This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/af1f64-c35f-47e8-87c9-8a11b4719d82/1/Lz9R6m5SK-yqZEob6cadmxCThHs.roa File: Lz9R6m5SK-yqZEob6cadmxCThHs.roa (raw, json) Hash identifier: jc9B6VAewdJSUcgfHIRXwP2EIxv1ywTev7YQ165P/Qg= Subject key identifier: 2F:3F:51:EA:6E:52:2B:EC:AA:64:4A:1B:E9:C6:9D:9B:10:93:84:7B Certificate issuer: /CN=f8ad543624f8d3281ec970458ee752f10a424529 Certificate serial: 019B7BA4B2881175D71EC47DFF48886DC9D0 Authority key identifier: F8:AD:54:36:24:F8:D3:28:1E:C9:70:45:8E:E7:52:F1:0A:42:45:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-K1UNiT40ygeyXBFjudS8QpCRSk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/af1f64-c35f-47e8-87c9-8a11b4719d82/1/Lz9R6m5SK-yqZEob6cadmxCThHs.roa Signing time: Thu 01 Jan 2026 22:19:09 +0000 ROA not before: Thu 01 Jan 2026 22:19:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39455 IP address blocks: 185.85.36.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/af1f64-c35f-47e8-87c9-8a11b4719d82/1/1-K1UNiT40ygeyXBFjudS8QpCRSk.crl rsync://rpki.ripe.net/repository/DEFAULT/20/af1f64-c35f-47e8-87c9-8a11b4719d82/1/1-K1UNiT40ygeyXBFjudS8QpCRSk.mft rsync://rpki.ripe.net/repository/DEFAULT/1-K1UNiT40ygeyXBFjudS8QpCRSk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:b2:88:11:75:d7:1e:c4:7d:ff:48:88:6d:c9:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8ad543624f8d3281ec970458ee752f10a424529 Validity Not Before: Jan 1 22:19:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2f3f51ea6e522becaa644a1be9c69d9b1093847b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:d6:03:39:9d:7a:69:78:58:e3:13:ef:69:cb: c7:a3:24:7d:fb:2c:18:8d:76:dc:ed:7f:6b:f9:9b: cf:ce:11:64:15:6e:54:a3:5b:28:3d:45:c2:1d:ca: 41:f9:25:16:25:35:a5:2c:bf:bd:68:d7:d9:b4:44: 94:d8:ab:84:ab:23:f2:bf:fb:b8:18:fb:0e:a9:92: bc:a1:bd:d2:d3:95:f4:ec:4d:af:3b:f9:89:b7:d5: 55:d3:11:10:f4:0c:23:44:67:6c:18:59:81:17:c6: f1:9b:a7:69:fb:27:e3:ad:98:a3:ad:b3:cb:a1:36: bc:89:45:49:a0:44:6b:3b:be:34:6d:92:fb:f6:14: 22:e2:cb:14:78:e7:30:9b:02:02:11:f5:fb:8c:db: ad:4d:28:a1:9e:5e:75:51:e3:0b:e2:84:55:6c:2c: 03:8d:bb:0c:37:2c:18:03:a3:62:30:a9:5b:24:5f: 98:bd:bb:4a:6f:31:d9:7b:e4:95:af:08:74:7e:6f: 9a:d1:84:83:37:9b:20:02:c2:e7:6e:22:ae:92:f4: 84:ef:62:e5:b5:d7:b9:f7:c4:ac:75:78:4e:55:9a: f5:79:7e:27:fc:0d:de:01:7f:d4:42:c0:7a:42:98: 48:3a:58:d6:7c:16:79:47:87:41:a4:da:cc:07:4a: 24:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:3F:51:EA:6E:52:2B:EC:AA:64:4A:1B:E9:C6:9D:9B:10:93:84:7B X509v3 Authority Key Identifier: keyid:F8:AD:54:36:24:F8:D3:28:1E:C9:70:45:8E:E7:52:F1:0A:42:45:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-K1UNiT40ygeyXBFjudS8QpCRSk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/af1f64-c35f-47e8-87c9-8a11b4719d82/1/Lz9R6m5SK-yqZEob6cadmxCThHs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/af1f64-c35f-47e8-87c9-8a11b4719d82/1/1-K1UNiT40ygeyXBFjudS8QpCRSk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.85.36.0/22 Signature Algorithm: sha256WithRSAEncryption 34:33:f9:57:a8:9d:b4:99:50:0e:9f:ea:bf:48:35:66:31:27: f9:51:0e:96:6f:0d:da:54:00:3a:55:17:14:f3:8e:f1:13:d1: f4:75:0e:e6:ee:43:7e:ef:c7:1d:bb:b5:fb:12:9d:86:c4:de: 37:ad:2d:a8:a6:f9:27:ff:3f:3b:99:20:b3:f4:7b:e1:33:81: 68:7a:2f:39:10:81:51:16:78:a0:97:26:f0:a1:66:9f:6b:46: dc:1f:38:0e:fd:14:f5:9f:99:bb:bc:2f:b7:e9:6f:40:40:65: 19:1f:be:05:a9:55:54:d0:60:0b:9f:90:9f:1d:d9:10:59:ad: f7:16:6c:c4:03:6d:d6:bb:18:48:90:f2:32:0c:68:e1:b4:9d: 4a:eb:e8:42:e0:12:a7:af:bf:89:52:a6:7a:a8:7f:d9:d7:55: f0:51:3d:7a:79:3e:39:9a:e6:03:f2:18:34:33:f7:35:b1:13: 28:d1:3f:b5:4a:0a:12:f4:ca:78:49:0d:33:06:20:5d:70:62: 29:a4:85:2a:86:8f:c1:63:4d:b5:de:74:81:e2:30:50:a0:89: 3c:99:a1:1f:8e:94:ba:16:26:24:77:b9:02:34:91:2a:4a:8a: ee:68:5c:5d:3f:ef:80:41:e9:06:d0:8f:84:27:4e:a6:14:f9: 1f:59:96:6b -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt7pLKIEXXXHsR9/0iIbcnQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4YWQ1NDM2MjRmOGQzMjgxZWM5NzA0NThlZTc1MmYxMGE0 MjQ1MjkwHhcNMjYwMTAxMjIxOTA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZjNmNTFlYTZlNTIyYmVjYWE2NDRhMWJlOWM2OWQ5YjEwOTM4NDdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj9YDOZ16aXhY4xPvacvHoyR9+ywY jXbc7X9r+ZvPzhFkFW5Uo1soPUXCHcpB+SUWJTWlLL+9aNfZtESU2KuEqyPyv/u4 GPsOqZK8ob3S05X07E2vO/mJt9VV0xEQ9AwjRGdsGFmBF8bxm6dp+yfjrZijrbPL oTa8iUVJoERrO740bZL79hQi4ssUeOcwmwICEfX7jNutTSihnl51UeML4oRVbCwD jbsMNywYA6NiMKlbJF+YvbtKbzHZe+SVrwh0fm+a0YSDN5sgAsLnbiKukvSE72Ll tde598SsdXhOVZr1eX4n/A3eAX/UQsB6QphIOljWfBZ5R4dBpNrMB0okOwIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFC8/UepuUivsqmRKG+nGnZsQk4R7MB8GA1UdIwQY MBaAFPitVDYk+NMoHslwRY7nUvEKQkUpMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1LMVVOaVQ0MHlnZXlYQkZqdWRTOFFwQ1JTay5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjAvYWYxZjY0LWMzNWYtNDdlOC04N2M5 LThhMTFiNDcxOWQ4Mi8xL0x6OVI2bTVTSy15cVpFb2I2Y2FkbXhDVGhIcy5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvMjAvYWYxZjY0LWMzNWYtNDdlOC04N2M5LThhMTFiNDcxOWQ4 Mi8xLzEtSzFVTmlUNDB5Z2V5WEJGanVkUzhRcENSU2suY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAK5VSQw DQYJKoZIhvcNAQELBQADggEBADQz+VeonbSZUA6f6r9INWYxJ/lRDpZvDdpUADpV FxTzjvET0fR1DubuQ37vxx27tfsSnYbE3jetLaim+Sf/PzuZILP0e+EzgWh6LzkQ gVEWeKCXJvChZp9rRtwfOA79FPWfmbu8L7fpb0BAZRkfvgWpVVTQYAufkJ8d2RBZ rfcWbMQDbda7GEiQ8jIMaOG0nUrr6ELgEqevv4lSpnqof9nXVfBRPXp5Pjma5gPy GDQz9zWxEyjRP7VKChL0ynhJDTMGIF1wYimkhSqGj8FjTbXedIHiMFCgiTyZoR+O lLoWJiR3uQI0kSpKiu5oXF0/74BB6QbQj4QnTqYU+R9Zlms= -----END CERTIFICATE-----Generated at Mon Jan 26 10:53:21 2026 by rpki-client