This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/820fb8-56ca-4e64-b153-b2c2b22f9ce3/1/ldfvGZiO3nqdEKXZ8Vso2JnkrW8.roa File: ldfvGZiO3nqdEKXZ8Vso2JnkrW8.roa (raw, json) Hash identifier: pXyCGZrnO+GFBNeOIs5eXh1GZo26klsV2OpK6rmtUp4= Subject key identifier: 95:D7:EF:19:98:8E:DE:7A:9D:10:A5:D9:F1:5B:28:D8:99:E4:AD:6F Certificate issuer: /CN=1109354b1b78afd1d5311185b4f789f1b7f95c9a Certificate serial: 019BF9DC1E1267E985C57D2A36C1DCFA0D62 Authority key identifier: 11:09:35:4B:1B:78:AF:D1:D5:31:11:85:B4:F7:89:F1:B7:F9:5C:9A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EQk1Sxt4r9HVMRGFtPeJ8bf5XJo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/820fb8-56ca-4e64-b153-b2c2b22f9ce3/1/ldfvGZiO3nqdEKXZ8Vso2JnkrW8.roa Signing time: Mon 26 Jan 2026 10:31:51 +0000 ROA not before: Mon 26 Jan 2026 10:31:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210849 IP address blocks: 193.27.22.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/820fb8-56ca-4e64-b153-b2c2b22f9ce3/1/EQk1Sxt4r9HVMRGFtPeJ8bf5XJo.crl rsync://rpki.ripe.net/repository/DEFAULT/73/820fb8-56ca-4e64-b153-b2c2b22f9ce3/1/EQk1Sxt4r9HVMRGFtPeJ8bf5XJo.mft rsync://rpki.ripe.net/repository/DEFAULT/EQk1Sxt4r9HVMRGFtPeJ8bf5XJo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:dc:1e:12:67:e9:85:c5:7d:2a:36:c1:dc:fa:0d:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1109354b1b78afd1d5311185b4f789f1b7f95c9a Validity Not Before: Jan 26 10:31:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=95d7ef19988ede7a9d10a5d9f15b28d899e4ad6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:da:89:42:6d:63:48:6a:2c:08:7d:c0:22:85: af:54:5c:b4:8e:df:24:44:b5:32:85:6c:c6:8c:4e: 08:df:77:d9:24:1e:cc:5a:f7:dc:a7:45:df:35:68: ca:40:13:b4:27:05:50:5f:f2:af:64:81:78:d8:13: 6c:ac:b3:e2:48:cc:54:1e:1c:8d:04:01:d8:fd:3d: 51:c8:2e:9a:9f:0c:77:67:76:6f:bb:66:54:ed:1f: e0:e8:cc:a1:ff:26:62:cf:7a:57:08:28:14:1e:68: f6:f4:29:af:03:e2:d3:e8:0e:e8:76:96:94:86:b4: 92:12:ea:63:61:b3:4e:8d:e5:5f:ac:2e:b7:9d:9f: ea:14:ad:87:bb:c7:94:6e:cc:c7:a8:c4:b5:69:b1: 65:07:77:a4:96:b7:6c:6a:9c:3d:d3:b0:9a:d3:27: 5c:37:c6:26:94:bc:e4:41:5c:0a:cb:9b:84:f4:43: 44:9b:97:6b:a9:6c:d9:94:76:f3:30:9f:16:79:f1: dd:9a:34:68:2c:29:57:6f:51:c2:d4:d5:bd:ae:e5: 6f:e6:c0:75:55:bf:0f:5e:66:00:4e:89:ed:00:88: 45:7f:43:fc:69:f9:a0:e5:6f:94:cf:80:0f:2c:76: 14:30:2e:c8:6d:84:17:01:a2:cc:bf:2c:5e:1d:0d: 41:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:D7:EF:19:98:8E:DE:7A:9D:10:A5:D9:F1:5B:28:D8:99:E4:AD:6F X509v3 Authority Key Identifier: keyid:11:09:35:4B:1B:78:AF:D1:D5:31:11:85:B4:F7:89:F1:B7:F9:5C:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EQk1Sxt4r9HVMRGFtPeJ8bf5XJo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/820fb8-56ca-4e64-b153-b2c2b22f9ce3/1/ldfvGZiO3nqdEKXZ8Vso2JnkrW8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/73/820fb8-56ca-4e64-b153-b2c2b22f9ce3/1/EQk1Sxt4r9HVMRGFtPeJ8bf5XJo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.27.22.0/24 Signature Algorithm: sha256WithRSAEncryption a3:3d:ca:6b:e2:36:fb:25:0e:04:5e:47:3a:c5:94:3f:0f:96: 74:3e:e1:1a:f2:5a:e1:d6:ae:8c:67:25:20:7e:21:b8:59:64: 5e:1c:92:68:0f:58:3a:af:78:da:01:55:38:72:e4:d8:1a:08: 32:b3:b1:67:5e:3e:ec:fb:86:de:bb:f9:cd:da:3e:8e:cb:59: f2:66:12:7c:e8:16:39:5a:7d:8b:d6:24:b1:74:2e:33:42:fb: 65:0c:8b:1d:4d:7c:e7:d3:8d:49:ea:e0:74:fe:6b:d3:34:e3: 95:c8:3b:8b:0a:d9:21:63:a8:d9:50:17:59:d5:95:c5:03:ee: 32:a4:24:9c:d4:e6:91:f3:55:ba:eb:54:52:d8:93:8c:c5:6b: 08:f4:21:37:a4:8e:30:e0:ff:0a:85:86:90:10:62:1c:8c:9d: 5e:c1:c1:19:1d:3c:3f:c8:90:a1:52:21:c9:ba:a1:81:50:99: d6:88:f2:05:65:8b:6f:51:bb:bf:87:b7:23:33:79:89:e1:d0: 23:67:6a:d6:37:17:4d:44:89:11:3b:bd:16:44:2d:b4:0d:99: a5:0f:b5:9b:89:d4:28:8e:ea:8e:bc:4d:fc:79:81:a8:0d:fb: 9c:38:d2:98:67:d7:22:bd:b3:ef:63:09:f6:48:3a:c8:20:e8: 8c:16:f8:7a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZv53B4SZ+mFxX0qNsHc+g1iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExMDkzNTRiMWI3OGFmZDFkNTMxMTE4NWI0Zjc4OWYxYjdm OTVjOWEwHhcNMjYwMTI2MTAzMTUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NWQ3ZWYxOTk4OGVkZTdhOWQxMGE1ZDlmMTViMjhkODk5ZTRhZDZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxdqJQm1jSGosCH3AIoWvVFy0jt8k RLUyhWzGjE4I33fZJB7MWvfcp0XfNWjKQBO0JwVQX/KvZIF42BNsrLPiSMxUHhyN BAHY/T1RyC6anwx3Z3Zvu2ZU7R/g6Myh/yZiz3pXCCgUHmj29CmvA+LT6A7odpaU hrSSEupjYbNOjeVfrC63nZ/qFK2Hu8eUbszHqMS1abFlB3eklrdsapw907Ca0ydc N8YmlLzkQVwKy5uE9ENEm5drqWzZlHbzMJ8WefHdmjRoLClXb1HC1NW9ruVv5sB1 Vb8PXmYATontAIhFf0P8afmg5W+Uz4APLHYUMC7IbYQXAaLMvyxeHQ1BrwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJXX7xmYjt56nRCl2fFbKNiZ5K1vMB8GA1UdIwQY MBaAFBEJNUsbeK/R1TERhbT3ifG3+VyaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRVFrMVN4dDRyOUhWTVJHRnRQZUo4YmY1WEpvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My84MjBmYjgtNTZjYS00ZTY0LWIxNTMt YjJjMmIyMmY5Y2UzLzEvbGRmdkdaaU8zbnFkRUtYWjhWc28ySm5rclc4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83My84MjBmYjgtNTZjYS00ZTY0LWIxNTMtYjJjMmIyMmY5Y2Uz LzEvRVFrMVN4dDRyOUhWTVJHRnRQZUo4YmY1WEpvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwRsWMA0G CSqGSIb3DQEBCwUAA4IBAQCjPcpr4jb7JQ4EXkc6xZQ/D5Z0PuEa8lrh1q6MZyUg fiG4WWReHJJoD1g6r3jaAVU4cuTYGggys7FnXj7s+4beu/nN2j6Oy1nyZhJ86BY5 Wn2L1iSxdC4zQvtlDIsdTXzn041J6uB0/mvTNOOVyDuLCtkhY6jZUBdZ1ZXFA+4y pCSc1OaR81W661RS2JOMxWsI9CE3pI4w4P8KhYaQEGIcjJ1ewcEZHTw/yJChUiHJ uqGBUJnWiPIFZYtvUbu/h7cjM3mJ4dAjZ2rWNxdNRIkRO70WRC20DZmlD7WbidQo juqOvE38eYGoDfucONKYZ9civbPvYwn2SDrIIOiMFvh6 -----END CERTIFICATE-----Generated at Mon Feb 9 19:38:46 2026 by rpki-client