This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/lCEndQQuRFKwVDrjJIr6SI6t0UM.roa File: lCEndQQuRFKwVDrjJIr6SI6t0UM.roa (raw, json) Hash identifier: y4vvvIiOM6IWgLq+xv6Y/UunBkXZxLfyP01+4Mj48hM= Subject key identifier: 94:21:27:75:04:2E:44:52:B0:54:3A:E3:24:8A:FA:48:8E:AD:D1:43 Certificate issuer: /CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4 Certificate serial: 019B77C7522B0BC88C6192DF19CF79A1201D Authority key identifier: D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/lCEndQQuRFKwVDrjJIr6SI6t0UM.roa Signing time: Thu 01 Jan 2026 04:18:29 +0000 ROA not before: Thu 01 Jan 2026 04:18:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 395374 IP address blocks: 188.241.192.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.mft rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 13:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:52:2b:0b:c8:8c:61:92:df:19:cf:79:a1:20:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4 Validity Not Before: Jan 1 04:18:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=94212775042e4452b0543ae3248afa488eadd143 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:af:60:61:c6:e4:c6:ce:a7:88:8f:34:fe:be: 62:c0:8a:c5:a7:e2:24:19:34:d5:b2:88:53:1d:bf: 01:84:18:dd:88:5e:0e:79:15:68:69:9d:9d:94:e0: 71:64:b7:9c:42:5a:bd:4a:12:e3:3b:fd:06:de:0e: ac:f9:4f:81:fc:3e:d8:84:ed:9d:59:db:ba:2a:2f: d6:65:8d:68:29:89:ed:76:ed:e4:da:a9:e5:8e:b2: 9a:d2:29:42:36:87:56:93:be:3e:73:53:45:05:87: 7e:64:3c:7e:c4:80:69:f2:7b:2c:41:ac:29:15:ef: 73:85:e3:11:45:ba:73:46:c3:6a:68:eb:a2:2b:74: 5d:e3:cd:7a:28:dc:11:81:c5:2e:37:d1:7e:84:8d: e6:50:c5:f2:fc:5e:e0:e9:a1:4d:56:7a:85:22:e4: 16:5a:40:7d:ea:0c:ee:69:93:8c:b1:ab:72:fb:3a: e3:32:03:f3:ba:1a:30:81:35:18:0a:4c:b3:32:5c: 91:27:d4:a4:41:ac:b0:84:4d:3d:21:5a:32:33:66: bc:fc:1e:c5:c1:92:53:8b:2e:e2:84:f6:fb:14:87: e8:a8:b2:49:0b:1a:bf:39:4a:d5:d7:1d:91:c1:9d: 9b:7a:1e:5a:8a:8e:21:fe:ba:5d:78:26:80:d9:db: 4f:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:21:27:75:04:2E:44:52:B0:54:3A:E3:24:8A:FA:48:8E:AD:D1:43 X509v3 Authority Key Identifier: keyid:D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/lCEndQQuRFKwVDrjJIr6SI6t0UM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.241.192.0/24 Signature Algorithm: sha256WithRSAEncryption 02:84:23:df:8f:57:1f:57:25:a9:c2:ec:fa:00:a9:bc:55:ff: 27:29:2f:ea:c4:5c:a7:da:32:37:b0:84:64:56:a4:bc:15:a3: e0:7c:3a:19:b1:b6:9b:64:b0:a0:1b:48:48:49:4a:88:e2:f8: 21:1d:a0:e4:67:9d:01:a4:08:d1:77:94:e3:b8:57:d9:50:53: 21:66:7c:78:5e:1e:be:64:b4:0e:ef:00:7e:e6:94:d4:3f:30: 7b:e5:57:26:a5:d9:6c:2b:53:8c:7e:ea:44:08:bf:9c:33:81: 8b:78:8f:9c:2f:59:42:9a:e9:a4:e6:31:63:7c:a4:3d:c4:7a: f0:f8:09:81:63:5e:be:be:2c:26:d5:5f:db:a4:0a:99:c7:d2: 1c:0f:e4:58:a1:78:6d:5c:94:24:87:49:50:a5:96:d2:ef:41: cb:90:73:a4:01:9c:c7:a8:3f:7d:f6:f4:4c:79:de:a0:b1:87: 37:79:7f:89:1b:b1:20:e4:ae:d2:17:a9:5d:c3:0a:ac:77:08: 79:6e:e2:06:cf:3b:82:7d:f6:06:60:32:3e:87:d9:8a:7f:d4: cb:ab:f6:ed:7a:ad:d4:9d:62:e6:ae:02:d1:44:99:3d:87:e1: 71:26:1b:05:56:26:98:19:34:ad:8d:95:a9:e0:07:1b:19:cb: ef:df:30:84 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3x1IrC8iMYZLfGc95oSAdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0OGEyN2Y0NGIxMDQwNGM1MmY2ZmZjNGUwOGRjODJiZjhi NWRlZTQwHhcNMjYwMTAxMDQxODI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NDIxMjc3NTA0MmU0NDUyYjA1NDNhZTMyNDhhZmE0ODhlYWRkMTQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuK9gYcbkxs6niI80/r5iwIrFp+Ik GTTVsohTHb8BhBjdiF4OeRVoaZ2dlOBxZLecQlq9ShLjO/0G3g6s+U+B/D7YhO2d Wdu6Ki/WZY1oKYntdu3k2qnljrKa0ilCNodWk74+c1NFBYd+ZDx+xIBp8nssQawp Fe9zheMRRbpzRsNqaOuiK3Rd4816KNwRgcUuN9F+hI3mUMXy/F7g6aFNVnqFIuQW WkB96gzuaZOMsaty+zrjMgPzuhowgTUYCkyzMlyRJ9SkQaywhE09IVoyM2a8/B7F wZJTiy7ihPb7FIfoqLJJCxq/OUrV1x2RwZ2beh5aio4h/rpdeCaA2dtPFwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJQhJ3UELkRSsFQ64ySK+kiOrdFDMB8GA1UdIwQY MBaAFNSKJ/RLEEBMUvb/xOCNyCv4td7kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUlvbjlFc1FRRXhTOXZfRTRJM0lLX2kxM3VRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS80YmI1YTctMzQ2Yy00MTk1LTlkMGYt NTlmNTk4NGI2NGVhLzEvbENFbmRRUXVSRkt3VkRyakpJcjZTSTZ0MFVNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS80YmI1YTctMzQ2Yy00MTk1LTlkMGYtNTlmNTk4NGI2NGVh LzEvMUlvbjlFc1FRRXhTOXZfRTRJM0lLX2kxM3VRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvPHAMA0G CSqGSIb3DQEBCwUAA4IBAQAChCPfj1cfVyWpwuz6AKm8Vf8nKS/qxFyn2jI3sIRk VqS8FaPgfDoZsbabZLCgG0hISUqI4vghHaDkZ50BpAjRd5TjuFfZUFMhZnx4Xh6+ ZLQO7wB+5pTUPzB75VcmpdlsK1OMfupECL+cM4GLeI+cL1lCmumk5jFjfKQ9xHrw +AmBY16+viwm1V/bpAqZx9IcD+RYoXhtXJQkh0lQpZbS70HLkHOkAZzHqD999vRM ed6gsYc3eX+JG7Eg5K7SF6ldwwqsdwh5buIGzzuCffYGYDI+h9mKf9TLq/bteq3U nWLmrgLRRJk9h+FxJhsFViaYGTStjZWp4AcbGcvv3zCE -----END CERTIFICATE-----Generated at Thu Jan 1 20:24:03 2026 by rpki-client