This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/fba28c-6b17-4626-963c-058cc953e803/1/7LLie0DeHG282OERB_LWP0JeCm0.roa File: 7LLie0DeHG282OERB_LWP0JeCm0.roa (raw, json) Hash identifier: SMK15rz3Hj/SmmxxmBAEgvdYYQjWQf8IMkbvZ+tYBlU= Subject key identifier: EC:B2:E2:7B:40:DE:1C:6D:BC:D8:E1:11:07:F2:D6:3F:42:5E:0A:6D Certificate issuer: /CN=34e83f41e5d24254c90a86e3b2bb7a80af039721 Certificate serial: 019B7AC83A37DD2D8E3A4E5840D93B69D201 Authority key identifier: 34:E8:3F:41:E5:D2:42:54:C9:0A:86:E3:B2:BB:7A:80:AF:03:97:21 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NOg_QeXSQlTJCobjsrt6gK8DlyE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/fba28c-6b17-4626-963c-058cc953e803/1/7LLie0DeHG282OERB_LWP0JeCm0.roa Signing time: Thu 01 Jan 2026 18:18:20 +0000 ROA not before: Thu 01 Jan 2026 18:18:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 21257 IP address blocks: 193.109.240.0/24 maxlen: 24 194.106.216.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/fba28c-6b17-4626-963c-058cc953e803/1/NOg_QeXSQlTJCobjsrt6gK8DlyE.crl rsync://rpki.ripe.net/repository/DEFAULT/81/fba28c-6b17-4626-963c-058cc953e803/1/NOg_QeXSQlTJCobjsrt6gK8DlyE.mft rsync://rpki.ripe.net/repository/DEFAULT/NOg_QeXSQlTJCobjsrt6gK8DlyE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 00:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:3a:37:dd:2d:8e:3a:4e:58:40:d9:3b:69:d2:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34e83f41e5d24254c90a86e3b2bb7a80af039721 Validity Not Before: Jan 1 18:18:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ecb2e27b40de1c6dbcd8e11107f2d63f425e0a6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:a1:5f:c3:f3:be:21:4b:14:b4:62:6d:02:e5: a5:d4:20:9b:f6:74:e4:5e:d8:73:89:4a:2a:74:dd: f5:22:9b:c7:59:fa:2d:6f:5e:2c:61:0f:cc:66:a0: 45:40:28:e7:5c:d2:ad:7c:39:d0:56:3e:22:cf:1d: d8:69:45:89:c1:60:ce:03:79:96:85:0f:88:8c:54: f2:47:6f:34:2a:ac:cb:32:da:26:aa:47:26:50:6e: ae:fb:e8:3f:6b:ff:2a:e3:a3:17:f2:5d:3f:c6:54: 04:84:0c:1b:ea:ae:56:cd:0b:4a:37:e4:67:f0:f2: 68:a5:31:cc:ce:ab:3e:8e:d8:35:39:1d:08:a5:0d: 1e:04:38:3d:f6:b9:7d:5d:b4:88:57:31:d8:04:a5: ab:78:07:75:b4:e8:c4:69:67:01:20:cf:8f:fa:9e: 9e:ae:d1:a8:3a:3d:ac:5c:72:eb:3f:22:7e:a0:8f: 33:8e:3d:45:cd:a9:07:c7:7b:f3:90:43:d6:b5:30: eb:78:40:63:f7:3e:e2:56:c5:a1:84:f4:8c:cc:5c: ec:04:48:52:34:cb:34:88:c5:a8:bf:6b:8f:bc:f4: 6f:9e:70:90:8c:35:0c:79:0d:44:4e:7d:b7:9d:b1: 27:b4:f2:8b:34:0f:8b:a3:0e:9a:9b:34:77:92:13: 76:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:B2:E2:7B:40:DE:1C:6D:BC:D8:E1:11:07:F2:D6:3F:42:5E:0A:6D X509v3 Authority Key Identifier: keyid:34:E8:3F:41:E5:D2:42:54:C9:0A:86:E3:B2:BB:7A:80:AF:03:97:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NOg_QeXSQlTJCobjsrt6gK8DlyE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/fba28c-6b17-4626-963c-058cc953e803/1/7LLie0DeHG282OERB_LWP0JeCm0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/fba28c-6b17-4626-963c-058cc953e803/1/NOg_QeXSQlTJCobjsrt6gK8DlyE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.109.240.0/24 194.106.216.0/23 Signature Algorithm: sha256WithRSAEncryption 30:a6:41:5a:cd:dd:05:6c:eb:52:d0:0e:42:b8:75:cd:0f:ce: 00:cb:b0:e3:c3:56:a7:dc:6e:d3:78:a5:88:e4:fc:6c:58:64: ba:59:2e:f0:5e:5a:1b:4e:7e:6b:76:93:8d:80:a4:5f:bc:ef: 7c:36:f3:2d:ce:91:f9:53:d0:56:9a:a4:7a:5c:b6:dd:aa:d3: a4:fb:b5:32:eb:9c:80:07:8d:ff:70:09:db:a7:1f:9c:e0:69: 1a:85:04:8a:b0:c8:84:3c:ab:49:f2:cd:56:3a:c4:2b:63:ea: 28:f7:69:7f:46:47:39:60:ce:ec:49:dd:16:24:d2:1a:20:20: 28:07:ec:02:df:0b:fa:2e:74:97:9c:6e:67:65:e4:ed:69:e1: 03:6d:9a:1b:96:f4:1c:48:ee:f3:16:2a:9c:ba:e1:7d:ab:5e: e4:be:ed:aa:54:95:04:4f:10:40:b6:44:0e:af:33:66:08:59: 16:46:34:09:f0:7d:6f:53:86:7e:94:ae:32:ad:88:d1:b9:dd: 76:be:99:93:58:fe:0f:c2:04:00:a6:05:b0:4c:65:12:ab:11: 68:e1:a6:ed:05:2f:99:89:71:4d:ae:85:89:92:39:28:ea:39: 1b:2c:5a:ad:e0:b2:c1:ac:70:70:7e:13:92:92:47:80:62:c3: ad:13:a0:01 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt6yDo33S2OOk5YQNk7adIBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0ZTgzZjQxZTVkMjQyNTRjOTBhODZlM2IyYmI3YTgwYWYw Mzk3MjEwHhcNMjYwMTAxMTgxODIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlY2IyZTI3YjQwZGUxYzZkYmNkOGUxMTEwN2YyZDYzZjQyNWUwYTZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwqFfw/O+IUsUtGJtAuWl1CCb9nTk XthziUoqdN31IpvHWfotb14sYQ/MZqBFQCjnXNKtfDnQVj4izx3YaUWJwWDOA3mW hQ+IjFTyR280KqzLMtomqkcmUG6u++g/a/8q46MX8l0/xlQEhAwb6q5WzQtKN+Rn 8PJopTHMzqs+jtg1OR0IpQ0eBDg99rl9XbSIVzHYBKWreAd1tOjEaWcBIM+P+p6e rtGoOj2sXHLrPyJ+oI8zjj1FzakHx3vzkEPWtTDreEBj9z7iVsWhhPSMzFzsBEhS NMs0iMWov2uPvPRvnnCQjDUMeQ1ETn23nbEntPKLNA+Low6amzR3khN2DQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFOyy4ntA3hxtvNjhEQfy1j9CXgptMB8GA1UdIwQY MBaAFDToP0Hl0kJUyQqG47K7eoCvA5chMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTk9nX1FlWFNRbFRKQ29ianNydDZnSzhEbHlFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS9mYmEyOGMtNmIxNy00NjI2LTk2M2Mt MDU4Y2M5NTNlODAzLzEvN0xMaWUwRGVIRzI4Mk9FUkJfTFdQMEplQ20wLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS9mYmEyOGMtNmIxNy00NjI2LTk2M2MtMDU4Y2M5NTNlODAz LzEvTk9nX1FlWFNRbFRKQ29ianNydDZnSzhEbHlFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwW3wAwQB wmrYMA0GCSqGSIb3DQEBCwUAA4IBAQAwpkFazd0FbOtS0A5CuHXND84Ay7Djw1an 3G7TeKWI5PxsWGS6WS7wXlobTn5rdpONgKRfvO98NvMtzpH5U9BWmqR6XLbdqtOk +7Uy65yAB43/cAnbpx+c4GkahQSKsMiEPKtJ8s1WOsQrY+oo92l/Rkc5YM7sSd0W JNIaICAoB+wC3wv6LnSXnG5nZeTtaeEDbZoblvQcSO7zFiqcuuF9q17kvu2qVJUE TxBAtkQOrzNmCFkWRjQJ8H1vU4Z+lK4yrYjRud12vpmTWP4PwgQApgWwTGUSqxFo 4abtBS+ZiXFNroWJkjko6jkbLFqt4LLBrHBwfhOSkkeAYsOtE6AB -----END CERTIFICATE-----Generated at Mon Jan 19 09:50:35 2026 by rpki-client