This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/f93db8-0e7d-4ea6-891d-70c67f126bf2/1/L_TvjuvkS8Ae6hr2C351DvSCXtw.roa File: L_TvjuvkS8Ae6hr2C351DvSCXtw.roa (raw, json) Hash identifier: iKhq8WVW3Ih/b09mpbpUlZEB5fDDBgm0pJSp3ErD2hs= Subject key identifier: 2F:F4:EF:8E:EB:E4:4B:C0:1E:EA:1A:F6:0B:7E:75:0E:F4:82:5E:DC Certificate issuer: /CN=d7f6f4827c58cb28f996a9aaeb348f1fd26a0ca5 Certificate serial: 019B7EA67B7E8038CE7350258162D5920374 Authority key identifier: D7:F6:F4:82:7C:58:CB:28:F9:96:A9:AA:EB:34:8F:1F:D2:6A:0C:A5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1_b0gnxYyyj5lqmq6zSPH9JqDKU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/f93db8-0e7d-4ea6-891d-70c67f126bf2/1/L_TvjuvkS8Ae6hr2C351DvSCXtw.roa Signing time: Fri 02 Jan 2026 12:19:58 +0000 ROA not before: Fri 02 Jan 2026 12:19:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34906 IP address blocks: 193.189.94.0/23 maxlen: 23 193.189.94.0/24 maxlen: 24 193.189.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/f93db8-0e7d-4ea6-891d-70c67f126bf2/1/1_b0gnxYyyj5lqmq6zSPH9JqDKU.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/f93db8-0e7d-4ea6-891d-70c67f126bf2/1/1_b0gnxYyyj5lqmq6zSPH9JqDKU.mft rsync://rpki.ripe.net/repository/DEFAULT/1_b0gnxYyyj5lqmq6zSPH9JqDKU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:7b:7e:80:38:ce:73:50:25:81:62:d5:92:03:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7f6f4827c58cb28f996a9aaeb348f1fd26a0ca5 Validity Not Before: Jan 2 12:19:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2ff4ef8eebe44bc01eea1af60b7e750ef4825edc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:7f:76:b5:e3:45:75:98:7f:7b:5e:b5:db:97: dd:40:51:f4:c0:2b:de:88:9e:bc:6e:46:09:64:1d: 3f:37:ea:af:b4:2f:82:5b:6d:91:81:e3:04:4c:50: 4c:55:f9:60:3f:21:d2:b0:ab:ea:f9:3a:eb:e7:ef: 6a:50:c4:a6:df:f8:a5:68:ab:1b:14:b1:25:bd:7d: 14:51:0b:79:c4:80:6e:9d:e1:49:ae:43:0c:d8:46: 26:5e:09:c7:4e:58:10:77:8c:6d:74:68:25:8e:38: ce:b7:6b:7b:46:42:cd:bd:ff:2b:33:60:e5:0a:b6: ae:4e:33:e1:b9:01:ce:c7:f3:64:08:1b:b2:05:0b: 3b:84:d6:e0:4b:97:7e:0b:b5:85:d4:39:e6:67:52: d5:fb:ce:3b:58:73:ce:8b:3a:c1:6d:1a:8e:f4:91: fd:3d:9a:d4:46:64:61:e3:cc:90:f9:7f:18:0c:33: 41:94:f8:98:93:3e:1e:ed:49:72:33:0d:6a:34:50: e1:dd:5c:8f:e5:ab:22:7e:e5:db:58:41:02:71:5f: 73:24:8b:76:c8:40:39:c0:2a:2f:63:8d:3c:cd:49: c6:2d:69:ed:b9:28:83:17:cc:ea:2f:c7:0d:3e:c7: 60:c3:bd:12:99:b7:46:b4:17:5d:0d:5f:78:4a:92: 5d:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:F4:EF:8E:EB:E4:4B:C0:1E:EA:1A:F6:0B:7E:75:0E:F4:82:5E:DC X509v3 Authority Key Identifier: keyid:D7:F6:F4:82:7C:58:CB:28:F9:96:A9:AA:EB:34:8F:1F:D2:6A:0C:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1_b0gnxYyyj5lqmq6zSPH9JqDKU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/f93db8-0e7d-4ea6-891d-70c67f126bf2/1/L_TvjuvkS8Ae6hr2C351DvSCXtw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/f93db8-0e7d-4ea6-891d-70c67f126bf2/1/1_b0gnxYyyj5lqmq6zSPH9JqDKU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.189.94.0/23 Signature Algorithm: sha256WithRSAEncryption 41:d1:ce:e4:6b:ab:81:da:fb:f5:0e:46:fc:9a:42:cf:79:93: ea:b7:88:0a:ea:40:39:09:57:37:dc:02:31:a0:6b:72:1f:31: 0a:30:18:43:b7:6b:f4:73:a4:1f:fd:2c:cd:6a:83:8e:48:00: eb:75:23:e9:d6:62:bf:ae:73:28:ef:92:41:63:09:24:83:79: ba:a7:85:ac:a4:6f:eb:38:02:43:97:48:78:e6:83:26:8f:5b: 2b:ab:b6:19:ad:3a:5a:ee:7a:93:c5:ca:67:b9:ff:e3:87:2b: 92:bf:86:64:c0:8b:a3:d2:71:64:e9:61:73:c2:a1:b6:a3:07: 59:23:b8:65:19:56:01:c0:8f:fb:78:71:b9:88:5c:f8:f9:84: 07:13:6d:ef:6a:4b:92:a0:27:62:47:42:a0:e0:2d:22:be:e9: 3c:62:d1:3b:3d:35:8e:f4:a5:60:51:cc:ff:60:6c:42:6c:6f: 3a:2c:46:64:b8:c4:c4:10:6a:c9:a0:5b:f8:be:cc:28:03:39: 97:9d:3f:0e:98:91:97:68:bc:8a:ee:4a:ca:7e:9d:5b:46:25: c4:3a:4e:66:c2:b7:15:00:0e:b1:a4:9f:88:1e:2b:71:32:31: 76:91:f2:9b:54:0b:ea:f8:11:51:86:a6:e2:26:7f:88:f5:9f: c2:a6:52:d5 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pnt+gDjOc1AlgWLVkgN0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3ZjZmNDgyN2M1OGNiMjhmOTk2YTlhYWViMzQ4ZjFmZDI2 YTBjYTUwHhcNMjYwMTAyMTIxOTU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZmY0ZWY4ZWViZTQ0YmMwMWVlYTFhZjYwYjdlNzUwZWY0ODI1ZWRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmn92teNFdZh/e16125fdQFH0wCve iJ68bkYJZB0/N+qvtC+CW22RgeMETFBMVflgPyHSsKvq+Trr5+9qUMSm3/ilaKsb FLElvX0UUQt5xIBuneFJrkMM2EYmXgnHTlgQd4xtdGgljjjOt2t7RkLNvf8rM2Dl CrauTjPhuQHOx/NkCBuyBQs7hNbgS5d+C7WF1DnmZ1LV+847WHPOizrBbRqO9JH9 PZrURmRh48yQ+X8YDDNBlPiYkz4e7UlyMw1qNFDh3VyP5asifuXbWEECcV9zJIt2 yEA5wCovY408zUnGLWntuSiDF8zqL8cNPsdgw70SmbdGtBddDV94SpJdSwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFC/0747r5EvAHuoa9gt+dQ70gl7cMB8GA1UdIwQY MBaAFNf29IJ8WMso+Zapqus0jx/SagylMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMV9iMGdueFl5eWo1bHFtcTZ6U1BIOUpxREtVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9mOTNkYjgtMGU3ZC00ZWE2LTg5MWQt NzBjNjdmMTI2YmYyLzEvTF9Udmp1dmtTOEFlNmhyMkMzNTFEdlNDWHR3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi9mOTNkYjgtMGU3ZC00ZWE2LTg5MWQtNzBjNjdmMTI2YmYy LzEvMV9iMGdueFl5eWo1bHFtcTZ6U1BIOUpxREtVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwb1eMA0G CSqGSIb3DQEBCwUAA4IBAQBB0c7ka6uB2vv1Dkb8mkLPeZPqt4gK6kA5CVc33AIx oGtyHzEKMBhDt2v0c6Qf/SzNaoOOSADrdSPp1mK/rnMo75JBYwkkg3m6p4WspG/r OAJDl0h45oMmj1srq7YZrTpa7nqTxcpnuf/jhyuSv4ZkwIuj0nFk6WFzwqG2owdZ I7hlGVYBwI/7eHG5iFz4+YQHE23vakuSoCdiR0Kg4C0ivuk8YtE7PTWO9KVgUcz/ YGxCbG86LEZkuMTEEGrJoFv4vswoAzmXnT8OmJGXaLyK7krKfp1bRiXEOk5mwrcV AA6xpJ+IHitxMjF2kfKbVAvq+BFRhqbiJn+I9Z/CplLV -----END CERTIFICATE-----Generated at Mon Feb 9 18:42:37 2026 by rpki-client