This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/LfyLZbGl7b5gzJ9zSZ07MTcwQGc.roa File: LfyLZbGl7b5gzJ9zSZ07MTcwQGc.roa (raw, json) Hash identifier: JcRj9d8ulbmAc0W06IEWNBloWUue3HKweCBhCEYuEvs= Subject key identifier: 2D:FC:8B:65:B1:A5:ED:BE:60:CC:9F:73:49:9D:3B:31:37:30:40:67 Certificate issuer: /CN=4c7844abef711c232c84f83c807a420af3804728 Certificate serial: 019B76EB7B4FE10634B06C3525A2A4C8EDBB Authority key identifier: 4C:78:44:AB:EF:71:1C:23:2C:84:F8:3C:80:7A:42:0A:F3:80:47:28 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/THhEq-9xHCMshPg8gHpCCvOARyg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/LfyLZbGl7b5gzJ9zSZ07MTcwQGc.roa Signing time: Thu 01 Jan 2026 00:18:22 +0000 ROA not before: Thu 01 Jan 2026 00:18:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202922 IP address blocks: 185.150.112.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/THhEq-9xHCMshPg8gHpCCvOARyg.crl rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/THhEq-9xHCMshPg8gHpCCvOARyg.mft rsync://rpki.ripe.net/repository/DEFAULT/THhEq-9xHCMshPg8gHpCCvOARyg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:7b:4f:e1:06:34:b0:6c:35:25:a2:a4:c8:ed:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c7844abef711c232c84f83c807a420af3804728 Validity Not Before: Jan 1 00:18:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2dfc8b65b1a5edbe60cc9f73499d3b3137304067 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:9e:45:9e:7d:cb:be:3c:ef:5b:31:0b:f6:08: 76:61:ab:a3:2a:31:14:ed:0d:b9:32:c8:d5:0f:be: 44:a9:73:9a:13:fb:db:1e:7b:a7:d1:f5:d0:bc:48: f3:cf:bc:84:b1:ba:86:00:3f:57:65:79:0d:a9:ef: e6:81:03:a6:3a:f5:d3:f4:ad:ae:14:5e:e2:4d:e2: 37:03:13:80:97:e7:70:8b:fc:66:f4:06:d9:c8:30: 36:bb:bb:57:5b:ef:26:ce:aa:69:5d:13:f0:a5:c9: 12:fc:06:49:9c:bf:1c:44:5c:be:0b:b3:09:af:4e: 5b:9a:52:92:00:20:1a:d4:fa:00:d1:60:0f:a2:bc: 39:b6:41:fe:53:b5:e6:45:c0:5b:55:91:de:be:c3: e7:18:10:02:af:b5:92:42:1c:22:e7:56:db:fa:54: d0:e6:e1:98:30:ef:89:53:af:f1:bc:67:fe:9e:d7: 58:f1:c9:aa:ba:4c:55:e6:0a:30:81:84:ac:a6:35: db:92:ad:21:cb:8d:ee:aa:c6:a9:48:17:95:b1:3c: 59:a3:30:05:c5:58:2d:db:7a:95:1b:46:39:c6:90: 9a:c5:54:39:97:07:9f:0a:ef:0e:71:78:75:9b:f1: b1:79:a3:74:d1:15:4c:12:2c:4e:11:2e:7b:c5:f9: a0:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:FC:8B:65:B1:A5:ED:BE:60:CC:9F:73:49:9D:3B:31:37:30:40:67 X509v3 Authority Key Identifier: keyid:4C:78:44:AB:EF:71:1C:23:2C:84:F8:3C:80:7A:42:0A:F3:80:47:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/THhEq-9xHCMshPg8gHpCCvOARyg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/LfyLZbGl7b5gzJ9zSZ07MTcwQGc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/THhEq-9xHCMshPg8gHpCCvOARyg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.150.112.0/22 Signature Algorithm: sha256WithRSAEncryption 62:47:1a:e1:df:4e:2a:a1:11:c4:b3:ab:46:0b:08:c1:50:c8: 7b:2f:5d:95:5c:9d:e4:08:52:96:8c:ee:28:e9:42:d3:6c:f6: 8f:5f:18:8c:35:45:c5:8a:91:d1:04:50:71:31:ec:48:70:7b: 76:ea:2c:41:97:de:3a:32:be:ef:e2:f1:59:d6:39:79:d6:01: f2:14:95:f1:2d:97:25:d9:86:94:64:94:50:e2:ad:f8:26:e4: 46:c1:ea:43:62:7e:4b:4e:03:78:55:91:d3:b6:11:e3:4f:5b: 42:4c:a6:3b:ca:19:ab:0e:60:d3:96:fd:d7:84:7c:ac:1a:99: 86:c5:35:62:80:c9:5a:9b:12:c6:f1:af:7d:af:da:90:e2:95: 03:57:c9:98:82:69:7a:50:4f:7e:4a:9c:b5:4b:9b:d1:18:1e: 44:aa:10:e3:16:ad:74:62:93:13:c5:bf:5c:60:32:91:1b:3f: cd:97:74:c5:d4:be:fe:3d:0e:20:59:8b:33:b3:4c:f3:29:1c: 44:67:d4:b8:3f:b3:30:86:61:dd:e4:d5:10:e2:89:55:8b:05: 5f:64:de:03:35:b9:be:2a:4b:e2:83:0c:6e:6d:42:50:be:20: 97:5e:68:70:5b:97:d2:00:46:38:0e:d5:7a:3a:59:9b:10:55: 2b:b3:bf:00 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt263tP4QY0sGw1JaKkyO27MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjNzg0NGFiZWY3MTFjMjMyYzg0ZjgzYzgwN2E0MjBhZjM4 MDQ3MjgwHhcNMjYwMTAxMDAxODIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZGZjOGI2NWIxYTVlZGJlNjBjYzlmNzM0OTlkM2IzMTM3MzA0MDY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw55Fnn3LvjzvWzEL9gh2YaujKjEU 7Q25MsjVD75EqXOaE/vbHnun0fXQvEjzz7yEsbqGAD9XZXkNqe/mgQOmOvXT9K2u FF7iTeI3AxOAl+dwi/xm9AbZyDA2u7tXW+8mzqppXRPwpckS/AZJnL8cRFy+C7MJ r05bmlKSACAa1PoA0WAPorw5tkH+U7XmRcBbVZHevsPnGBACr7WSQhwi51bb+lTQ 5uGYMO+JU6/xvGf+ntdY8cmqukxV5gowgYSspjXbkq0hy43uqsapSBeVsTxZozAF xVgt23qVG0Y5xpCaxVQ5lwefCu8OcXh1m/GxeaN00RVMEixOES57xfmgRwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFC38i2Wxpe2+YMyfc0mdOzE3MEBnMB8GA1UdIwQY MBaAFEx4RKvvcRwjLIT4PIB6QgrzgEcoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVEhoRXEtOXhIQ01zaFBnOGdIcENDdk9BUnlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi84ZDU1YzAtOWFhMC00YmU3LTgyYTgt ZGFiNmI4M2NmN2VjLzEvTGZ5TFpiR2w3YjVneko5elNaMDdNVGN3UUdjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYi84ZDU1YzAtOWFhMC00YmU3LTgyYTgtZGFiNmI4M2NmN2Vj LzEvVEhoRXEtOXhIQ01zaFBnOGdIcENDdk9BUnlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuZZwMA0G CSqGSIb3DQEBCwUAA4IBAQBiRxrh304qoRHEs6tGCwjBUMh7L12VXJ3kCFKWjO4o 6ULTbPaPXxiMNUXFipHRBFBxMexIcHt26ixBl946Mr7v4vFZ1jl51gHyFJXxLZcl 2YaUZJRQ4q34JuRGwepDYn5LTgN4VZHTthHjT1tCTKY7yhmrDmDTlv3XhHysGpmG xTVigMlamxLG8a99r9qQ4pUDV8mYgml6UE9+Spy1S5vRGB5EqhDjFq10YpMTxb9c YDKRGz/Nl3TF1L7+PQ4gWYszs0zzKRxEZ9S4P7MwhmHd5NUQ4olViwVfZN4DNbm+ KkvigwxubUJQviCXXmhwW5fSAEY4DtV6OlmbEFUrs78A -----END CERTIFICATE-----Generated at Sun Jan 25 22:47:50 2026 by rpki-client