This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/ab2b25-2a13-41f0-b9c5-fba49b0cdded/1/lGw_YgGDQ_SDhIlzZs4EtJHH-ik.roa File: lGw_YgGDQ_SDhIlzZs4EtJHH-ik.roa (raw, json) Hash identifier: Chowr6YW7ZD6NeZH4t2rIlYB6mz3gu7Q1zTWhZm5/rs= Subject key identifier: 94:6C:3F:62:01:83:43:F4:83:84:89:73:66:CE:04:B4:91:C7:FA:29 Certificate issuer: /CN=601dc00f9a481b415086b143a7dd4cda1ffb2470 Certificate serial: 019B78351987951F32B266A3036CFD849C26 Authority key identifier: 60:1D:C0:0F:9A:48:1B:41:50:86:B1:43:A7:DD:4C:DA:1F:FB:24:70 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YB3AD5pIG0FQhrFDp91M2h_7JHA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/ab2b25-2a13-41f0-b9c5-fba49b0cdded/1/lGw_YgGDQ_SDhIlzZs4EtJHH-ik.roa Signing time: Thu 01 Jan 2026 06:18:24 +0000 ROA not before: Thu 01 Jan 2026 06:18:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57354 IP address blocks: 91.231.218.0/23 maxlen: 32 185.228.132.0/22 maxlen: 32 2a0d:1600::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/ab2b25-2a13-41f0-b9c5-fba49b0cdded/1/YB3AD5pIG0FQhrFDp91M2h_7JHA.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/ab2b25-2a13-41f0-b9c5-fba49b0cdded/1/YB3AD5pIG0FQhrFDp91M2h_7JHA.mft rsync://rpki.ripe.net/repository/DEFAULT/YB3AD5pIG0FQhrFDp91M2h_7JHA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:19:87:95:1f:32:b2:66:a3:03:6c:fd:84:9c:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=601dc00f9a481b415086b143a7dd4cda1ffb2470 Validity Not Before: Jan 1 06:18:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=946c3f62018343f48384897366ce04b491c7fa29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:cb:93:9d:88:47:72:97:4f:ec:db:ce:cc:d2: bc:af:5f:e1:b3:f0:44:65:4b:72:2c:4a:8f:f8:f6: 64:9a:02:27:b2:b1:bb:9f:dd:54:94:8c:b9:12:65: 05:81:1b:38:a0:bc:bb:fe:df:b8:3b:79:bd:f4:5f: 4f:d4:a0:3b:2f:da:7e:ad:2c:2c:f9:78:a5:c3:7b: dd:b1:6d:f8:8d:58:85:e0:d5:1f:2c:84:cc:a3:bc: 1f:fd:23:0b:a5:0a:15:0e:92:d0:13:88:06:8e:e0: db:65:9e:98:46:aa:a8:3d:cc:68:c2:b0:9d:3e:72: 26:97:4d:a4:2d:ad:9a:35:aa:03:ba:c5:ec:31:87: 3a:e6:96:3b:f7:eb:e8:af:48:ab:34:05:85:c4:5f: 4b:a4:ab:0a:da:cc:6b:a6:b8:ca:54:e8:fd:0b:a9: f5:07:c9:59:e3:48:b0:c5:a8:4b:5f:d1:b0:0e:5c: d1:c1:6f:2f:0a:de:6d:ba:cf:21:3c:8d:52:72:e5: 17:df:c9:fa:85:99:33:8b:fb:09:c8:bf:93:12:44: 55:d3:8c:78:2b:43:b9:23:f5:f0:72:a1:05:e2:2e: c8:4e:9c:d5:3c:e4:01:09:8a:54:62:e7:63:8c:a6: aa:38:48:28:20:ac:7a:d6:9d:72:f4:7f:37:bb:9b: 30:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:6C:3F:62:01:83:43:F4:83:84:89:73:66:CE:04:B4:91:C7:FA:29 X509v3 Authority Key Identifier: keyid:60:1D:C0:0F:9A:48:1B:41:50:86:B1:43:A7:DD:4C:DA:1F:FB:24:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YB3AD5pIG0FQhrFDp91M2h_7JHA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/ab2b25-2a13-41f0-b9c5-fba49b0cdded/1/lGw_YgGDQ_SDhIlzZs4EtJHH-ik.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/ab2b25-2a13-41f0-b9c5-fba49b0cdded/1/YB3AD5pIG0FQhrFDp91M2h_7JHA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.231.218.0/23 185.228.132.0/22 IPv6: 2a0d:1600::/32 Signature Algorithm: sha256WithRSAEncryption 19:23:2a:81:d4:d1:30:53:c4:4f:4c:de:b7:1e:81:7c:75:97: c5:09:7f:48:fb:4e:56:46:02:3d:97:95:96:4d:e1:5c:e7:85: 78:ad:21:d0:e9:83:5b:d6:43:d6:6d:43:49:e1:b9:7f:8c:08: f4:66:d8:a4:68:14:18:70:0d:b8:ce:b6:27:cd:c0:8d:8d:96: 06:67:9d:08:99:c7:4d:60:96:2a:2a:b2:97:f2:2e:e9:9c:32: 69:94:2c:48:2e:af:ed:05:46:dc:da:f5:3d:14:55:7f:33:e0: d5:70:1c:2d:fe:95:6d:3a:c7:04:d9:2d:ba:d1:d1:e9:f0:06: 02:80:e8:53:90:53:74:e4:8d:21:01:c6:5e:7b:a3:11:57:bc: 30:77:43:e0:29:8b:ac:94:f6:02:7a:8d:e4:c8:46:15:0e:c8: 6b:60:ea:c6:9b:26:ca:6f:62:af:b3:e7:a2:9c:a6:62:76:e2: 2b:cd:3c:7e:03:89:e2:40:3b:99:04:b7:16:41:97:ec:4f:c2: 7d:02:c4:2b:6a:36:bf:9b:9b:dc:5e:e9:5b:83:13:5d:5b:af: 4e:49:9a:1a:dc:aa:71:9d:2c:bf:d6:1c:32:02:7f:60:9f:65: e1:80:16:09:df:62:09:aa:10:31:22:15:58:4c:ed:2a:a5:31: 36:84:3a:92 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt4NRmHlR8ysmajA2z9hJwmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwMWRjMDBmOWE0ODFiNDE1MDg2YjE0M2E3ZGQ0Y2RhMWZm YjI0NzAwHhcNMjYwMTAxMDYxODI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NDZjM2Y2MjAxODM0M2Y0ODM4NDg5NzM2NmNlMDRiNDkxYzdmYTI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAycuTnYhHcpdP7NvOzNK8r1/hs/BE ZUtyLEqP+PZkmgInsrG7n91UlIy5EmUFgRs4oLy7/t+4O3m99F9P1KA7L9p+rSws +Xilw3vdsW34jViF4NUfLITMo7wf/SMLpQoVDpLQE4gGjuDbZZ6YRqqoPcxowrCd PnIml02kLa2aNaoDusXsMYc65pY79+vor0irNAWFxF9LpKsK2sxrprjKVOj9C6n1 B8lZ40iwxahLX9GwDlzRwW8vCt5tus8hPI1ScuUX38n6hZkzi/sJyL+TEkRV04x4 K0O5I/XwcqEF4i7ITpzVPOQBCYpUYudjjKaqOEgoIKx61p1y9H83u5swEQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFJRsP2IBg0P0g4SJc2bOBLSRx/opMB8GA1UdIwQY MBaAFGAdwA+aSBtBUIaxQ6fdTNof+yRwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUIzQUQ1cElHMEZRaHJGRHA5MU0yaF83SkhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC9hYjJiMjUtMmExMy00MWYwLWI5YzUt ZmJhNDliMGNkZGVkLzEvbEd3X1lnR0RRX1NEaElselpzNEV0SkhILWlrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC9hYjJiMjUtMmExMy00MWYwLWI5YzUtZmJhNDliMGNkZGVk LzEvWUIzQUQ1cElHMEZRaHJGRHA5MU0yaF83SkhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQBW+faAwQC ueSEMA0EAgACMAcDBQAqDRYAMA0GCSqGSIb3DQEBCwUAA4IBAQAZIyqB1NEwU8RP TN63HoF8dZfFCX9I+05WRgI9l5WWTeFc54V4rSHQ6YNb1kPWbUNJ4bl/jAj0Ztik aBQYcA24zrYnzcCNjZYGZ50ImcdNYJYqKrKX8i7pnDJplCxILq/tBUbc2vU9FFV/ M+DVcBwt/pVtOscE2S260dHp8AYCgOhTkFN05I0hAcZee6MRV7wwd0PgKYuslPYC eo3kyEYVDshrYOrGmybKb2Kvs+einKZiduIrzTx+A4niQDuZBLcWQZfsT8J9AsQr aja/m5vcXulbgxNdW69OSZoa3KpxnSy/1hwyAn9gn2XhgBYJ32IJqhAxIhVYTO0q pTE2hDqS -----END CERTIFICATE-----Generated at Tue Feb 10 03:11:03 2026 by rpki-client