This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/ldYZuXJqj0c_Xv8DOnfzkVSHdZ8.roa File: ldYZuXJqj0c_Xv8DOnfzkVSHdZ8.roa (raw, json) Hash identifier: u+MA8GU58FyNSb5DrCqtPcJsBJUax7+Twp+Q/qM6gaA= Subject key identifier: 95:D6:19:B9:72:6A:8F:47:3F:5E:FF:03:3A:77:F3:91:54:87:75:9F Certificate issuer: /CN=12be29c956894c49c6d4be0ed98882b90d1bc77f Certificate serial: 019BE5A7FDF84AC6DDFE824B4BBB4F97A693 Authority key identifier: 12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/ldYZuXJqj0c_Xv8DOnfzkVSHdZ8.roa Signing time: Thu 22 Jan 2026 12:22:30 +0000 ROA not before: Thu 22 Jan 2026 12:22:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215245 IP address blocks: 31.22.72.0/24 maxlen: 24 31.22.73.0/24 maxlen: 24 31.22.76.0/24 maxlen: 24 31.22.77.0/24 maxlen: 24 185.230.160.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.mft rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:e5:a7:fd:f8:4a:c6:dd:fe:82:4b:4b:bb:4f:97:a6:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=12be29c956894c49c6d4be0ed98882b90d1bc77f Validity Not Before: Jan 22 12:22:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=95d619b9726a8f473f5eff033a77f3915487759f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:85:d9:8d:d3:b9:df:33:af:e1:b4:f3:8c:e1: 45:85:76:a8:97:b8:24:77:3b:d4:e8:36:e6:aa:d2: 13:bd:2b:af:ed:81:70:ae:27:6e:f1:23:a8:50:8b: 94:9b:ae:b3:96:6a:ca:9d:ce:d3:56:71:85:3f:de: 91:0c:ee:4b:7f:47:82:0e:9b:9c:27:b8:35:f0:ca: d0:86:20:cf:b2:f7:e8:69:fe:15:98:8c:ad:df:d4: 78:7d:81:a9:33:78:6b:2b:2c:74:d0:c6:f9:c9:12: 88:09:ef:1c:00:9e:15:26:14:f5:2b:ce:4b:b8:25: b3:95:93:c1:f5:a4:f1:cc:52:39:a4:8b:3e:77:54: ab:e4:29:b8:05:00:e6:a6:72:c6:e8:14:fa:ab:dc: 23:5a:81:a1:73:21:bd:c9:64:6b:1d:5d:3e:af:50: 4d:1a:c7:ea:32:cd:c1:de:1d:c6:86:e1:64:5f:99: 02:45:e1:d4:4d:ce:f4:7a:60:c0:c1:90:ff:99:54: 74:fe:c8:31:56:8a:6d:14:4b:67:d8:7a:b2:60:74: 58:c4:7d:78:04:62:6b:aa:13:58:d4:24:62:ab:d6: 63:ca:ca:39:04:a2:7b:c3:59:78:41:30:44:29:a9: 5b:dd:5e:f9:9d:63:d2:30:a1:81:40:72:ed:eb:c7: c0:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:D6:19:B9:72:6A:8F:47:3F:5E:FF:03:3A:77:F3:91:54:87:75:9F X509v3 Authority Key Identifier: keyid:12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/ldYZuXJqj0c_Xv8DOnfzkVSHdZ8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.22.72.0/23 31.22.76.0/23 185.230.160.0/24 Signature Algorithm: sha256WithRSAEncryption 78:89:35:65:29:35:9f:e7:7a:5e:e2:63:98:33:0b:9d:92:4a: 64:fb:3f:fd:29:9d:f7:d2:e4:b7:c1:ec:97:25:ed:e9:1a:b3: 8d:dd:99:5d:62:fd:24:5b:2e:d9:a8:b9:ce:42:96:f4:0f:e8: ec:1f:c2:17:a4:e4:39:76:b8:ed:3b:81:bb:a6:4f:24:94:76: d5:92:9c:d0:41:88:0f:be:21:f6:ac:9f:7e:45:d1:06:6a:80: fc:92:d1:f1:66:b6:35:8e:58:e2:82:c5:2a:ce:92:b3:d1:a5: d3:26:5a:32:16:fc:a8:4a:09:84:86:97:d3:d1:e8:c0:f5:10: 93:d7:44:38:05:6a:fe:1f:70:6b:01:c8:5a:ce:2a:9b:f9:a8: b7:cf:d6:19:a9:4b:eb:32:2f:88:f7:2d:ba:3b:5a:40:fc:17: e9:89:dd:93:02:fe:c4:4a:1d:18:bc:d1:3d:de:b5:93:9f:cc: e9:a4:19:fa:54:da:e9:07:91:66:4e:65:3d:df:cd:57:04:25: d7:0e:c2:41:7d:1d:c3:5d:0a:e8:e3:4e:5d:96:49:68:4a:a2: 9a:b8:27:38:2f:78:c9:79:9b:da:d1:a7:ba:b9:49:17:31:ea: aa:8d:dc:ba:b7:53:f0:f2:93:43:c7:0e:80:7c:fd:bc:0d:0b: c7:5e:6d:45 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZvlp/34Ssbd/oJLS7tPl6aTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyYmUyOWM5NTY4OTRjNDljNmQ0YmUwZWQ5ODg4MmI5MGQx YmM3N2YwHhcNMjYwMTIyMTIyMjMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NWQ2MTliOTcyNmE4ZjQ3M2Y1ZWZmMDMzYTc3ZjM5MTU0ODc3NTlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzoXZjdO53zOv4bTzjOFFhXaol7gk dzvU6DbmqtITvSuv7YFwridu8SOoUIuUm66zlmrKnc7TVnGFP96RDO5Lf0eCDpuc J7g18MrQhiDPsvfoaf4VmIyt39R4fYGpM3hrKyx00Mb5yRKICe8cAJ4VJhT1K85L uCWzlZPB9aTxzFI5pIs+d1Sr5Cm4BQDmpnLG6BT6q9wjWoGhcyG9yWRrHV0+r1BN GsfqMs3B3h3GhuFkX5kCReHUTc70emDAwZD/mVR0/sgxVoptFEtn2HqyYHRYxH14 BGJrqhNY1CRiq9Zjyso5BKJ7w1l4QTBEKalb3V75nWPSMKGBQHLt68fAhwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFJXWGblyao9HP17/Azp385FUh3WfMB8GA1UdIwQY MBaAFBK+KclWiUxJxtS+DtmIgrkNG8d/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRXI0cHlWYUpURW5HMUw0TzJZaUN1UTBieDM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS9jMjc4OGYtOGM4Yy00N2JiLWI5MjIt YWE2ZWQ0ZGFmYjNiLzEvbGRZWnVYSnFqMGNfWHY4RE9uZnprVlNIZFo4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS9jMjc4OGYtOGM4Yy00N2JiLWI5MjItYWE2ZWQ0ZGFmYjNi LzEvRXI0cHlWYUpURW5HMUw0TzJZaUN1UTBieDM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBHxZIAwQB HxZMAwQAueagMA0GCSqGSIb3DQEBCwUAA4IBAQB4iTVlKTWf53pe4mOYMwudkkpk +z/9KZ330uS3weyXJe3pGrON3ZldYv0kWy7ZqLnOQpb0D+jsH8IXpOQ5drjtO4G7 pk8klHbVkpzQQYgPviH2rJ9+RdEGaoD8ktHxZrY1jljigsUqzpKz0aXTJloyFvyo SgmEhpfT0ejA9RCT10Q4BWr+H3BrAchaziqb+ai3z9YZqUvrMi+I9y26O1pA/Bfp id2TAv7ESh0YvNE93rWTn8zppBn6VNrpB5FmTmU9381XBCXXDsJBfR3DXQro405d lkloSqKauCc4L3jJeZva0ae6uUkXMeqqjdy6t1Pw8pNDxw6AfP28DQvHXm1F -----END CERTIFICATE-----Generated at Sun Jan 25 23:49:42 2026 by rpki-client