This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/4laIrKRi3qDrz6IT5iXw3SrZLYg.roa File: 4laIrKRi3qDrz6IT5iXw3SrZLYg.roa (raw, json) Hash identifier: BeEw40/ID7yaUleCrkjhm+uIq++J6JKU54oasFN2qEA= Subject key identifier: E2:56:88:AC:A4:62:DE:A0:EB:CF:A2:13:E6:25:F0:DD:2A:D9:2D:88 Certificate issuer: /CN=253a3b5f51808168c212c094a2baaff38e16464a Certificate serial: 019B77C74EB6A8B3B46D4D0C55409CA582E0 Authority key identifier: 25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/4laIrKRi3qDrz6IT5iXw3SrZLYg.roa Signing time: Thu 01 Jan 2026 04:18:29 +0000 ROA not before: Thu 01 Jan 2026 04:18:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210644 IP address blocks: 193.232.178.0/24 maxlen: 24 194.226.169.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.mft rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 20:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:4e:b6:a8:b3:b4:6d:4d:0c:55:40:9c:a5:82:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=253a3b5f51808168c212c094a2baaff38e16464a Validity Not Before: Jan 1 04:18:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e25688aca462dea0ebcfa213e625f0dd2ad92d88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:15:d9:2c:d4:fc:f4:33:0f:8a:0e:95:6e:f2: 53:43:64:6b:c8:37:d2:36:13:70:88:cd:32:37:48: 6d:e0:f9:b3:dc:47:c8:5c:fe:2c:05:3b:c2:5e:ee: d8:db:f4:19:95:c6:65:cb:ca:91:91:49:96:a7:10: c1:d1:4d:97:0e:83:2e:ba:33:27:5d:9e:f5:91:af: 20:f3:db:d9:da:d3:8f:d5:bd:dc:31:f9:75:ff:d6: 4a:3a:fb:c7:55:a3:6b:82:45:63:4a:da:9c:41:32: d2:09:95:9b:9d:21:3a:68:2e:73:91:b9:3f:ef:29: 59:f6:eb:69:69:57:3f:e0:07:90:10:6a:5c:1f:bc: 31:b5:4c:6b:d4:67:7b:7e:77:12:9c:d2:a8:3d:b7: 89:99:1a:ad:c0:2c:c4:b2:7d:3c:ff:92:a3:6a:52: 05:f2:93:ee:9d:ca:e9:02:1f:54:ff:85:28:4a:46: 24:eb:27:70:de:c8:79:11:2e:86:79:0b:6b:21:27: 0a:0c:b8:98:2b:dd:38:87:1e:ff:75:61:b8:30:68: 0a:5d:3a:fa:7e:71:ba:e0:49:4c:a9:b2:6d:77:d0: 89:46:a0:0e:8d:5e:74:d3:c1:cc:23:c6:43:c3:e2: e1:1a:58:95:3f:94:f1:a4:ba:df:be:69:6a:43:e7: bd:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:56:88:AC:A4:62:DE:A0:EB:CF:A2:13:E6:25:F0:DD:2A:D9:2D:88 X509v3 Authority Key Identifier: keyid:25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/4laIrKRi3qDrz6IT5iXw3SrZLYg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.232.178.0/24 194.226.169.0/24 Signature Algorithm: sha256WithRSAEncryption 49:67:20:7b:98:c4:1e:32:87:8a:ee:d5:53:18:19:5e:d4:84: a7:c5:d4:50:a6:f1:06:bd:3d:62:3f:dd:fa:39:bd:24:68:0e: 24:97:25:e8:48:28:d3:f8:77:2d:ba:46:ce:62:74:0f:e6:33: 3d:d2:f0:ed:2f:34:d6:72:28:b8:0a:28:23:37:a3:3f:ce:af: 35:da:cc:1c:64:ed:a4:70:4a:6b:69:06:d6:a7:c8:a8:71:87: eb:1c:6a:2a:d3:73:47:8b:70:80:4d:a4:df:bc:e7:82:8d:e1: 0e:13:6c:3d:64:47:0f:c6:79:c1:b5:f7:de:12:12:8e:ae:66: 2a:3d:19:88:ca:b1:ec:a9:c0:6d:6d:be:9e:b7:5f:03:84:e1: 70:18:fd:25:19:6e:7d:9c:29:95:61:4f:46:9e:40:a8:f5:2c: e3:4e:69:1e:fa:8a:11:6c:6a:95:4a:2a:f3:d1:a2:0d:42:f7: 21:44:91:ee:58:e5:e1:83:28:dd:61:dc:9d:43:c4:c9:e4:db: b7:d1:c3:8c:85:b7:13:ca:74:e8:47:3e:94:1f:e5:5a:15:99: fe:34:33:b0:cb:d4:7d:a3:3e:c6:c4:c9:d7:d2:65:56:b1:a7: cf:e8:53:60:d1:fb:d9:46:39:25:b9:7e:31:08:31:b7:d3:0d: b1:7d:96:ec -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt3x062qLO0bU0MVUCcpYLgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1M2EzYjVmNTE4MDgxNjhjMjEyYzA5NGEyYmFhZmYzOGUx NjQ2NGEwHhcNMjYwMTAxMDQxODI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMjU2ODhhY2E0NjJkZWEwZWJjZmEyMTNlNjI1ZjBkZDJhZDkyZDg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnRXZLNT89DMPig6VbvJTQ2RryDfS NhNwiM0yN0ht4Pmz3EfIXP4sBTvCXu7Y2/QZlcZly8qRkUmWpxDB0U2XDoMuujMn XZ71ka8g89vZ2tOP1b3cMfl1/9ZKOvvHVaNrgkVjStqcQTLSCZWbnSE6aC5zkbk/ 7ylZ9utpaVc/4AeQEGpcH7wxtUxr1Gd7fncSnNKoPbeJmRqtwCzEsn08/5KjalIF 8pPuncrpAh9U/4UoSkYk6ydw3sh5ES6GeQtrIScKDLiYK904hx7/dWG4MGgKXTr6 fnG64ElMqbJtd9CJRqAOjV5008HMI8ZDw+LhGliVP5TxpLrfvmlqQ+e9kwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFOJWiKykYt6g68+iE+Yl8N0q2S2IMB8GA1UdIwQY MBaAFCU6O19RgIFowhLAlKK6r/OOFkZKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSlRvN1gxR0FnV2pDRXNDVW9ycXY4NDRXUmtvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS85NzQ3NGMtMWRjMi00NjJjLWFhZGQt OWU5YTFlMDM3MzhlLzEvNGxhSXJLUmkzcURyejZJVDVpWHczU3JaTFlnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS85NzQ3NGMtMWRjMi00NjJjLWFhZGQtOWU5YTFlMDM3Mzhl LzEvSlRvN1gxR0FnV2pDRXNDVW9ycXY4NDRXUmtvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAweiyAwQA wuKpMA0GCSqGSIb3DQEBCwUAA4IBAQBJZyB7mMQeMoeK7tVTGBle1ISnxdRQpvEG vT1iP936Ob0kaA4klyXoSCjT+HctukbOYnQP5jM90vDtLzTWcii4CigjN6M/zq81 2swcZO2kcEpraQbWp8iocYfrHGoq03NHi3CATaTfvOeCjeEOE2w9ZEcPxnnBtffe EhKOrmYqPRmIyrHsqcBtbb6et18DhOFwGP0lGW59nCmVYU9GnkCo9SzjTmke+ooR bGqVSirz0aINQvchRJHuWOXhgyjdYdydQ8TJ5Nu30cOMhbcTynToRz6UH+VaFZn+ NDOwy9R9oz7GxMnX0mVWsafP6FNg0fvZRjkluX4xCDG30w2xfZbs -----END CERTIFICATE-----Generated at Tue Jan 20 06:05:27 2026 by rpki-client