This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/14e141-caa5-41fb-945b-ffb16ebd111f/1/L2JBwXn0_M5VePo6q3NCFb8xLnM.roa File: L2JBwXn0_M5VePo6q3NCFb8xLnM.roa (raw, json) Hash identifier: UZ+pSOfmFCdt9QWA2qepdtq6OMmO8+hZ5Y2AO5lO+NE= Subject key identifier: 2F:62:41:C1:79:F4:FC:CE:55:78:FA:3A:AB:73:42:15:BF:31:2E:73 Certificate issuer: /CN=fca396f1c344b079c5d2f27bfb313377febb2ec7 Certificate serial: 019B7759230FEBA0E30B9C6F31C142E446C9 Authority key identifier: FC:A3:96:F1:C3:44:B0:79:C5:D2:F2:7B:FB:31:33:77:FE:BB:2E:C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_KOW8cNEsHnF0vJ7-zEzd_67Lsc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/14e141-caa5-41fb-945b-ffb16ebd111f/1/L2JBwXn0_M5VePo6q3NCFb8xLnM.roa Signing time: Thu 01 Jan 2026 02:18:08 +0000 ROA not before: Thu 01 Jan 2026 02:18:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15404 IP address blocks: 194.117.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/14e141-caa5-41fb-945b-ffb16ebd111f/1/_KOW8cNEsHnF0vJ7-zEzd_67Lsc.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/14e141-caa5-41fb-945b-ffb16ebd111f/1/_KOW8cNEsHnF0vJ7-zEzd_67Lsc.mft rsync://rpki.ripe.net/repository/DEFAULT/_KOW8cNEsHnF0vJ7-zEzd_67Lsc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 08:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:23:0f:eb:a0:e3:0b:9c:6f:31:c1:42:e4:46:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fca396f1c344b079c5d2f27bfb313377febb2ec7 Validity Not Before: Jan 1 02:18:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2f6241c179f4fcce5578fa3aab734215bf312e73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:8a:46:2b:03:f1:9b:ef:c6:5f:ca:01:69:1d: cd:e7:44:c5:08:cd:ae:d5:b1:9a:0e:6b:e8:fc:ad: 8c:f9:f2:77:fa:de:62:13:75:d8:49:a5:ac:ad:b6: f8:97:29:2b:be:aa:58:e8:aa:a5:3a:27:a5:b2:a5: 29:58:24:95:04:b1:8a:3c:1f:90:89:74:65:63:71: 8d:6c:61:87:c5:81:e1:42:43:b9:5f:e4:af:2a:38: bf:be:78:6f:0b:20:26:88:8d:9a:69:b8:06:65:48: c9:cd:01:7d:df:3c:71:87:18:68:b1:e8:a0:18:bc: 41:bb:bb:f0:2f:59:5c:ec:84:f6:94:1d:68:de:63: 96:7f:79:9f:58:4e:92:e7:a8:d0:f9:e7:c3:54:8f: 22:f9:59:89:62:b5:08:08:5f:2a:10:28:37:ae:a6: 2c:35:d2:1c:ca:f1:39:35:f3:c7:cf:c8:8f:72:db: c8:5e:28:33:dd:95:3f:73:76:16:d2:5c:9c:e7:fe: ae:59:17:a0:ca:7b:f0:ac:be:be:05:95:6e:95:e6: af:4f:f5:b5:a9:36:4f:39:29:2b:72:43:55:6d:c0: 12:62:57:7d:ad:72:4b:f1:dd:3a:24:22:34:b9:88: e0:c4:41:6e:94:52:6f:63:e7:cc:65:46:97:ba:ae: 0b:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:62:41:C1:79:F4:FC:CE:55:78:FA:3A:AB:73:42:15:BF:31:2E:73 X509v3 Authority Key Identifier: keyid:FC:A3:96:F1:C3:44:B0:79:C5:D2:F2:7B:FB:31:33:77:FE:BB:2E:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_KOW8cNEsHnF0vJ7-zEzd_67Lsc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/14e141-caa5-41fb-945b-ffb16ebd111f/1/L2JBwXn0_M5VePo6q3NCFb8xLnM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/14e141-caa5-41fb-945b-ffb16ebd111f/1/_KOW8cNEsHnF0vJ7-zEzd_67Lsc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.117.239.0/24 Signature Algorithm: sha256WithRSAEncryption 4e:91:b5:b4:14:39:78:8e:64:d9:e2:f5:76:30:3f:9a:c9:9e: d2:aa:cd:fc:69:8e:00:ba:76:86:6b:21:3b:f1:8f:28:a9:ae: dd:2b:85:b9:c2:4b:87:33:23:92:c9:b0:f8:91:50:2d:61:92: 52:73:24:66:02:88:51:d2:26:e5:6f:71:de:36:44:98:41:a6: da:a6:34:50:bc:db:5f:b9:64:8f:db:fc:d3:0d:ba:d3:33:05: 37:06:63:08:bd:b4:d9:83:29:8f:84:99:57:fe:a2:93:ec:78: a2:44:b2:c6:44:24:51:65:c4:d2:83:34:61:1d:6b:68:5a:aa: ab:ed:29:b1:19:27:22:72:60:58:60:f6:61:25:19:52:a0:4c: 52:69:4e:bb:b2:1a:ed:d5:76:26:c1:f5:fd:b1:e7:a4:1b:0b: d3:de:90:a9:d8:4d:8b:b2:21:82:0f:ce:2b:17:18:20:03:0a: bb:01:99:55:87:d5:c0:60:63:51:ea:6e:a7:ad:86:da:0a:16: 52:4f:ef:f3:27:26:4a:59:24:da:a1:10:78:4f:e5:4c:fc:e3: 84:62:3a:77:0c:f5:27:3c:e7:59:11:dd:d1:e1:62:87:04:4c: 7b:7f:5d:44:e9:bd:28:f6:c4:26:8a:35:c2:67:31:c8:8c:26: 7c:37:14:fd -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WSMP66DjC5xvMcFC5EbJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZjYTM5NmYxYzM0NGIwNzljNWQyZjI3YmZiMzEzMzc3ZmVi YjJlYzcwHhcNMjYwMTAxMDIxODA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZjYyNDFjMTc5ZjRmY2NlNTU3OGZhM2FhYjczNDIxNWJmMzEyZTczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4opGKwPxm+/GX8oBaR3N50TFCM2u 1bGaDmvo/K2M+fJ3+t5iE3XYSaWsrbb4lykrvqpY6KqlOielsqUpWCSVBLGKPB+Q iXRlY3GNbGGHxYHhQkO5X+SvKji/vnhvCyAmiI2aabgGZUjJzQF93zxxhxhoseig GLxBu7vwL1lc7IT2lB1o3mOWf3mfWE6S56jQ+efDVI8i+VmJYrUICF8qECg3rqYs NdIcyvE5NfPHz8iPctvIXigz3ZU/c3YW0lyc5/6uWRegynvwrL6+BZVuleavT/W1 qTZPOSkrckNVbcASYld9rXJL8d06JCI0uYjgxEFulFJvY+fMZUaXuq4LSwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFC9iQcF59PzOVXj6OqtzQhW/MS5zMB8GA1UdIwQY MBaAFPyjlvHDRLB5xdLye/sxM3f+uy7HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX0tPVzhjTkVzSG5GMHZKNy16RXpkXzY3THNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8xNGUxNDEtY2FhNS00MWZiLTk0NWIt ZmZiMTZlYmQxMTFmLzEvTDJKQndYbjBfTTVWZVBvNnEzTkNGYjh4TG5NLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS8xNGUxNDEtY2FhNS00MWZiLTk0NWItZmZiMTZlYmQxMTFm LzEvX0tPVzhjTkVzSG5GMHZKNy16RXpkXzY3THNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwnXvMA0G CSqGSIb3DQEBCwUAA4IBAQBOkbW0FDl4jmTZ4vV2MD+ayZ7Sqs38aY4AunaGayE7 8Y8oqa7dK4W5wkuHMyOSybD4kVAtYZJScyRmAohR0iblb3HeNkSYQabapjRQvNtf uWSP2/zTDbrTMwU3BmMIvbTZgymPhJlX/qKT7HiiRLLGRCRRZcTSgzRhHWtoWqqr 7SmxGScicmBYYPZhJRlSoExSaU67shrt1XYmwfX9seekGwvT3pCp2E2LsiGCD84r FxggAwq7AZlVh9XAYGNR6m6nrYbaChZST+/zJyZKWSTaoRB4T+VM/OOEYjp3DPUn POdZEd3R4WKHBEx7f11E6b0o9sQmijXCZzHIjCZ8NxT9 -----END CERTIFICATE-----Generated at Wed Jan 21 14:30:37 2026 by rpki-client