This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/LL4asLDw3271RX0UzOrcd8UQePQ.roa File: LL4asLDw3271RX0UzOrcd8UQePQ.roa (raw, json) Hash identifier: g9EWeVbWKxalUxSKi4YGS0KlwOF+b+mjphC2cg6OVVo= Subject key identifier: 2C:BE:1A:B0:B0:F0:DF:6E:F5:45:7D:14:CC:EA:DC:77:C5:10:78:F4 Certificate issuer: /CN=21bad74e7f6c0949a2736a57478496d7d8b450e6 Certificate serial: 019B7CED9D5C6454EAF07C61B381B67B9C5F Authority key identifier: 21:BA:D7:4E:7F:6C:09:49:A2:73:6A:57:47:84:96:D7:D8:B4:50:E6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/LL4asLDw3271RX0UzOrcd8UQePQ.roa Signing time: Fri 02 Jan 2026 04:18:25 +0000 ROA not before: Fri 02 Jan 2026 04:18:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205577 IP address blocks: 147.234.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.crl rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.mft rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:9d:5c:64:54:ea:f0:7c:61:b3:81:b6:7b:9c:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21bad74e7f6c0949a2736a57478496d7d8b450e6 Validity Not Before: Jan 2 04:18:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2cbe1ab0b0f0df6ef5457d14cceadc77c51078f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:50:51:5a:c5:85:8e:af:53:54:57:af:96:53: ca:8e:84:aa:72:7f:1a:5d:bd:60:15:65:fd:12:9f: 79:42:be:15:2d:d3:87:62:6e:bf:74:fa:b5:65:ec: 0a:0c:55:cb:89:9a:99:83:47:84:12:d7:c6:05:27: 25:16:3c:f1:59:e9:75:95:02:d3:b9:39:a6:12:38: 86:3b:48:2d:ce:88:af:57:32:a5:a1:2f:5f:77:d0: 52:ac:bd:e9:c2:af:4d:53:40:d2:07:c5:df:81:26: 5f:9d:4e:36:14:0b:9b:43:89:59:e0:18:91:ec:0a: 2f:72:83:f1:98:ea:ed:3d:f9:33:f9:a2:0d:cd:17: 41:98:48:6d:6d:57:7c:1b:37:5d:09:57:08:54:60: a2:db:9b:93:44:1b:30:50:61:7a:94:9e:2b:13:21: a7:27:e8:fb:0c:4c:9b:6e:f7:5e:cd:e7:94:a9:f9: bb:a6:c1:f2:ae:44:c7:4c:7c:54:40:b9:b0:c2:17: ea:55:f5:87:56:b0:66:79:2e:50:33:03:f6:f1:df: 2e:ab:78:3d:68:6e:b6:07:70:41:12:1e:0c:38:e4: 6f:9a:ff:e5:6b:02:a5:36:3a:99:a2:df:42:a9:05: c8:e0:ab:67:29:39:61:2d:91:ba:93:c7:04:de:e3: f7:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:BE:1A:B0:B0:F0:DF:6E:F5:45:7D:14:CC:EA:DC:77:C5:10:78:F4 X509v3 Authority Key Identifier: keyid:21:BA:D7:4E:7F:6C:09:49:A2:73:6A:57:47:84:96:D7:D8:B4:50:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/LL4asLDw3271RX0UzOrcd8UQePQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.234.20.0/24 Signature Algorithm: sha256WithRSAEncryption b6:ee:dd:90:9c:d6:e0:ca:14:30:70:a9:7d:ba:80:df:0b:c4: 6c:98:43:66:be:96:fc:a0:7d:53:8a:4b:12:24:68:62:88:f3: ce:c5:ae:c1:41:28:12:7e:69:0b:94:cb:cd:c3:83:4b:2b:df: 79:56:4c:e4:bd:70:06:f0:85:ad:30:4e:c7:31:09:51:bd:53: 96:78:69:5e:6f:6f:07:7c:eb:0e:be:32:df:58:d0:57:33:fb: b6:a7:28:0a:73:63:cf:19:90:43:b4:d2:cb:34:e7:76:c7:12: a9:d5:95:c6:36:ea:16:84:85:05:a5:e4:f0:fa:5f:56:c2:8d: 8c:8b:7d:10:63:53:1a:ad:e3:9c:19:18:87:70:ac:ed:c7:86: de:11:c2:3b:70:8c:1f:6f:34:6a:d9:71:c7:ba:64:ae:fc:ce: e3:f0:66:30:f5:85:00:78:6b:87:ed:f8:a5:23:53:33:fd:92: 26:28:aa:cc:c2:aa:6e:70:96:6a:65:f3:91:b8:5f:51:04:cb: b7:33:80:1d:54:5d:f9:fc:bc:e0:a7:35:c1:43:54:d3:30:8f: 93:8d:2e:1a:15:c9:8b:5a:88:62:84:b8:ba:45:31:35:74:4e: 24:b7:36:fd:9e:39:8a:2c:8b:c3:14:67:bf:b8:a5:fe:71:1e: 9f:8f:ba:cd -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87Z1cZFTq8Hxhs4G2e5xfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxYmFkNzRlN2Y2YzA5NDlhMjczNmE1NzQ3ODQ5NmQ3ZDhi NDUwZTYwHhcNMjYwMTAyMDQxODI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyY2JlMWFiMGIwZjBkZjZlZjU0NTdkMTRjY2VhZGM3N2M1MTA3OGY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArVBRWsWFjq9TVFevllPKjoSqcn8a Xb1gFWX9Ep95Qr4VLdOHYm6/dPq1ZewKDFXLiZqZg0eEEtfGBSclFjzxWel1lQLT uTmmEjiGO0gtzoivVzKloS9fd9BSrL3pwq9NU0DSB8XfgSZfnU42FAubQ4lZ4BiR 7AovcoPxmOrtPfkz+aINzRdBmEhtbVd8GzddCVcIVGCi25uTRBswUGF6lJ4rEyGn J+j7DEybbvdezeeUqfm7psHyrkTHTHxUQLmwwhfqVfWHVrBmeS5QMwP28d8uq3g9 aG62B3BBEh4MOORvmv/lawKlNjqZot9CqQXI4KtnKTlhLZG6k8cE3uP3fQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCy+GrCw8N9u9UV9FMzq3HfFEHj0MB8GA1UdIwQY MBaAFCG6105/bAlJonNqV0eEltfYtFDmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSWJyWFRuOXNDVW1pYzJwWFI0U1cxOWkwVU9ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC84ZGRjMzgtN2ExYS00OTA2LWE4ZWQt NDQzMzIyOWE4NDczLzEvTEw0YXNMRHczMjcxUlgwVXpPcmNkOFVRZVBRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC84ZGRjMzgtN2ExYS00OTA2LWE4ZWQtNDQzMzIyOWE4NDcz LzEvSWJyWFRuOXNDVW1pYzJwWFI0U1cxOWkwVU9ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAk+oUMA0G CSqGSIb3DQEBCwUAA4IBAQC27t2QnNbgyhQwcKl9uoDfC8RsmENmvpb8oH1TiksS JGhiiPPOxa7BQSgSfmkLlMvNw4NLK995VkzkvXAG8IWtME7HMQlRvVOWeGleb28H fOsOvjLfWNBXM/u2pygKc2PPGZBDtNLLNOd2xxKp1ZXGNuoWhIUFpeTw+l9Wwo2M i30QY1MareOcGRiHcKztx4beEcI7cIwfbzRq2XHHumSu/M7j8GYw9YUAeGuH7fil I1Mz/ZImKKrMwqpucJZqZfORuF9RBMu3M4AdVF35/LzgpzXBQ1TTMI+TjS4aFcmL WohihLi6RTE1dE4ktzb9njmKLIvDFGe/uKX+cR6fj7rN -----END CERTIFICATE-----Generated at Mon Jan 26 23:44:11 2026 by rpki-client