This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/LkJfRGb4fcjgW9TBrJ5RLHnfM_8.roa File: LkJfRGb4fcjgW9TBrJ5RLHnfM_8.roa (raw, json) Hash identifier: aipIeTGfXmtLH/EXg4vc0YxSUKah95DRvr63AW4OMHA= Subject key identifier: 2E:42:5F:44:66:F8:7D:C8:E0:5B:D4:C1:AC:9E:51:2C:79:DF:33:FF Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Certificate serial: 019B7F84CC4E390F4F3CAAAFFB537D3E4BEA Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/LkJfRGb4fcjgW9TBrJ5RLHnfM_8.roa Signing time: Fri 02 Jan 2026 16:22:48 +0000 ROA not before: Fri 02 Jan 2026 16:22:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 58060 IP address blocks: 95.46.78.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:cc:4e:39:0f:4f:3c:aa:af:fb:53:7d:3e:4b:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Validity Not Before: Jan 2 16:22:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2e425f4466f87dc8e05bd4c1ac9e512c79df33ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:18:fe:8d:14:4b:97:52:f5:12:67:e5:d7:33: 2d:ec:b4:24:ce:40:3d:c5:4b:18:f8:2f:55:03:c4: 24:29:bc:9f:eb:df:94:14:e7:38:01:5d:99:5a:5c: ce:86:48:54:01:e2:c4:39:b9:51:90:29:9c:74:d1: 06:02:63:f8:c9:ad:85:eb:2c:f9:67:8f:f5:85:36: 68:ec:0f:4b:f4:b4:a7:72:08:73:4c:ff:03:ca:37: 24:f7:88:b6:2d:86:13:1f:cd:5b:20:73:ce:f4:ef: 4e:93:7e:c7:33:e5:e1:02:f9:c0:f4:b2:f8:b2:20: 31:2c:13:9b:83:41:6b:cb:13:63:7a:e6:cd:ff:cc: 93:fd:b7:8b:ca:42:10:08:6d:2a:40:2e:63:63:21: 84:bb:2f:d1:dc:49:06:67:36:c5:67:c3:f4:a3:39: 11:65:c3:ce:b7:32:12:02:e1:fc:5d:eb:33:93:fa: 5a:dd:3c:6b:84:a3:f6:e2:9e:fb:89:73:a0:9f:21: 93:42:1f:58:8e:b3:7f:16:a6:24:95:0b:96:c9:f7: 21:c0:25:54:91:ed:d8:b7:a1:a2:a4:69:99:c9:58: 52:41:ff:c7:c3:e8:7c:63:5a:7a:f9:b7:f8:25:9b: 5e:4d:9e:f2:15:b6:7b:31:64:c0:6f:96:83:d6:fd: 16:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:42:5F:44:66:F8:7D:C8:E0:5B:D4:C1:AC:9E:51:2C:79:DF:33:FF X509v3 Authority Key Identifier: keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/LkJfRGb4fcjgW9TBrJ5RLHnfM_8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.46.78.0/23 Signature Algorithm: sha256WithRSAEncryption a7:53:8b:f2:82:47:fc:dc:e4:3b:77:a0:46:61:80:84:88:b8: e5:50:9a:77:72:f8:aa:03:31:65:44:f1:8e:3c:7e:e1:13:2b: f5:56:15:0d:c7:45:c1:25:75:55:bc:5b:15:73:9c:6f:f5:c5: fd:f4:b4:04:33:4f:94:6a:3f:53:c6:8e:6f:0e:e0:66:ae:c3: e4:70:ba:e8:6e:33:c8:01:5d:21:b2:ca:25:11:ef:0f:c1:af: 9b:c4:80:76:8c:18:06:c1:05:bf:a4:e1:5c:ae:5b:63:49:3e: d8:18:d7:01:41:c7:64:7a:57:7f:c4:cc:7a:44:ed:4c:03:e5: d7:0e:34:41:70:da:36:e5:69:ce:bc:11:a7:d3:fe:c1:17:44: bf:bc:ab:3a:16:5c:38:a0:8a:e5:05:23:72:94:2f:6f:55:0c: 26:da:4a:ef:af:33:bb:e5:b7:13:a4:b1:53:55:27:8d:d3:97: 65:96:ab:83:62:20:df:31:cf:e5:b9:19:ef:08:58:dd:ed:5f: 58:cb:e4:4c:3b:65:39:ac:b2:b9:6b:33:8b:6d:8a:8c:4a:62: ab:34:da:42:ed:d1:7b:02:e2:a6:d1:69:19:b5:5a:3d:0a:a3: c0:86:92:5d:a3:b0:20:a0:e4:48:49:2c:34:d8:95:d8:88:92: ba:3a:cf:8e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hMxOOQ9PPKqv+1N9PkvqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh YWVmNDIwHhcNMjYwMTAyMTYyMjQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZTQyNWY0NDY2Zjg3ZGM4ZTA1YmQ0YzFhYzllNTEyYzc5ZGYzM2ZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwhj+jRRLl1L1Emfl1zMt7LQkzkA9 xUsY+C9VA8QkKbyf69+UFOc4AV2ZWlzOhkhUAeLEOblRkCmcdNEGAmP4ya2F6yz5 Z4/1hTZo7A9L9LSncghzTP8Dyjck94i2LYYTH81bIHPO9O9Ok37HM+XhAvnA9LL4 siAxLBObg0FryxNjeubN/8yT/beLykIQCG0qQC5jYyGEuy/R3EkGZzbFZ8P0ozkR ZcPOtzISAuH8Xeszk/pa3TxrhKP24p77iXOgnyGTQh9YjrN/FqYklQuWyfchwCVU ke3Yt6GipGmZyVhSQf/Hw+h8Y1p6+bf4JZteTZ7yFbZ7MWTAb5aD1v0WxwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFC5CX0Rm+H3I4FvUwayeUSx53zP/MB8GA1UdIwQY MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt MDYyYzY5MzNhYmVkLzEvTGtKZlJHYjRmY2pnVzlUQnJKNVJMSG5mTV84LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBXy5OMA0G CSqGSIb3DQEBCwUAA4IBAQCnU4vygkf83OQ7d6BGYYCEiLjlUJp3cviqAzFlRPGO PH7hEyv1VhUNx0XBJXVVvFsVc5xv9cX99LQEM0+Uaj9Txo5vDuBmrsPkcLrobjPI AV0hssolEe8Pwa+bxIB2jBgGwQW/pOFcrltjST7YGNcBQcdkeld/xMx6RO1MA+XX DjRBcNo25WnOvBGn0/7BF0S/vKs6Flw4oIrlBSNylC9vVQwm2krvrzO75bcTpLFT VSeN05dllquDYiDfMc/luRnvCFjd7V9Yy+RMO2U5rLK5azOLbYqMSmKrNNpC7dF7 AuKm0WkZtVo9CqPAhpJdo7AgoORISSw02JXYiJK6Os+O -----END CERTIFICATE-----Generated at Sun Jan 25 19:17:33 2026 by rpki-client