4:fb:a1:05:b9:e1:13:44:6a:5b: e8:42:27:72:a8:21:3b:84:d9:b9:ad:7b:40:ba:65:3d:80:4f: eb:db:f4:b0:60:2a:be:91:4e:53:36:72:bd:77:1d:57:ea:cc: 93:00:8d:fb:65:c1:d1:ca:d9:aa:d6:f6:71:a4:c1:36:f3:3b: fe:0c:6b:0d:d2:2f:6a:3e:ab:4d:20:73:3a:79:9d:22:0e:d2: 5f:91:9d:4b:26:e3:d3:f0:ab:bb:33:bc:82:9f:9b:93:cf:ca: 50:f0:9d:7a:1a:02:ce:36:da:1f:73:7b:09:3f:06:0c:8b:3b: da:db:c2:45:47:b9:c8:57:1c:2b:59:ef:31:10:d5:2f:e6:57: 54:f1:c5:08:51:11:54:2b:5c:b7:3d:b8:05:ba:69:d1:04:5a: 16:c6:cf:d0:8c:9f:16:ba:64:d0:dd:99:66:9b:7e:cf:ba:41: c5:d5:0a:80:4c:ec:e8:39:9a:8a:0e:8e:71:3e:0e:e4:c3:23: 43:83:4d:72:d0:1e:f0:02:0e:e5:90:4d:2f:83:48:3a:fd:24: df:d5:51:f3:e8:70:dc:df:8b:9e:c6:77:94:6f:86:23:bb:32: b1:9f:7c:93 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZu8T2f2PhSwhkonu9k6gVpnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyYzJiODM0ZmJjOTFhZjBlYzZiMWQzNGZkNjQwNTRkMjI2 OWExZmQwHhcNMjYwMTE0MTE0MTE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNGJkNTM5N2RjZTYxNzc4NWQ2ZjUwNTYzYzUwOTIyODM3MTFkNDZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqQtqryUIwK2FMFT/lUNIM4gLC++b gnaYFOOtB8/10p8GRYDlWoCdiijIBvyuUFecTQ6jrN02PQPg6t+1+DVmDajTqDvC P6SK6IVt5mCF3GkrWFkfamLrvXSRlECNkMDUV6e2/VEuF2HylEWldGXseBQWSXWm bKoUEEA7YZH+tHfP06zSlBeD0ALePt4WxornJQvl0fTmxIyfPF1OCj8E6qqiqh2F OJzeZTxpTIV6vMVCWQkJG+tb0ja+V+xro0lR8lkRmtgieX4/apdRfy0QJTNmN1DJ Q8XihQe/EShfW/44LuYsfWEa8F1N5tEI5udSh5vST0EkJMn/Gbg/pUUmvwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLS9U5fc5hd4XW9QVjxQkig3EdRqMB8GA1UdIwQY MBaAFOLCuDT7yRrw7GsdNP1kBU0iaaH9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHNLNE5QdkpHdkRzYXgwMF9XUUZUU0pwb2YwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8zZjI0OWItZTgzNi00MWI0LTlhM2Et OTk0ODA2ZjA4MWYwLzEvdEwxVGw5em1GM2hkYjFCV1BGQ1NLRGNSMUdvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC8zZjI0OWItZTgzNi00MWI0LTlhM2EtOTk0ODA2ZjA4MWYw LzEvNHNLNE5QdkpHdkRzYXgwMF9XUUZUU0pwb2YwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXbFsMA0G CSqGSIb3DQEBCwUAA4IBAQCmitpvvP/cQRsH+eZRxbwF5GdztrXSQ8b8TuT7oQW5 4RNEalvoQidyqCE7hNm5rXtAumU9gE/r2/SwYCq+kU5TNnK9dx1X6syTAI37ZcHR ytmq1vZxpME28zv+DGsN0i9qPqtNIHM6eZ0iDtJfkZ1LJuPT8Ku7M7yCn5uTz8pQ 8J16GgLONtofc3sJPwYMizva28JFR7nIVxwrWe8xENUv5ldU8cUIURFUK1y3PbgF umnRBFoWxs/QjJ8WumTQ3Zlmm37PukHF1QqATOzoOZqKDo5xPg7kwyNDg01y0B7w Ag7lkE0vg0g6/STf1VHz6HDc34uexneUb4YjuzKxn3yT -----END CERTIFICATE-----Generated at Mon Jan 19 21:24:17 2026 by rpki-client