This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/a43850-02a2-4859-9bde-564ebdcf3f96/1/lWtt-iAmnTnwXom0pRL7GVFndbI.roa File: lWtt-iAmnTnwXom0pRL7GVFndbI.roa (raw, json) Hash identifier: prnIyF9aQP2RrtBIshVQnQnFGHdYcAP10F6Rq04Hw+8= Subject key identifier: 95:6B:6D:FA:20:26:9D:39:F0:5E:89:B4:A5:12:FB:19:51:67:75:B2 Certificate issuer: /CN=7c3532e52eaafef948c42c8b1d51145cac9d4c96 Certificate serial: 019B76EAB62A6D671F250B6E121F37763973 Authority key identifier: 7C:35:32:E5:2E:AA:FE:F9:48:C4:2C:8B:1D:51:14:5C:AC:9D:4C:96 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fDUy5S6q_vlIxCyLHVEUXKydTJY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/a43850-02a2-4859-9bde-564ebdcf3f96/1/lWtt-iAmnTnwXom0pRL7GVFndbI.roa Signing time: Thu 01 Jan 2026 00:17:32 +0000 ROA not before: Thu 01 Jan 2026 00:17:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204591 IP address blocks: 193.22.232.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/a43850-02a2-4859-9bde-564ebdcf3f96/1/fDUy5S6q_vlIxCyLHVEUXKydTJY.crl rsync://rpki.ripe.net/repository/DEFAULT/96/a43850-02a2-4859-9bde-564ebdcf3f96/1/fDUy5S6q_vlIxCyLHVEUXKydTJY.mft rsync://rpki.ripe.net/repository/DEFAULT/fDUy5S6q_vlIxCyLHVEUXKydTJY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 11 Feb 2026 00:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:b6:2a:6d:67:1f:25:0b:6e:12:1f:37:76:39:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c3532e52eaafef948c42c8b1d51145cac9d4c96 Validity Not Before: Jan 1 00:17:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=956b6dfa20269d39f05e89b4a512fb19516775b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:c7:0f:cf:4b:a9:b8:70:ae:3c:19:89:09:68: fc:63:c9:b8:df:19:7c:33:6f:9d:88:15:34:a2:8e: fa:b2:f3:c7:39:c0:75:78:2c:35:1d:55:57:c6:b8: b0:0d:45:8e:7b:7c:dd:47:85:11:43:a9:ad:c3:c1: 72:e2:87:16:b5:be:55:18:8c:8b:c3:d5:31:ca:89: b1:4c:9b:16:9e:13:94:c9:3d:c4:e4:83:94:45:7e: cb:b3:9f:3b:a7:53:24:72:27:5c:1f:28:79:06:e7: e8:eb:6f:5d:30:f2:52:57:2f:1a:1e:40:fc:b0:86: 94:06:b8:ba:19:6f:28:ef:c0:06:0a:80:1d:31:95: 0b:6d:53:79:f6:08:dd:ad:04:7c:de:cd:30:e6:42: 92:c6:ae:1b:d5:74:30:72:17:24:94:8f:68:15:d9: 0a:d6:83:b8:0f:f5:a0:59:62:e3:92:63:fe:d7:7a: 7d:15:ea:fb:da:09:a9:17:55:36:57:c8:a2:c7:db: 5a:d0:4a:af:50:07:1a:71:2d:fd:08:9e:ce:f0:aa: 46:ec:51:3d:04:9d:c0:d1:05:50:f4:b5:a3:75:0b: 41:e6:46:92:10:3b:4a:93:95:3e:ed:02:9c:3b:5b: 0b:ad:bf:42:ee:72:e5:f5:97:f3:f5:66:97:87:70: ed:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:6B:6D:FA:20:26:9D:39:F0:5E:89:B4:A5:12:FB:19:51:67:75:B2 X509v3 Authority Key Identifier: keyid:7C:35:32:E5:2E:AA:FE:F9:48:C4:2C:8B:1D:51:14:5C:AC:9D:4C:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fDUy5S6q_vlIxCyLHVEUXKydTJY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/a43850-02a2-4859-9bde-564ebdcf3f96/1/lWtt-iAmnTnwXom0pRL7GVFndbI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/96/a43850-02a2-4859-9bde-564ebdcf3f96/1/fDUy5S6q_vlIxCyLHVEUXKydTJY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.22.232.0/22 Signature Algorithm: sha256WithRSAEncryption 2d:a0:2d:a7:ef:7e:3c:82:20:00:3f:03:7f:cf:f5:e5:f3:47: 62:bc:ac:c2:ca:80:63:71:06:31:03:55:40:75:c3:c5:c4:84: 01:78:48:21:03:a9:77:cf:9e:f7:61:08:ec:3d:34:83:d3:21: 93:c9:22:3a:38:a7:09:f2:bd:0a:e9:1a:60:c4:c0:06:a5:47: 1c:19:37:8e:1e:06:13:09:15:e9:49:fc:c2:06:56:92:a4:b1: f4:0c:35:2c:bf:ae:c0:e9:cc:16:e3:e9:84:03:65:1a:6b:20: 28:8a:4f:55:78:ee:c0:8e:c6:3a:c5:50:cd:6a:de:ec:b5:95: be:7b:ac:d3:5a:c2:f2:f3:bf:ae:b4:e4:55:80:0a:d7:a6:1d: db:95:ae:ff:26:dd:fe:76:e1:04:a9:69:fc:59:02:de:ac:5b: e9:3b:14:26:2c:7a:53:10:b1:5c:ed:92:8b:63:8a:9b:33:97: 4f:fa:90:12:51:27:11:8f:cd:8f:3b:09:17:4b:d7:f3:84:de: 24:58:2b:b5:27:b2:b6:f4:37:af:0f:8c:b7:49:9c:ff:b1:bf: 75:08:f9:6c:b3:96:a3:bc:66:85:aa:f7:50:79:d3:4a:6d:6a: 80:07:36:0f:b5:c7:53:d8:5e:aa:aa:ae:af:4b:36:08:c3:53: 84:e3:bb:42 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt26rYqbWcfJQtuEh83djlzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjMzUzMmU1MmVhYWZlZjk0OGM0MmM4YjFkNTExNDVjYWM5 ZDRjOTYwHhcNMjYwMTAxMDAxNzMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NTZiNmRmYTIwMjY5ZDM5ZjA1ZTg5YjRhNTEyZmIxOTUxNjc3NWIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzscPz0upuHCuPBmJCWj8Y8m43xl8 M2+diBU0oo76svPHOcB1eCw1HVVXxriwDUWOe3zdR4URQ6mtw8Fy4ocWtb5VGIyL w9UxyomxTJsWnhOUyT3E5IOURX7Ls587p1MkcidcHyh5Bufo629dMPJSVy8aHkD8 sIaUBri6GW8o78AGCoAdMZULbVN59gjdrQR83s0w5kKSxq4b1XQwchcklI9oFdkK 1oO4D/WgWWLjkmP+13p9Fer72gmpF1U2V8iix9ta0EqvUAcacS39CJ7O8KpG7FE9 BJ3A0QVQ9LWjdQtB5kaSEDtKk5U+7QKcO1sLrb9C7nLl9Zfz9WaXh3DtlwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJVrbfogJp058F6JtKUS+xlRZ3WyMB8GA1UdIwQY MBaAFHw1MuUuqv75SMQsix1RFFysnUyWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZkRVeTVTNnFfdmxJeEN5TEhWRVVYS3lkVEpZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni9hNDM4NTAtMDJhMi00ODU5LTliZGUt NTY0ZWJkY2YzZjk2LzEvbFd0dC1pQW1uVG53WG9tMHBSTDdHVkZuZGJJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ni9hNDM4NTAtMDJhMi00ODU5LTliZGUtNTY0ZWJkY2YzZjk2 LzEvZkRVeTVTNnFfdmxJeEN5TEhWRVVYS3lkVEpZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwRboMA0G CSqGSIb3DQEBCwUAA4IBAQAtoC2n7348giAAPwN/z/Xl80divKzCyoBjcQYxA1VA dcPFxIQBeEghA6l3z573YQjsPTSD0yGTySI6OKcJ8r0K6RpgxMAGpUccGTeOHgYT CRXpSfzCBlaSpLH0DDUsv67A6cwW4+mEA2UaayAoik9VeO7AjsY6xVDNat7stZW+ e6zTWsLy87+utORVgArXph3bla7/Jt3+duEEqWn8WQLerFvpOxQmLHpTELFc7ZKL Y4qbM5dP+pASUScRj82POwkXS9fzhN4kWCu1J7K29DevD4y3SZz/sb91CPlss5aj vGaFqvdQedNKbWqABzYPtcdT2F6qqq6vSzYIw1OE47tC -----END CERTIFICATE-----Generated at Tue Feb 10 07:51:59 2026 by rpki-client