This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/a067c3-6ba8-45f3-8d62-2fda6a565013/1/19gKAdZ2OBELsSWbR0pBJyLvOhE.roa File: 19gKAdZ2OBELsSWbR0pBJyLvOhE.roa (raw, json) Hash identifier: YWntgYAuHpdewYDi+xzegIxOR/YDZabzxqawWZHN2QM= Subject key identifier: D7:D8:0A:01:D6:76:38:11:0B:B1:25:9B:47:4A:41:27:22:EF:3A:11 Certificate issuer: /CN=2ee353f3503f9bff3381450035628e81a96d908f Certificate serial: 019B7BA517476AAB0E7A7A1F922A5DD17FBB Authority key identifier: 2E:E3:53:F3:50:3F:9B:FF:33:81:45:00:35:62:8E:81:A9:6D:90:8F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LuNT81A_m_8zgUUANWKOgaltkI8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/a067c3-6ba8-45f3-8d62-2fda6a565013/1/19gKAdZ2OBELsSWbR0pBJyLvOhE.roa Signing time: Thu 01 Jan 2026 22:19:35 +0000 ROA not before: Thu 01 Jan 2026 22:19:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 553 IP address blocks: 134.103.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/a067c3-6ba8-45f3-8d62-2fda6a565013/1/LuNT81A_m_8zgUUANWKOgaltkI8.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/a067c3-6ba8-45f3-8d62-2fda6a565013/1/LuNT81A_m_8zgUUANWKOgaltkI8.mft rsync://rpki.ripe.net/repository/DEFAULT/LuNT81A_m_8zgUUANWKOgaltkI8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 21:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:17:47:6a:ab:0e:7a:7a:1f:92:2a:5d:d1:7f:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ee353f3503f9bff3381450035628e81a96d908f Validity Not Before: Jan 1 22:19:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d7d80a01d67638110bb1259b474a412722ef3a11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:00:a8:8c:c2:94:63:62:33:44:ad:bf:46:b8: e6:1a:f1:59:4b:3d:e9:8c:e7:00:2e:71:1d:15:9b: 25:e6:bd:f8:c7:c7:6d:5d:c3:91:33:a7:8d:7d:fd: 5f:55:11:13:07:b9:8a:29:85:3d:88:37:43:7d:97: 65:ca:6d:09:ae:17:d6:29:3d:9c:0a:15:6e:ea:4e: 8a:6f:f2:50:25:c3:83:a1:11:e7:a5:58:d5:0d:37: cd:56:08:a1:b1:82:3c:fd:d2:8c:f6:3f:8d:0e:5d: 8c:e6:ef:88:77:08:36:1e:2b:94:29:55:3e:d8:b8: b2:e4:38:5b:3b:1e:76:1e:7e:fd:a5:f4:25:16:15: 68:75:34:33:52:69:8c:3f:42:9e:40:ee:b5:74:4f: a7:8c:e3:f0:46:3f:6d:1f:6d:cf:6c:1e:48:06:4e: 6a:bc:0b:07:e3:5e:67:8d:26:2f:9f:2a:1c:7d:ff: bd:c2:92:29:7b:49:b0:48:77:c3:27:7c:52:cc:3b: 04:77:a1:3e:17:4d:fb:ab:a0:92:14:68:c2:4e:d6: f5:bd:92:da:8f:36:a0:68:bd:d7:89:44:17:e5:b1: b4:fb:64:5b:cd:32:2f:93:8e:98:a9:49:36:42:37: 11:d2:e8:80:44:c8:66:22:32:14:60:73:e2:bc:f8: c2:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:D8:0A:01:D6:76:38:11:0B:B1:25:9B:47:4A:41:27:22:EF:3A:11 X509v3 Authority Key Identifier: keyid:2E:E3:53:F3:50:3F:9B:FF:33:81:45:00:35:62:8E:81:A9:6D:90:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LuNT81A_m_8zgUUANWKOgaltkI8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/a067c3-6ba8-45f3-8d62-2fda6a565013/1/19gKAdZ2OBELsSWbR0pBJyLvOhE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/a067c3-6ba8-45f3-8d62-2fda6a565013/1/LuNT81A_m_8zgUUANWKOgaltkI8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 134.103.0.0/16 Signature Algorithm: sha256WithRSAEncryption 30:84:c4:41:e7:a5:bf:b7:74:04:1c:76:9c:ed:26:53:85:b3: ab:a6:aa:80:59:84:24:8d:2c:1a:6a:01:83:29:3b:a0:1f:2d: 5d:dd:15:d8:86:25:e2:0b:e6:68:05:33:9f:16:45:f1:be:98: ae:92:f3:bd:5e:da:84:d5:e5:f8:09:73:a5:11:93:8d:9f:5c: a2:8e:82:49:d0:4f:19:48:d3:49:17:b0:2f:b7:45:a2:34:8b: 7c:41:bd:f3:d8:f0:59:21:d8:ee:6b:d4:69:c9:70:d0:ce:08: 53:55:d7:c6:79:9f:82:dc:ac:ca:7c:0a:59:94:b0:38:c2:8e: cf:eb:37:2b:37:6c:91:f0:2c:88:51:b7:2a:e4:3f:d6:19:22: c2:d7:f7:ea:45:70:e5:76:fb:01:87:d9:93:bf:d7:b5:e6:82: 18:6f:08:7c:e8:7f:8c:cd:bb:73:e2:52:73:49:67:19:8a:c4: e5:78:51:80:36:c3:23:e3:19:e6:c7:ca:56:2b:6b:39:19:5e: 48:03:ca:72:c7:a3:ed:ba:fc:32:6e:4a:41:cd:98:e6:7b:e4: 99:46:69:8c:9c:e7:41:f8:c9:44:53:1a:e6:08:51:6d:75:19: 35:22:cb:e6:60:69:f5:dd:7c:de:96:e2:db:72:c1:97:29:bc: 7d:97:6e:f4 -----BEGIN CERTIFICATE----- MIIE/DCCA+SgAwIBAgISAZt7pRdHaqsOenofkipd0X+7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlZTM1M2YzNTAzZjliZmYzMzgxNDUwMDM1NjI4ZTgxYTk2 ZDkwOGYwHhcNMjYwMTAxMjIxOTM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkN2Q4MGEwMWQ2NzYzODExMGJiMTI1OWI0NzRhNDEyNzIyZWYzYTExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjgCojMKUY2IzRK2/RrjmGvFZSz3p jOcALnEdFZsl5r34x8dtXcORM6eNff1fVRETB7mKKYU9iDdDfZdlym0JrhfWKT2c ChVu6k6Kb/JQJcODoRHnpVjVDTfNVgihsYI8/dKM9j+NDl2M5u+Idwg2HiuUKVU+ 2Liy5DhbOx52Hn79pfQlFhVodTQzUmmMP0KeQO61dE+njOPwRj9tH23PbB5IBk5q vAsH415njSYvnyocff+9wpIpe0mwSHfDJ3xSzDsEd6E+F037q6CSFGjCTtb1vZLa jzagaL3XiUQX5bG0+2RbzTIvk46YqUk2QjcR0uiARMhmIjIUYHPivPjC+QIDAQAB o4ICCDCCAgQwHQYDVR0OBBYEFNfYCgHWdjgRC7Elm0dKQSci7zoRMB8GA1UdIwQY MBaAFC7jU/NQP5v/M4FFADVijoGpbZCPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTHVOVDgxQV9tXzh6Z1VVQU5XS09nYWx0a0k4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS9hMDY3YzMtNmJhOC00NWYzLThkNjIt MmZkYTZhNTY1MDEzLzEvMTlnS0FkWjJPQkVMc1NXYlIwcEJKeUx2T2hFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS9hMDY3YzMtNmJhOC00NWYzLThkNjItMmZkYTZhNTY1MDEz LzEvTHVOVDgxQV9tXzh6Z1VVQU5XS09nYWx0a0k4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAhmcwDQYJ KoZIhvcNAQELBQADggEBADCExEHnpb+3dAQcdpztJlOFs6umqoBZhCSNLBpqAYMp O6AfLV3dFdiGJeIL5mgFM58WRfG+mK6S871e2oTV5fgJc6URk42fXKKOgknQTxlI 00kXsC+3RaI0i3xBvfPY8Fkh2O5r1GnJcNDOCFNV18Z5n4LcrMp8ClmUsDjCjs/r Nys3bJHwLIhRtyrkP9YZIsLX9+pFcOV2+wGH2ZO/17XmghhvCHzof4zNu3PiUnNJ ZxmKxOV4UYA2wyPjGebHylYrazkZXkgDynLHo+26/DJuSkHNmOZ75JlGaYyc50H4 yURTGuYIUW11GTUiy+ZgafXdfN6W4ttywZcpvH2XbvQ= -----END CERTIFICATE-----Generated at Mon Feb 2 07:58:47 2026 by rpki-client