This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/2426f1-8f2a-49ff-8643-193ad5c79b83/1/lI4f8rZF79xIoZ-qqIUt5k5Mwhs.roa File: lI4f8rZF79xIoZ-qqIUt5k5Mwhs.roa (raw, json) Hash identifier: 2bfMHhj3u9ZNahoNS0bMF6oNHC5FK6pJFUzUS206Uk0= Subject key identifier: 94:8E:1F:F2:B6:45:EF:DC:48:A1:9F:AA:A8:85:2D:E6:4E:4C:C2:1B Certificate issuer: /CN=96e82ab648b8b3f8857569c39af9544adfc17c01 Certificate serial: 019B77C70A8FF5DD61AF65D562DD516741B1 Authority key identifier: 96:E8:2A:B6:48:B8:B3:F8:85:75:69:C3:9A:F9:54:4A:DF:C1:7C:01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lugqtki4s_iFdWnDmvlUSt_BfAE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/2426f1-8f2a-49ff-8643-193ad5c79b83/1/lI4f8rZF79xIoZ-qqIUt5k5Mwhs.roa Signing time: Thu 01 Jan 2026 04:18:11 +0000 ROA not before: Thu 01 Jan 2026 04:18:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9103 IP address blocks: 212.109.128.0/20 maxlen: 20 2a00:6c40::/33 maxlen: 33 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/2426f1-8f2a-49ff-8643-193ad5c79b83/1/lugqtki4s_iFdWnDmvlUSt_BfAE.crl rsync://rpki.ripe.net/repository/DEFAULT/f7/2426f1-8f2a-49ff-8643-193ad5c79b83/1/lugqtki4s_iFdWnDmvlUSt_BfAE.mft rsync://rpki.ripe.net/repository/DEFAULT/lugqtki4s_iFdWnDmvlUSt_BfAE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:0a:8f:f5:dd:61:af:65:d5:62:dd:51:67:41:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96e82ab648b8b3f8857569c39af9544adfc17c01 Validity Not Before: Jan 1 04:18:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=948e1ff2b645efdc48a19faaa8852de64e4cc21b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:2c:71:5a:f1:57:ea:3f:31:c9:05:e0:e3:e2: 84:4d:7e:f9:ec:19:1d:83:46:bd:4b:2d:0e:96:a2: c9:52:a0:37:4c:52:8e:bb:7a:e9:91:f4:67:f2:26: 69:ea:4e:62:45:a4:5c:66:f2:ee:1c:14:05:27:af: 46:37:c8:d0:94:9a:4e:98:d0:f5:9b:90:8b:e4:81: fb:32:f6:6e:8e:63:50:64:59:be:cd:b2:1a:10:50: 7e:f7:5b:d9:08:ef:e0:40:58:c0:cf:0c:a3:76:b1: 2c:a3:be:81:df:91:e4:60:2f:cd:a1:4d:b9:69:6f: 31:21:4e:17:2d:35:c3:5c:4d:aa:e0:14:d6:ed:3d: 50:11:27:10:3d:ee:82:b8:56:4c:e1:33:ec:b4:1a: bb:17:fe:76:2a:85:c1:2f:5b:31:63:fd:32:f6:a2: 1d:6f:93:87:0c:4b:0e:66:6c:5c:80:a4:73:07:54: f7:3a:8e:bc:3b:f0:e6:e5:a6:cd:7a:30:eb:6c:f9: 53:16:97:9d:ad:fb:7a:f1:6c:68:10:2c:ef:f7:f3: 7d:d1:b8:42:79:82:ff:bf:6e:8e:3c:b4:a9:39:fd: 71:3f:9e:c1:1f:26:28:aa:8d:03:ae:1b:17:59:18: 3a:ef:e6:be:72:29:37:df:6f:79:98:74:ae:15:d0: e7:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:8E:1F:F2:B6:45:EF:DC:48:A1:9F:AA:A8:85:2D:E6:4E:4C:C2:1B X509v3 Authority Key Identifier: keyid:96:E8:2A:B6:48:B8:B3:F8:85:75:69:C3:9A:F9:54:4A:DF:C1:7C:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lugqtki4s_iFdWnDmvlUSt_BfAE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/2426f1-8f2a-49ff-8643-193ad5c79b83/1/lI4f8rZF79xIoZ-qqIUt5k5Mwhs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/2426f1-8f2a-49ff-8643-193ad5c79b83/1/lugqtki4s_iFdWnDmvlUSt_BfAE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.109.128.0/20 IPv6: 2a00:6c40::/33 Signature Algorithm: sha256WithRSAEncryption 95:da:9d:b0:be:24:2f:2e:c8:aa:4c:72:e8:06:ae:a0:f4:14: a0:f5:10:41:e2:d3:9e:cf:9e:7b:01:37:c7:0d:63:c9:42:24: 92:ef:e9:a2:1c:1b:d9:d6:cc:85:3b:5d:3d:76:12:38:eb:40: 5f:4d:72:42:1c:d2:72:57:1a:3c:35:89:9f:2b:f2:87:14:9a: ba:e5:78:3b:50:64:0a:71:44:76:8c:8f:e0:93:50:f3:81:37: af:44:30:f2:01:15:b2:c1:b2:fd:9a:9e:e3:71:00:fe:c0:99: da:46:10:13:61:eb:c9:b2:7f:14:92:b9:1f:be:26:d3:8b:93: 3b:6c:7d:34:84:87:fb:77:b6:e0:ea:b0:0a:85:3a:d1:e3:71: 26:ce:30:ce:af:97:d7:80:1e:46:cb:4a:48:7b:ca:0a:46:bb: 70:08:11:52:d7:fa:3a:4b:7a:10:9d:48:0e:a7:d9:ea:fa:6a: 73:1e:b3:d7:d4:46:ac:ca:d1:88:a1:90:bd:32:10:10:bf:25: 69:ef:e7:a9:20:2c:ce:d6:ef:e3:69:d8:7c:43:9f:67:01:c2: de:82:6a:47:12:d7:32:d2:7e:3a:a4:2a:be:31:de:dd:94:2d: 2f:6a:fe:3e:76:d1:52:85:1f:de:23:c3:23:f4:9f:df:c5:64: fc:0e:41:ae -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgISAZt3xwqP9d1hr2XVYt1RZ0GxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2ZTgyYWI2NDhiOGIzZjg4NTc1NjljMzlhZjk1NDRhZGZj MTdjMDEwHhcNMjYwMTAxMDQxODExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NDhlMWZmMmI2NDVlZmRjNDhhMTlmYWFhODg1MmRlNjRlNGNjMjFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsSxxWvFX6j8xyQXg4+KETX757Bkd g0a9Sy0OlqLJUqA3TFKOu3rpkfRn8iZp6k5iRaRcZvLuHBQFJ69GN8jQlJpOmND1 m5CL5IH7MvZujmNQZFm+zbIaEFB+91vZCO/gQFjAzwyjdrEso76B35HkYC/NoU25 aW8xIU4XLTXDXE2q4BTW7T1QEScQPe6CuFZM4TPstBq7F/52KoXBL1sxY/0y9qId b5OHDEsOZmxcgKRzB1T3Oo68O/Dm5abNejDrbPlTFpedrft68WxoECzv9/N90bhC eYL/v26OPLSpOf1xP57BHyYoqo0DrhsXWRg67+a+cik33295mHSuFdDnbQIDAQAB o4ICGTCCAhUwHQYDVR0OBBYEFJSOH/K2Re/cSKGfqqiFLeZOTMIbMB8GA1UdIwQY MBaAFJboKrZIuLP4hXVpw5r5VErfwXwBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbHVncXRraTRzX2lGZFduRG12bFVTdF9CZkFFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy8yNDI2ZjEtOGYyYS00OWZmLTg2NDMt MTkzYWQ1Yzc5YjgzLzEvbEk0ZjhyWkY3OXhJb1otcXFJVXQ1azVNd2hzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNy8yNDI2ZjEtOGYyYS00OWZmLTg2NDMtMTkzYWQ1Yzc5Yjgz LzEvbHVncXRraTRzX2lGZFduRG12bFVTdF9CZkFFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQE1G2AMA4E AgACMAgDBgcqAGxAADANBgkqhkiG9w0BAQsFAAOCAQEAldqdsL4kLy7Iqkxy6Aau oPQUoPUQQeLTns+eewE3xw1jyUIkku/pohwb2dbMhTtdPXYSOOtAX01yQhzSclca PDWJnyvyhxSauuV4O1BkCnFEdoyP4JNQ84E3r0Qw8gEVssGy/Zqe43EA/sCZ2kYQ E2HrybJ/FJK5H74m04uTO2x9NISH+3e24OqwCoU60eNxJs4wzq+X14AeRstKSHvK Cka7cAgRUtf6Okt6EJ1IDqfZ6vpqcx6z19RGrMrRiKGQvTIQEL8lae/nqSAsztbv 42nYfEOfZwHC3oJqRxLXMtJ+OqQqvjHe3ZQtL2r+PnbRUoUf3iPDI/Sf38Vk/A5B rg== -----END CERTIFICATE-----Generated at Tue Feb 10 01:44:02 2026 by rpki-client