This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/dc76ff-2b35-42be-ab56-5df2de08b695/1/L4LHXK0GX3W-TkIYyV116VIxXoI.roa File: L4LHXK0GX3W-TkIYyV116VIxXoI.roa (raw, json) Hash identifier: fcLNxKQ8yWrXIL5Wmszwu+qvpRuxr2NO+f0WZHV/MxY= Subject key identifier: 2F:82:C7:5C:AD:06:5F:75:BE:4E:42:18:C9:5D:75:E9:52:31:5E:82 Certificate issuer: /CN=37d6706a2e270cb486bb47243463ccbbf9f4d5ca Certificate serial: 019B7B35FB293B14BE345B56EDAE0C760BCD Authority key identifier: 37:D6:70:6A:2E:27:0C:B4:86:BB:47:24:34:63:CC:BB:F9:F4:D5:CA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N9Zwai4nDLSGu0ckNGPMu_n01co.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/dc76ff-2b35-42be-ab56-5df2de08b695/1/L4LHXK0GX3W-TkIYyV116VIxXoI.roa Signing time: Thu 01 Jan 2026 20:18:13 +0000 ROA not before: Thu 01 Jan 2026 20:18:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 185.206.120.0/24 maxlen: 24 2a10:a200::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/dc76ff-2b35-42be-ab56-5df2de08b695/1/N9Zwai4nDLSGu0ckNGPMu_n01co.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/dc76ff-2b35-42be-ab56-5df2de08b695/1/N9Zwai4nDLSGu0ckNGPMu_n01co.mft rsync://rpki.ripe.net/repository/DEFAULT/N9Zwai4nDLSGu0ckNGPMu_n01co.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 08:01:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:fb:29:3b:14:be:34:5b:56:ed:ae:0c:76:0b:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=37d6706a2e270cb486bb47243463ccbbf9f4d5ca Validity Not Before: Jan 1 20:18:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2f82c75cad065f75be4e4218c95d75e952315e82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:f7:da:b4:d5:b4:2f:c4:33:47:75:95:d8:19: 4d:19:40:53:89:81:b7:ff:f5:94:9b:3e:e5:2f:f7: 8e:48:c0:90:1f:3a:01:d4:01:e5:35:cc:6a:34:45: 9e:6b:8b:3c:63:f2:4e:cc:36:ca:76:11:b7:b1:e4: 67:00:20:22:75:e0:91:ef:f5:20:db:fd:ed:69:22: 4d:73:7b:d6:1c:aa:29:70:ef:82:18:c6:6e:48:f5: b2:73:4e:3a:e7:56:0c:67:0a:41:8a:23:1a:fe:e2: 56:28:40:cf:d3:a7:a3:b9:25:db:6f:76:b2:9b:2d: 92:05:9f:0c:bd:12:25:92:69:8e:f8:f7:38:b6:01: 55:ba:db:f7:8e:04:58:6d:67:96:6e:6d:a1:20:2f: 6c:65:53:35:27:91:51:c6:da:3a:28:42:9e:7e:48: 48:0f:04:7a:05:c3:30:fa:49:5c:f8:b5:72:c6:21: 4e:1a:88:ae:91:72:37:a6:ed:86:da:e6:95:86:20: 7f:f4:76:b9:ef:ba:79:41:ce:8c:c9:e8:22:96:34: ea:96:77:bb:32:6e:28:97:58:db:14:20:06:83:46: d8:37:54:86:94:78:cc:6b:0e:37:5f:36:4a:d4:9c: da:27:1d:df:ec:c0:18:96:35:74:00:b1:ad:f9:dc: 17:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:82:C7:5C:AD:06:5F:75:BE:4E:42:18:C9:5D:75:E9:52:31:5E:82 X509v3 Authority Key Identifier: keyid:37:D6:70:6A:2E:27:0C:B4:86:BB:47:24:34:63:CC:BB:F9:F4:D5:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N9Zwai4nDLSGu0ckNGPMu_n01co.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/dc76ff-2b35-42be-ab56-5df2de08b695/1/L4LHXK0GX3W-TkIYyV116VIxXoI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/dc76ff-2b35-42be-ab56-5df2de08b695/1/N9Zwai4nDLSGu0ckNGPMu_n01co.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.206.120.0/24 IPv6: 2a10:a200::/48 Signature Algorithm: sha256WithRSAEncryption 4b:1b:d6:b7:3c:91:92:0f:26:da:17:80:4b:c0:17:66:4f:dc: 7e:53:74:a8:58:06:79:61:3c:c8:9d:a4:8d:f9:ad:48:e2:81: 9e:30:fa:2b:6f:a0:e6:09:7d:f7:03:dd:d5:5e:f3:d6:e4:93: a0:af:cf:00:75:10:e0:6c:a0:3e:d0:a9:66:84:73:e3:32:64: 70:94:1c:94:92:07:21:a7:99:d6:a8:89:eb:a4:25:3e:03:3e: db:6d:f1:15:dd:8d:2d:08:f8:03:bf:ec:a3:29:31:4c:94:46: 32:f2:07:3a:09:b3:c5:08:a8:cc:be:c7:1b:ff:b1:0c:10:7d: e7:89:4d:5b:0e:ff:36:55:65:f3:bd:41:14:80:a2:d6:fe:58: 23:92:98:3a:21:33:03:17:eb:23:2c:9f:06:79:69:77:84:a7: d9:a0:30:a0:2f:49:0f:f7:52:10:98:df:1e:e8:f5:ff:e0:9b: d3:2c:20:a2:61:ca:17:40:4f:94:14:5d:3f:04:44:6b:b9:36: 30:bd:74:66:74:4d:f6:f0:c5:ed:63:2c:2b:a1:cc:31:40:4b: 1f:56:d3:09:46:c6:78:90:d8:fa:1e:1d:5a:21:8b:bf:2d:61: d5:cf:07:c3:a9:db:b7:4d:be:c9:f7:eb:42:90:bc:79:69:20: 2f:95:c8:1b -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt7NfspOxS+NFtW7a4MdgvNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3ZDY3MDZhMmUyNzBjYjQ4NmJiNDcyNDM0NjNjY2JiZjlm NGQ1Y2EwHhcNMjYwMTAxMjAxODEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZjgyYzc1Y2FkMDY1Zjc1YmU0ZTQyMThjOTVkNzVlOTUyMzE1ZTgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuvfatNW0L8QzR3WV2BlNGUBTiYG3 //WUmz7lL/eOSMCQHzoB1AHlNcxqNEWea4s8Y/JOzDbKdhG3seRnACAideCR7/Ug 2/3taSJNc3vWHKopcO+CGMZuSPWyc04651YMZwpBiiMa/uJWKEDP06ejuSXbb3ay my2SBZ8MvRIlkmmO+Pc4tgFVutv3jgRYbWeWbm2hIC9sZVM1J5FRxto6KEKefkhI DwR6BcMw+klc+LVyxiFOGoiukXI3pu2G2uaVhiB/9Ha577p5Qc6MyegiljTqlne7 Mm4ol1jbFCAGg0bYN1SGlHjMaw43XzZK1JzaJx3f7MAYljV0ALGt+dwX3wIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFC+Cx1ytBl91vk5CGMlddelSMV6CMB8GA1UdIwQY MBaAFDfWcGouJwy0hrtHJDRjzLv59NXKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTjlad2FpNG5ETFNHdTBja05HUE11X24wMWNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9kYzc2ZmYtMmIzNS00MmJlLWFiNTYt NWRmMmRlMDhiNjk1LzEvTDRMSFhLMEdYM1ctVGtJWXlWMTE2Vkl4WG9JLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi9kYzc2ZmYtMmIzNS00MmJlLWFiNTYtNWRmMmRlMDhiNjk1 LzEvTjlad2FpNG5ETFNHdTBja05HUE11X24wMWNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAuc54MA8E AgACMAkDBwAqEKIAAAAwDQYJKoZIhvcNAQELBQADggEBAEsb1rc8kZIPJtoXgEvA F2ZP3H5TdKhYBnlhPMidpI35rUjigZ4w+itvoOYJffcD3dVe89bkk6CvzwB1EOBs oD7QqWaEc+MyZHCUHJSSByGnmdaoieukJT4DPttt8RXdjS0I+AO/7KMpMUyURjLy BzoJs8UIqMy+xxv/sQwQfeeJTVsO/zZVZfO9QRSAotb+WCOSmDohMwMX6yMsnwZ5 aXeEp9mgMKAvSQ/3UhCY3x7o9f/gm9MsIKJhyhdAT5QUXT8ERGu5NjC9dGZ0Tfbw xe1jLCuhzDFASx9W0wlGxniQ2PoeHVohi78tYdXPB8Op27dNvsn360KQvHlpIC+V yBs= -----END CERTIFICATE-----Generated at Fri Jan 9 17:06:05 2026 by rpki-client