This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/365d98-5d48-43b8-9794-b1ea087b9525/1/luaG9iyuGP8nFZp85aiqtsp0z2c.roa File: luaG9iyuGP8nFZp85aiqtsp0z2c.roa (raw, json) Hash identifier: 9QToNx/tKXCeA3T2RqIfOvqid+nCt4rK1QL6hXksot8= Subject key identifier: 96:E6:86:F6:2C:AE:18:FF:27:15:9A:7C:E5:A8:AA:B6:CA:74:CF:67 Certificate issuer: /CN=c1b607c58515367d37c9f3e699482e57a33c73f5 Certificate serial: 019B7A5B5047787EC8DF68F4FB543B0F6781 Authority key identifier: C1:B6:07:C5:85:15:36:7D:37:C9:F3:E6:99:48:2E:57:A3:3C:73:F5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wbYHxYUVNn03yfPmmUguV6M8c_U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/365d98-5d48-43b8-9794-b1ea087b9525/1/luaG9iyuGP8nFZp85aiqtsp0z2c.roa Signing time: Thu 01 Jan 2026 16:19:23 +0000 ROA not before: Thu 01 Jan 2026 16:19:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42981 IP address blocks: 194.110.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/365d98-5d48-43b8-9794-b1ea087b9525/1/wbYHxYUVNn03yfPmmUguV6M8c_U.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/365d98-5d48-43b8-9794-b1ea087b9525/1/wbYHxYUVNn03yfPmmUguV6M8c_U.mft rsync://rpki.ripe.net/repository/DEFAULT/wbYHxYUVNn03yfPmmUguV6M8c_U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:50:47:78:7e:c8:df:68:f4:fb:54:3b:0f:67:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1b607c58515367d37c9f3e699482e57a33c73f5 Validity Not Before: Jan 1 16:19:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=96e686f62cae18ff27159a7ce5a8aab6ca74cf67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:95:5e:ef:65:a7:ac:07:d8:db:0b:b4:b7:0c: 20:4b:59:0a:11:f0:e1:47:dd:ee:df:65:96:5b:f4: 18:7b:de:a5:e6:91:b8:ef:2d:c1:97:aa:d2:74:a3: a7:45:da:38:3f:c2:fc:ba:c4:58:05:05:c2:e9:f4: a5:53:16:0d:2f:99:e8:14:b7:71:9a:2b:33:7a:04: 75:54:03:9e:c6:44:62:63:a4:cd:c8:f8:e2:26:a0: 6b:ae:49:a8:d5:3d:25:9c:38:9a:8d:6b:88:a6:9e: 9a:11:49:7c:61:f3:92:b4:6f:24:59:d3:9b:ad:f6: 40:ad:42:af:03:06:82:cc:f0:68:c9:62:a1:5b:67: fa:35:7a:46:c7:61:24:fb:d7:a9:df:a8:65:8a:bd: 5b:77:55:83:10:82:47:6b:51:f0:7e:c8:25:ef:8b: e5:bb:27:39:e8:c4:fb:96:5b:9c:8c:ef:27:6a:61: 6a:3a:5f:ae:81:80:9a:7e:26:e4:44:79:c6:45:05: c4:59:f8:7e:3c:a0:46:88:a4:65:05:da:59:49:c9: 5c:57:b1:fd:eb:d3:48:66:a2:e3:af:c8:e9:8d:91: e7:99:b2:4a:7a:d9:89:35:7b:3e:fb:d6:4c:4f:75: fb:a5:d3:d2:e6:c0:9d:7d:4c:9e:2b:f0:e3:ee:77: 56:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:E6:86:F6:2C:AE:18:FF:27:15:9A:7C:E5:A8:AA:B6:CA:74:CF:67 X509v3 Authority Key Identifier: keyid:C1:B6:07:C5:85:15:36:7D:37:C9:F3:E6:99:48:2E:57:A3:3C:73:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wbYHxYUVNn03yfPmmUguV6M8c_U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/365d98-5d48-43b8-9794-b1ea087b9525/1/luaG9iyuGP8nFZp85aiqtsp0z2c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/365d98-5d48-43b8-9794-b1ea087b9525/1/wbYHxYUVNn03yfPmmUguV6M8c_U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.110.238.0/24 Signature Algorithm: sha256WithRSAEncryption 24:43:6b:41:74:5f:aa:65:53:4a:24:0e:04:4e:64:1a:0e:0e: 2d:5c:a2:11:44:77:13:88:0f:49:a8:cd:10:b0:88:b4:61:15: 93:35:2b:a8:10:5b:18:38:f7:80:79:18:65:c1:11:4e:63:71: 87:bd:e9:f8:d1:bf:0e:79:a3:45:bd:b1:71:8a:b2:60:df:74: 53:f8:84:b3:ef:47:64:24:68:55:a6:e2:86:f1:33:4a:8d:68: 42:98:61:9d:5f:8e:85:8c:51:34:07:32:22:8d:97:35:84:91: d1:a3:b5:76:32:f8:cb:4c:ec:86:61:bd:ef:61:01:28:6e:94: cb:1b:a5:76:5f:1d:53:6b:0b:e8:7a:16:09:2e:c2:d8:e0:ac: 3e:16:11:d1:3e:f3:7e:91:55:dd:2b:80:23:9e:0d:7b:8d:e0: a3:03:96:79:55:92:95:a9:7d:0f:eb:68:52:59:53:b3:55:b2: d5:95:02:2d:3a:03:3f:e3:67:3b:ed:70:c2:dc:7f:42:c0:0b: a9:e7:ed:c7:80:55:be:a9:73:55:28:6d:39:0f:ff:30:4b:fd: 3f:79:b2:37:90:15:4f:68:0a:85:ae:fb:b8:ee:73:32:72:cd: 04:8f:7e:25:c5:0f:0c:1d:ba:b0:65:14:a6:22:7a:77:25:04: 7a:08:b9:b1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6W1BHeH7I32j0+1Q7D2eBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxYjYwN2M1ODUxNTM2N2QzN2M5ZjNlNjk5NDgyZTU3YTMz YzczZjUwHhcNMjYwMTAxMTYxOTIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NmU2ODZmNjJjYWUxOGZmMjcxNTlhN2NlNWE4YWFiNmNhNzRjZjY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo5Ve72WnrAfY2wu0twwgS1kKEfDh R93u32WWW/QYe96l5pG47y3Bl6rSdKOnRdo4P8L8usRYBQXC6fSlUxYNL5noFLdx miszegR1VAOexkRiY6TNyPjiJqBrrkmo1T0lnDiajWuIpp6aEUl8YfOStG8kWdOb rfZArUKvAwaCzPBoyWKhW2f6NXpGx2Ek+9ep36hlir1bd1WDEIJHa1Hwfsgl74vl uyc56MT7llucjO8namFqOl+ugYCafibkRHnGRQXEWfh+PKBGiKRlBdpZSclcV7H9 69NIZqLjr8jpjZHnmbJKetmJNXs++9ZMT3X7pdPS5sCdfUyeK/Dj7ndWowIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJbmhvYsrhj/JxWafOWoqrbKdM9nMB8GA1UdIwQY MBaAFMG2B8WFFTZ9N8nz5plILlejPHP1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd2JZSHhZVVZObjAzeWZQbW1VZ3VWNk04Y19VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC8zNjVkOTgtNWQ0OC00M2I4LTk3OTQt YjFlYTA4N2I5NTI1LzEvbHVhRzlpeXVHUDhuRlpwODVhaXF0c3AwejJjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC8zNjVkOTgtNWQ0OC00M2I4LTk3OTQtYjFlYTA4N2I5NTI1 LzEvd2JZSHhZVVZObjAzeWZQbW1VZ3VWNk04Y19VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwm7uMA0G CSqGSIb3DQEBCwUAA4IBAQAkQ2tBdF+qZVNKJA4ETmQaDg4tXKIRRHcTiA9JqM0Q sIi0YRWTNSuoEFsYOPeAeRhlwRFOY3GHven40b8OeaNFvbFxirJg33RT+ISz70dk JGhVpuKG8TNKjWhCmGGdX46FjFE0BzIijZc1hJHRo7V2MvjLTOyGYb3vYQEobpTL G6V2Xx1TawvoehYJLsLY4Kw+FhHRPvN+kVXdK4Ajng17jeCjA5Z5VZKVqX0P62hS WVOzVbLVlQItOgM/42c77XDC3H9CwAup5+3HgFW+qXNVKG05D/8wS/0/ebI3kBVP aAqFrvu47nMycs0Ej34lxQ8MHbqwZRSmInp3JQR6CLmx -----END CERTIFICATE-----Generated at Mon Feb 9 21:23:36 2026 by rpki-client