This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/LRyKKJzTBliMx34ASYig8HFEXqY.roa File: LRyKKJzTBliMx34ASYig8HFEXqY.roa (raw, json) Hash identifier: HoiPjv5M2f1QZDzcqH+pau0FYK61g+kOdOsd3jsE6KY= Subject key identifier: 2D:1C:8A:28:9C:D3:06:58:8C:C7:7E:00:49:88:A0:F0:71:44:5E:A6 Certificate issuer: /CN=201fe30fc6b4b0d0f6db4e1bfbbd50195dca575c Certificate serial: 019B7DCB2A0514CDAC4C3148DC63D9FE8552 Authority key identifier: 20:1F:E3:0F:C6:B4:B0:D0:F6:DB:4E:1B:FB:BD:50:19:5D:CA:57:5C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IB_jD8a0sND2204b-71QGV3KV1w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/LRyKKJzTBliMx34ASYig8HFEXqY.roa Signing time: Fri 02 Jan 2026 08:20:25 +0000 ROA not before: Fri 02 Jan 2026 08:20:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42093 IP address blocks: 217.170.4.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/IB_jD8a0sND2204b-71QGV3KV1w.crl rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/IB_jD8a0sND2204b-71QGV3KV1w.mft rsync://rpki.ripe.net/repository/DEFAULT/IB_jD8a0sND2204b-71QGV3KV1w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:2a:05:14:cd:ac:4c:31:48:dc:63:d9:fe:85:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=201fe30fc6b4b0d0f6db4e1bfbbd50195dca575c Validity Not Before: Jan 2 08:20:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2d1c8a289cd306588cc77e004988a0f071445ea6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:50:31:e4:e8:39:31:f3:50:07:b7:f0:1e:b8: 48:49:5e:9a:e4:9e:87:2c:6b:e3:fb:d8:fa:f1:06: 56:fe:c4:b5:ba:52:8a:bc:7f:4b:9e:bc:70:81:11: 35:cc:1e:95:81:7e:42:e8:73:fd:9b:e5:f9:62:04: 81:47:87:03:13:33:81:9a:06:ca:09:82:07:c7:34: 18:19:61:90:07:44:70:12:ae:e5:86:28:39:08:e1: 97:1c:e9:d8:51:ce:17:ab:3e:14:82:9b:d4:a2:4d: c2:65:9e:aa:01:56:19:46:be:76:3d:60:9d:33:f5: 6d:d3:48:ea:91:04:82:6c:94:da:14:cb:97:96:52: 62:0e:57:b6:31:a6:eb:89:93:6a:f1:10:a0:f6:51: 62:76:a9:14:5a:d8:21:94:79:d3:c0:ec:48:47:e2: ee:d7:0f:04:03:ce:b0:c1:ef:fe:e4:40:e8:aa:0f: d5:b1:8d:6a:2b:5f:9e:73:3a:b1:9c:1c:df:1c:32: f3:0d:d5:a6:d1:72:1e:61:06:9c:88:7a:12:8e:6d: 4e:50:67:8b:b0:4e:9e:bd:1e:b8:ac:cb:38:7e:b4: 88:02:9b:a5:4c:8a:f5:c6:f7:e3:a9:72:57:5e:9e: 44:22:7e:8f:50:1d:29:e1:fa:5f:11:c7:aa:73:29: 6f:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:1C:8A:28:9C:D3:06:58:8C:C7:7E:00:49:88:A0:F0:71:44:5E:A6 X509v3 Authority Key Identifier: keyid:20:1F:E3:0F:C6:B4:B0:D0:F6:DB:4E:1B:FB:BD:50:19:5D:CA:57:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IB_jD8a0sND2204b-71QGV3KV1w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/LRyKKJzTBliMx34ASYig8HFEXqY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/IB_jD8a0sND2204b-71QGV3KV1w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.170.4.0/22 Signature Algorithm: sha256WithRSAEncryption 5f:a9:15:33:8e:e2:f2:76:98:88:91:60:7b:c2:d9:9e:2f:07: d3:80:df:ee:cf:82:7c:d4:86:11:ef:db:a8:dc:dd:f2:14:c5: 2b:96:62:a7:9f:ba:e3:c8:db:8b:a2:0a:5b:a2:5d:73:69:51: e4:c3:a4:33:d4:f8:aa:22:e1:5d:f4:be:3d:1f:96:72:5a:f1: 30:c6:0a:43:7c:c4:28:12:e1:42:28:f0:c4:26:00:e5:6e:77: 62:82:8a:8d:2a:51:61:8a:5f:a2:c2:83:27:67:2d:40:5e:ab: dc:98:2f:5d:ce:1e:39:ac:6c:d1:f0:da:3d:d9:88:d4:e1:01: 4b:d4:1e:ee:8a:3e:8c:ce:5b:d6:f9:78:b2:2f:b8:ce:1d:ca: 33:21:ba:1b:81:fe:15:e3:36:3e:19:6a:d1:84:7e:dd:81:d0: 18:ef:0b:e0:ee:f9:72:27:33:52:0a:a2:c4:3d:18:bf:8d:0c: 4a:fe:79:84:90:3e:c6:18:db:0e:9d:71:59:f5:6d:e6:76:ac: e4:3f:73:93:02:a9:df:ba:dd:3a:80:7d:94:99:46:74:2d:67: 8f:9b:0d:ac:0e:ed:52:d2:a0:cc:ff:60:17:e0:91:99:d4:40: 3c:fa:a5:7c:69:72:6a:71:bf:0a:04:67:1b:1e:5c:49:20:35: 30:81:ec:b0 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9yyoFFM2sTDFI3GPZ/oVSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwMWZlMzBmYzZiNGIwZDBmNmRiNGUxYmZiYmQ1MDE5NWRj YTU3NWMwHhcNMjYwMTAyMDgyMDI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZDFjOGEyODljZDMwNjU4OGNjNzdlMDA0OTg4YTBmMDcxNDQ1ZWE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn1Ax5Og5MfNQB7fwHrhISV6a5J6H LGvj+9j68QZW/sS1ulKKvH9LnrxwgRE1zB6VgX5C6HP9m+X5YgSBR4cDEzOBmgbK CYIHxzQYGWGQB0RwEq7lhig5COGXHOnYUc4Xqz4UgpvUok3CZZ6qAVYZRr52PWCd M/Vt00jqkQSCbJTaFMuXllJiDle2MabriZNq8RCg9lFidqkUWtghlHnTwOxIR+Lu 1w8EA86wwe/+5EDoqg/VsY1qK1+eczqxnBzfHDLzDdWm0XIeYQaciHoSjm1OUGeL sE6evR64rMs4frSIApulTIr1xvfjqXJXXp5EIn6PUB0p4fpfEceqcylvdQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFC0ciiic0wZYjMd+AEmIoPBxRF6mMB8GA1UdIwQY MBaAFCAf4w/GtLDQ9ttOG/u9UBldyldcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSUJfakQ4YTBzTkQyMjA0Yi03MVFHVjNLVjF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My84ZDgwZjktNDk0ZS00YWJiLTk5NTYt ZmMxMjFjODAwYjMwLzEvTFJ5S0tKelRCbGlNeDM0QVNZaWc4SEZFWHFZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80My84ZDgwZjktNDk0ZS00YWJiLTk5NTYtZmMxMjFjODAwYjMw LzEvSUJfakQ4YTBzTkQyMjA0Yi03MVFHVjNLVjF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2aoEMA0G CSqGSIb3DQEBCwUAA4IBAQBfqRUzjuLydpiIkWB7wtmeLwfTgN/uz4J81IYR79uo 3N3yFMUrlmKnn7rjyNuLogpbol1zaVHkw6Qz1PiqIuFd9L49H5ZyWvEwxgpDfMQo EuFCKPDEJgDlbndigoqNKlFhil+iwoMnZy1AXqvcmC9dzh45rGzR8No92YjU4QFL 1B7uij6MzlvW+XiyL7jOHcozIbobgf4V4zY+GWrRhH7dgdAY7wvg7vlyJzNSCqLE PRi/jQxK/nmEkD7GGNsOnXFZ9W3mdqzkP3OTAqnfut06gH2UmUZ0LWePmw2sDu1S 0qDM/2AX4JGZ1EA8+qV8aXJqcb8KBGcbHlxJIDUwgeyw -----END CERTIFICATE-----Generated at Sun Jan 25 19:39:15 2026 by rpki-client