This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/f0f945-dc3b-4672-942d-7f6ee7a76565/1/lVkRZLgugVMJGuDdXaiu9H9U2Qw.roa File: lVkRZLgugVMJGuDdXaiu9H9U2Qw.roa (raw, json) Hash identifier: cENQFbkj8p8qEi8NksPajunUhEGXlFBx1bfM8cV4t5c= Subject key identifier: 95:59:11:64:B8:2E:81:53:09:1A:E0:DD:5D:A8:AE:F4:7F:54:D9:0C Certificate issuer: /CN=2b76e1570cad7739fd0bff60632e05bc06f642e3 Certificate serial: 019AC9AED03AE10D12C79074D974C480F654 Authority key identifier: 2B:76:E1:57:0C:AD:77:39:FD:0B:FF:60:63:2E:05:BC:06:F6:42:E3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K3bhVwytdzn9C_9gYy4FvAb2QuM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/f0f945-dc3b-4672-942d-7f6ee7a76565/1/lVkRZLgugVMJGuDdXaiu9H9U2Qw.roa Signing time: Fri 28 Nov 2025 08:57:48 +0000 ROA not before: Fri 28 Nov 2025 08:57:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 208893 IP address blocks: 45.88.64.0/24 maxlen: 24 93.123.20.0/24 maxlen: 24 94.154.173.0/24 maxlen: 24 94.156.64.0/24 maxlen: 24 94.156.65.0/24 maxlen: 24 94.156.175.0/24 maxlen: 24 193.222.98.0/24 maxlen: 24 2a14:e200::/44 maxlen: 44 2a14:e200::/48 maxlen: 48 2a14:e200:1::/48 maxlen: 48 2a14:e200:2::/48 maxlen: 48 2a14:e200:3::/48 maxlen: 48 2a14:e200:10::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/f0f945-dc3b-4672-942d-7f6ee7a76565/1/K3bhVwytdzn9C_9gYy4FvAb2QuM.crl rsync://rpki.ripe.net/repository/DEFAULT/36/f0f945-dc3b-4672-942d-7f6ee7a76565/1/K3bhVwytdzn9C_9gYy4FvAb2QuM.mft rsync://rpki.ripe.net/repository/DEFAULT/K3bhVwytdzn9C_9gYy4FvAb2QuM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:c9:ae:d0:3a:e1:0d:12:c7:90:74:d9:74:c4:80:f6:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b76e1570cad7739fd0bff60632e05bc06f642e3 Validity Not Before: Nov 28 08:57:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=95591164b82e8153091ae0dd5da8aef47f54d90c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:3b:46:c7:fa:a9:30:d8:07:d4:f5:f5:29:92: ac:f1:69:09:28:16:0d:fd:e5:bc:4e:1a:48:f6:0f: 54:0d:13:f9:93:99:9d:16:d5:ff:b8:0b:2a:b9:31: c5:95:ee:2e:45:f6:8b:2b:60:ac:61:ca:b3:cd:77: ff:fe:e8:45:56:0e:1e:7f:25:ca:07:f4:a2:29:6f: 76:b3:93:b5:14:67:28:b6:63:0b:98:d0:90:d9:0a: 34:b7:2a:ee:05:ea:a0:33:6b:6e:b2:dc:bb:71:11: 59:47:4b:d8:d2:95:24:50:b9:ff:55:74:f5:2b:65: 66:eb:87:56:f1:c7:7b:52:06:79:76:8a:bc:67:56: cc:da:35:f8:ed:f7:ae:a5:1f:25:39:8a:52:16:55: 13:bb:90:67:73:8b:35:37:f9:39:90:c1:64:a6:7f: ea:1f:9e:0c:4e:9c:6c:86:7d:8e:4c:79:78:d7:7c: 0d:df:1b:30:e0:25:90:5f:c3:21:2e:4e:53:ec:0d: 6f:09:fe:97:e4:cb:94:47:30:89:18:c2:43:71:7e: 28:eb:0f:0f:e1:a4:b7:6f:8f:6b:04:6d:6b:e0:ff: 78:f2:73:c4:fb:77:62:9b:66:e4:9f:e9:49:ff:3b: 95:06:d6:ac:cd:40:e0:51:46:e7:76:39:ac:cb:db: f2:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:59:11:64:B8:2E:81:53:09:1A:E0:DD:5D:A8:AE:F4:7F:54:D9:0C X509v3 Authority Key Identifier: keyid:2B:76:E1:57:0C:AD:77:39:FD:0B:FF:60:63:2E:05:BC:06:F6:42:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K3bhVwytdzn9C_9gYy4FvAb2QuM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f0f945-dc3b-4672-942d-7f6ee7a76565/1/lVkRZLgugVMJGuDdXaiu9H9U2Qw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f0f945-dc3b-4672-942d-7f6ee7a76565/1/K3bhVwytdzn9C_9gYy4FvAb2QuM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.88.64.0/24 93.123.20.0/24 94.154.173.0/24 94.156.64.0/23 94.156.175.0/24 193.222.98.0/24 IPv6: 2a14:e200::/43 Signature Algorithm: sha256WithRSAEncryption 5b:01:c2:e3:d7:a7:b0:ac:88:6d:d4:7a:c9:77:d1:4f:9c:00: 1f:4c:8b:32:34:52:ac:a7:58:e1:00:8f:6a:55:52:2d:14:83: 42:b1:c6:9c:af:13:aa:8f:e8:54:b8:6d:7b:71:0d:e5:39:3f: f9:3b:d1:7f:a8:7c:50:4f:cc:67:11:9a:2b:a3:ce:b1:c1:60: 13:52:17:14:91:55:e2:fa:af:34:92:83:5e:05:07:b7:d7:5f: 00:30:69:25:25:92:96:50:7d:ca:b3:cc:86:56:99:69:fe:33: 8f:6d:52:77:b1:01:f1:2a:20:3b:c2:36:f7:d7:0a:03:a3:23: f8:75:7e:ed:cf:ff:86:75:0e:0c:4d:2c:b2:2d:81:b4:fb:f9: 35:0f:04:45:14:1c:0f:89:9d:17:0f:ee:6e:7f:cd:47:46:f4: ca:93:dd:1e:8e:57:b1:37:28:07:e7:cb:e6:68:66:a0:0a:68: 5a:63:70:45:b5:aa:69:be:3e:fa:97:96:59:a2:dc:68:03:49: c2:57:19:55:6f:df:e2:a5:68:50:e6:59:cc:21:38:ad:fd:c3: 6b:d5:cb:75:7a:35:d3:99:f8:9f:e2:a6:88:26:1c:f1:97:66: 61:c0:ee:42:51:05:c8:bd:bf:69:b0:d1:ce:d5:10:f5:3a:2d: fb:23:c2:6f -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgISAZrJrtA64Q0Sx5B02XTEgPZUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJiNzZlMTU3MGNhZDc3MzlmZDBiZmY2MDYzMmUwNWJjMDZm NjQyZTMwHhcNMjUxMTI4MDg1NzQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NTU5MTE2NGI4MmU4MTUzMDkxYWUwZGQ1ZGE4YWVmNDdmNTRkOTBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoztGx/qpMNgH1PX1KZKs8WkJKBYN /eW8ThpI9g9UDRP5k5mdFtX/uAsquTHFle4uRfaLK2CsYcqzzXf//uhFVg4efyXK B/SiKW92s5O1FGcotmMLmNCQ2Qo0tyruBeqgM2tusty7cRFZR0vY0pUkULn/VXT1 K2Vm64dW8cd7UgZ5doq8Z1bM2jX47feupR8lOYpSFlUTu5Bnc4s1N/k5kMFkpn/q H54MTpxshn2OTHl413wN3xsw4CWQX8MhLk5T7A1vCf6X5MuURzCJGMJDcX4o6w8P 4aS3b49rBG1r4P948nPE+3dim2bkn+lJ/zuVBtaszUDgUUbndjmsy9vyowIDAQAB o4ICODCCAjQwHQYDVR0OBBYEFJVZEWS4LoFTCRrg3V2orvR/VNkMMB8GA1UdIwQY MBaAFCt24VcMrXc5/Qv/YGMuBbwG9kLjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSzNiaFZ3eXRkem45Q185Z1l5NEZ2QWIyUXVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9mMGY5NDUtZGMzYi00NjcyLTk0MmQt N2Y2ZWU3YTc2NTY1LzEvbFZrUlpMZ3VnVk1KR3VEZFhhaXU5SDlVMlF3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9mMGY5NDUtZGMzYi00NjcyLTk0MmQtN2Y2ZWU3YTc2NTY1 LzEvSzNiaFZ3eXRkem45Q185Z1l5NEZ2QWIyUXVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CME4GCCsGAQUFBwEHAQH/BD8wPTAqBAIAATAkAwQALVhAAwQA XXsUAwQAXpqtAwQBXpxAAwQAXpyvAwQAwd5iMA8EAgACMAkDBwUqFOIAAAAwDQYJ KoZIhvcNAQELBQADggEBAFsBwuPXp7CsiG3Uesl30U+cAB9MizI0UqynWOEAj2pV Ui0Ug0KxxpyvE6qP6FS4bXtxDeU5P/k70X+ofFBPzGcRmiujzrHBYBNSFxSRVeL6 rzSSg14FB7fXXwAwaSUlkpZQfcqzzIZWmWn+M49tUnexAfEqIDvCNvfXCgOjI/h1 fu3P/4Z1DgxNLLItgbT7+TUPBEUUHA+JnRcP7m5/zUdG9MqT3R6OV7E3KAfny+Zo ZqAKaFpjcEW1qmm+PvqXllmi3GgDScJXGVVv3+KlaFDmWcwhOK39w2vVy3V6NdOZ +J/ipogmHPGXZmHA7kJRBci9v2mw0c7VEPU6Lfsjwm8= -----END CERTIFICATE-----Generated at Sat Dec 6 05:43:56 2025 by rpki-client