This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/LRsAkvslcwyvjR-GyMdM6597IZA.roa File: LRsAkvslcwyvjR-GyMdM6597IZA.roa (raw, json) Hash identifier: /5MkBlONah8XkH1G2dWhrVOK6eZR0nrPNy2NU1Yt4so= Subject key identifier: 2D:1B:00:92:FB:25:73:0C:AF:8D:1F:86:C8:C7:4C:EB:9F:7B:21:90 Certificate issuer: /CN=0dd441c3ffae829842249e944b03851081f4d9e0 Certificate serial: 019B79ECDEE7F952C11282FB8EC198D7F101 Authority key identifier: 0D:D4:41:C3:FF:AE:82:98:42:24:9E:94:4B:03:85:10:81:F4:D9:E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DdRBw_-ugphCJJ6USwOFEIH02eA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/LRsAkvslcwyvjR-GyMdM6597IZA.roa Signing time: Thu 01 Jan 2026 14:18:45 +0000 ROA not before: Thu 01 Jan 2026 14:18:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6977 IP address blocks: 91.235.168.0/24 maxlen: 24 193.23.60.0/24 maxlen: 24 2001:67c:2d78::/48 maxlen: 48 2a09:8400::/29 maxlen: 48 2a0f:75c0::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/DdRBw_-ugphCJJ6USwOFEIH02eA.crl rsync://rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/DdRBw_-ugphCJJ6USwOFEIH02eA.mft rsync://rpki.ripe.net/repository/DEFAULT/DdRBw_-ugphCJJ6USwOFEIH02eA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 14:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:de:e7:f9:52:c1:12:82:fb:8e:c1:98:d7:f1:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dd441c3ffae829842249e944b03851081f4d9e0 Validity Not Before: Jan 1 14:18:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2d1b0092fb25730caf8d1f86c8c74ceb9f7b2190 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:35:8e:9e:32:08:88:05:31:ae:46:5b:ce:b7: 97:11:4e:4e:66:70:05:a5:00:5e:23:19:3c:e0:a5: d1:d4:fd:ab:b4:cb:b8:f8:3a:82:76:82:72:d3:94: a8:34:96:0b:77:9b:75:e6:e9:13:94:97:ef:e7:4f: 7f:fb:1a:56:ec:79:6a:28:e6:69:5a:7e:88:fe:e5: 3f:45:19:2e:62:85:78:73:3d:db:a8:d2:c3:d1:6f: 82:e5:c3:3b:66:8b:97:32:eb:c1:d0:f7:ed:66:bb: 5c:77:4b:69:8f:64:f5:89:5a:30:6e:3f:32:f0:7f: c4:1b:47:43:2a:bc:40:61:46:ce:f4:40:d2:66:1f: 06:dd:d4:1c:81:1a:1e:3a:56:0a:05:8d:15:da:b2: e1:31:2d:ca:fd:bc:22:97:15:56:c3:18:9a:29:65: 76:c7:f5:44:ac:59:38:f8:de:d2:ab:3f:00:ea:6e: 12:91:b1:bb:5b:fe:53:82:54:cf:c4:b6:65:f5:e6: 91:87:42:09:dd:6a:9b:54:7a:b0:c9:e7:34:51:4f: 41:77:00:bd:ce:70:65:22:38:9d:4c:83:15:e2:e0: 90:90:b2:53:29:d2:3e:c2:eb:f3:62:62:6c:97:fe: 27:da:1d:0a:48:05:0c:f1:b1:9f:95:3f:3c:9b:05: fb:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:1B:00:92:FB:25:73:0C:AF:8D:1F:86:C8:C7:4C:EB:9F:7B:21:90 X509v3 Authority Key Identifier: keyid:0D:D4:41:C3:FF:AE:82:98:42:24:9E:94:4B:03:85:10:81:F4:D9:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DdRBw_-ugphCJJ6USwOFEIH02eA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/LRsAkvslcwyvjR-GyMdM6597IZA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/DdRBw_-ugphCJJ6USwOFEIH02eA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.235.168.0/24 193.23.60.0/24 IPv6: 2001:67c:2d78::/48 2a09:8400::/29 2a0f:75c0::/29 Signature Algorithm: sha256WithRSAEncryption 19:50:89:06:75:62:fe:7f:e3:51:ca:4e:3c:6e:0f:81:ef:e9: 8b:2d:a0:9c:c9:a7:f1:1e:6f:e4:8e:6a:1e:44:8c:8b:1b:3c: df:ba:d6:0e:fe:b9:c8:94:77:71:dd:9c:d9:f7:9d:d9:64:49: a5:2b:82:f0:0d:13:70:a7:22:ed:a9:12:36:63:88:aa:1d:5d: c3:56:e5:ba:e1:24:ec:b2:c4:bc:ac:b1:f8:c9:5e:9b:18:0e: ac:bd:39:f6:2c:2b:37:f2:43:69:f3:21:95:10:ef:41:4d:b0: 36:61:7e:89:94:cd:83:2b:96:24:d2:03:93:2d:81:76:e7:8c: f6:8d:da:65:68:87:bd:d9:d6:82:e9:2b:36:ae:47:4e:aa:85: a0:8b:8b:a3:d1:63:db:ba:0f:78:cb:67:ee:33:e6:66:77:4d: 6d:9f:d2:f9:f6:6c:84:25:f9:56:19:5d:6d:97:26:f5:36:ab: 68:ea:0b:c6:26:21:c0:60:59:aa:5d:e5:61:50:19:82:32:8b: 63:87:44:42:96:b2:01:53:19:de:96:e2:da:1b:8d:ad:24:1d: a2:33:14:1b:db:d4:53:5f:2b:93:5b:be:07:52:34:5a:77:03: 0e:21:d7:03:53:4a:c5:94:01:ec:ae:b2:76:29:72:e2:d4:64: 63:2b:c7:e1 -----BEGIN CERTIFICATE----- MIIFIjCCBAqgAwIBAgISAZt57N7n+VLBEoL7jsGY1/EBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkZDQ0MWMzZmZhZTgyOTg0MjI0OWU5NDRiMDM4NTEwODFm NGQ5ZTAwHhcNMjYwMTAxMTQxODQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZDFiMDA5MmZiMjU3MzBjYWY4ZDFmODZjOGM3NGNlYjlmN2IyMTkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5TWOnjIIiAUxrkZbzreXEU5OZnAF pQBeIxk84KXR1P2rtMu4+DqCdoJy05SoNJYLd5t15ukTlJfv509/+xpW7HlqKOZp Wn6I/uU/RRkuYoV4cz3bqNLD0W+C5cM7ZouXMuvB0PftZrtcd0tpj2T1iVowbj8y 8H/EG0dDKrxAYUbO9EDSZh8G3dQcgRoeOlYKBY0V2rLhMS3K/bwilxVWwxiaKWV2 x/VErFk4+N7Sqz8A6m4SkbG7W/5TglTPxLZl9eaRh0IJ3WqbVHqwyec0UU9BdwC9 znBlIjidTIMV4uCQkLJTKdI+wuvzYmJsl/4n2h0KSAUM8bGflT88mwX7+QIDAQAB o4ICLjCCAiowHQYDVR0OBBYEFC0bAJL7JXMMr40fhsjHTOufeyGQMB8GA1UdIwQY MBaAFA3UQcP/roKYQiSelEsDhRCB9NngMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGRSQndfLXVncGhDSko2VVN3T0ZFSUgwMmVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9hN2VmNGQtZGM0NC00ZmFmLTk1MTMt ZTljOTEzMjgzNmZmLzEvTFJzQWt2c2xjd3l2alItR3lNZE02NTk3SVpBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS9hN2VmNGQtZGM0NC00ZmFmLTk1MTMtZTljOTEzMjgzNmZm LzEvRGRSQndfLXVncGhDSko2VVN3T0ZFSUgwMmVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEQGCCsGAQUFBwEHAQH/BDUwMzASBAIAATAMAwQAW+uoAwQA wRc8MB0EAgACMBcDBwAgAQZ8LXgDBQMqCYQAAwUDKg91wDANBgkqhkiG9w0BAQsF AAOCAQEAGVCJBnVi/n/jUcpOPG4Pge/piy2gnMmn8R5v5I5qHkSMixs837rWDv65 yJR3cd2c2fed2WRJpSuC8A0TcKci7akSNmOIqh1dw1bluuEk7LLEvKyx+MlemxgO rL059iwrN/JDafMhlRDvQU2wNmF+iZTNgyuWJNIDky2BdueM9o3aZWiHvdnWgukr Nq5HTqqFoIuLo9Fj27oPeMtn7jPmZndNbZ/S+fZshCX5VhldbZcm9TaraOoLxiYh wGBZql3lYVAZgjKLY4dEQpayAVMZ3pbi2huNrSQdojMUG9vUU18rk1u+B1I0WncD DiHXA1NKxZQB7K6ydily4tRkYyvH4Q== -----END CERTIFICATE-----Generated at Sun Jan 25 23:48:55 2026 by rpki-client