This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/42a166-8a86-48da-bb96-79fd5023de36/1/lEdgyLdP8h_0PnTyGx915-RyS6g.roa File: lEdgyLdP8h_0PnTyGx915-RyS6g.roa (raw, json) Hash identifier: tVEhNOEOaWiBJykoJU0Gzu7c+ZGByjMKsOzSEHCMGFs= Subject key identifier: 94:47:60:C8:B7:4F:F2:1F:F4:3E:74:F2:1B:1F:75:E7:E4:72:4B:A8 Certificate issuer: /CN=da1b9fe8f1a33917fee7e4dbe9fab925eb8625a9 Certificate serial: 019B77588B724C669B7FEE518FB6C8C791F9 Authority key identifier: DA:1B:9F:E8:F1:A3:39:17:FE:E7:E4:DB:E9:FA:B9:25:EB:86:25:A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2huf6PGjORf-5-Tb6fq5JeuGJak.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/42a166-8a86-48da-bb96-79fd5023de36/1/lEdgyLdP8h_0PnTyGx915-RyS6g.roa Signing time: Thu 01 Jan 2026 02:17:30 +0000 ROA not before: Thu 01 Jan 2026 02:17:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60392 IP address blocks: 91.211.86.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/42a166-8a86-48da-bb96-79fd5023de36/1/2huf6PGjORf-5-Tb6fq5JeuGJak.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/42a166-8a86-48da-bb96-79fd5023de36/1/2huf6PGjORf-5-Tb6fq5JeuGJak.mft rsync://rpki.ripe.net/repository/DEFAULT/2huf6PGjORf-5-Tb6fq5JeuGJak.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:8b:72:4c:66:9b:7f:ee:51:8f:b6:c8:c7:91:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da1b9fe8f1a33917fee7e4dbe9fab925eb8625a9 Validity Not Before: Jan 1 02:17:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=944760c8b74ff21ff43e74f21b1f75e7e4724ba8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:a5:da:ca:35:6b:a5:6b:9f:3d:b8:b4:81:78: 77:05:30:a6:2c:b1:7e:00:0c:d1:1c:c6:a9:e0:d6: ef:19:02:c0:ee:64:52:a9:6e:2a:f7:e7:3a:49:dc: 2b:f2:8b:fa:90:7a:06:42:fc:2a:2a:ec:ff:32:5f: c5:0f:e7:b6:0a:a1:ac:fe:d6:96:23:a7:22:fb:50: 9e:46:af:14:33:e8:df:ce:cb:84:75:0d:3d:1c:0e: 57:f4:73:4b:8a:36:35:c8:f4:33:86:5e:c0:93:95: 0e:04:6c:56:85:05:34:ea:19:85:e7:da:40:63:22: 44:5c:c3:59:45:37:1b:be:46:1e:13:1c:0f:86:9d: 65:c5:a0:83:96:e6:fc:25:72:7a:44:fa:ed:95:a9: ca:8f:61:1e:5e:ba:db:e0:f9:5e:38:41:45:3e:f4: 13:b3:74:94:bb:6a:1b:67:1a:04:cc:c5:ee:c1:41: 1d:a4:f1:70:a2:b1:84:5e:15:8c:ee:94:68:12:cc: e7:c4:0d:e4:1a:0e:9a:3a:c7:5e:99:76:c6:74:d7: 79:fb:52:cc:fa:7e:4f:09:0b:91:77:8f:71:15:8a: 90:e5:1e:1c:68:f8:5d:4a:b0:95:7c:1d:c7:1e:f1: 98:12:c6:44:c9:71:65:17:a1:15:95:bf:2a:53:9e: 76:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:47:60:C8:B7:4F:F2:1F:F4:3E:74:F2:1B:1F:75:E7:E4:72:4B:A8 X509v3 Authority Key Identifier: keyid:DA:1B:9F:E8:F1:A3:39:17:FE:E7:E4:DB:E9:FA:B9:25:EB:86:25:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2huf6PGjORf-5-Tb6fq5JeuGJak.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/42a166-8a86-48da-bb96-79fd5023de36/1/lEdgyLdP8h_0PnTyGx915-RyS6g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/42a166-8a86-48da-bb96-79fd5023de36/1/2huf6PGjORf-5-Tb6fq5JeuGJak.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.211.86.0/24 Signature Algorithm: sha256WithRSAEncryption 77:86:25:1f:16:32:bd:8b:5c:b6:c0:23:8f:05:c2:d3:ce:5d: a6:97:f4:c8:a2:b6:81:d6:25:3b:f0:80:a8:26:8c:81:12:03: 3c:a6:70:00:f8:e7:d5:ff:68:53:d8:ff:8a:9e:f4:a8:4a:f1: 36:24:78:e6:71:ac:43:8e:42:43:ea:b1:de:23:6e:e2:5c:3e: a5:52:81:68:41:0c:05:95:dd:5d:17:5d:84:3b:97:73:ba:4f: a9:b4:9a:76:1d:27:4b:35:99:7f:6c:f3:9f:b0:e2:d1:d8:ab: a0:a8:20:51:72:6d:94:3f:e3:cf:58:ca:2d:d8:11:25:74:ad: 28:af:33:56:7e:0f:52:2d:ec:80:94:8d:d9:86:89:75:7a:e5: 6c:42:ed:02:8b:c2:3e:36:bb:c0:97:26:8a:c5:fb:a2:9f:ba: 8a:f2:03:48:dc:5e:28:0d:c8:f9:f2:95:50:86:d5:36:91:e3: 78:84:c3:4d:a0:6b:b7:5d:a8:34:cd:71:55:33:20:0d:c8:9e: 85:3c:d3:df:a3:c4:64:03:0c:7b:ee:20:f2:9d:08:df:93:ca: a3:25:61:b0:e4:d3:50:63:07:c6:c8:2d:85:0d:48:19:fa:a0: 77:27:e9:45:05:d7:93:5d:60:63:0e:37:a8:34:3a:ec:5b:1e: 97:83:ef:4a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WItyTGabf+5Rj7bIx5H5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhMWI5ZmU4ZjFhMzM5MTdmZWU3ZTRkYmU5ZmFiOTI1ZWI4 NjI1YTkwHhcNMjYwMTAxMDIxNzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NDQ3NjBjOGI3NGZmMjFmZjQzZTc0ZjIxYjFmNzVlN2U0NzI0YmE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2qXayjVrpWufPbi0gXh3BTCmLLF+ AAzRHMap4NbvGQLA7mRSqW4q9+c6Sdwr8ov6kHoGQvwqKuz/Ml/FD+e2CqGs/taW I6ci+1CeRq8UM+jfzsuEdQ09HA5X9HNLijY1yPQzhl7Ak5UOBGxWhQU06hmF59pA YyJEXMNZRTcbvkYeExwPhp1lxaCDlub8JXJ6RPrtlanKj2EeXrrb4PleOEFFPvQT s3SUu2obZxoEzMXuwUEdpPFworGEXhWM7pRoEsznxA3kGg6aOsdemXbGdNd5+1LM +n5PCQuRd49xFYqQ5R4caPhdSrCVfB3HHvGYEsZEyXFlF6EVlb8qU5529wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJRHYMi3T/If9D508hsfdefkckuoMB8GA1UdIwQY MBaAFNobn+jxozkX/ufk2+n6uSXrhiWpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMmh1ZjZQR2pPUmYtNS1UYjZmcTVKZXVHSmFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy80MmExNjYtOGE4Ni00OGRhLWJiOTYt NzlmZDUwMjNkZTM2LzEvbEVkZ3lMZFA4aF8wUG5UeUd4OTE1LVJ5UzZnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy80MmExNjYtOGE4Ni00OGRhLWJiOTYtNzlmZDUwMjNkZTM2 LzEvMmh1ZjZQR2pPUmYtNS1UYjZmcTVKZXVHSmFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9NWMA0G CSqGSIb3DQEBCwUAA4IBAQB3hiUfFjK9i1y2wCOPBcLTzl2ml/TIoraB1iU78ICo JoyBEgM8pnAA+OfV/2hT2P+KnvSoSvE2JHjmcaxDjkJD6rHeI27iXD6lUoFoQQwF ld1dF12EO5dzuk+ptJp2HSdLNZl/bPOfsOLR2KugqCBRcm2UP+PPWMot2BEldK0o rzNWfg9SLeyAlI3Zhol1euVsQu0Ci8I+NrvAlyaKxfuin7qK8gNI3F4oDcj58pVQ htU2keN4hMNNoGu3Xag0zXFVMyANyJ6FPNPfo8RkAwx77iDynQjfk8qjJWGw5NNQ YwfGyC2FDUgZ+qB3J+lFBdeTXWBjDjeoNDrsWx6Xg+9K -----END CERTIFICATE-----Generated at Sun Jan 25 23:32:33 2026 by rpki-client