This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/l4rcFgc3CjyrI9KrcS2jjR14BH0.roa File: l4rcFgc3CjyrI9KrcS2jjR14BH0.roa (raw, json) Hash identifier: PJtnob7yOMI5k7D8JCs1IdsL1ZqcpSi3bvSxPr9KbEI= Subject key identifier: 97:8A:DC:16:07:37:0A:3C:AB:23:D2:AB:71:2D:A3:8D:1D:78:04:7D Certificate issuer: /CN=f324581e4368825d5e13f4f2a0d6ff8e484c95e6 Certificate serial: 019B78A322990F1F6ECC6F6B237930F7AFA8 Authority key identifier: F3:24:58:1E:43:68:82:5D:5E:13:F4:F2:A0:D6:FF:8E:48:4C:95:E6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8yRYHkNogl1eE_TyoNb_jkhMleY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/l4rcFgc3CjyrI9KrcS2jjR14BH0.roa Signing time: Thu 01 Jan 2026 08:18:35 +0000 ROA not before: Thu 01 Jan 2026 08:18:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 58057 IP address blocks: 109.205.193.0/24 maxlen: 24 2a01:fb01::/32 maxlen: 32 2a01:fb02::/34 maxlen: 34 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/8yRYHkNogl1eE_TyoNb_jkhMleY.crl rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/8yRYHkNogl1eE_TyoNb_jkhMleY.mft rsync://rpki.ripe.net/repository/DEFAULT/8yRYHkNogl1eE_TyoNb_jkhMleY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 08:02:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:22:99:0f:1f:6e:cc:6f:6b:23:79:30:f7:af:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f324581e4368825d5e13f4f2a0d6ff8e484c95e6 Validity Not Before: Jan 1 08:18:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=978adc1607370a3cab23d2ab712da38d1d78047d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:c1:6c:76:1b:8f:d0:27:78:23:34:51:e2:2f: 0b:50:98:78:1c:d6:78:5d:97:e7:07:22:24:25:ba: 9d:b6:1d:93:ff:71:dc:52:8e:1d:ab:66:1d:15:68: c1:9e:b5:a4:06:89:20:17:4a:08:8f:fb:b6:8f:02: f2:61:77:60:28:1c:9d:6a:b7:3f:80:72:6f:c1:c4: 5b:d4:b6:31:65:a7:4a:2e:d3:cf:6a:ed:ae:2c:40: 87:43:03:d1:95:2c:4c:ed:d9:ca:01:aa:21:8c:13: 11:23:0b:9c:85:ff:ff:e2:a2:cf:8e:af:6e:6d:45: dd:7b:e9:47:47:9f:21:33:75:e4:79:7b:29:a1:2a: cc:de:08:97:0a:46:bc:54:0d:aa:76:9d:79:35:43: fc:44:f8:8f:d9:f8:93:2f:80:47:03:1c:90:b3:e0: 24:52:2a:1d:e7:eb:48:a9:c8:da:4f:2a:0b:16:4c: 0b:c4:ab:e3:fb:c3:0f:ed:92:1f:13:07:55:1d:f5: c9:74:d4:28:56:29:21:37:ee:0e:d2:c7:32:0d:5f: 0e:26:33:32:2c:de:5a:29:e0:eb:a8:b7:f7:b8:a8: e3:c7:ea:12:c6:c5:49:7a:84:73:11:2a:d0:c0:bf: cd:4a:4a:96:c2:ae:be:8e:92:9e:91:78:10:70:08: 14:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:8A:DC:16:07:37:0A:3C:AB:23:D2:AB:71:2D:A3:8D:1D:78:04:7D X509v3 Authority Key Identifier: keyid:F3:24:58:1E:43:68:82:5D:5E:13:F4:F2:A0:D6:FF:8E:48:4C:95:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8yRYHkNogl1eE_TyoNb_jkhMleY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/l4rcFgc3CjyrI9KrcS2jjR14BH0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/8yRYHkNogl1eE_TyoNb_jkhMleY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.205.193.0/24 IPv6: 2a01:fb01::-2a01:fb02:3fff:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 5f:2e:3d:04:ca:76:88:e7:b8:aa:d5:fb:01:3d:43:01:4c:52: 7a:d6:b5:8e:8c:69:4d:ec:2b:2c:f2:a6:2a:55:39:af:9d:00: f8:c9:b7:08:5e:11:da:29:1c:c9:6d:63:a0:c1:e8:4d:b4:ac: 46:e4:b7:42:17:cb:96:ab:a2:aa:0a:b4:84:08:ed:2d:cd:48: e6:9d:2b:35:b6:a2:d0:eb:f2:ae:2f:c3:8d:8f:de:0a:18:b7: 19:e4:a0:c1:79:db:20:e2:01:74:07:64:43:b4:5a:e4:ed:fe: 8e:dc:41:b9:8e:a1:e6:c0:ac:7d:32:18:98:ba:36:10:0b:ba: de:03:1e:0a:7a:3b:ea:24:dc:a8:d4:48:e6:46:07:b9:b0:50: 74:d4:f2:c2:9b:0a:ff:7e:5f:75:c9:1a:15:fc:c7:5d:09:55: e4:6b:56:89:bd:d0:99:3f:ac:2e:be:e8:61:d4:b8:9a:c1:7d: 63:9b:2a:9e:f2:aa:63:4c:01:2a:ee:64:25:a3:f7:9b:ed:28: bd:5c:1f:63:9e:35:9d:d6:8a:3b:9e:24:cf:50:25:ea:ed:7b: c3:fc:20:bd:93:c3:ea:f9:4d:96:a8:32:f8:3a:18:28:56:56: f8:00:f4:f2:dc:f6:0b:52:07:01:3e:18:7f:e1:05:07:4d:be: dd:66:3c:57 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt4oyKZDx9uzG9rI3kw96+oMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYzMjQ1ODFlNDM2ODgyNWQ1ZTEzZjRmMmEwZDZmZjhlNDg0 Yzk1ZTYwHhcNMjYwMTAxMDgxODM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NzhhZGMxNjA3MzcwYTNjYWIyM2QyYWI3MTJkYTM4ZDFkNzgwNDdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmMFsdhuP0Cd4IzRR4i8LUJh4HNZ4 XZfnByIkJbqdth2T/3HcUo4dq2YdFWjBnrWkBokgF0oIj/u2jwLyYXdgKBydarc/ gHJvwcRb1LYxZadKLtPPau2uLECHQwPRlSxM7dnKAaohjBMRIwuchf//4qLPjq9u bUXde+lHR58hM3XkeXspoSrM3giXCka8VA2qdp15NUP8RPiP2fiTL4BHAxyQs+Ak Uiod5+tIqcjaTyoLFkwLxKvj+8MP7ZIfEwdVHfXJdNQoVikhN+4O0scyDV8OJjMy LN5aKeDrqLf3uKjjx+oSxsVJeoRzESrQwL/NSkqWwq6+jpKekXgQcAgUcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJeK3BYHNwo8qyPSq3Eto40deAR9MB8GA1UdIwQY MBaAFPMkWB5DaIJdXhP08qDW/45ITJXmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOHlSWUhrTm9nbDFlRV9UeW9OYl9qa2hNbGVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS82YjkxYWItOTlkYi00NjQ4LWIxNTMt NmUyZDk3Y2ExNWZmLzEvbDRyY0ZnYzNDanlySTlLcmNTMmpqUjE0QkgwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYS82YjkxYWItOTlkYi00NjQ4LWIxNTMtNmUyZDk3Y2ExNWZm LzEvOHlSWUhrTm9nbDFlRV9UeW9OYl9qa2hNbGVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDgGCCsGAQUFBwEHAQH/BCkwJzAMBAIAATAGAwQAbc3BMBcE AgACMBEwDwMFACoB+wEDBgYqAfsCADANBgkqhkiG9w0BAQsFAAOCAQEAXy49BMp2 iOe4qtX7AT1DAUxSeta1joxpTewrLPKmKlU5r50A+Mm3CF4R2ikcyW1joMHoTbSs RuS3QhfLlquiqgq0hAjtLc1I5p0rNbai0Ovyri/DjY/eChi3GeSgwXnbIOIBdAdk Q7Ra5O3+jtxBuY6h5sCsfTIYmLo2EAu63gMeCno76iTcqNRI5kYHubBQdNTywpsK /35fdckaFfzHXQlV5GtWib3QmT+sLr7oYdS4msF9Y5sqnvKqY0wBKu5kJaP3m+0o vVwfY541ndaKO54kz1Al6u17w/wgvZPD6vlNlqgy+DoYKFZW+AD08tz2C1IHAT4Y f+EFB02+3WY8Vw== -----END CERTIFICATE-----Generated at Mon Jan 19 14:43:30 2026 by rpki-client