This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/dc2c04-59f6-4f22-b7bd-fe671c1d5150/1/l4SU9ie-aQFv3GaUgFkeH-xOaF8.roa File: l4SU9ie-aQFv3GaUgFkeH-xOaF8.roa (raw, json) Hash identifier: PgarAlr827N/WHoU/7cGPWG2WCkz6pZoVQE96jRVrBU= Subject key identifier: 97:84:94:F6:27:BE:69:01:6F:DC:66:94:80:59:1E:1F:EC:4E:68:5F Certificate issuer: /CN=23d34dd3d211e5c2ea7bd2f527a13e1e996820ec Certificate serial: 019B78A21CEBCF27E87731D667BB168BA982 Authority key identifier: 23:D3:4D:D3:D2:11:E5:C2:EA:7B:D2:F5:27:A1:3E:1E:99:68:20:EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I9NN09IR5cLqe9L1J6E-HploIOw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/dc2c04-59f6-4f22-b7bd-fe671c1d5150/1/l4SU9ie-aQFv3GaUgFkeH-xOaF8.roa Signing time: Thu 01 Jan 2026 08:17:28 +0000 ROA not before: Thu 01 Jan 2026 08:17:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205509 IP address blocks: 194.9.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/dc2c04-59f6-4f22-b7bd-fe671c1d5150/1/I9NN09IR5cLqe9L1J6E-HploIOw.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/dc2c04-59f6-4f22-b7bd-fe671c1d5150/1/I9NN09IR5cLqe9L1J6E-HploIOw.mft rsync://rpki.ripe.net/repository/DEFAULT/I9NN09IR5cLqe9L1J6E-HploIOw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 17:00:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:1c:eb:cf:27:e8:77:31:d6:67:bb:16:8b:a9:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23d34dd3d211e5c2ea7bd2f527a13e1e996820ec Validity Not Before: Jan 1 08:17:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=978494f627be69016fdc669480591e1fec4e685f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:19:6e:f9:e7:f5:73:5c:03:5c:23:a0:d3:eb: 09:96:2d:a9:61:f4:8c:52:bf:4b:b6:84:e4:a6:b0: 43:c1:49:3b:d4:88:35:c4:f1:48:c3:0e:a6:54:2b: 8e:e3:0c:11:30:80:5a:b8:6e:9f:db:fd:75:13:ea: d1:fe:5c:36:c7:86:39:69:4a:a1:c8:0e:eb:23:60: 81:b1:07:64:dd:d3:8b:e9:a7:24:e3:d8:56:9e:b0: 23:5d:ba:c3:c8:18:2a:99:4f:87:d5:85:fa:b8:2b: d4:b9:cc:9f:7a:3f:0b:d3:e9:67:72:73:c7:5c:da: 47:b0:02:58:22:eb:10:71:d9:b3:75:e2:38:11:a5: de:44:09:3c:7b:50:5a:60:03:02:2b:06:ab:ac:cd: 99:3b:e8:4b:c4:27:b5:3c:21:19:a6:ce:26:fc:d8: bf:22:c6:7e:50:81:47:e3:8d:54:23:b7:df:6c:11: 41:93:92:79:80:c5:e4:cb:21:c0:65:3a:8b:f9:67: dd:f8:fa:29:cb:de:e6:27:b5:60:00:30:01:3a:02: 86:14:d0:cc:2f:d0:fd:9d:60:65:1c:05:5e:35:0c: 58:9c:b5:fe:6d:05:b5:55:26:9c:26:ef:60:6b:b0: 09:1e:db:4d:a1:6f:e9:37:45:b3:3d:94:d4:93:c7: 60:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:84:94:F6:27:BE:69:01:6F:DC:66:94:80:59:1E:1F:EC:4E:68:5F X509v3 Authority Key Identifier: keyid:23:D3:4D:D3:D2:11:E5:C2:EA:7B:D2:F5:27:A1:3E:1E:99:68:20:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I9NN09IR5cLqe9L1J6E-HploIOw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/dc2c04-59f6-4f22-b7bd-fe671c1d5150/1/l4SU9ie-aQFv3GaUgFkeH-xOaF8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/dc2c04-59f6-4f22-b7bd-fe671c1d5150/1/I9NN09IR5cLqe9L1J6E-HploIOw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.9.29.0/24 Signature Algorithm: sha256WithRSAEncryption d4:23:e0:35:a5:0a:84:9c:97:81:74:09:95:f2:ae:cc:a6:38: 8b:d2:f3:11:30:8e:75:31:47:b1:6a:40:18:de:44:6d:fe:99: e2:fe:cf:2e:fe:19:1e:d2:af:f6:92:89:6b:0c:15:98:b0:8c: 0f:6d:5b:87:cd:90:c3:1f:ce:ac:24:60:eb:e9:c4:08:a8:28: e9:aa:38:42:fa:b4:74:a4:bc:af:9e:a6:58:bc:8b:3c:27:b4: c7:6c:8b:66:f7:e3:50:8b:64:76:4e:1c:01:b0:26:ed:2f:74: 9f:b5:83:ec:3b:e7:14:c6:20:5f:3c:36:14:e2:f8:d7:68:81: 57:46:6c:49:87:e4:0b:31:91:29:09:e9:2e:f2:50:92:58:c5: ad:e8:cc:17:65:6e:b0:3a:bf:b9:6b:5d:bd:6c:4f:f5:a9:a9: 7a:92:51:3b:44:02:a2:69:d6:a1:18:8a:01:0c:80:62:79:56: ab:53:38:65:9f:13:f4:f8:7e:4b:fc:a3:f0:07:8c:86:47:69: 4f:28:6b:dc:a0:f9:c6:50:2b:9f:cf:aa:aa:47:24:8f:5d:ba: 6d:54:69:a5:eb:96:76:4a:39:ac:83:04:b1:f9:c4:3a:a6:fb: 4c:cb:31:92:52:ad:93:55:e2:95:86:8c:ba:e1:5b:fe:c0:8f: 9a:4f:bb:86 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4ohzrzyfodzHWZ7sWi6mCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzZDM0ZGQzZDIxMWU1YzJlYTdiZDJmNTI3YTEzZTFlOTk2 ODIwZWMwHhcNMjYwMTAxMDgxNzI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5Nzg0OTRmNjI3YmU2OTAxNmZkYzY2OTQ4MDU5MWUxZmVjNGU2ODVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvhlu+ef1c1wDXCOg0+sJli2pYfSM Ur9LtoTkprBDwUk71Ig1xPFIww6mVCuO4wwRMIBauG6f2/11E+rR/lw2x4Y5aUqh yA7rI2CBsQdk3dOL6ack49hWnrAjXbrDyBgqmU+H1YX6uCvUucyfej8L0+lncnPH XNpHsAJYIusQcdmzdeI4EaXeRAk8e1BaYAMCKwarrM2ZO+hLxCe1PCEZps4m/Ni/ IsZ+UIFH441UI7ffbBFBk5J5gMXkyyHAZTqL+Wfd+Popy97mJ7VgADABOgKGFNDM L9D9nWBlHAVeNQxYnLX+bQW1VSacJu9ga7AJHttNoW/pN0WzPZTUk8dg5wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJeElPYnvmkBb9xmlIBZHh/sTmhfMB8GA1UdIwQY MBaAFCPTTdPSEeXC6nvS9SehPh6ZaCDsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSTlOTjA5SVI1Y0xxZTlMMUo2RS1IcGxvSU93LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9kYzJjMDQtNTlmNi00ZjIyLWI3YmQt ZmU2NzFjMWQ1MTUwLzEvbDRTVTlpZS1hUUZ2M0dhVWdGa2VILXhPYUY4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC9kYzJjMDQtNTlmNi00ZjIyLWI3YmQtZmU2NzFjMWQ1MTUw LzEvSTlOTjA5SVI1Y0xxZTlMMUo2RS1IcGxvSU93LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwgkdMA0G CSqGSIb3DQEBCwUAA4IBAQDUI+A1pQqEnJeBdAmV8q7MpjiL0vMRMI51MUexakAY 3kRt/pni/s8u/hke0q/2kolrDBWYsIwPbVuHzZDDH86sJGDr6cQIqCjpqjhC+rR0 pLyvnqZYvIs8J7THbItm9+NQi2R2ThwBsCbtL3SftYPsO+cUxiBfPDYU4vjXaIFX RmxJh+QLMZEpCeku8lCSWMWt6MwXZW6wOr+5a129bE/1qal6klE7RAKiadahGIoB DIBieVarUzhlnxP0+H5L/KPwB4yGR2lPKGvcoPnGUCufz6qqRySPXbptVGml65Z2 SjmsgwSx+cQ6pvtMyzGSUq2TVeKVhoy64Vv+wI+aT7uG -----END CERTIFICATE-----Generated at Tue Feb 10 02:31:06 2026 by rpki-client