This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/59da50-aedb-4906-af19-090fe3da2433/1/lDc3tS_p7tCgEhrNKf_-eSIcLqg.roa File: lDc3tS_p7tCgEhrNKf_-eSIcLqg.roa (raw, json) Hash identifier: kzElkKos01LmCGpTnk/MyVTZjZ5HsnG3CnANkjfIhL8= Subject key identifier: 94:37:37:B5:2F:E9:EE:D0:A0:12:1A:CD:29:FF:FE:79:22:1C:2E:A8 Certificate issuer: /CN=9280d3e4672968f86e8955db620cb765db9d7142 Certificate serial: 019B7AC95A4C936D57084AFE7F8DA83FFC49 Authority key identifier: 92:80:D3:E4:67:29:68:F8:6E:89:55:DB:62:0C:B7:65:DB:9D:71:42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/koDT5GcpaPhuiVXbYgy3ZdudcUI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/59da50-aedb-4906-af19-090fe3da2433/1/lDc3tS_p7tCgEhrNKf_-eSIcLqg.roa Signing time: Thu 01 Jan 2026 18:19:34 +0000 ROA not before: Thu 01 Jan 2026 18:19:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29119 IP address blocks: 84.54.24.0/22 maxlen: 22 84.54.24.0/23 maxlen: 23 84.54.26.0/23 maxlen: 23 178.212.72.0/24 maxlen: 24 185.248.133.0/24 maxlen: 24 213.217.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/59da50-aedb-4906-af19-090fe3da2433/1/koDT5GcpaPhuiVXbYgy3ZdudcUI.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/59da50-aedb-4906-af19-090fe3da2433/1/koDT5GcpaPhuiVXbYgy3ZdudcUI.mft rsync://rpki.ripe.net/repository/DEFAULT/koDT5GcpaPhuiVXbYgy3ZdudcUI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c9:5a:4c:93:6d:57:08:4a:fe:7f:8d:a8:3f:fc:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9280d3e4672968f86e8955db620cb765db9d7142 Validity Not Before: Jan 1 18:19:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=943737b52fe9eed0a0121acd29fffe79221c2ea8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:88:40:80:da:ca:dc:c1:04:bd:30:69:da:79: 05:08:d5:73:ff:8d:c9:50:30:bc:31:ef:e0:05:41: 74:ec:6d:1e:0e:a0:25:67:ee:f4:03:c3:0a:99:10: dc:2f:0c:6b:8e:14:fa:6e:38:15:3f:0d:f0:3e:f3: 94:4c:8d:43:38:e6:ae:08:b7:16:d0:71:66:fa:68: d3:0e:41:7a:73:64:1a:ba:f5:f7:80:30:b4:2b:80: 8f:8c:70:02:3d:01:54:11:d8:40:fb:c0:95:d7:5e: 91:48:a9:4a:b4:24:e0:2d:a7:32:92:9d:34:27:36: a1:93:78:8f:f4:55:41:a6:e1:69:ff:75:15:ad:34: b5:2d:af:87:b2:9a:7a:2e:0f:31:f1:38:56:e2:12: 9b:06:de:21:41:49:5b:7a:11:ab:c9:cc:a9:05:39: 35:7f:30:fd:02:7e:77:03:ad:c0:3f:d7:51:58:2b: f2:a2:28:0a:c9:14:b0:74:ad:14:73:82:82:a0:7c: 4a:c7:a2:2c:2b:1d:a4:fb:9f:fe:78:8b:c0:01:90: cd:52:cd:a1:74:96:00:b3:31:95:40:b6:96:05:11: b4:b0:73:fa:f4:6d:e4:72:c4:df:d0:c8:7d:a6:0b: 06:a9:f5:89:17:35:d0:21:e7:71:bd:24:15:4a:71: 35:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:37:37:B5:2F:E9:EE:D0:A0:12:1A:CD:29:FF:FE:79:22:1C:2E:A8 X509v3 Authority Key Identifier: keyid:92:80:D3:E4:67:29:68:F8:6E:89:55:DB:62:0C:B7:65:DB:9D:71:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/koDT5GcpaPhuiVXbYgy3ZdudcUI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/59da50-aedb-4906-af19-090fe3da2433/1/lDc3tS_p7tCgEhrNKf_-eSIcLqg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/59da50-aedb-4906-af19-090fe3da2433/1/koDT5GcpaPhuiVXbYgy3ZdudcUI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.54.24.0/22 178.212.72.0/24 185.248.133.0/24 213.217.28.0/24 Signature Algorithm: sha256WithRSAEncryption 1f:23:25:4f:d0:d5:eb:3f:6a:ad:b4:a4:0a:16:f2:c6:bb:13: 2b:b0:e9:58:7b:65:b2:17:47:ef:8d:94:ec:5f:b5:3e:1d:90: e9:c5:4c:26:e8:aa:4f:ae:b3:9f:1d:b3:ee:b2:1e:21:ba:24: 7f:f0:ab:69:f7:d1:9b:c1:4e:f9:bc:1e:f8:fc:97:61:8e:88: 9e:ad:bb:53:c2:9d:d7:fe:48:52:03:a8:66:e1:bf:ca:b3:86: 6b:42:49:5d:46:1f:a8:e0:7a:56:8f:10:db:cc:9e:6a:19:e5: 11:24:9e:90:08:4c:a5:3b:9f:76:e3:26:68:89:9a:f5:6b:69: ac:bf:5b:1f:57:55:f5:16:42:c7:a8:a1:af:41:6a:e3:79:78: a1:27:9a:81:06:9d:ab:88:d4:be:81:0e:36:16:91:da:35:64: 01:d6:58:32:fa:65:a0:54:9e:ff:68:4a:26:51:ac:08:cf:46: 2c:31:87:6a:15:a4:b9:a7:5c:22:c4:24:64:ec:02:ee:57:f4: 20:28:d7:73:a1:5c:b9:e5:fd:a2:fb:15:fe:a6:72:a6:38:93: 71:d4:6d:da:13:4b:4b:bd:d6:ee:68:26:7b:9a:3e:27:7b:51: 70:33:00:7f:c0:65:d4:d6:a1:9e:09:2b:d2:ad:fd:e2:cf:5e: 1e:21:ab:9d -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt6yVpMk21XCEr+f42oP/xJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyODBkM2U0NjcyOTY4Zjg2ZTg5NTVkYjYyMGNiNzY1ZGI5 ZDcxNDIwHhcNMjYwMTAxMTgxOTM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NDM3MzdiNTJmZTllZWQwYTAxMjFhY2QyOWZmZmU3OTIyMWMyZWE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuYhAgNrK3MEEvTBp2nkFCNVz/43J UDC8Me/gBUF07G0eDqAlZ+70A8MKmRDcLwxrjhT6bjgVPw3wPvOUTI1DOOauCLcW 0HFm+mjTDkF6c2QauvX3gDC0K4CPjHACPQFUEdhA+8CV116RSKlKtCTgLacykp00 Jzahk3iP9FVBpuFp/3UVrTS1La+Hspp6Lg8x8ThW4hKbBt4hQUlbehGrycypBTk1 fzD9An53A63AP9dRWCvyoigKyRSwdK0Uc4KCoHxKx6IsKx2k+5/+eIvAAZDNUs2h dJYAszGVQLaWBRG0sHP69G3kcsTf0Mh9pgsGqfWJFzXQIedxvSQVSnE1CQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFJQ3N7Uv6e7QoBIazSn//nkiHC6oMB8GA1UdIwQY MBaAFJKA0+RnKWj4bolV22IMt2XbnXFCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva29EVDVHY3BhUGh1aVZYYllneTNaZHVkY1VJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi81OWRhNTAtYWVkYi00OTA2LWFmMTkt MDkwZmUzZGEyNDMzLzEvbERjM3RTX3A3dENnRWhyTktmXy1lU0ljTHFnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi81OWRhNTAtYWVkYi00OTA2LWFmMTktMDkwZmUzZGEyNDMz LzEva29EVDVHY3BhUGh1aVZYYllneTNaZHVkY1VJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQCVDYYAwQA stRIAwQAufiFAwQA1dkcMA0GCSqGSIb3DQEBCwUAA4IBAQAfIyVP0NXrP2qttKQK FvLGuxMrsOlYe2WyF0fvjZTsX7U+HZDpxUwm6KpPrrOfHbPush4huiR/8Ktp99Gb wU75vB74/JdhjoierbtTwp3X/khSA6hm4b/Ks4ZrQkldRh+o4HpWjxDbzJ5qGeUR JJ6QCEylO5924yZoiZr1a2msv1sfV1X1FkLHqKGvQWrjeXihJ5qBBp2riNS+gQ42 FpHaNWQB1lgy+mWgVJ7/aEomUawIz0YsMYdqFaS5p1wixCRk7ALuV/QgKNdzoVy5 5f2i+xX+pnKmOJNx1G3aE0tLvdbuaCZ7mj4ne1FwMwB/wGXU1qGeCSvSrf3iz14e Iaud -----END CERTIFICATE-----Generated at Sun Jan 25 17:22:13 2026 by rpki-client