This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/lIxr1Y2g6tW4Go6HwrrCY4g1GhU.roa File: lIxr1Y2g6tW4Go6HwrrCY4g1GhU.roa (raw, json) Hash identifier: qocUAMn7M/1zyYPDlsc7BcT51RuGObx2kW5wM3NnVyE= Subject key identifier: 94:8C:6B:D5:8D:A0:EA:D5:B8:1A:8E:87:C2:BA:C2:63:88:35:1A:15 Certificate issuer: /CN=d3d56f07be184cba52f6fdc049e8114d2616c32a Certificate serial: 019B7B369988DFD4620097CF0B3943F4BA11 Authority key identifier: D3:D5:6F:07:BE:18:4C:BA:52:F6:FD:C0:49:E8:11:4D:26:16:C3:2A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/09VvB74YTLpS9v3ASegRTSYWwyo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/lIxr1Y2g6tW4Go6HwrrCY4g1GhU.roa Signing time: Thu 01 Jan 2026 20:18:54 +0000 ROA not before: Thu 01 Jan 2026 20:18:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206185 IP address blocks: 194.126.164.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/09VvB74YTLpS9v3ASegRTSYWwyo.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/09VvB74YTLpS9v3ASegRTSYWwyo.mft rsync://rpki.ripe.net/repository/DEFAULT/09VvB74YTLpS9v3ASegRTSYWwyo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 07 Feb 2026 11:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:99:88:df:d4:62:00:97:cf:0b:39:43:f4:ba:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3d56f07be184cba52f6fdc049e8114d2616c32a Validity Not Before: Jan 1 20:18:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=948c6bd58da0ead5b81a8e87c2bac26388351a15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:be:f9:04:35:2b:c5:77:44:7a:49:b8:f1:13: a7:15:07:da:5d:52:4e:02:bc:14:a1:22:dc:9c:e9: 8c:e2:1b:a4:c0:bc:a1:db:09:19:19:ea:fd:0c:2c: a5:60:f7:64:db:48:4c:1d:e8:e4:2f:ac:31:87:ac: f0:51:1d:f5:35:56:d6:72:5d:f4:3e:62:a4:af:62: 01:17:fa:19:1c:1f:ab:d4:9b:5a:1f:56:f9:1f:f1: 19:d8:da:87:96:be:27:67:e0:9b:3b:da:b8:81:3b: 5e:40:d9:1c:ee:41:fa:a0:d4:3c:0d:e1:03:05:36: 20:99:8c:9d:5a:11:79:81:28:83:80:59:5b:25:be: 1d:33:36:a4:df:34:82:0b:e1:02:ee:47:ef:e4:b8: 50:d2:fa:47:18:8c:39:93:a0:87:d5:a7:88:ba:8b: 6d:80:1e:a3:24:7e:14:e2:66:c3:2a:cd:65:6b:5c: 50:6f:d2:15:1f:73:7a:6b:a8:55:c6:94:d5:0c:b1: c6:07:4b:29:0b:31:df:fe:64:40:ad:7a:01:b4:7f: f1:30:da:1c:63:aa:f9:5f:e4:fe:3e:6c:3a:0c:2c: 32:6d:e9:e3:f1:b9:f7:26:b1:eb:29:60:35:82:73: 98:32:bc:f6:35:60:9e:57:d7:04:f6:49:24:89:90: 03:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:8C:6B:D5:8D:A0:EA:D5:B8:1A:8E:87:C2:BA:C2:63:88:35:1A:15 X509v3 Authority Key Identifier: keyid:D3:D5:6F:07:BE:18:4C:BA:52:F6:FD:C0:49:E8:11:4D:26:16:C3:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/09VvB74YTLpS9v3ASegRTSYWwyo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/lIxr1Y2g6tW4Go6HwrrCY4g1GhU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/09VvB74YTLpS9v3ASegRTSYWwyo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.126.164.0/22 Signature Algorithm: sha256WithRSAEncryption 28:38:c7:ec:35:06:eb:d2:c2:53:e0:43:73:8d:65:c1:14:87: 97:d1:90:4a:b7:4c:74:46:51:1d:51:10:ca:e7:25:e1:be:b6: 38:ca:ed:30:4d:eb:54:74:b9:4f:1a:64:52:20:87:d9:9e:a2: d8:1e:c1:63:84:2d:d7:2a:41:98:d1:45:ef:ec:fc:1e:89:cb: 37:e0:58:fe:a7:ef:8a:f6:dc:cf:5e:c9:6d:f0:dd:a5:a9:71: 3f:e7:fb:18:2a:36:94:70:17:90:40:8f:d2:2b:f3:d1:e4:42: ac:cc:bd:9c:ef:08:83:89:1a:c3:98:39:dc:a6:a2:63:4b:0e: a6:5e:4d:26:b0:d8:4a:94:aa:b5:1d:00:78:b1:7a:22:7c:19: 4c:c8:ca:a8:ee:7f:f9:75:a8:81:18:8f:9c:dd:a8:c4:f9:ca: f5:ba:d3:bf:f2:31:f4:78:9d:41:1b:2b:2a:12:63:4c:59:05: 16:32:39:66:0b:8c:f8:7f:c3:8d:dd:7c:e2:df:b1:a4:b5:03: 69:6f:47:7c:23:53:bf:a2:26:b3:ff:20:c3:3b:3b:d2:fc:49: ad:d7:c4:4a:d7:bb:65:7b:da:04:dc:55:f2:d1:a6:ac:81:64: 7d:eb:40:02:53:5e:44:f8:68:71:48:3a:4b:0f:26:0e:ee:ea: 0d:e8:16:81 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NpmI39RiAJfPCzlD9LoRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzZDU2ZjA3YmUxODRjYmE1MmY2ZmRjMDQ5ZTgxMTRkMjYx NmMzMmEwHhcNMjYwMTAxMjAxODU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NDhjNmJkNThkYTBlYWQ1YjgxYThlODdjMmJhYzI2Mzg4MzUxYTE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyb75BDUrxXdEekm48ROnFQfaXVJO ArwUoSLcnOmM4hukwLyh2wkZGer9DCylYPdk20hMHejkL6wxh6zwUR31NVbWcl30 PmKkr2IBF/oZHB+r1JtaH1b5H/EZ2NqHlr4nZ+CbO9q4gTteQNkc7kH6oNQ8DeED BTYgmYydWhF5gSiDgFlbJb4dMzak3zSCC+EC7kfv5LhQ0vpHGIw5k6CH1aeIuott gB6jJH4U4mbDKs1la1xQb9IVH3N6a6hVxpTVDLHGB0spCzHf/mRArXoBtH/xMNoc Y6r5X+T+Pmw6DCwybenj8bn3JrHrKWA1gnOYMrz2NWCeV9cE9kkkiZADIwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJSMa9WNoOrVuBqOh8K6wmOINRoVMB8GA1UdIwQY MBaAFNPVbwe+GEy6Uvb9wEnoEU0mFsMqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMDlWdkI3NFlUTHBTOXYzQVNlZ1JUU1lXd3lvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC81Nzg2YWItMDY3ZS00NDBjLWIyNzYt MWIwNmQxYzcwNGMxLzEvbEl4cjFZMmc2dFc0R282SHdyckNZNGcxR2hVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC81Nzg2YWItMDY3ZS00NDBjLWIyNzYtMWIwNmQxYzcwNGMx LzEvMDlWdkI3NFlUTHBTOXYzQVNlZ1JUU1lXd3lvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwn6kMA0G CSqGSIb3DQEBCwUAA4IBAQAoOMfsNQbr0sJT4ENzjWXBFIeX0ZBKt0x0RlEdURDK 5yXhvrY4yu0wTetUdLlPGmRSIIfZnqLYHsFjhC3XKkGY0UXv7Pweics34Fj+p++K 9tzPXslt8N2lqXE/5/sYKjaUcBeQQI/SK/PR5EKszL2c7wiDiRrDmDncpqJjSw6m Xk0msNhKlKq1HQB4sXoifBlMyMqo7n/5daiBGI+c3ajE+cr1utO/8jH0eJ1BGysq EmNMWQUWMjlmC4z4f8ON3Xzi37GktQNpb0d8I1O/oiaz/yDDOzvS/Emt18RK17tl e9oE3FXy0aasgWR960ACU15E+GhxSDpLDyYO7uoN6BaB -----END CERTIFICATE-----Generated at Fri Feb 6 20:12:36 2026 by rpki-client