This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/768f14-a721-46f0-9199-4f4b994e0eb2/1/lGdSHulI1aCQa7Y7_s7DEeMThKg.roa File: lGdSHulI1aCQa7Y7_s7DEeMThKg.roa (raw, json) Hash identifier: DuDTAKwJ9a+im27pqZxeXh7ZRg71UIpf2vEZIS5LbXg= Subject key identifier: 94:67:52:1E:E9:48:D5:A0:90:6B:B6:3B:FE:CE:C3:11:E3:13:84:A8 Certificate issuer: /CN=4beccc9d1a76e91469cb63b12bf725d7debafb1b Certificate serial: 019B7AC7A9B4B65803B614A79A73E18C92BE Authority key identifier: 4B:EC:CC:9D:1A:76:E9:14:69:CB:63:B1:2B:F7:25:D7:DE:BA:FB:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S-zMnRp26RRpy2OxK_cl1966-xs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/768f14-a721-46f0-9199-4f4b994e0eb2/1/lGdSHulI1aCQa7Y7_s7DEeMThKg.roa Signing time: Thu 01 Jan 2026 18:17:44 +0000 ROA not before: Thu 01 Jan 2026 18:17:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 30848 IP address blocks: 45.82.201.0/24 maxlen: 24 185.208.136.0/23 maxlen: 23 185.208.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/768f14-a721-46f0-9199-4f4b994e0eb2/1/S-zMnRp26RRpy2OxK_cl1966-xs.crl rsync://rpki.ripe.net/repository/DEFAULT/11/768f14-a721-46f0-9199-4f4b994e0eb2/1/S-zMnRp26RRpy2OxK_cl1966-xs.mft rsync://rpki.ripe.net/repository/DEFAULT/S-zMnRp26RRpy2OxK_cl1966-xs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 18:01:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:a9:b4:b6:58:03:b6:14:a7:9a:73:e1:8c:92:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4beccc9d1a76e91469cb63b12bf725d7debafb1b Validity Not Before: Jan 1 18:17:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9467521ee948d5a0906bb63bfecec311e31384a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:68:88:f5:4a:61:c5:2c:4e:16:bd:68:d1:c8: 0e:8b:dd:a7:d4:b2:00:8a:fa:d7:42:89:11:27:9b: ed:eb:f2:e0:95:89:72:67:49:3b:91:f2:eb:c7:92: f3:81:9b:ce:58:7c:01:e0:c8:cc:4b:61:1c:02:7d: 74:fb:15:07:6b:b1:ff:1b:83:62:56:96:43:26:92: 84:8a:96:c1:8b:5f:26:07:aa:4c:16:1b:db:d2:e2: d6:e3:79:67:a6:d1:db:84:3c:0b:75:dd:bb:74:2c: ec:58:33:f3:85:5a:eb:85:59:f3:7b:88:4d:f0:78: ff:7b:38:59:36:62:fc:36:43:54:a1:b3:67:d3:35: b5:21:f5:7f:c9:06:f5:47:a5:3b:85:d4:b6:d2:ed: d8:10:96:f8:88:76:1a:75:4b:2d:da:f9:5f:48:0f: eb:c9:6a:7d:24:4c:0b:a9:26:89:5b:68:f6:76:0a: e5:80:16:c1:20:f2:cf:24:82:9c:0b:e7:41:b8:39: 5a:a7:b7:13:ba:58:67:c5:3b:39:c2:d8:6e:21:6e: b5:d8:2c:54:2f:77:91:4e:b8:ad:b1:10:32:b9:24: ea:b5:79:5d:b1:4d:47:1d:5a:b6:95:31:79:10:ff: c6:0c:e7:49:0c:bb:bd:e8:99:da:a0:09:c9:6a:d8: 74:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:67:52:1E:E9:48:D5:A0:90:6B:B6:3B:FE:CE:C3:11:E3:13:84:A8 X509v3 Authority Key Identifier: keyid:4B:EC:CC:9D:1A:76:E9:14:69:CB:63:B1:2B:F7:25:D7:DE:BA:FB:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S-zMnRp26RRpy2OxK_cl1966-xs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/768f14-a721-46f0-9199-4f4b994e0eb2/1/lGdSHulI1aCQa7Y7_s7DEeMThKg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/768f14-a721-46f0-9199-4f4b994e0eb2/1/S-zMnRp26RRpy2OxK_cl1966-xs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.82.201.0/24 185.208.136.0/23 185.208.139.0/24 Signature Algorithm: sha256WithRSAEncryption 4c:b3:1c:dc:04:87:7b:32:f5:91:9a:fc:4b:76:a4:3d:93:06: c4:a5:8a:a3:ce:d5:b0:fe:b5:54:f3:fc:f2:86:4b:e0:41:a7: a2:b3:7d:c9:2b:b0:b0:f9:db:b1:bb:00:63:e1:3b:ec:8e:60: 7e:15:d4:4a:af:95:ff:f2:4b:d6:70:6e:9a:39:08:be:f4:63: 7c:61:ad:12:92:ab:f0:e6:da:80:50:02:09:1f:c2:27:13:c1: e8:57:fd:63:d2:2c:5b:41:b8:21:12:4d:e0:aa:65:97:f9:bb: ef:52:95:47:db:1e:14:87:8f:36:82:22:14:05:a1:43:20:87: 66:59:93:96:bb:9a:62:f1:ab:d6:39:b6:b5:13:1f:51:a7:49: b0:be:d4:a3:92:1a:0c:dc:a3:55:ba:12:38:80:5f:69:8a:57: fe:ce:c2:8c:8c:2c:47:9e:62:f8:bf:14:a4:6c:a8:18:01:4b: d5:0b:19:11:ff:22:b9:c7:04:03:2a:53:87:f6:a2:54:ba:43: 3d:b1:77:2d:8e:ba:17:8b:ba:aa:8b:3a:ae:b8:ab:dd:6b:dc: aa:75:d2:5e:00:78:12:49:80:61:b4:45:dd:4f:90:5b:1c:89: d0:53:ab:ea:47:3b:34:dd:fe:ae:49:af:f7:7d:6b:81:08:c0: ed:66:43:0b -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt6x6m0tlgDthSnmnPhjJK+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiZWNjYzlkMWE3NmU5MTQ2OWNiNjNiMTJiZjcyNWQ3ZGVi YWZiMWIwHhcNMjYwMTAxMTgxNzQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NDY3NTIxZWU5NDhkNWEwOTA2YmI2M2JmZWNlYzMxMWUzMTM4NGE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtWiI9UphxSxOFr1o0cgOi92n1LIA ivrXQokRJ5vt6/LglYlyZ0k7kfLrx5LzgZvOWHwB4MjMS2EcAn10+xUHa7H/G4Ni VpZDJpKEipbBi18mB6pMFhvb0uLW43lnptHbhDwLdd27dCzsWDPzhVrrhVnze4hN 8Hj/ezhZNmL8NkNUobNn0zW1IfV/yQb1R6U7hdS20u3YEJb4iHYadUst2vlfSA/r yWp9JEwLqSaJW2j2dgrlgBbBIPLPJIKcC+dBuDlap7cTulhnxTs5wthuIW612CxU L3eRTritsRAyuSTqtXldsU1HHVq2lTF5EP/GDOdJDLu96JnaoAnJath0CQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFJRnUh7pSNWgkGu2O/7OwxHjE4SoMB8GA1UdIwQY MBaAFEvszJ0adukUactjsSv3JdfeuvsbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUy16TW5ScDI2UlJweTJPeEtfY2wxOTY2LXhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS83NjhmMTQtYTcyMS00NmYwLTkxOTkt NGY0Yjk5NGUwZWIyLzEvbEdkU0h1bEkxYUNRYTdZN19zN0RFZU1UaEtnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS83NjhmMTQtYTcyMS00NmYwLTkxOTktNGY0Yjk5NGUwZWIy LzEvUy16TW5ScDI2UlJweTJPeEtfY2wxOTY2LXhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQALVLJAwQB udCIAwQAudCLMA0GCSqGSIb3DQEBCwUAA4IBAQBMsxzcBId7MvWRmvxLdqQ9kwbE pYqjztWw/rVU8/zyhkvgQaeis33JK7Cw+duxuwBj4TvsjmB+FdRKr5X/8kvWcG6a OQi+9GN8Ya0Skqvw5tqAUAIJH8InE8HoV/1j0ixbQbghEk3gqmWX+bvvUpVH2x4U h482giIUBaFDIIdmWZOWu5pi8avWOba1Ex9Rp0mwvtSjkhoM3KNVuhI4gF9pilf+ zsKMjCxHnmL4vxSkbKgYAUvVCxkR/yK5xwQDKlOH9qJUukM9sXctjroXi7qqizqu uKvda9yqddJeAHgSSYBhtEXdT5BbHInQU6vqRzs03f6uSa/3fWuBCMDtZkML -----END CERTIFICATE-----Generated at Mon Jan 26 04:55:34 2026 by rpki-client