This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/e84920-f5cb-46d7-bc99-fe53210b57b6/1/Rf4ua2gShCgNnsbPUQ6ubuJBV1k.roa File: Rf4ua2gShCgNnsbPUQ6ubuJBV1k.roa (raw, json) Hash identifier: tSFC9dWk5W60HWYLlM+PiN1UjypysKUpyAViK3s11Fw= Subject key identifier: 45:FE:2E:6B:68:12:84:28:0D:9E:C6:CF:51:0E:AE:6E:E2:41:57:59 Certificate issuer: /CN=961b9df745c32df27df33ebcfd536f19e13474fe Certificate serial: 019B7F156D41122B3FD06AC6961F1CD91558 Authority key identifier: 96:1B:9D:F7:45:C3:2D:F2:7D:F3:3E:BC:FD:53:6F:19:E1:34:74:FE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lhud90XDLfJ98z68_VNvGeE0dP4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/e84920-f5cb-46d7-bc99-fe53210b57b6/1/Rf4ua2gShCgNnsbPUQ6ubuJBV1k.roa Signing time: Fri 02 Jan 2026 14:21:09 +0000 ROA not before: Fri 02 Jan 2026 14:21:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 193.100.64.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/e84920-f5cb-46d7-bc99-fe53210b57b6/1/lhud90XDLfJ98z68_VNvGeE0dP4.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/e84920-f5cb-46d7-bc99-fe53210b57b6/1/lhud90XDLfJ98z68_VNvGeE0dP4.mft rsync://rpki.ripe.net/repository/DEFAULT/lhud90XDLfJ98z68_VNvGeE0dP4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 Jan 2026 13:16:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:6d:41:12:2b:3f:d0:6a:c6:96:1f:1c:d9:15:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=961b9df745c32df27df33ebcfd536f19e13474fe Validity Not Before: Jan 2 14:21:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=45fe2e6b681284280d9ec6cf510eae6ee2415759 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:c3:16:70:33:94:39:05:0e:d3:91:8b:94:71: 67:7b:fb:8f:df:88:c8:d2:33:3f:21:c3:a4:ae:6e: ce:95:22:34:66:a0:66:0c:41:f8:b5:2e:97:6c:91: 6d:b5:7d:be:7b:28:83:5d:ae:f3:85:37:a2:be:93: 33:fb:c2:e7:c8:3f:6c:2e:4e:39:28:5e:62:4b:be: 53:54:60:f1:5c:7a:96:33:09:7b:b7:19:f0:1d:6c: 88:dc:76:a2:8a:8d:7b:ed:0d:ba:9e:90:41:79:1e: df:b9:38:9f:1b:a7:cf:72:27:a1:8e:90:5a:7f:a4: 67:15:cc:9a:d9:b3:ca:31:1a:35:fa:ec:f4:fb:49: 45:ef:a2:e0:be:e8:06:f1:bd:10:79:4d:39:3e:87: 19:ff:3c:c6:de:e7:e4:97:ac:6f:f9:2a:a5:11:2b: 51:d4:1c:3a:0c:84:ad:ce:35:e3:2b:01:c5:1b:c1: e1:d6:9b:db:28:70:57:6c:87:3e:90:4e:ca:c8:ac: 5d:6c:b2:8e:80:85:21:91:19:6b:26:23:e1:f4:44: ff:e2:f5:da:95:41:92:08:9b:74:da:6e:bf:0e:e0: b1:f6:d4:ed:87:e6:8f:54:30:ae:54:a2:c1:87:c2: 1c:a8:1f:a5:c3:be:73:b4:24:8a:1a:1c:16:e3:75: 3c:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:FE:2E:6B:68:12:84:28:0D:9E:C6:CF:51:0E:AE:6E:E2:41:57:59 X509v3 Authority Key Identifier: keyid:96:1B:9D:F7:45:C3:2D:F2:7D:F3:3E:BC:FD:53:6F:19:E1:34:74:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lhud90XDLfJ98z68_VNvGeE0dP4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/e84920-f5cb-46d7-bc99-fe53210b57b6/1/Rf4ua2gShCgNnsbPUQ6ubuJBV1k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/e84920-f5cb-46d7-bc99-fe53210b57b6/1/lhud90XDLfJ98z68_VNvGeE0dP4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.100.64.0/24 Signature Algorithm: sha256WithRSAEncryption 97:4a:fa:98:0e:58:8b:a2:58:80:7d:4f:cd:61:e7:53:38:eb: ab:55:92:6c:ad:01:b9:79:bb:f9:0a:bc:25:8e:49:09:65:1b: 6f:2d:99:24:ba:50:0c:5d:b9:fe:af:f7:ed:42:fe:8d:76:9d: d2:12:08:a7:cd:6a:15:c6:08:78:d2:0c:7e:db:6c:8d:37:60: 49:38:17:fc:e4:76:f3:69:ff:15:dd:8b:c7:1b:ab:34:92:71: 8f:d0:a1:d6:c3:a6:83:30:76:ff:60:32:7d:b8:41:70:a4:8c: fd:5c:0c:ac:b8:13:2b:43:e4:c3:ce:36:6e:ed:4d:1b:b7:37: 27:5c:5f:18:cc:9f:fb:4b:1a:2c:a5:77:b8:62:ad:57:15:b4: ac:8b:f3:9a:a3:bf:e5:a2:67:05:2e:de:b2:41:ab:86:10:c6: 4b:90:63:c6:be:8a:1f:45:a0:5c:fa:c9:2d:b6:a8:3d:21:6c: 82:70:d2:47:86:33:6d:4f:30:d3:66:a4:26:4b:dc:99:c9:c4: 7b:25:bf:70:64:3c:95:5e:33:ac:d6:5e:54:c5:69:7a:fa:a7: 93:78:34:ea:ca:90:6e:f9:df:b0:f6:da:90:18:87:9b:f0:4a: 29:08:d0:85:0a:e9:84:5e:92:ae:4c:72:b0:80:8d:c6:41:88: 88:ac:96:6e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FW1BEis/0GrGlh8c2RVYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2MWI5ZGY3NDVjMzJkZjI3ZGYzM2ViY2ZkNTM2ZjE5ZTEz NDc0ZmUwHhcNMjYwMTAyMTQyMTA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NWZlMmU2YjY4MTI4NDI4MGQ5ZWM2Y2Y1MTBlYWU2ZWUyNDE1NzU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAycMWcDOUOQUO05GLlHFne/uP34jI 0jM/IcOkrm7OlSI0ZqBmDEH4tS6XbJFttX2+eyiDXa7zhTeivpMz+8LnyD9sLk45 KF5iS75TVGDxXHqWMwl7txnwHWyI3Haiio177Q26npBBeR7fuTifG6fPciehjpBa f6RnFcya2bPKMRo1+uz0+0lF76LgvugG8b0QeU05PocZ/zzG3ufkl6xv+SqlEStR 1Bw6DIStzjXjKwHFG8Hh1pvbKHBXbIc+kE7KyKxdbLKOgIUhkRlrJiPh9ET/4vXa lUGSCJt02m6/DuCx9tTth+aPVDCuVKLBh8IcqB+lw75ztCSKGhwW43U8VwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEX+LmtoEoQoDZ7Gz1EOrm7iQVdZMB8GA1UdIwQY MBaAFJYbnfdFwy3yffM+vP1TbxnhNHT+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbGh1ZDkwWERMZko5OHo2OF9WTnZHZUUwZFA0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9lODQ5MjAtZjVjYi00NmQ3LWJjOTkt ZmU1MzIxMGI1N2I2LzEvUmY0dWEyZ1NoQ2dObnNiUFVRNnVidUpCVjFrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy9lODQ5MjAtZjVjYi00NmQ3LWJjOTktZmU1MzIxMGI1N2I2 LzEvbGh1ZDkwWERMZko5OHo2OF9WTnZHZUUwZFA0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwWRAMA0G CSqGSIb3DQEBCwUAA4IBAQCXSvqYDliLoliAfU/NYedTOOurVZJsrQG5ebv5Crwl jkkJZRtvLZkkulAMXbn+r/ftQv6Ndp3SEginzWoVxgh40gx+22yNN2BJOBf85Hbz af8V3YvHG6s0knGP0KHWw6aDMHb/YDJ9uEFwpIz9XAysuBMrQ+TDzjZu7U0btzcn XF8YzJ/7SxospXe4Yq1XFbSsi/Oao7/lomcFLt6yQauGEMZLkGPGvoofRaBc+skt tqg9IWyCcNJHhjNtTzDTZqQmS9yZycR7Jb9wZDyVXjOs1l5UxWl6+qeTeDTqypBu +d+w9tqQGIeb8EopCNCFCumEXpKuTHKwgI3GQYiIrJZu -----END CERTIFICATE-----Generated at Sat Jan 10 22:32:57 2026 by rpki-client