This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/La7Jh76EiPYCV5eo8xgU0nP3YlQ.roa File: La7Jh76EiPYCV5eo8xgU0nP3YlQ.roa (raw, json) Hash identifier: Sk+26mQp44CesopVavPBMuDsKSD9uC5kKo23nohB3uA= Subject key identifier: 2D:AE:C9:87:BE:84:88:F6:02:57:97:A8:F3:18:14:D2:73:F7:62:54 Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf Certificate serial: 019B7C13A1B1B2FAC698E34E1C97233745CA Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/La7Jh76EiPYCV5eo8xgU0nP3YlQ.roa Signing time: Fri 02 Jan 2026 00:20:19 +0000 ROA not before: Fri 02 Jan 2026 00:20:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216107 IP address blocks: 185.234.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 19:40:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:a1:b1:b2:fa:c6:98:e3:4e:1c:97:23:37:45:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf Validity Not Before: Jan 2 00:20:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2daec987be8488f6025797a8f31814d273f76254 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:9b:a9:b2:8a:f7:ec:10:e7:1f:95:b2:c1:01: 74:b0:4f:9c:a4:78:3c:85:4e:9a:15:ed:ca:77:49: 29:c0:eb:00:ec:c2:bf:55:50:cc:75:06:c9:65:46: c3:aa:a6:d1:ae:8d:e4:d5:58:6f:16:db:31:5c:3e: 4a:5f:e8:fd:bc:c9:b6:ea:3f:1c:2f:ed:9a:5b:49: 38:8b:99:be:2c:0b:35:a4:dd:30:3c:50:f4:6e:fc: cb:d6:05:6e:1b:3e:7d:d6:82:cd:c2:03:5f:e9:a0: 80:15:75:83:a6:d5:cd:32:de:54:64:b2:97:73:fa: 2f:df:4e:51:c3:6d:6e:60:9c:7c:b7:f2:cb:11:ce: 64:6d:74:58:c9:bd:9d:86:85:0c:01:eb:68:3f:5f: 10:99:ab:e3:9c:fd:ca:db:ac:51:5d:51:b2:0b:bc: 5d:9d:55:39:ee:76:c3:c4:dc:9b:36:ce:de:b6:f2: 06:4b:c8:70:83:9b:80:18:15:d9:b5:67:7f:f3:e1: ec:33:50:d0:01:92:dc:38:f6:8d:72:5b:aa:66:07: 26:4d:b6:a3:8a:58:d5:7e:25:57:05:a2:2c:60:90: 15:c1:fb:79:36:6f:08:42:b8:a0:88:5a:f3:58:5f: 6e:88:aa:da:15:67:b1:f3:ce:71:0d:57:6c:34:0d: 50:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:AE:C9:87:BE:84:88:F6:02:57:97:A8:F3:18:14:D2:73:F7:62:54 X509v3 Authority Key Identifier: keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/La7Jh76EiPYCV5eo8xgU0nP3YlQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.234.20.0/24 Signature Algorithm: sha256WithRSAEncryption 33:73:63:a7:ee:ea:ef:9d:d3:83:2c:0a:0c:6e:8b:64:38:11: 50:cf:16:46:d6:5b:d0:94:ad:53:b0:37:cd:fd:2a:c1:b8:ec: 59:9a:94:54:e3:a8:21:c2:b7:d8:68:eb:be:6f:fb:bb:25:50: 83:3a:4b:e2:f2:f5:40:e4:a1:28:4d:f1:fd:6c:23:c8:64:3f: 57:29:7d:ff:8f:01:28:7c:0b:7c:2b:de:52:3d:c5:34:ae:99: 6c:28:4d:bb:f6:8b:9e:b9:10:86:ac:d2:69:7b:7d:16:62:ae: 22:b5:a1:36:bd:b5:60:29:d3:cd:09:a7:b1:60:bd:15:a2:12: 6b:29:cf:93:7d:ed:c0:d1:38:0b:d4:05:67:2a:5d:16:65:c5: b6:3e:8a:9c:c6:bd:1b:60:4f:af:ef:9e:da:e5:7e:a7:39:26: 28:4e:8a:1b:4d:1c:bc:81:63:c8:92:e2:a1:ab:e2:c0:df:55: 1c:cf:2e:8c:b9:f9:df:6b:28:55:12:d8:a5:cf:d6:50:ce:7e: 12:99:a6:70:10:b9:a2:e4:3e:53:8e:94:5b:78:d0:4e:0f:af: 41:17:d6:25:99:8a:64:07:10:f6:1b:2d:73:52:fd:ea:8e:96: 63:15:e2:48:d4:22:43:74:dc:e7:91:9d:c3:02:a6:10:c9:d8: 35:8a:84:c1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8E6GxsvrGmONOHJcjN0XKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx MTRjYWYwHhcNMjYwMTAyMDAyMDE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZGFlYzk4N2JlODQ4OGY2MDI1Nzk3YThmMzE4MTRkMjczZjc2MjU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoZupsor37BDnH5WywQF0sE+cpHg8 hU6aFe3Kd0kpwOsA7MK/VVDMdQbJZUbDqqbRro3k1VhvFtsxXD5KX+j9vMm26j8c L+2aW0k4i5m+LAs1pN0wPFD0bvzL1gVuGz591oLNwgNf6aCAFXWDptXNMt5UZLKX c/ov305Rw21uYJx8t/LLEc5kbXRYyb2dhoUMAetoP18QmavjnP3K26xRXVGyC7xd nVU57nbDxNybNs7etvIGS8hwg5uAGBXZtWd/8+HsM1DQAZLcOPaNcluqZgcmTbaj iljVfiVXBaIsYJAVwft5Nm8IQrigiFrzWF9uiKraFWex885xDVdsNA1Q2wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFC2uyYe+hIj2AleXqPMYFNJz92JUMB8GA1UdIwQY MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt YjQzNDJiYTkxYWJjLzEvTGE3Smg3NkVpUFlDVjVlbzh4Z1UwblAzWWxRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAueoUMA0G CSqGSIb3DQEBCwUAA4IBAQAzc2On7urvndODLAoMbotkOBFQzxZG1lvQlK1TsDfN /SrBuOxZmpRU46ghwrfYaOu+b/u7JVCDOkvi8vVA5KEoTfH9bCPIZD9XKX3/jwEo fAt8K95SPcU0rplsKE279oueuRCGrNJpe30WYq4itaE2vbVgKdPNCaexYL0VohJr Kc+Tfe3A0TgL1AVnKl0WZcW2Poqcxr0bYE+v757a5X6nOSYoToobTRy8gWPIkuKh q+LA31Uczy6MufnfayhVEtilz9ZQzn4SmaZwELmi5D5TjpRbeNBOD69BF9YlmYpk BxD2Gy1zUv3qjpZjFeJI1CJDdNznkZ3DAqYQydg1ioTB -----END CERTIFICATE-----Generated at Fri Jan 2 23:53:24 2026 by rpki-client