This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/18fc14-0877-4fa8-a4a4-603b29fd1a08/1/lLg_J9YIGk9Bx5020VMchGBjT28.roa File: lLg_J9YIGk9Bx5020VMchGBjT28.roa (raw, json) Hash identifier: z6BgfhJ3Bk6vD4wjFGLuDISYOvDfTRG5fR6HJauBSGM= Subject key identifier: 94:B8:3F:27:D6:08:1A:4F:41:C7:9D:36:D1:53:1C:84:60:63:4F:6F Certificate issuer: /CN=e22d83b78308d09e65d2150eac1623dee96d4c4b Certificate serial: 019B7C8024ACF17B2A873EDAFC289C466385 Authority key identifier: E2:2D:83:B7:83:08:D0:9E:65:D2:15:0E:AC:16:23:DE:E9:6D:4C:4B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4i2Dt4MI0J5l0hUOrBYj3ultTEs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/18fc14-0877-4fa8-a4a4-603b29fd1a08/1/lLg_J9YIGk9Bx5020VMchGBjT28.roa Signing time: Fri 02 Jan 2026 02:18:51 +0000 ROA not before: Fri 02 Jan 2026 02:18:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29802 IP address blocks: 167.94.246.0/24 maxlen: 24 194.110.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/18fc14-0877-4fa8-a4a4-603b29fd1a08/1/4i2Dt4MI0J5l0hUOrBYj3ultTEs.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/18fc14-0877-4fa8-a4a4-603b29fd1a08/1/4i2Dt4MI0J5l0hUOrBYj3ultTEs.mft rsync://rpki.ripe.net/repository/DEFAULT/4i2Dt4MI0J5l0hUOrBYj3ultTEs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:24:ac:f1:7b:2a:87:3e:da:fc:28:9c:46:63:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e22d83b78308d09e65d2150eac1623dee96d4c4b Validity Not Before: Jan 2 02:18:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=94b83f27d6081a4f41c79d36d1531c8460634f6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:73:2e:f9:7b:96:f3:25:d6:f5:0c:5a:13:b5: 02:01:3d:5e:23:bf:54:ea:c6:04:44:0e:cb:7b:04: 69:cd:c9:77:a0:bb:01:fd:b2:41:a7:71:3d:b1:31: db:ae:6d:7d:fb:4f:ab:96:ae:c6:77:be:3b:85:da: 10:c2:e4:bd:6b:7d:c7:9d:56:24:fb:d8:a9:24:31: 48:f9:8b:40:00:b1:b1:e0:ae:3b:38:64:b0:8f:4a: 0b:a1:71:5a:f2:af:de:e0:9c:6d:78:a6:61:53:9a: 8a:49:f2:1a:1d:02:47:34:e2:46:60:32:c1:e6:b0: 12:52:09:84:6d:ed:aa:a2:81:49:67:5a:0d:8c:98: f8:78:6a:9c:bd:6d:28:21:66:f5:c4:ad:54:69:a5: dc:3a:0f:e6:0a:5c:f6:99:50:13:47:0b:a1:0b:e0: 8d:ac:a5:7c:c7:13:fe:26:51:01:63:9b:33:b8:29: 93:36:a8:7b:45:0b:b3:70:70:f1:73:0c:1d:c7:57: 9f:2a:2a:69:fa:f5:98:a3:4d:2f:40:00:bd:c7:86: 74:05:cf:17:6b:63:28:58:48:67:ea:45:2d:83:97: 2b:a2:5e:15:0c:f1:18:63:de:ff:62:e1:f8:15:c8: 98:99:42:73:ae:80:2a:5b:4e:bd:3a:9c:2a:2f:40: 96:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:B8:3F:27:D6:08:1A:4F:41:C7:9D:36:D1:53:1C:84:60:63:4F:6F X509v3 Authority Key Identifier: keyid:E2:2D:83:B7:83:08:D0:9E:65:D2:15:0E:AC:16:23:DE:E9:6D:4C:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4i2Dt4MI0J5l0hUOrBYj3ultTEs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/18fc14-0877-4fa8-a4a4-603b29fd1a08/1/lLg_J9YIGk9Bx5020VMchGBjT28.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/18fc14-0877-4fa8-a4a4-603b29fd1a08/1/4i2Dt4MI0J5l0hUOrBYj3ultTEs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 167.94.246.0/24 194.110.0.0/24 Signature Algorithm: sha256WithRSAEncryption 50:72:f8:e8:0e:cc:e6:aa:ea:5e:13:e8:20:20:d4:10:70:8a: 81:02:30:0e:60:35:db:fa:56:fe:b5:b6:29:1e:3c:f1:e2:1a: e9:eb:c9:3a:41:c0:e9:87:90:97:67:b1:74:ac:54:7a:7a:30: e9:0b:73:3c:0a:3f:da:07:3e:e9:17:d4:96:7d:ea:cc:51:66: 93:84:8c:d9:60:8c:1d:05:4b:63:75:9f:c7:1c:88:e6:3a:0f: 10:1a:35:84:30:bb:e0:f2:ac:82:8a:5e:7c:f6:59:07:e6:bf: 9a:8b:76:8c:9f:76:da:92:6d:b8:ea:72:a3:4e:28:d0:45:25: e4:eb:1b:44:77:d6:ee:d2:03:8d:c8:56:66:e0:0c:04:fc:85: e2:ce:d3:f3:23:00:b4:52:07:95:d5:53:79:2b:0e:c6:df:82: 1f:54:94:0d:70:b4:1d:a4:b4:1f:17:3c:0c:57:d3:f9:73:b8: fa:22:68:84:ca:dd:d7:44:98:da:ea:b9:ea:05:8e:95:90:bf: 44:c7:57:a1:aa:4c:de:4c:7e:68:d8:c1:f7:75:b1:e1:e5:8a: c4:9f:e7:1b:0f:e7:9d:82:e1:34:2a:9e:4e:e0:c4:02:35:72: 50:6e:41:3a:d5:aa:59:71:35:27:46:30:97:25:e5:56:b5:b2: 7f:16:ea:0b -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt8gCSs8Xsqhz7a/CicRmOFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyMmQ4M2I3ODMwOGQwOWU2NWQyMTUwZWFjMTYyM2RlZTk2 ZDRjNGIwHhcNMjYwMTAyMDIxODUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NGI4M2YyN2Q2MDgxYTRmNDFjNzlkMzZkMTUzMWM4NDYwNjM0ZjZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvnMu+XuW8yXW9QxaE7UCAT1eI79U 6sYERA7LewRpzcl3oLsB/bJBp3E9sTHbrm19+0+rlq7Gd747hdoQwuS9a33HnVYk +9ipJDFI+YtAALGx4K47OGSwj0oLoXFa8q/e4JxteKZhU5qKSfIaHQJHNOJGYDLB 5rASUgmEbe2qooFJZ1oNjJj4eGqcvW0oIWb1xK1UaaXcOg/mClz2mVATRwuhC+CN rKV8xxP+JlEBY5szuCmTNqh7RQuzcHDxcwwdx1efKipp+vWYo00vQAC9x4Z0Bc8X a2MoWEhn6kUtg5crol4VDPEYY97/YuH4FciYmUJzroAqW069OpwqL0CWRwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFJS4PyfWCBpPQcedNtFTHIRgY09vMB8GA1UdIwQY MBaAFOItg7eDCNCeZdIVDqwWI97pbUxLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNGkyRHQ0TUkwSjVsMGhVT3JCWWozdWx0VEVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy8xOGZjMTQtMDg3Ny00ZmE4LWE0YTQt NjAzYjI5ZmQxYTA4LzEvbExnX0o5WUlHazlCeDUwMjBWTWNoR0JqVDI4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy8xOGZjMTQtMDg3Ny00ZmE4LWE0YTQtNjAzYjI5ZmQxYTA4 LzEvNGkyRHQ0TUkwSjVsMGhVT3JCWWozdWx0VEVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAp172AwQA wm4AMA0GCSqGSIb3DQEBCwUAA4IBAQBQcvjoDszmqupeE+ggINQQcIqBAjAOYDXb +lb+tbYpHjzx4hrp68k6QcDph5CXZ7F0rFR6ejDpC3M8Cj/aBz7pF9SWferMUWaT hIzZYIwdBUtjdZ/HHIjmOg8QGjWEMLvg8qyCil589lkH5r+ai3aMn3bakm246nKj TijQRSXk6xtEd9bu0gONyFZm4AwE/IXiztPzIwC0UgeV1VN5Kw7G34IfVJQNcLQd pLQfFzwMV9P5c7j6ImiEyt3XRJja6rnqBY6VkL9Ex1ehqkzeTH5o2MH3dbHh5YrE n+cbD+edguE0Kp5O4MQCNXJQbkE61apZcTUnRjCXJeVWtbJ/FuoL -----END CERTIFICATE-----Generated at Tue Jan 20 03:36:48 2026 by rpki-client