This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/4d2796-7f80-43a4-b814-00395a38c37d/1/lBanohcXuTk3tPGpdRVlhFgo50k.roa File: lBanohcXuTk3tPGpdRVlhFgo50k.roa (raw, json) Hash identifier: QRKqk4kvpnYuyI5Tk2E7RWYUVWf78BdUbT/Cbi1GnI4= Subject key identifier: 94:16:A7:A2:17:17:B9:39:37:B4:F1:A9:75:15:65:84:58:28:E7:49 Certificate issuer: /CN=67708e05cda86bbde74edba85d1dbeb73fe7f757 Certificate serial: 019B7AC85A2514FEC520734C985CE069A348 Authority key identifier: 67:70:8E:05:CD:A8:6B:BD:E7:4E:DB:A8:5D:1D:BE:B7:3F:E7:F7:57 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z3COBc2oa73nTtuoXR2-tz_n91c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/4d2796-7f80-43a4-b814-00395a38c37d/1/lBanohcXuTk3tPGpdRVlhFgo50k.roa Signing time: Thu 01 Jan 2026 18:18:29 +0000 ROA not before: Thu 01 Jan 2026 18:18:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 30734 IP address blocks: 195.95.160.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/4d2796-7f80-43a4-b814-00395a38c37d/1/Z3COBc2oa73nTtuoXR2-tz_n91c.crl rsync://rpki.ripe.net/repository/DEFAULT/44/4d2796-7f80-43a4-b814-00395a38c37d/1/Z3COBc2oa73nTtuoXR2-tz_n91c.mft rsync://rpki.ripe.net/repository/DEFAULT/Z3COBc2oa73nTtuoXR2-tz_n91c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:5a:25:14:fe:c5:20:73:4c:98:5c:e0:69:a3:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67708e05cda86bbde74edba85d1dbeb73fe7f757 Validity Not Before: Jan 1 18:18:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9416a7a21717b93937b4f1a9751565845828e749 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:f9:c8:5e:2d:b6:1d:92:13:33:27:83:88:b5: 3f:f2:5d:2c:92:c8:dc:67:ba:6a:65:86:5e:de:4e: a3:1e:30:6e:05:ec:d6:b5:02:56:6e:9b:69:a9:f3: 48:05:65:26:16:aa:ca:47:9b:05:9e:cb:59:09:45: a1:32:bf:16:01:19:81:af:e6:74:dc:b4:ac:a1:e7: 37:0a:18:a3:8f:ef:85:c3:32:3a:f1:74:ef:77:1c: 13:a3:a5:54:84:62:9c:11:32:ba:f9:a8:c7:3c:5d: 70:8c:2e:a2:b2:b9:24:d5:f5:71:d2:3a:0f:bf:58: d2:b2:cf:9c:5e:ba:2b:81:20:8d:22:a2:1e:28:8a: f2:d9:5e:64:5d:bb:c1:a1:c9:df:f8:6e:74:9e:cc: ea:eb:7d:0d:66:72:ef:32:8d:fc:76:e7:3d:3f:c1: 85:34:f2:3b:07:34:14:e0:18:68:6b:79:a3:62:21: 9a:6c:12:bf:aa:2a:c3:25:a2:49:9e:78:ef:8f:41: 45:17:62:2f:dc:ec:e0:83:88:c6:1a:06:fe:33:6c: 43:b0:f4:39:8f:28:c0:bc:d8:68:7d:24:da:a7:f5: 3b:3c:49:96:80:13:80:a7:30:e4:a7:3f:0b:e6:d2: 08:df:c9:91:90:24:d9:e1:e3:11:f4:ab:99:79:30: e1:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:16:A7:A2:17:17:B9:39:37:B4:F1:A9:75:15:65:84:58:28:E7:49 X509v3 Authority Key Identifier: keyid:67:70:8E:05:CD:A8:6B:BD:E7:4E:DB:A8:5D:1D:BE:B7:3F:E7:F7:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z3COBc2oa73nTtuoXR2-tz_n91c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/4d2796-7f80-43a4-b814-00395a38c37d/1/lBanohcXuTk3tPGpdRVlhFgo50k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/4d2796-7f80-43a4-b814-00395a38c37d/1/Z3COBc2oa73nTtuoXR2-tz_n91c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.95.160.0/24 Signature Algorithm: sha256WithRSAEncryption 76:a4:15:ef:ef:c5:13:62:93:1c:84:1b:ce:67:6b:4d:77:00: ce:dc:fc:10:67:98:cc:bf:bf:0d:47:a2:7d:e1:a9:7c:f0:56: 4e:e0:6e:cc:f3:19:c0:a2:9c:31:04:18:35:d0:18:99:38:dc: 28:28:1e:74:eb:8f:f9:5c:80:1d:ed:11:ac:9b:79:12:c8:e2: 5e:00:dd:e6:3a:15:e0:93:1a:a5:2e:06:62:28:32:4a:40:f1: 81:28:6b:c1:8a:8e:f1:06:5d:cc:98:ba:41:34:29:3c:db:f0: 80:f4:22:7f:84:d0:9c:f4:c5:77:e0:ea:11:b0:33:fa:5b:35: 09:fe:98:8e:0e:49:d0:03:75:f4:e9:9a:88:66:8b:a6:25:bf: 9e:b3:9d:2d:92:47:86:e4:de:9f:bc:88:c9:9f:1c:29:bf:d7: bf:9d:c8:4e:03:01:3a:e1:e3:dc:4a:c1:85:d9:b3:f3:6b:82: fa:d3:e4:1a:1d:9b:fa:6f:30:8d:67:0f:4f:82:45:38:36:ff: 1a:f3:6d:0e:5c:07:e4:c3:00:3d:16:fb:32:ef:1a:e6:71:94: 2e:b8:15:33:7b:fd:30:0b:bb:73:63:5d:e7:5b:ac:77:77:a9: cd:d2:56:0b:a4:6f:cc:96:76:20:00:52:16:7d:28:8c:be:97: 51:53:08:1d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yFolFP7FIHNMmFzgaaNIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3NzA4ZTA1Y2RhODZiYmRlNzRlZGJhODVkMWRiZWI3M2Zl N2Y3NTcwHhcNMjYwMTAxMTgxODI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NDE2YTdhMjE3MTdiOTM5MzdiNGYxYTk3NTE1NjU4NDU4MjhlNzQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApfnIXi22HZITMyeDiLU/8l0sksjc Z7pqZYZe3k6jHjBuBezWtQJWbptpqfNIBWUmFqrKR5sFnstZCUWhMr8WARmBr+Z0 3LSsoec3Chijj++FwzI68XTvdxwTo6VUhGKcETK6+ajHPF1wjC6isrkk1fVx0joP v1jSss+cXrorgSCNIqIeKIry2V5kXbvBocnf+G50nszq630NZnLvMo38duc9P8GF NPI7BzQU4Bhoa3mjYiGabBK/qirDJaJJnnjvj0FFF2Iv3Ozgg4jGGgb+M2xDsPQ5 jyjAvNhofSTap/U7PEmWgBOApzDkpz8L5tII38mRkCTZ4eMR9KuZeTDhqwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJQWp6IXF7k5N7TxqXUVZYRYKOdJMB8GA1UdIwQY MBaAFGdwjgXNqGu9507bqF0dvrc/5/dXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWjNDT0JjMm9hNzNuVHR1b1hSMi10el9uOTFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC80ZDI3OTYtN2Y4MC00M2E0LWI4MTQt MDAzOTVhMzhjMzdkLzEvbEJhbm9oY1h1VGszdFBHcGRSVmxoRmdvNTBrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC80ZDI3OTYtN2Y4MC00M2E0LWI4MTQtMDAzOTVhMzhjMzdk LzEvWjNDT0JjMm9hNzNuVHR1b1hSMi10el9uOTFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw1+gMA0G CSqGSIb3DQEBCwUAA4IBAQB2pBXv78UTYpMchBvOZ2tNdwDO3PwQZ5jMv78NR6J9 4al88FZO4G7M8xnAopwxBBg10BiZONwoKB5064/5XIAd7RGsm3kSyOJeAN3mOhXg kxqlLgZiKDJKQPGBKGvBio7xBl3MmLpBNCk82/CA9CJ/hNCc9MV34OoRsDP6WzUJ /piODknQA3X06ZqIZoumJb+es50tkkeG5N6fvIjJnxwpv9e/nchOAwE64ePcSsGF 2bPza4L60+QaHZv6bzCNZw9PgkU4Nv8a820OXAfkwwA9Fvsy7xrmcZQuuBUze/0w C7tzY13nW6x3d6nN0lYLpG/MlnYgAFIWfSiMvpdRUwgd -----END CERTIFICATE-----Generated at Sun Jan 25 22:17:05 2026 by rpki-client