This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/a8efdf-5cee-494b-be48-a371f2889138/1/l04ryjfqbPZeuiZZejzJCWBinEU.roa File: l04ryjfqbPZeuiZZejzJCWBinEU.roa (raw, json) Hash identifier: qyO0LhlZBEPFvxWtxObTzuofXOhZhOAncGkjMZ9Xnlk= Subject key identifier: 97:4E:2B:CA:37:EA:6C:F6:5E:BA:26:59:7A:3C:C9:09:60:62:9C:45 Certificate issuer: /CN=34919204b7ac47424baabfb291bd3fc8fa9e05f6 Certificate serial: 019B7C134AE0F38787735C16CCD409E794D1 Authority key identifier: 34:91:92:04:B7:AC:47:42:4B:AA:BF:B2:91:BD:3F:C8:FA:9E:05:F6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJGSBLesR0JLqr-ykb0_yPqeBfY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/a8efdf-5cee-494b-be48-a371f2889138/1/l04ryjfqbPZeuiZZejzJCWBinEU.roa Signing time: Fri 02 Jan 2026 00:19:57 +0000 ROA not before: Fri 02 Jan 2026 00:19:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 680 IP address blocks: 194.49.61.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/a8efdf-5cee-494b-be48-a371f2889138/1/NJGSBLesR0JLqr-ykb0_yPqeBfY.crl rsync://rpki.ripe.net/repository/DEFAULT/60/a8efdf-5cee-494b-be48-a371f2889138/1/NJGSBLesR0JLqr-ykb0_yPqeBfY.mft rsync://rpki.ripe.net/repository/DEFAULT/NJGSBLesR0JLqr-ykb0_yPqeBfY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 03:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:4a:e0:f3:87:87:73:5c:16:cc:d4:09:e7:94:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34919204b7ac47424baabfb291bd3fc8fa9e05f6 Validity Not Before: Jan 2 00:19:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=974e2bca37ea6cf65eba26597a3cc90960629c45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:3b:8c:a0:06:b7:5b:93:b8:17:11:84:f2:f4: 28:85:1c:33:aa:b8:0e:31:a1:f9:ae:67:c8:88:92: 94:e2:e4:a1:c2:60:97:3a:5c:75:de:ce:3b:38:3a: 26:c8:e6:a5:97:7e:ed:80:71:8e:1b:d3:eb:ba:cf: 45:e7:ec:49:75:4c:9e:88:b9:a6:47:2a:81:bd:e2: 8a:cb:84:e3:9c:1d:69:45:b7:9e:6d:89:25:cc:3d: 49:14:33:08:c1:2e:1b:20:cc:26:9a:ae:d0:92:42: ea:32:b2:d0:30:51:a8:52:f6:56:af:55:f6:e0:29: 0b:31:7d:21:19:a5:c8:60:ba:16:40:f4:36:e3:26: 88:65:bd:68:af:8d:0d:67:bf:f4:9f:74:ee:7d:39: d3:10:21:0f:e5:91:93:d2:4b:aa:b9:d0:1f:f6:ac: d2:c2:aa:14:29:88:f4:e7:3d:81:5d:22:52:09:a9: 3d:c1:df:1b:c3:4a:e4:06:f1:51:0f:a2:fe:16:13: f9:c9:03:68:9c:eb:63:4a:25:c8:e5:c3:d7:e9:5d: 1f:da:97:81:09:d2:45:a5:94:c6:2f:66:5f:fb:74: d3:35:ba:b0:82:db:c3:c7:bf:34:6a:13:f7:fe:12: 69:42:51:d9:10:e7:cd:b6:7c:c8:1a:e4:c9:3d:12: 52:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:4E:2B:CA:37:EA:6C:F6:5E:BA:26:59:7A:3C:C9:09:60:62:9C:45 X509v3 Authority Key Identifier: keyid:34:91:92:04:B7:AC:47:42:4B:AA:BF:B2:91:BD:3F:C8:FA:9E:05:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJGSBLesR0JLqr-ykb0_yPqeBfY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a8efdf-5cee-494b-be48-a371f2889138/1/l04ryjfqbPZeuiZZejzJCWBinEU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a8efdf-5cee-494b-be48-a371f2889138/1/NJGSBLesR0JLqr-ykb0_yPqeBfY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.49.61.0/24 Signature Algorithm: sha256WithRSAEncryption 4b:a2:4b:e2:89:f4:59:71:69:5d:42:20:7a:22:17:5f:5c:c1: 90:32:80:bb:c0:51:97:02:be:d9:ae:2d:6f:07:08:65:55:d1: d8:75:de:f5:4c:e5:35:e7:f9:de:da:b0:26:4f:13:84:b6:ec: 37:77:43:94:c5:c6:ab:b4:69:d5:ef:cd:93:6b:0d:22:a2:3b: 60:1c:88:d2:26:9f:7b:7a:5c:6a:fb:53:f0:5f:9a:02:29:35: 09:4a:fa:d5:b5:a6:8f:4e:3a:a4:b0:a7:c5:8b:44:ef:85:4a: 7e:09:98:b9:4e:55:0e:08:06:88:7c:af:33:57:cb:5c:79:f2: 82:70:b0:db:fd:0a:5d:4c:2f:87:dd:03:d9:77:73:55:17:89: 9e:2b:a3:59:69:07:fb:b9:b9:c0:d9:d2:47:7a:f8:f5:7c:bc: 8e:f2:58:4d:b7:84:f4:32:80:cc:2b:c5:51:ca:69:f6:b5:95: 67:77:0c:40:6e:73:a9:99:1b:86:24:85:cb:10:64:56:d3:8d: d9:e4:f1:d5:16:e9:cd:f6:a8:36:3a:49:dc:74:84:dc:83:3d: 15:0a:de:8a:64:de:e1:96:fc:44:4c:d0:87:cd:a9:de:2c:9b: 63:ea:43:73:3c:ad:5e:58:7c:fb:e9:d9:38:c3:bf:ca:3e:97: 05:81:5e:b9 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8E0rg84eHc1wWzNQJ55TRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0OTE5MjA0YjdhYzQ3NDI0YmFhYmZiMjkxYmQzZmM4ZmE5 ZTA1ZjYwHhcNMjYwMTAyMDAxOTU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NzRlMmJjYTM3ZWE2Y2Y2NWViYTI2NTk3YTNjYzkwOTYwNjI5YzQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6TuMoAa3W5O4FxGE8vQohRwzqrgO MaH5rmfIiJKU4uShwmCXOlx13s47ODomyOall37tgHGOG9Prus9F5+xJdUyeiLmm RyqBveKKy4TjnB1pRbeebYklzD1JFDMIwS4bIMwmmq7QkkLqMrLQMFGoUvZWr1X2 4CkLMX0hGaXIYLoWQPQ24yaIZb1or40NZ7/0n3TufTnTECEP5ZGT0kuqudAf9qzS wqoUKYj05z2BXSJSCak9wd8bw0rkBvFRD6L+FhP5yQNonOtjSiXI5cPX6V0f2peB CdJFpZTGL2Zf+3TTNbqwgtvDx780ahP3/hJpQlHZEOfNtnzIGuTJPRJSJQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJdOK8o36mz2XromWXo8yQlgYpxFMB8GA1UdIwQY MBaAFDSRkgS3rEdCS6q/spG9P8j6ngX2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTkpHU0JMZXNSMEpMcXIteWtiMF95UHFlQmZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9hOGVmZGYtNWNlZS00OTRiLWJlNDgt YTM3MWYyODg5MTM4LzEvbDA0cnlqZnFiUFpldWlaWmVqekpDV0JpbkVVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC9hOGVmZGYtNWNlZS00OTRiLWJlNDgtYTM3MWYyODg5MTM4 LzEvTkpHU0JMZXNSMEpMcXIteWtiMF95UHFlQmZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwjE9MA0G CSqGSIb3DQEBCwUAA4IBAQBLokviifRZcWldQiB6IhdfXMGQMoC7wFGXAr7Zri1v BwhlVdHYdd71TOU15/ne2rAmTxOEtuw3d0OUxcartGnV782Taw0iojtgHIjSJp97 elxq+1PwX5oCKTUJSvrVtaaPTjqksKfFi0TvhUp+CZi5TlUOCAaIfK8zV8tcefKC cLDb/QpdTC+H3QPZd3NVF4meK6NZaQf7ubnA2dJHevj1fLyO8lhNt4T0MoDMK8VR ymn2tZVndwxAbnOpmRuGJIXLEGRW043Z5PHVFunN9qg2OkncdITcgz0VCt6KZN7h lvxETNCHzaneLJtj6kNzPK1eWHz76dk4w7/KPpcFgV65 -----END CERTIFICATE-----Generated at Tue Jan 27 11:25:59 2026 by rpki-client