This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/5eecf3-637f-450c-8489-34ba0738a341/1/lCNcwiTis23NjZGJUyz6VATDyz0.roa File: lCNcwiTis23NjZGJUyz6VATDyz0.roa (raw, json) Hash identifier: 6hddPze5e7W4oU8e0Ss6BtZ9E8J7K5C2H/UpL6cDWu8= Subject key identifier: 94:23:5C:C2:24:E2:B3:6D:CD:8D:91:89:53:2C:FA:54:04:C3:CB:3D Certificate issuer: /CN=932e8078ea420afc1a78bf922a9a2f274679c8a8 Certificate serial: 019B7C131DDB181F52C24B8F3990A93DCABE Authority key identifier: 93:2E:80:78:EA:42:0A:FC:1A:78:BF:92:2A:9A:2F:27:46:79:C8:A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ky6AeOpCCvwaeL-SKpovJ0Z5yKg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/5eecf3-637f-450c-8489-34ba0738a341/1/lCNcwiTis23NjZGJUyz6VATDyz0.roa Signing time: Fri 02 Jan 2026 00:19:46 +0000 ROA not before: Fri 02 Jan 2026 00:19:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42989 IP address blocks: 185.231.4.0/24 maxlen: 24 2a0c:3500::/48 maxlen: 48 2a0c:3500:2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/5eecf3-637f-450c-8489-34ba0738a341/1/ky6AeOpCCvwaeL-SKpovJ0Z5yKg.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/5eecf3-637f-450c-8489-34ba0738a341/1/ky6AeOpCCvwaeL-SKpovJ0Z5yKg.mft rsync://rpki.ripe.net/repository/DEFAULT/ky6AeOpCCvwaeL-SKpovJ0Z5yKg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:1d:db:18:1f:52:c2:4b:8f:39:90:a9:3d:ca:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=932e8078ea420afc1a78bf922a9a2f274679c8a8 Validity Not Before: Jan 2 00:19:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=94235cc224e2b36dcd8d9189532cfa5404c3cb3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:d9:42:79:d4:d7:05:02:f2:51:2a:5e:3d:05: e1:31:48:aa:3b:f7:47:b0:55:7d:93:b0:8b:3c:d1: 78:b6:e6:8e:1e:32:fa:a1:c2:f7:9e:8e:90:49:1b: a9:92:00:49:f7:00:84:d7:08:a9:ee:a5:39:61:5c: 44:9d:aa:4b:99:75:0c:e7:df:d7:7c:95:59:7f:10: d4:9f:a0:e6:a3:99:ad:03:ee:63:2e:37:09:3d:3e: 4a:bb:e9:34:b8:d9:09:6d:1f:15:23:31:47:70:44: 51:93:ac:34:3e:07:fe:fd:1d:9c:95:cb:49:a4:5e: 9c:86:20:c6:cd:15:2a:26:3a:e4:f3:2f:72:af:57: e6:52:7f:91:0d:d1:92:52:ed:a6:5b:1b:67:15:93: a2:2c:7d:e9:16:5f:19:f7:80:3a:c6:3e:1a:49:ef: 00:2f:79:4c:0b:d2:cf:26:24:26:68:6b:2f:5f:42: a3:c3:6f:59:96:82:68:10:35:00:8b:29:80:a8:e2: e5:8d:f6:1a:51:f7:69:06:c3:bf:50:7d:5f:fe:52: cd:8b:c8:64:f1:0b:49:39:0d:52:68:61:41:02:23: 22:f7:bb:f1:89:7d:c4:a3:1a:c7:a2:e8:94:69:17: d3:88:41:85:4c:7e:04:53:6e:fe:cd:1b:34:68:51: f3:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:23:5C:C2:24:E2:B3:6D:CD:8D:91:89:53:2C:FA:54:04:C3:CB:3D X509v3 Authority Key Identifier: keyid:93:2E:80:78:EA:42:0A:FC:1A:78:BF:92:2A:9A:2F:27:46:79:C8:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ky6AeOpCCvwaeL-SKpovJ0Z5yKg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/5eecf3-637f-450c-8489-34ba0738a341/1/lCNcwiTis23NjZGJUyz6VATDyz0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/5eecf3-637f-450c-8489-34ba0738a341/1/ky6AeOpCCvwaeL-SKpovJ0Z5yKg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.231.4.0/24 IPv6: 2a0c:3500::/48 2a0c:3500:2::/48 Signature Algorithm: sha256WithRSAEncryption 67:d2:74:9a:eb:d2:ff:2c:fc:61:db:bb:b9:32:eb:e8:84:a6: 57:0e:c8:03:5b:b9:1b:8a:e9:f6:9e:42:88:9d:61:59:4c:82: 74:95:a3:9a:9f:f2:b3:86:fa:45:ae:10:04:6f:3f:10:0b:31: 65:7d:d6:5e:b7:31:d9:c0:34:a4:16:3c:9c:7e:6c:b7:66:ae: 41:7a:e4:d3:9e:d9:0e:18:89:e1:91:a1:30:d9:fc:60:0f:6f: ea:66:47:50:39:ca:e7:27:bf:e2:e5:bd:d9:0d:4a:9a:34:56: 1a:c5:ac:26:a4:19:e0:2e:46:ea:55:73:68:fd:bd:20:3b:90: 1c:73:a1:ab:40:21:be:25:16:57:c5:ce:16:e0:0b:11:32:02: e6:10:03:13:a2:eb:30:0f:97:54:ea:d5:f5:80:23:85:8c:fd: 06:97:28:55:d7:df:52:7a:f8:9f:46:e2:ba:c0:2a:11:a9:62: 0a:7d:21:bb:86:e8:8a:81:a1:ca:c2:ae:e0:27:10:fd:8a:9a: 86:ea:42:6c:61:af:ff:6a:08:21:6b:e8:dd:8b:a9:c1:52:1e: 08:57:25:d0:d0:f1:3e:f1:b4:2c:9e:13:86:bd:03:b8:05:de: 91:ed:51:ce:85:c0:d5:34:58:f2:d2:ef:47:30:12:07:4e:fb: 2f:74:66:a5 -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgISAZt8Ex3bGB9SwkuPOZCpPcq+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzMmU4MDc4ZWE0MjBhZmMxYTc4YmY5MjJhOWEyZjI3NDY3 OWM4YTgwHhcNMjYwMTAyMDAxOTQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NDIzNWNjMjI0ZTJiMzZkY2Q4ZDkxODk1MzJjZmE1NDA0YzNjYjNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw9lCedTXBQLyUSpePQXhMUiqO/dH sFV9k7CLPNF4tuaOHjL6ocL3no6QSRupkgBJ9wCE1wip7qU5YVxEnapLmXUM59/X fJVZfxDUn6Dmo5mtA+5jLjcJPT5Ku+k0uNkJbR8VIzFHcERRk6w0Pgf+/R2clctJ pF6chiDGzRUqJjrk8y9yr1fmUn+RDdGSUu2mWxtnFZOiLH3pFl8Z94A6xj4aSe8A L3lMC9LPJiQmaGsvX0Kjw29ZloJoEDUAiymAqOLljfYaUfdpBsO/UH1f/lLNi8hk 8QtJOQ1SaGFBAiMi97vxiX3EoxrHouiUaRfTiEGFTH4EU27+zRs0aFHzpwIDAQAB o4ICIzCCAh8wHQYDVR0OBBYEFJQjXMIk4rNtzY2RiVMs+lQEw8s9MB8GA1UdIwQY MBaAFJMugHjqQgr8Gni/kiqaLydGecioMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3k2QWVPcENDdndhZUwtU0twb3ZKMFo1eUtnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi81ZWVjZjMtNjM3Zi00NTBjLTg0ODkt MzRiYTA3MzhhMzQxLzEvbENOY3dpVGlzMjNOalpHSlV5ejZWQVREeXowLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi81ZWVjZjMtNjM3Zi00NTBjLTg0ODktMzRiYTA3MzhhMzQx LzEva3k2QWVPcENDdndhZUwtU0twb3ZKMFo1eUtnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAMBAIAATAGAwQAuecEMBgE AgACMBIDBwAqDDUAAAADBwAqDDUAAAIwDQYJKoZIhvcNAQELBQADggEBAGfSdJrr 0v8s/GHbu7ky6+iEplcOyANbuRuK6faeQoidYVlMgnSVo5qf8rOG+kWuEARvPxAL MWV91l63MdnANKQWPJx+bLdmrkF65NOe2Q4YieGRoTDZ/GAPb+pmR1A5yucnv+Ll vdkNSpo0VhrFrCakGeAuRupVc2j9vSA7kBxzoatAIb4lFlfFzhbgCxEyAuYQAxOi 6zAPl1Tq1fWAI4WM/QaXKFXX31J6+J9G4rrAKhGpYgp9IbuG6IqBocrCruAnEP2K mobqQmxhr/9qCCFr6N2LqcFSHghXJdDQ8T7xtCyeE4a9A7gF3pHtUc6FwNU0WPLS 70cwEgdO+y90ZqU= -----END CERTIFICATE-----Generated at Tue Feb 10 00:03:03 2026 by rpki-client