This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/57cd56-7bec-40f1-bf72-3d46caf55738/1/1-Lmc2QhlCIt9CEaFf21G5Ih9JAk.roa File: 1-Lmc2QhlCIt9CEaFf21G5Ih9JAk.roa (raw, json) Hash identifier: 6iVNvhe10i4KO9IhQfbWbvNH2WkwCCWrKbOYcXZWq7g= Subject key identifier: F8:B9:9C:D9:08:65:08:8B:7D:08:46:85:7F:6D:46:E4:88:7D:24:09 Certificate issuer: /CN=550d4c571d8bfbfdd8fa3a170f99fb3afab411d1 Certificate serial: 019B7834FCB555C2785308D04C8F3161F7E7 Authority key identifier: 55:0D:4C:57:1D:8B:FB:FD:D8:FA:3A:17:0F:99:FB:3A:FA:B4:11:D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/57cd56-7bec-40f1-bf72-3d46caf55738/1/1-Lmc2QhlCIt9CEaFf21G5Ih9JAk.roa Signing time: Thu 01 Jan 2026 06:18:17 +0000 ROA not before: Thu 01 Jan 2026 06:18:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209271 IP address blocks: 176.119.220.0/24 maxlen: 24 2a0a:ac0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/57cd56-7bec-40f1-bf72-3d46caf55738/1/VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.crl rsync://rpki.ripe.net/repository/DEFAULT/45/57cd56-7bec-40f1-bf72-3d46caf55738/1/VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.mft rsync://rpki.ripe.net/repository/DEFAULT/VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:fc:b5:55:c2:78:53:08:d0:4c:8f:31:61:f7:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=550d4c571d8bfbfdd8fa3a170f99fb3afab411d1 Validity Not Before: Jan 1 06:18:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f8b99cd90865088b7d0846857f6d46e4887d2409 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:d5:ad:54:d8:1a:ef:f1:e8:00:02:cd:7a:6f: 88:9b:01:f1:f9:bb:84:fc:54:81:ff:1f:36:7b:9e: 8e:48:80:02:f8:12:07:23:4c:1e:77:4f:d0:03:e9: ee:3f:2c:57:42:a1:02:15:b5:96:94:e5:1b:4d:8c: 3d:8d:a7:db:73:c0:f7:bf:76:2b:92:82:84:e3:58: 2c:6d:fd:72:16:42:7c:55:73:ec:5e:27:69:8c:d9: e6:5f:f0:97:32:cb:1b:a1:33:29:3f:73:ce:da:7e: bd:c5:6f:8c:44:96:2a:5e:fb:f0:4f:fc:21:9e:15: b3:53:24:1a:f4:75:d5:95:ad:cf:62:d2:83:f9:1b: 75:80:0c:a0:59:db:2d:9d:26:6a:4b:fa:0d:40:2e: 78:54:cb:f1:3d:e9:db:b7:12:f1:4b:42:6a:5e:06: cc:e1:f3:ea:57:67:22:fb:84:6b:5e:7f:20:96:df: 80:b7:05:14:5e:6d:e4:91:a5:3d:6d:e2:91:56:f4: 18:c5:de:6b:ca:4a:ac:ba:3b:61:69:fd:cc:ac:12: 65:62:ec:1b:53:06:05:40:50:ad:76:af:06:14:d2: 08:25:55:7a:fd:02:a8:f4:04:7d:b7:4e:44:d5:2a: 79:1b:ed:a0:1c:25:18:e0:9b:78:c6:64:fa:d5:d7: 1a:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:B9:9C:D9:08:65:08:8B:7D:08:46:85:7F:6D:46:E4:88:7D:24:09 X509v3 Authority Key Identifier: keyid:55:0D:4C:57:1D:8B:FB:FD:D8:FA:3A:17:0F:99:FB:3A:FA:B4:11:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/57cd56-7bec-40f1-bf72-3d46caf55738/1/1-Lmc2QhlCIt9CEaFf21G5Ih9JAk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/57cd56-7bec-40f1-bf72-3d46caf55738/1/VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.119.220.0/24 IPv6: 2a0a:ac0::/29 Signature Algorithm: sha256WithRSAEncryption c5:ec:8d:42:45:1e:2e:a3:be:b9:8e:f5:6f:a1:59:81:cd:39: 6e:16:87:31:23:66:77:c4:91:f5:16:fc:ae:fe:9e:83:7f:29: 73:8e:3c:86:d1:4a:a5:1e:e6:3c:be:48:a6:1f:b2:82:6d:d4: 88:b3:44:f4:8d:a6:06:ea:4e:cd:a6:fc:0d:a9:4c:5a:cb:82: 43:cd:16:5f:02:3c:77:00:df:33:76:d9:41:5c:ec:d7:23:78: e2:7c:4c:80:50:08:04:af:7b:4f:31:62:35:36:e1:41:7d:51: f6:b8:2a:e2:69:17:bd:62:0d:32:e5:0f:a5:32:4b:f5:d9:03: 71:3f:d0:9e:6d:ce:d0:8b:d7:d0:f2:72:36:17:e5:15:c4:53: f1:e4:cf:31:68:59:37:56:4a:e2:bf:4c:b5:c4:7c:24:b4:f9: 65:bb:5d:f6:f4:4b:25:28:0f:21:3b:e3:2e:69:30:7d:26:5f: 4a:4d:3f:5c:b5:f7:b3:7b:25:4e:67:de:47:b4:cd:4b:01:6a: 0d:1b:a5:41:8a:fb:11:c6:22:d9:d6:ba:1c:4e:9b:df:da:20: 86:62:73:85:01:24:3e:7b:b1:30:02:b5:0b:18:e8:aa:2f:24: cc:ed:53:fe:aa:39:89:69:dd:4b:81:01:ca:6a:ad:ad:23:ff: 94:f6:c3:fa -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgISAZt4NPy1VcJ4UwjQTI8xYffnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1MGQ0YzU3MWQ4YmZiZmRkOGZhM2ExNzBmOTlmYjNhZmFi NDExZDEwHhcNMjYwMTAxMDYxODE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOGI5OWNkOTA4NjUwODhiN2QwODQ2ODU3ZjZkNDZlNDg4N2QyNDA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApdWtVNga7/HoAALNem+ImwHx+buE /FSB/x82e56OSIAC+BIHI0wed0/QA+nuPyxXQqECFbWWlOUbTYw9jafbc8D3v3Yr koKE41gsbf1yFkJ8VXPsXidpjNnmX/CXMssboTMpP3PO2n69xW+MRJYqXvvwT/wh nhWzUyQa9HXVla3PYtKD+Rt1gAygWdstnSZqS/oNQC54VMvxPenbtxLxS0JqXgbM 4fPqV2ci+4RrXn8glt+AtwUUXm3kkaU9beKRVvQYxd5rykqsujthaf3MrBJlYuwb UwYFQFCtdq8GFNIIJVV6/QKo9AR9t05E1Sp5G+2gHCUY4Jt4xmT61dcabQIDAQAB o4ICGTCCAhUwHQYDVR0OBBYEFPi5nNkIZQiLfQhGhX9tRuSIfSQJMB8GA1UdIwQY MBaAFFUNTFcdi/v92Po6Fw+Z+zr6tBHRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVlExTVZ4MkwtXzNZLWpvWEQ1bjdPdnEwRWRFLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS81N2NkNTYtN2JlYy00MGYxLWJmNzIt M2Q0NmNhZjU1NzM4LzEvMS1MbWMyUWhsQ0l0OUNFYUZmMjFHNUloOUpBay5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNDUvNTdjZDU2LTdiZWMtNDBmMS1iZjcyLTNkNDZjYWY1NTcz OC8xL1ZRMU1WeDJMLV8zWS1qb1hENW43T3ZxMEVkRS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEALB33DAN BAIAAjAHAwUDKgoKwDANBgkqhkiG9w0BAQsFAAOCAQEAxeyNQkUeLqO+uY71b6FZ gc05bhaHMSNmd8SR9Rb8rv6eg38pc448htFKpR7mPL5Iph+ygm3UiLNE9I2mBupO zab8DalMWsuCQ80WXwI8dwDfM3bZQVzs1yN44nxMgFAIBK97TzFiNTbhQX1R9rgq 4mkXvWINMuUPpTJL9dkDcT/Qnm3O0IvX0PJyNhflFcRT8eTPMWhZN1ZK4r9MtcR8 JLT5Zbtd9vRLJSgPITvjLmkwfSZfSk0/XLX3s3slTmfeR7TNSwFqDRulQYr7EcYi 2da6HE6b39oghmJzhQEkPnuxMAK1Cxjoqi8kzO1T/qo5iWndS4EBymqtrSP/lPbD +g== -----END CERTIFICATE-----Generated at Mon Jan 26 06:17:51 2026 by rpki-client