This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/2lifCuWCmZX74wg673_4xS-ONag.roa File: 2lifCuWCmZX74wg673_4xS-ONag.roa (raw, json) Hash identifier: 6lY0ENu0kD82v4utL4LG2PKDIcs5NRuZ7W1h/UjeZ3s= Subject key identifier: DA:58:9F:0A:E5:82:99:95:FB:E3:08:3A:EF:7F:F8:C5:2F:8E:35:A8 Certificate issuer: /CN=95b30111b0b720a209f788c8b90f60380b465c2e Certificate serial: 019B7CED5D8DB8BCD9A10898FD837773020B Authority key identifier: 95:B3:01:11:B0:B7:20:A2:09:F7:88:C8:B9:0F:60:38:0B:46:5C:2E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/2lifCuWCmZX74wg673_4xS-ONag.roa Signing time: Fri 02 Jan 2026 04:18:09 +0000 ROA not before: Fri 02 Jan 2026 04:18:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202754 IP address blocks: 185.153.16.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.crl rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.mft rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:5d:8d:b8:bc:d9:a1:08:98:fd:83:77:73:02:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95b30111b0b720a209f788c8b90f60380b465c2e Validity Not Before: Jan 2 04:18:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=da589f0ae5829995fbe3083aef7ff8c52f8e35a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:8d:ec:9f:71:8d:1d:2a:df:b5:34:04:7d:69: a6:cb:18:90:7d:71:d8:05:fe:ac:b5:e0:95:be:2b: 67:c5:7d:01:32:af:90:32:21:c6:b5:97:a9:7d:5b: 33:5c:1e:a1:02:9a:fb:46:cd:b0:28:f1:9b:4e:b7: fd:44:59:16:c9:c3:a1:85:d2:64:89:2c:e6:6a:30: ec:1d:a0:71:a1:16:cb:18:4d:de:d6:43:84:52:7c: ea:39:04:9f:ba:b5:18:23:6a:52:e1:0d:89:02:14: 23:34:75:af:d5:2f:b9:45:8e:29:ba:53:44:0e:f3: 47:aa:73:c0:e1:5f:43:6f:69:08:f6:fc:44:43:93: 65:b3:b9:bf:d5:98:fa:c7:2a:e5:8a:b9:2d:c0:b0: ea:04:65:e8:dd:2a:7a:50:8f:6c:69:d2:ed:5a:17: 25:15:a8:ef:bc:e7:5d:f9:19:56:88:48:6f:a8:ea: 8c:8d:29:6b:ce:b0:ca:73:72:47:ed:89:75:0f:1b: df:89:4a:3f:39:7b:2c:df:35:9d:0c:6d:85:be:5b: 99:cf:ad:94:f1:d5:77:8d:2b:94:78:01:b6:99:7f: 7f:90:ae:96:39:8b:43:1c:b5:1e:13:ff:0d:e0:19: 7a:bc:39:d5:1d:42:7e:10:79:11:7c:01:a1:ac:e4: 10:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:58:9F:0A:E5:82:99:95:FB:E3:08:3A:EF:7F:F8:C5:2F:8E:35:A8 X509v3 Authority Key Identifier: keyid:95:B3:01:11:B0:B7:20:A2:09:F7:88:C8:B9:0F:60:38:0B:46:5C:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/2lifCuWCmZX74wg673_4xS-ONag.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.153.16.0/22 Signature Algorithm: sha256WithRSAEncryption 79:90:29:7c:e3:68:e7:79:81:89:29:1d:38:09:49:db:ff:50: 6d:56:d6:c1:36:a9:2f:a8:b2:21:8a:4c:23:f0:aa:ab:17:f5: c6:c0:69:6e:1f:27:21:ad:15:b8:d0:02:c9:1b:17:29:aa:ac: 29:6c:64:72:7c:c3:93:b3:90:be:07:76:76:93:fa:cf:74:59: b7:b7:8a:06:f2:b8:fc:de:33:6f:53:8f:1e:27:67:ff:cd:14: 73:c6:bf:ee:e4:dc:e6:d9:c2:fb:35:7d:f1:e5:20:53:ce:24: 93:dd:ab:d3:8b:a4:6c:e7:29:34:16:5b:44:ad:35:70:54:50: ce:b3:ba:8c:b8:a6:30:f2:c8:ae:0e:0e:4b:a6:dd:84:08:76: d5:b5:3f:ff:64:ab:23:d0:07:07:28:57:e6:7a:bb:04:83:37: ed:7c:e2:70:b5:7f:42:65:3d:ed:70:b0:53:d5:7c:d4:f8:09: ec:46:7b:89:1f:e6:7b:b5:d7:82:c5:73:fa:22:41:d6:27:2c: 5b:77:f1:d9:ef:1e:fa:32:cc:3a:7c:e6:17:08:b1:29:da:c2: 84:7c:64:9f:d2:57:2c:67:78:fc:0b:93:9f:b0:bf:61:ca:77: 54:83:39:5a:c6:ed:4b:ba:1c:cf:5e:2d:5a:43:38:cc:20:83: e0:65:f0:9f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87V2NuLzZoQiY/YN3cwILMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1YjMwMTExYjBiNzIwYTIwOWY3ODhjOGI5MGY2MDM4MGI0 NjVjMmUwHhcNMjYwMTAyMDQxODA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYTU4OWYwYWU1ODI5OTk1ZmJlMzA4M2FlZjdmZjhjNTJmOGUzNWE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs43sn3GNHSrftTQEfWmmyxiQfXHY Bf6steCVvitnxX0BMq+QMiHGtZepfVszXB6hApr7Rs2wKPGbTrf9RFkWycOhhdJk iSzmajDsHaBxoRbLGE3e1kOEUnzqOQSfurUYI2pS4Q2JAhQjNHWv1S+5RY4pulNE DvNHqnPA4V9Db2kI9vxEQ5Nls7m/1Zj6xyrlirktwLDqBGXo3Sp6UI9sadLtWhcl FajvvOdd+RlWiEhvqOqMjSlrzrDKc3JH7Yl1DxvfiUo/OXss3zWdDG2FvluZz62U 8dV3jSuUeAG2mX9/kK6WOYtDHLUeE/8N4Bl6vDnVHUJ+EHkRfAGhrOQQmwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNpYnwrlgpmV++MIOu9/+MUvjjWoMB8GA1UdIwQY MBaAFJWzARGwtyCiCfeIyLkPYDgLRlwuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbGJNQkViQzNJS0lKOTRqSXVROWdPQXRHWEM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS8wM2JmMjgtYzU1ZC00YzdhLTkxYmIt OTE2NDZiZjAxNTNkLzEvMmxpZkN1V0NtWlg3NHdnNjczXzR4Uy1PTmFnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS8wM2JmMjgtYzU1ZC00YzdhLTkxYmItOTE2NDZiZjAxNTNk LzEvbGJNQkViQzNJS0lKOTRqSXVROWdPQXRHWEM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuZkQMA0G CSqGSIb3DQEBCwUAA4IBAQB5kCl842jneYGJKR04CUnb/1BtVtbBNqkvqLIhikwj 8KqrF/XGwGluHychrRW40ALJGxcpqqwpbGRyfMOTs5C+B3Z2k/rPdFm3t4oG8rj8 3jNvU48eJ2f/zRRzxr/u5Nzm2cL7NX3x5SBTziST3avTi6Rs5yk0FltErTVwVFDO s7qMuKYw8siuDg5Lpt2ECHbVtT//ZKsj0AcHKFfmersEgzftfOJwtX9CZT3tcLBT 1XzU+AnsRnuJH+Z7tdeCxXP6IkHWJyxbd/HZ7x76Msw6fOYXCLEp2sKEfGSf0lcs Z3j8C5OfsL9hyndUgzlaxu1LuhzPXi1aQzjMIIPgZfCf -----END CERTIFICATE-----Generated at Mon Jan 26 02:24:39 2026 by rpki-client