This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/278d5f-9ee6-4477-9fe0-8eae8b75e9ca/1/lrEowygn1dHToN0btk6rp2MTIvI.roa File: lrEowygn1dHToN0btk6rp2MTIvI.roa (raw, json) Hash identifier: sTbSNMMoubd2bZ7dOugalKP6owvalS8OX2kJMEZCoIo= Subject key identifier: 96:B1:28:C3:28:27:D5:D1:D3:A0:DD:1B:B6:4E:AB:A7:63:13:22:F2 Certificate issuer: /CN=568ae803b9ba38855401827b3eece14505a9c0f6 Certificate serial: 019B7A5AD963DCBCAEB3A28ACE6A81D6E730 Authority key identifier: 56:8A:E8:03:B9:BA:38:85:54:01:82:7B:3E:EC:E1:45:05:A9:C0:F6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VoroA7m6OIVUAYJ7PuzhRQWpwPY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/278d5f-9ee6-4477-9fe0-8eae8b75e9ca/1/lrEowygn1dHToN0btk6rp2MTIvI.roa Signing time: Thu 01 Jan 2026 16:18:52 +0000 ROA not before: Thu 01 Jan 2026 16:18:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20764 IP address blocks: 79.141.208.0/20 maxlen: 20 79.141.213.0/24 maxlen: 24 80.64.96.0/20 maxlen: 20 80.64.97.0/24 maxlen: 24 80.64.98.28/32 maxlen: 32 80.64.99.0/24 maxlen: 24 80.64.102.0/24 maxlen: 24 80.64.103.0/24 maxlen: 24 80.64.104.0/24 maxlen: 24 80.64.105.0/24 maxlen: 24 80.64.108.0/24 maxlen: 24 80.64.109.0/24 maxlen: 24 81.27.240.0/20 maxlen: 20 81.27.241.0/24 maxlen: 24 81.27.248.0/24 maxlen: 24 81.27.252.0/24 maxlen: 24 81.27.253.0/24 maxlen: 24 185.5.160.0/22 maxlen: 22 2a00:1c28::/29 maxlen: 29 2a00:1c28::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/278d5f-9ee6-4477-9fe0-8eae8b75e9ca/1/VoroA7m6OIVUAYJ7PuzhRQWpwPY.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/278d5f-9ee6-4477-9fe0-8eae8b75e9ca/1/VoroA7m6OIVUAYJ7PuzhRQWpwPY.mft rsync://rpki.ripe.net/repository/DEFAULT/VoroA7m6OIVUAYJ7PuzhRQWpwPY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:d9:63:dc:bc:ae:b3:a2:8a:ce:6a:81:d6:e7:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=568ae803b9ba38855401827b3eece14505a9c0f6 Validity Not Before: Jan 1 16:18:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=96b128c32827d5d1d3a0dd1bb64eaba7631322f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:eb:6b:d1:45:de:46:f2:cd:88:48:d3:ed:ad: aa:70:28:8b:b6:65:14:74:f4:77:72:95:98:3a:8b: 7b:b6:24:1d:86:72:74:3c:4b:79:fe:44:7b:81:04: ba:c6:e5:82:3c:5e:85:94:1e:71:4a:78:b1:34:63: ba:ff:f4:41:9c:bc:dd:78:25:0b:1b:ff:b6:28:79: 54:4c:e5:37:a1:34:49:e0:56:6f:ef:93:20:5a:75: 66:53:28:33:79:8f:b0:5b:0a:80:cb:a0:64:06:4a: 79:a7:da:38:5a:b1:94:c8:bf:8d:ef:fc:e5:61:ab: 92:6b:44:2b:d1:08:93:58:37:fa:a7:ea:f6:42:81: e2:38:f0:a7:9e:0b:91:bf:0c:4f:e7:79:9f:5b:f2: 5d:bf:97:c9:e2:ae:d7:76:5c:e9:64:ce:55:9d:97: f5:f7:96:03:98:f4:bc:47:69:32:00:06:8b:79:ea: 15:92:a6:17:99:f2:45:94:ad:c2:c4:22:20:0c:2d: 62:03:53:6a:5b:32:b8:07:f7:2b:1e:1f:ea:b5:11: 07:c3:0a:a4:7d:d3:25:0e:0e:ae:b4:2b:fa:bb:55: 1b:d1:f1:58:0b:1e:3c:85:ed:f6:40:25:81:cf:cc: f1:d0:bc:f9:4c:1a:70:1e:86:e2:32:79:9c:45:57: 35:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:B1:28:C3:28:27:D5:D1:D3:A0:DD:1B:B6:4E:AB:A7:63:13:22:F2 X509v3 Authority Key Identifier: keyid:56:8A:E8:03:B9:BA:38:85:54:01:82:7B:3E:EC:E1:45:05:A9:C0:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VoroA7m6OIVUAYJ7PuzhRQWpwPY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/278d5f-9ee6-4477-9fe0-8eae8b75e9ca/1/lrEowygn1dHToN0btk6rp2MTIvI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/278d5f-9ee6-4477-9fe0-8eae8b75e9ca/1/VoroA7m6OIVUAYJ7PuzhRQWpwPY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.141.208.0/20 80.64.96.0/20 81.27.240.0/20 185.5.160.0/22 IPv6: 2a00:1c28::/29 Signature Algorithm: sha256WithRSAEncryption 95:14:eb:c6:64:bd:8e:40:5d:c6:7d:0c:68:e7:6e:ae:e6:15: 93:58:6b:5d:fe:76:a7:0c:b8:57:90:bd:9f:c9:bf:c4:67:c1: 43:f9:70:60:ea:03:73:ae:83:c5:95:47:59:55:a5:f1:3b:69: 98:51:fe:c9:fd:db:60:ed:ef:a4:75:3d:16:36:32:47:5b:fc: cc:72:92:63:87:a0:22:d1:bc:ad:7b:be:19:b8:23:7a:90:e2: 6e:ee:98:f0:38:74:02:2d:b1:85:92:8f:5a:87:06:c8:a8:a7: 38:5b:e2:23:91:c1:1b:64:20:d0:90:b6:03:f1:a9:ba:3b:44: 5d:4e:e0:ff:66:b1:34:8c:81:c4:87:d2:1d:04:ba:be:48:2e: 7e:7c:27:9b:08:6d:67:55:51:a1:77:2e:c5:99:f5:bd:d2:e0: 80:a3:2a:68:54:cd:e6:f0:ba:df:2d:7d:f3:36:5b:1d:1b:69: b4:30:21:ea:16:ba:91:06:36:62:a3:6d:ea:6a:b3:ed:8e:d3: 33:f0:ff:e1:81:0f:a8:a9:e1:d1:26:32:49:54:3e:1c:f9:c6: d3:3a:4c:91:0e:4d:77:f8:88:1d:5e:77:aa:8e:f8:cf:a5:86: 67:18:60:ba:b3:94:ea:55:24:c4:51:54:10:64:db:d8:79:82: a3:81:c7:cc -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgISAZt6Wtlj3Lyus6KKzmqB1ucwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU2OGFlODAzYjliYTM4ODU1NDAxODI3YjNlZWNlMTQ1MDVh OWMwZjYwHhcNMjYwMTAxMTYxODUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NmIxMjhjMzI4MjdkNWQxZDNhMGRkMWJiNjRlYWJhNzYzMTMyMmYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn+tr0UXeRvLNiEjT7a2qcCiLtmUU dPR3cpWYOot7tiQdhnJ0PEt5/kR7gQS6xuWCPF6FlB5xSnixNGO6//RBnLzdeCUL G/+2KHlUTOU3oTRJ4FZv75MgWnVmUygzeY+wWwqAy6BkBkp5p9o4WrGUyL+N7/zl YauSa0Qr0QiTWDf6p+r2QoHiOPCnnguRvwxP53mfW/Jdv5fJ4q7XdlzpZM5VnZf1 95YDmPS8R2kyAAaLeeoVkqYXmfJFlK3CxCIgDC1iA1NqWzK4B/crHh/qtREHwwqk fdMlDg6utCv6u1Ub0fFYCx48he32QCWBz8zx0Lz5TBpwHobiMnmcRVc1wwIDAQAB o4ICKjCCAiYwHQYDVR0OBBYEFJaxKMMoJ9XR06DdG7ZOq6djEyLyMB8GA1UdIwQY MBaAFFaK6AO5ujiFVAGCez7s4UUFqcD2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVm9yb0E3bTZPSVZVQVlKN1B1emhSUVdwd1BZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS8yNzhkNWYtOWVlNi00NDc3LTlmZTAt OGVhZThiNzVlOWNhLzEvbHJFb3d5Z24xZEhUb04wYnRrNnJwMk1USXZJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS8yNzhkNWYtOWVlNi00NDc3LTlmZTAtOGVhZThiNzVlOWNh LzEvVm9yb0E3bTZPSVZVQVlKN1B1emhSUVdwd1BZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQET43QAwQE UEBgAwQEURvwAwQCuQWgMA0EAgACMAcDBQMqABwoMA0GCSqGSIb3DQEBCwUAA4IB AQCVFOvGZL2OQF3GfQxo526u5hWTWGtd/nanDLhXkL2fyb/EZ8FD+XBg6gNzroPF lUdZVaXxO2mYUf7J/dtg7e+kdT0WNjJHW/zMcpJjh6Ai0byte74ZuCN6kOJu7pjw OHQCLbGFko9ahwbIqKc4W+IjkcEbZCDQkLYD8am6O0RdTuD/ZrE0jIHEh9IdBLq+ SC5+fCebCG1nVVGhdy7FmfW90uCAoypoVM3m8LrfLX3zNlsdG2m0MCHqFrqRBjZi o23qarPtjtMz8P/hgQ+oqeHRJjJJVD4c+cbTOkyRDk13+IgdXneqjvjPpYZnGGC6 s5TqVSTEUVQQZNvYeYKjgcfM -----END CERTIFICATE-----Generated at Sun Jan 25 10:08:02 2026 by rpki-client