This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/L-Em4Qwd1SGlApEe2jCd6OIqSQI.roa File: L-Em4Qwd1SGlApEe2jCd6OIqSQI.roa (raw, json) Hash identifier: wiTpvgWeu86taeNRcVHiPGZqRDTAGiEQ5bjuWnbAxHc= Subject key identifier: 2F:E1:26:E1:0C:1D:D5:21:A5:02:91:1E:DA:30:9D:E8:E2:2A:49:02 Certificate issuer: /CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc Certificate serial: 019B77C776818EAAACCA85EC0BA99DFBDCF4 Authority key identifier: 88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/L-Em4Qwd1SGlApEe2jCd6OIqSQI.roa Signing time: Thu 01 Jan 2026 04:18:39 +0000 ROA not before: Thu 01 Jan 2026 04:18:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51249 IP address blocks: 87.99.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.mft rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:76:81:8e:aa:ac:ca:85:ec:0b:a9:9d:fb:dc:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc Validity Not Before: Jan 1 04:18:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2fe126e10c1dd521a502911eda309de8e22a4902 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:10:a8:e4:eb:89:9d:a3:ef:16:be:1d:f3:1e: f4:0d:66:bc:94:46:81:b1:f7:1c:76:24:06:e8:f8: f2:a7:f5:b7:b9:0f:18:db:93:6f:ea:3d:57:6c:b9: 2a:41:c7:6a:8f:27:b9:ba:6c:3e:f7:a0:ea:1d:dd: e0:bb:3a:a3:18:17:ba:e3:b0:cc:9a:4c:a8:80:8b: bb:ee:d2:39:54:64:93:d0:b4:c5:4c:31:68:76:7a: 29:10:34:3b:a5:8e:37:5d:e1:5a:23:3c:48:b9:9e: 37:7a:6d:f1:b2:19:58:fd:13:74:bf:be:e7:dd:aa: 68:dc:9c:57:5a:6e:01:c8:48:18:70:91:9d:64:6f: dd:2a:65:2b:1f:c9:6c:cc:05:43:1a:c4:b8:65:5f: 44:27:fe:6f:e8:d0:cb:ce:27:37:da:6b:34:fe:e5: 5d:42:3a:fa:7a:87:9b:14:b3:dc:60:46:1c:3e:4a: bd:19:71:49:ef:26:b7:86:f4:55:2b:77:10:6b:de: 8c:7c:54:a9:12:b9:ad:2c:da:c5:d7:3f:0b:3c:34: 26:3f:10:8b:c3:c9:13:e1:be:9e:7b:2f:95:40:9b: 06:ec:23:0a:02:c7:4c:9a:d7:57:f7:9c:a2:9b:63: b0:e0:c3:b0:46:36:b1:e5:40:48:ff:72:46:ee:a6: 60:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:E1:26:E1:0C:1D:D5:21:A5:02:91:1E:DA:30:9D:E8:E2:2A:49:02 X509v3 Authority Key Identifier: keyid:88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/L-Em4Qwd1SGlApEe2jCd6OIqSQI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.99.71.0/24 Signature Algorithm: sha256WithRSAEncryption 8b:84:55:69:bb:e5:1a:2f:16:85:ef:f5:9f:64:2e:ff:81:3f: 7c:f8:ce:99:bb:83:04:7b:c8:19:cc:73:e4:10:d2:bb:d1:a7: 55:fd:ef:0a:3b:be:dc:92:a9:3e:cc:c9:1a:a7:d7:10:e0:1f: 0c:31:ba:22:48:6b:95:4b:a3:11:c5:70:c9:e6:6d:04:8e:2e: e1:81:01:b2:72:0a:e5:e2:51:1a:ae:13:9a:6e:6e:86:19:6a: 61:a3:36:72:4f:60:10:82:83:13:d5:86:55:82:4e:37:d6:f7: 1e:fa:3d:4d:ed:4c:e7:41:2e:0d:19:1a:bf:81:7a:c0:dc:62: 6f:92:d5:bb:8c:d2:40:c7:68:41:e5:f3:60:7c:37:d4:c6:26: 98:71:7e:36:ab:41:6f:b7:fa:76:e2:8c:c5:6e:ba:0b:d7:ae: 36:35:54:81:04:24:fb:57:10:0d:0c:7d:a7:cc:19:1d:fd:89: be:22:e9:aa:c1:a3:9a:b5:52:93:2b:da:ea:a5:ae:72:ce:51: 08:05:6d:a3:b4:39:a6:5a:c2:c7:e0:a3:48:9c:c3:55:21:da: 01:9e:c3:db:14:c5:fd:22:a2:70:5c:a6:7b:88:fd:02:7a:00: c0:ba:b9:d6:12:ad:b2:f2:14:4e:7c:a4:ba:43:64:c4:c9:1b: 63:2f:0d:8f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3x3aBjqqsyoXsC6md+9z0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4YWRkOWI2NzFmN2EzNmViMjM2N2UzNGZlZTRiY2IxM2I4 ZjY2Y2MwHhcNMjYwMTAxMDQxODM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZmUxMjZlMTBjMWRkNTIxYTUwMjkxMWVkYTMwOWRlOGUyMmE0OTAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3hCo5OuJnaPvFr4d8x70DWa8lEaB sfccdiQG6Pjyp/W3uQ8Y25Nv6j1XbLkqQcdqjye5umw+96DqHd3guzqjGBe647DM mkyogIu77tI5VGST0LTFTDFodnopEDQ7pY43XeFaIzxIuZ43em3xshlY/RN0v77n 3apo3JxXWm4ByEgYcJGdZG/dKmUrH8lszAVDGsS4ZV9EJ/5v6NDLzic32ms0/uVd Qjr6eoebFLPcYEYcPkq9GXFJ7ya3hvRVK3cQa96MfFSpErmtLNrF1z8LPDQmPxCL w8kT4b6eey+VQJsG7CMKAsdMmtdX95yim2Ow4MOwRjax5UBI/3JG7qZgWQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFC/hJuEMHdUhpQKRHtownejiKkkCMB8GA1UdIwQY MBaAFIit2bZx96NusjZ+NP7kvLE7j2bMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUszWnRuSDNvMjZ5Tm40MF91UzhzVHVQWnN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy8zZWQwMGEtMTVlZS00NjY0LWE3ZjEt YTFiOTZiOWI3MGY4LzEvTC1FbTRRd2QxU0dsQXBFZTJqQ2Q2T0lxU1FJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy8zZWQwMGEtMTVlZS00NjY0LWE3ZjEtYTFiOTZiOWI3MGY4 LzEvaUszWnRuSDNvMjZ5Tm40MF91UzhzVHVQWnN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV2NHMA0G CSqGSIb3DQEBCwUAA4IBAQCLhFVpu+UaLxaF7/WfZC7/gT98+M6Zu4MEe8gZzHPk ENK70adV/e8KO77ckqk+zMkap9cQ4B8MMboiSGuVS6MRxXDJ5m0Eji7hgQGycgrl 4lEarhOabm6GGWphozZyT2AQgoMT1YZVgk431vce+j1N7UznQS4NGRq/gXrA3GJv ktW7jNJAx2hB5fNgfDfUxiaYcX42q0Fvt/p24ozFbroL1642NVSBBCT7VxANDH2n zBkd/Ym+IumqwaOatVKTK9rqpa5yzlEIBW2jtDmmWsLH4KNInMNVIdoBnsPbFMX9 IqJwXKZ7iP0CegDAurnWEq2y8hROfKS6Q2TEyRtjLw2P -----END CERTIFICATE-----Generated at Sun Jan 25 13:31:23 2026 by rpki-client