This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/LsQpr4jR6UNzulN8mVl3gCD3vNw.roa File: LsQpr4jR6UNzulN8mVl3gCD3vNw.roa (raw, json) Hash identifier: n0eNLqhK8AP34V/cEhfJjvQ6T1kJKY04UuXwXq2zIAM= Subject key identifier: 2E:C4:29:AF:88:D1:E9:43:73:BA:53:7C:99:59:77:80:20:F7:BC:DC Certificate issuer: /CN=5a6f9295521df30a158f506ba7cb873ab9529dc3 Certificate serial: 019B7CECFFCC062D35FD1826480732EB1BA3 Authority key identifier: 5A:6F:92:95:52:1D:F3:0A:15:8F:50:6B:A7:CB:87:3A:B9:52:9D:C3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wm-SlVId8woVj1Brp8uHOrlSncM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/LsQpr4jR6UNzulN8mVl3gCD3vNw.roa Signing time: Fri 02 Jan 2026 04:17:45 +0000 ROA not before: Fri 02 Jan 2026 04:17:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15690 IP address blocks: 194.177.194.0/23 maxlen: 24 195.251.202.0/23 maxlen: 23 195.251.204.0/24 maxlen: 24 2001:648:2011::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/Wm-SlVId8woVj1Brp8uHOrlSncM.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/Wm-SlVId8woVj1Brp8uHOrlSncM.mft rsync://rpki.ripe.net/repository/DEFAULT/Wm-SlVId8woVj1Brp8uHOrlSncM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 06:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ec:ff:cc:06:2d:35:fd:18:26:48:07:32:eb:1b:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a6f9295521df30a158f506ba7cb873ab9529dc3 Validity Not Before: Jan 2 04:17:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2ec429af88d1e94373ba537c9959778020f7bcdc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:e9:15:33:2f:02:90:db:a9:89:e6:d9:b9:37: 60:76:34:e2:0c:ec:8e:07:a0:65:76:0c:fc:82:db: b5:45:0d:81:70:4a:ea:e1:7d:f1:d3:a8:58:da:6d: f9:54:aa:f2:0b:1b:99:e6:f8:82:84:75:1f:39:d4: fc:15:66:80:d5:25:56:bc:e2:97:b9:96:ed:f3:31: ce:53:a1:be:cd:e9:ad:6f:d7:e4:e5:84:d9:cb:94: 4e:d3:7e:97:1f:0e:7d:36:1e:f3:49:1b:64:ac:c0: 77:cd:28:cd:f1:bf:ba:a8:d6:27:a7:91:07:06:3f: aa:37:f2:a8:a0:68:d9:e6:a2:fe:62:18:23:b3:db: 1e:76:28:19:20:f3:59:65:7d:fd:7f:e2:6f:3e:74: a1:7d:b4:09:24:ca:f6:05:57:bb:35:b6:4d:d1:d2: 82:6c:cd:6b:1d:d3:ca:c5:cd:0f:36:f4:11:88:28: fc:8d:6e:d6:55:e2:1b:4d:9e:c4:31:81:fa:6b:4c: 9d:5e:94:3d:78:60:f4:62:cc:fb:83:b8:e9:64:9f: 50:e2:48:6b:cc:33:97:96:61:28:50:9f:67:44:7d: b2:e6:40:12:8f:28:09:a8:7b:90:ab:65:80:13:28: 5e:81:44:2d:ca:72:cb:39:be:89:50:7a:01:6f:78: aa:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:C4:29:AF:88:D1:E9:43:73:BA:53:7C:99:59:77:80:20:F7:BC:DC X509v3 Authority Key Identifier: keyid:5A:6F:92:95:52:1D:F3:0A:15:8F:50:6B:A7:CB:87:3A:B9:52:9D:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wm-SlVId8woVj1Brp8uHOrlSncM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/LsQpr4jR6UNzulN8mVl3gCD3vNw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/Wm-SlVId8woVj1Brp8uHOrlSncM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.177.194.0/23 195.251.202.0-195.251.204.255 IPv6: 2001:648:2011::/48 Signature Algorithm: sha256WithRSAEncryption 6d:9e:5a:45:9f:ac:76:d4:74:80:1d:06:8f:5d:03:e5:ff:42: fa:e2:42:69:f9:85:e6:1e:25:6d:1e:48:81:e6:63:fe:69:f2: e1:17:be:31:a2:30:ca:5d:2b:59:0f:4b:3b:05:fd:0a:e2:cc: 53:79:7c:07:e0:25:43:19:ec:b7:23:9e:43:d8:3d:bf:88:8a: 9f:fa:bf:db:67:e8:3c:a5:7b:a5:d8:64:40:65:32:9a:97:4e: 62:5f:2c:96:0d:06:58:37:29:b8:87:5b:8c:ee:34:a3:38:b9: 9e:31:78:5b:c7:a6:a9:c6:4f:90:4a:67:ab:f9:2b:77:de:c2: c4:cb:d0:e6:f7:00:d5:20:49:b2:ac:6c:f0:3d:7a:f1:e2:9f: bd:e4:a3:1b:e2:7e:df:79:82:b7:d4:bc:05:78:be:cb:e6:6a: 20:e7:cb:ca:bf:f5:e8:8a:09:d2:af:6e:85:5c:fb:f2:6b:37: 2b:7a:26:7e:95:ad:01:6e:bb:57:39:62:ec:64:52:02:a2:6a: 73:69:53:79:ce:5c:0b:f0:a6:ff:03:6a:ce:80:aa:4c:ab:b0: c4:11:58:dc:93:b0:87:95:fb:33:42:8a:4e:21:8c:db:94:cc: 87:a1:d7:d4:1a:96:47:8a:00:c2:dd:88:a4:cf:af:ba:b9:e7: 3e:ed:3b:63 -----BEGIN CERTIFICATE----- MIIFHDCCBASgAwIBAgISAZt87P/MBi01/RgmSAcy6xujMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhNmY5Mjk1NTIxZGYzMGExNThmNTA2YmE3Y2I4NzNhYjk1 MjlkYzMwHhcNMjYwMTAyMDQxNzQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZWM0MjlhZjg4ZDFlOTQzNzNiYTUzN2M5OTU5Nzc4MDIwZjdiY2RjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs+kVMy8CkNupiebZuTdgdjTiDOyO B6Bldgz8gtu1RQ2BcErq4X3x06hY2m35VKryCxuZ5viChHUfOdT8FWaA1SVWvOKX uZbt8zHOU6G+zemtb9fk5YTZy5RO036XHw59Nh7zSRtkrMB3zSjN8b+6qNYnp5EH Bj+qN/KooGjZ5qL+Yhgjs9sedigZIPNZZX39f+JvPnShfbQJJMr2BVe7NbZN0dKC bM1rHdPKxc0PNvQRiCj8jW7WVeIbTZ7EMYH6a0ydXpQ9eGD0Ysz7g7jpZJ9Q4khr zDOXlmEoUJ9nRH2y5kASjygJqHuQq2WAEyhegUQtynLLOb6JUHoBb3iqEwIDAQAB o4ICKDCCAiQwHQYDVR0OBBYEFC7EKa+I0elDc7pTfJlZd4Ag97zcMB8GA1UdIwQY MBaAFFpvkpVSHfMKFY9Qa6fLhzq5Up3DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV20tU2xWSWQ4d29WajFCcnA4dUhPcmxTbmNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9hOWY5M2ItYmUzMS00NWNmLWFhN2Ut YWFhNDU1M2QyYWJkLzEvTHNRcHI0alI2VU56dWxOOG1WbDNnQ0Qzdk53LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9hOWY5M2ItYmUzMS00NWNmLWFhN2UtYWFhNDU1M2QyYWJk LzEvV20tU2xWSWQ4d29WajFCcnA4dUhPcmxTbmNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD4GCCsGAQUFBwEHAQH/BC8wLTAaBAIAATAUAwQBwrHCMAwD BAHD+8oDBADD+8wwDwQCAAIwCQMHACABBkggETANBgkqhkiG9w0BAQsFAAOCAQEA bZ5aRZ+sdtR0gB0Gj10D5f9C+uJCafmF5h4lbR5IgeZj/mny4Re+MaIwyl0rWQ9L OwX9CuLMU3l8B+AlQxnstyOeQ9g9v4iKn/q/22foPKV7pdhkQGUympdOYl8slg0G WDcpuIdbjO40ozi5njF4W8emqcZPkEpnq/krd97CxMvQ5vcA1SBJsqxs8D168eKf veSjG+J+33mCt9S8BXi+y+ZqIOfLyr/16IoJ0q9uhVz78ms3K3omfpWtAW67Vzli 7GRSAqJqc2lTec5cC/Cm/wNqzoCqTKuwxBFY3JOwh5X7M0KKTiGM25TMh6HX1BqW R4oAwt2IpM+vurnnPu07Yw== -----END CERTIFICATE-----Generated at Mon Feb 2 09:38:58 2026 by rpki-client