This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/4lbOoMU8vYue75lPLU273Wz0rGY.roa File: 4lbOoMU8vYue75lPLU273Wz0rGY.roa (raw, json) Hash identifier: OKc6RjBIjQuLZxQQ8vPAven5oO4U2p+P2GxzKo6rhOE= Subject key identifier: E2:56:CE:A0:C5:3C:BD:8B:9E:EF:99:4F:2D:4D:BB:DD:6C:F4:AC:66 Certificate issuer: /CN=088465b37b2d4e9f413a31dc7b7e6cba2a33db96 Certificate serial: 019B7E388D250029FB175BB4BE43FAD9FF20 Authority key identifier: 08:84:65:B3:7B:2D:4E:9F:41:3A:31:DC:7B:7E:6C:BA:2A:33:DB:96 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/4lbOoMU8vYue75lPLU273Wz0rGY.roa Signing time: Fri 02 Jan 2026 10:19:53 +0000 ROA not before: Fri 02 Jan 2026 10:19:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 1239 IP address blocks: 193.108.102.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.mft rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:8d:25:00:29:fb:17:5b:b4:be:43:fa:d9:ff:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=088465b37b2d4e9f413a31dc7b7e6cba2a33db96 Validity Not Before: Jan 2 10:19:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e256cea0c53cbd8b9eef994f2d4dbbdd6cf4ac66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:74:50:aa:73:02:76:9f:c2:90:29:47:29:3f: 7f:a5:93:91:d2:af:56:d6:9e:63:63:69:34:84:df: c0:b7:33:be:3f:9c:45:f1:d2:c3:13:40:01:7d:56: 2f:57:c8:07:33:b7:2b:8f:8e:06:c1:19:d1:a8:cc: a1:61:ce:47:f9:88:5a:32:c4:5f:90:62:fd:9a:55: e2:62:b4:7f:16:68:a2:1a:77:69:9d:29:05:67:a8: 32:4e:5e:36:32:7d:b9:29:00:ef:0c:9f:33:99:9c: 9d:b1:38:7f:de:cb:08:48:49:c5:4d:bf:a9:e9:c0: fc:aa:f9:2b:d5:09:11:d3:5e:0a:cc:7d:ce:12:fb: 83:22:48:bb:2d:35:9f:3d:a9:e5:27:a9:9a:2e:fb: 2f:81:f3:52:9c:b3:8b:cd:d7:2f:bd:3d:52:15:d0: a8:a1:ed:c9:ff:32:b1:24:bd:81:29:47:c1:75:14: e5:ae:80:ae:71:be:9b:bf:36:c4:48:01:ac:c4:9d: e8:9b:e1:3f:ab:a2:8f:7f:43:d9:81:d1:e0:cd:54: fc:68:b8:52:dd:d9:33:2d:70:0c:59:68:ee:52:86: eb:82:c9:7a:17:34:2c:34:55:36:50:a1:41:cc:b6: ee:57:7b:f9:9b:8d:b4:fb:24:40:80:cc:fc:10:90: 2d:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:56:CE:A0:C5:3C:BD:8B:9E:EF:99:4F:2D:4D:BB:DD:6C:F4:AC:66 X509v3 Authority Key Identifier: keyid:08:84:65:B3:7B:2D:4E:9F:41:3A:31:DC:7B:7E:6C:BA:2A:33:DB:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/4lbOoMU8vYue75lPLU273Wz0rGY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.108.102.0/23 Signature Algorithm: sha256WithRSAEncryption 49:75:28:23:91:f2:77:7c:ad:82:46:b9:f0:64:52:44:7a:31: 85:01:41:d0:0b:1f:9e:b6:7e:20:da:c4:e3:19:de:d4:59:82: 8e:38:79:59:c9:e2:f2:30:cd:99:3a:d8:49:2b:df:bf:fe:cd: db:06:f7:0f:40:c3:60:19:b4:31:b2:18:d2:e7:69:0f:e9:12: e9:1a:4a:31:30:0a:cc:4e:97:fc:66:c6:09:f4:35:ea:b8:6a: dd:b5:79:98:0d:82:c4:c4:9e:5e:30:dc:e4:43:6c:f7:93:14: 62:cc:0e:eb:e1:a6:9d:e7:bb:6d:31:3d:fa:e0:d5:75:c0:9b: b5:e6:86:95:ee:59:d5:78:00:bc:b7:56:68:d5:df:44:01:e2: 97:b2:d4:68:c3:24:41:f3:18:67:28:f3:80:58:b1:0f:cc:f7: 28:54:15:48:68:66:12:58:ce:e6:f8:e3:2e:ac:a4:db:d4:34: 8a:4f:03:fb:72:dd:c1:93:25:62:13:b2:96:4a:c8:80:fc:6a: 1e:02:b7:05:dc:ec:5c:74:98:35:1a:60:e1:27:60:dd:72:13: 9a:d8:45:43:f6:1f:c8:e3:9b:87:c3:82:f6:63:d4:9a:7e:01: 1b:6b:f4:db:93:e9:41:b8:7a:88:36:0e:38:c2:21:30:a0:d8: 83:29:c5:d1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OI0lACn7F1u0vkP62f8gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4ODQ2NWIzN2IyZDRlOWY0MTNhMzFkYzdiN2U2Y2JhMmEz M2RiOTYwHhcNMjYwMTAyMTAxOTUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMjU2Y2VhMGM1M2NiZDhiOWVlZjk5NGYyZDRkYmJkZDZjZjRhYzY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAynRQqnMCdp/CkClHKT9/pZOR0q9W 1p5jY2k0hN/AtzO+P5xF8dLDE0ABfVYvV8gHM7crj44GwRnRqMyhYc5H+YhaMsRf kGL9mlXiYrR/FmiiGndpnSkFZ6gyTl42Mn25KQDvDJ8zmZydsTh/3ssISEnFTb+p 6cD8qvkr1QkR014KzH3OEvuDIki7LTWfPanlJ6maLvsvgfNSnLOLzdcvvT1SFdCo oe3J/zKxJL2BKUfBdRTlroCucb6bvzbESAGsxJ3om+E/q6KPf0PZgdHgzVT8aLhS 3dkzLXAMWWjuUobrgsl6FzQsNFU2UKFBzLbuV3v5m420+yRAgMz8EJAtiQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOJWzqDFPL2Lnu+ZTy1Nu91s9KxmMB8GA1UdIwQY MBaAFAiEZbN7LU6fQTox3Ht+bLoqM9uWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0lSbHMzc3RUcDlCT2pIY2UzNXN1aW96MjVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC8zZTJiMTgtNTVjOS00MTgwLThjNmUt MmM3MDg2ZmRlZDkzLzEvNGxiT29NVTh2WXVlNzVsUExVMjczV3owckdZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC8zZTJiMTgtNTVjOS00MTgwLThjNmUtMmM3MDg2ZmRlZDkz LzEvQ0lSbHMzc3RUcDlCT2pIY2UzNXN1aW96MjVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwWxmMA0G CSqGSIb3DQEBCwUAA4IBAQBJdSgjkfJ3fK2CRrnwZFJEejGFAUHQCx+etn4g2sTj Gd7UWYKOOHlZyeLyMM2ZOthJK9+//s3bBvcPQMNgGbQxshjS52kP6RLpGkoxMArM Tpf8ZsYJ9DXquGrdtXmYDYLExJ5eMNzkQ2z3kxRizA7r4aad57ttMT364NV1wJu1 5oaV7lnVeAC8t1Zo1d9EAeKXstRowyRB8xhnKPOAWLEPzPcoVBVIaGYSWM7m+OMu rKTb1DSKTwP7ct3BkyViE7KWSsiA/GoeArcF3OxcdJg1GmDhJ2DdchOa2EVD9h/I 45uHw4L2Y9SafgEba/Tbk+lBuHqINg44wiEwoNiDKcXR -----END CERTIFICATE-----Generated at Tue Jan 20 09:06:51 2026 by rpki-client