This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/821152-9f13-4c09-9dcd-45bbb23a15d8/1/L4LkPtTKu6uh824DJ6xjRvNmWTU.roa File: L4LkPtTKu6uh824DJ6xjRvNmWTU.roa (raw, json) Hash identifier: 0NgdalWgdZZseus2rUGUIbaj+mAP6w8e2361KL42z6g= Subject key identifier: 2F:82:E4:3E:D4:CA:BB:AB:A1:F3:6E:03:27:AC:63:46:F3:66:59:35 Certificate issuer: /CN=2e1620890f700f012b0ba60172314e3c85919513 Certificate serial: 019B7F15897A3A5E552B11C495F090E99652 Authority key identifier: 2E:16:20:89:0F:70:0F:01:2B:0B:A6:01:72:31:4E:3C:85:91:95:13 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LhYgiQ9wDwErC6YBcjFOPIWRlRM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/821152-9f13-4c09-9dcd-45bbb23a15d8/1/L4LkPtTKu6uh824DJ6xjRvNmWTU.roa Signing time: Fri 02 Jan 2026 14:21:16 +0000 ROA not before: Fri 02 Jan 2026 14:21:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9051 IP address blocks: 80.81.144.0/20 maxlen: 24 92.62.160.0/20 maxlen: 24 141.105.80.0/20 maxlen: 24 185.3.20.0/22 maxlen: 24 195.112.192.0/19 maxlen: 24 212.28.224.0/19 maxlen: 24 2a00:16e8::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/821152-9f13-4c09-9dcd-45bbb23a15d8/1/LhYgiQ9wDwErC6YBcjFOPIWRlRM.crl rsync://rpki.ripe.net/repository/DEFAULT/07/821152-9f13-4c09-9dcd-45bbb23a15d8/1/LhYgiQ9wDwErC6YBcjFOPIWRlRM.mft rsync://rpki.ripe.net/repository/DEFAULT/LhYgiQ9wDwErC6YBcjFOPIWRlRM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:89:7a:3a:5e:55:2b:11:c4:95:f0:90:e9:96:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e1620890f700f012b0ba60172314e3c85919513 Validity Not Before: Jan 2 14:21:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2f82e43ed4cabbaba1f36e0327ac6346f3665935 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:a4:db:78:04:d5:ef:b5:46:45:45:96:ba:bf: f8:9b:c7:30:43:7e:55:3b:67:03:fd:de:4a:c2:bf: cc:40:13:19:ff:f9:7c:5a:b2:e1:2b:36:c5:26:96: 92:95:80:8d:4b:56:ef:61:b6:8b:46:9f:ad:71:8a: ef:8b:84:f1:d5:cd:97:00:e0:2d:73:39:47:8f:85: 48:31:a5:d4:b3:f5:c2:2b:aa:5e:29:65:9d:5d:ad: 2a:e0:54:45:92:7d:b8:57:6a:31:f7:70:e9:8a:1d: 38:42:f7:8d:85:f5:b1:78:1d:f8:2a:de:a7:5a:2c: 36:78:de:db:91:3e:e9:3a:ee:fe:90:59:fe:48:6a: e1:e2:79:c6:55:5b:f0:f4:d8:11:be:00:d4:12:f5: 15:a6:04:9c:d0:bf:c4:01:db:00:a7:70:28:c2:16: 23:0b:c9:b5:36:33:c2:61:08:20:b8:4a:64:18:9c: 87:14:02:5d:e7:87:82:aa:95:b9:c8:c1:6b:d0:51: 8e:3a:32:41:a8:e1:8d:21:ce:a5:2d:be:71:1b:38: 9b:e3:c1:11:5f:e4:40:4c:ee:6b:50:05:fa:41:08: 25:c8:d3:ea:6c:1b:91:f7:13:d3:15:23:2d:b0:06: 6e:b8:c3:a0:d1:cd:b4:3c:c9:f9:d0:c4:f5:b6:f7: eb:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:82:E4:3E:D4:CA:BB:AB:A1:F3:6E:03:27:AC:63:46:F3:66:59:35 X509v3 Authority Key Identifier: keyid:2E:16:20:89:0F:70:0F:01:2B:0B:A6:01:72:31:4E:3C:85:91:95:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LhYgiQ9wDwErC6YBcjFOPIWRlRM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/821152-9f13-4c09-9dcd-45bbb23a15d8/1/L4LkPtTKu6uh824DJ6xjRvNmWTU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/821152-9f13-4c09-9dcd-45bbb23a15d8/1/LhYgiQ9wDwErC6YBcjFOPIWRlRM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.81.144.0/20 92.62.160.0/20 141.105.80.0/20 185.3.20.0/22 195.112.192.0/19 212.28.224.0/19 IPv6: 2a00:16e8::/32 Signature Algorithm: sha256WithRSAEncryption 34:98:09:6f:93:51:48:8f:2d:46:f8:60:f2:a8:9d:43:7b:65: 4b:95:56:27:ae:d3:f0:a4:50:cc:f3:ff:e3:2c:f5:7c:65:0e: 6b:e0:12:04:ba:21:f6:a3:0c:d2:40:e4:48:27:65:6a:dd:39: 59:1c:d4:dc:8b:d8:0e:19:37:bc:e7:9f:b5:b2:0e:1d:81:29: 99:e1:c4:be:88:fb:d8:c7:2d:d7:a8:f4:70:ef:f0:d7:bd:72: d6:15:cc:20:e2:14:a0:d5:69:78:2c:38:7d:5b:43:80:29:55: 4e:34:1e:56:3c:03:46:00:08:32:05:39:92:e0:80:4a:bf:18: fe:ba:57:a9:1e:39:de:3e:a5:69:d6:15:fc:2f:9b:7d:a5:de: e4:55:ce:9b:79:e9:76:c9:82:73:49:bc:63:bc:1a:8a:a9:ac: 43:30:c7:63:fb:85:c4:50:9e:e4:00:77:29:9c:f3:47:8f:d1: 66:f9:75:e1:17:0c:79:1d:00:d5:e3:55:4c:57:52:4b:13:1d: a5:2e:f0:40:f0:60:2e:b3:73:0d:0f:6d:6f:f2:4e:81:16:64: 68:09:3a:12:04:61:a6:b4:14:61:e7:fc:6c:d0:35:6d:1b:5d: b7:9f:54:8f:ad:62:2e:cc:26:04:04:38:4b:c3:fb:6c:93:3b: 46:26:0a:ae -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgISAZt/FYl6Ol5VKxHElfCQ6ZZSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlMTYyMDg5MGY3MDBmMDEyYjBiYTYwMTcyMzE0ZTNjODU5 MTk1MTMwHhcNMjYwMTAyMTQyMTE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZjgyZTQzZWQ0Y2FiYmFiYTFmMzZlMDMyN2FjNjM0NmYzNjY1OTM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn6TbeATV77VGRUWWur/4m8cwQ35V O2cD/d5Kwr/MQBMZ//l8WrLhKzbFJpaSlYCNS1bvYbaLRp+tcYrvi4Tx1c2XAOAt czlHj4VIMaXUs/XCK6peKWWdXa0q4FRFkn24V2ox93Dpih04QveNhfWxeB34Kt6n Wiw2eN7bkT7pOu7+kFn+SGrh4nnGVVvw9NgRvgDUEvUVpgSc0L/EAdsAp3AowhYj C8m1NjPCYQgguEpkGJyHFAJd54eCqpW5yMFr0FGOOjJBqOGNIc6lLb5xGzib48ER X+RATO5rUAX6QQglyNPqbBuR9xPTFSMtsAZuuMOg0c20PMn50MT1tvfr7QIDAQAB o4ICNjCCAjIwHQYDVR0OBBYEFC+C5D7UyrurofNuAyesY0bzZlk1MB8GA1UdIwQY MBaAFC4WIIkPcA8BKwumAXIxTjyFkZUTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTGhZZ2lROXdEd0VyQzZZQmNqRk9QSVdSbFJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy84MjExNTItOWYxMy00YzA5LTlkY2Qt NDViYmIyM2ExNWQ4LzEvTDRMa1B0VEt1NnVoODI0REo2eGpSdk5tV1RVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy84MjExNTItOWYxMy00YzA5LTlkY2QtNDViYmIyM2ExNWQ4 LzEvTGhZZ2lROXdEd0VyQzZZQmNqRk9QSVdSbFJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEwGCCsGAQUFBwEHAQH/BD0wOzAqBAIAATAkAwQEUFGQAwQE XD6gAwQEjWlQAwQCuQMUAwQFw3DAAwQF1BzgMA0EAgACMAcDBQAqABboMA0GCSqG SIb3DQEBCwUAA4IBAQA0mAlvk1FIjy1G+GDyqJ1De2VLlVYnrtPwpFDM8//jLPV8 ZQ5r4BIEuiH2owzSQORIJ2Vq3TlZHNTci9gOGTe855+1sg4dgSmZ4cS+iPvYxy3X qPRw7/DXvXLWFcwg4hSg1Wl4LDh9W0OAKVVONB5WPANGAAgyBTmS4IBKvxj+ulep HjnePqVp1hX8L5t9pd7kVc6beel2yYJzSbxjvBqKqaxDMMdj+4XEUJ7kAHcpnPNH j9Fm+XXhFwx5HQDV41VMV1JLEx2lLvBA8GAus3MND21v8k6BFmRoCToSBGGmtBRh 5/xs0DVtG123n1SPrWIuzCYEBDhLw/tskztGJgqu -----END CERTIFICATE-----Generated at Sun Jan 25 21:05:09 2026 by rpki-client