This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/lreLd3H_qEq1ce_PKQU1xoN7LMM.roa File: lreLd3H_qEq1ce_PKQU1xoN7LMM.roa (raw, json) Hash identifier: 3ggPxMUljSO+dJK+wL5mJh7ydgISXWCpWVy+0C5lhF0= Subject key identifier: 96:B7:8B:77:71:FF:A8:4A:B5:71:EF:CF:29:05:35:C6:83:7B:2C:C3 Certificate issuer: /CN=16055801b775e774306321455fd463fbd9273c4c Certificate serial: 019BE9F38A7713C5EEE86DC037BEBB55A851 Authority key identifier: 16:05:58:01:B7:75:E7:74:30:63:21:45:5F:D4:63:FB:D9:27:3C:4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/lreLd3H_qEq1ce_PKQU1xoN7LMM.roa Signing time: Fri 23 Jan 2026 08:23:30 +0000 ROA not before: Fri 23 Jan 2026 08:23:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9304 IP address blocks: 144.56.36.0/24 maxlen: 24 144.56.38.0/24 maxlen: 24 144.56.95.0/24 maxlen: 24 144.56.114.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.mft rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:e9:f3:8a:77:13:c5:ee:e8:6d:c0:37:be:bb:55:a8:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16055801b775e774306321455fd463fbd9273c4c Validity Not Before: Jan 23 08:23:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=96b78b7771ffa84ab571efcf290535c6837b2cc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:9a:81:c5:59:f9:76:11:56:29:83:dd:2e:83: 3c:94:9a:cb:c5:ed:d9:38:cd:27:e7:f2:9d:06:a6: 7e:3e:b6:36:6b:25:fd:b5:81:68:f2:c3:05:76:38: 95:ea:d3:b3:d9:4c:08:52:3b:80:1b:51:bf:2b:d7: ba:75:cc:35:81:96:5d:42:03:6a:d9:52:00:7b:83: 67:fe:b7:ab:00:ea:48:d5:ae:82:d8:1f:60:d2:62: 44:7d:13:1e:88:a1:1b:a2:3f:f6:8f:30:54:78:ae: 3c:e3:d3:a7:3d:51:a3:f4:aa:10:e0:c1:69:cd:fa: 65:12:65:25:2f:a2:6f:1c:df:11:1f:b3:ee:a0:83: 56:47:5c:06:c8:32:78:f0:80:8f:e7:66:e9:dc:cf: eb:31:26:ea:86:ac:a5:8b:b8:5c:a9:82:0b:c0:62: 47:28:90:c0:2d:7d:e9:09:e9:4c:43:32:d2:95:4c: 8b:10:f9:64:14:14:46:23:be:58:fb:85:9c:d0:9c: fa:03:9b:9e:e1:ff:b8:3a:1d:42:93:d9:37:8a:d8: ec:5d:1e:3d:45:ec:93:55:71:ef:e8:12:5f:a3:d3: 39:d2:91:7e:c3:83:68:96:fa:9b:1c:e3:67:b1:a3: 81:e4:04:ce:cd:0d:fb:bc:d0:4c:cf:b6:73:00:fe: 6d:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:B7:8B:77:71:FF:A8:4A:B5:71:EF:CF:29:05:35:C6:83:7B:2C:C3 X509v3 Authority Key Identifier: keyid:16:05:58:01:B7:75:E7:74:30:63:21:45:5F:D4:63:FB:D9:27:3C:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/lreLd3H_qEq1ce_PKQU1xoN7LMM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 144.56.36.0/24 144.56.38.0/24 144.56.95.0/24 144.56.114.0/24 Signature Algorithm: sha256WithRSAEncryption 84:fb:39:44:92:de:13:98:fe:51:18:23:3a:04:f6:69:6f:7f: 64:f7:ae:0e:4d:1a:a3:63:c8:ca:1b:61:57:e9:60:ce:e6:7f: 45:a0:dc:76:75:b2:a0:fa:b1:23:28:8f:3f:f1:ab:38:4f:b9: 0b:6b:f9:7a:98:11:b7:44:61:9c:29:11:b7:21:70:f6:72:af: 0d:e8:e8:ca:df:a1:f0:64:3a:72:f3:64:c8:20:0a:0e:bf:67: a2:51:2e:5e:5f:ca:3f:52:10:6a:e0:b2:21:ee:5c:6b:d7:1b: bf:0b:df:16:12:21:69:db:be:b3:80:dc:e7:9c:94:dd:b5:01: 50:91:2a:56:e8:aa:7c:1e:5e:8d:60:1a:27:6d:8f:d0:08:2c: bb:d3:a5:51:4b:ae:44:d5:f0:c7:1e:96:84:ad:79:33:f7:3d: a0:db:b7:4b:5e:6b:fb:2f:7f:3c:9d:12:fa:ee:07:12:d7:2e: 33:b9:ef:75:20:cc:89:6d:96:d5:d6:02:3e:55:27:e4:58:3c: 52:a7:1f:ae:40:3c:e1:0d:d7:c1:51:8e:e8:81:fe:db:28:0a: c3:15:48:9c:55:e4:6e:64:4e:c6:f2:07:fb:5d:f7:e0:98:16: f0:5f:c8:1b:e6:23:d7:5c:64:3d:82:39:81:ba:41:9d:c0:fa: 5c:74:e1:8a -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZvp84p3E8Xu6G3AN767VahRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2MDU1ODAxYjc3NWU3NzQzMDYzMjE0NTVmZDQ2M2ZiZDky NzNjNGMwHhcNMjYwMTIzMDgyMzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NmI3OGI3NzcxZmZhODRhYjU3MWVmY2YyOTA1MzVjNjgzN2IyY2MzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoZqBxVn5dhFWKYPdLoM8lJrLxe3Z OM0n5/KdBqZ+PrY2ayX9tYFo8sMFdjiV6tOz2UwIUjuAG1G/K9e6dcw1gZZdQgNq 2VIAe4Nn/rerAOpI1a6C2B9g0mJEfRMeiKEboj/2jzBUeK4849OnPVGj9KoQ4MFp zfplEmUlL6JvHN8RH7PuoINWR1wGyDJ48ICP52bp3M/rMSbqhqyli7hcqYILwGJH KJDALX3pCelMQzLSlUyLEPlkFBRGI75Y+4Wc0Jz6A5ue4f+4Oh1Ck9k3itjsXR49 ReyTVXHv6BJfo9M50pF+w4NolvqbHONnsaOB5ATOzQ37vNBMz7ZzAP5toQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFJa3i3dx/6hKtXHvzykFNcaDeyzDMB8GA1UdIwQY MBaAFBYFWAG3ded0MGMhRV/UY/vZJzxMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRmdWWUFiZDE1M1F3WXlGRlg5UmotOWtuUEV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9mMDM0MGItMzMwZS00NWQ3LWJlNTgt MTM1NzE3ZWYzODhhLzEvbHJlTGQzSF9xRXExY2VfUEtRVTF4b043TE1NLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy9mMDM0MGItMzMwZS00NWQ3LWJlNTgtMTM1NzE3ZWYzODhh LzEvRmdWWUFiZDE1M1F3WXlGRlg5UmotOWtuUEV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAkDgkAwQA kDgmAwQAkDhfAwQAkDhyMA0GCSqGSIb3DQEBCwUAA4IBAQCE+zlEkt4TmP5RGCM6 BPZpb39k964OTRqjY8jKG2FX6WDO5n9FoNx2dbKg+rEjKI8/8as4T7kLa/l6mBG3 RGGcKRG3IXD2cq8N6OjK36HwZDpy82TIIAoOv2eiUS5eX8o/UhBq4LIh7lxr1xu/ C98WEiFp276zgNznnJTdtQFQkSpW6Kp8Hl6NYBonbY/QCCy706VRS65E1fDHHpaE rXkz9z2g27dLXmv7L388nRL67gcS1y4zue91IMyJbZbV1gI+VSfkWDxSpx+uQDzh DdfBUY7ogf7bKArDFUicVeRuZE7G8gf7XffgmBbwX8gb5iPXXGQ9gjmBukGdwPpc dOGK -----END CERTIFICATE-----Generated at Sun Jan 25 09:11:57 2026 by rpki-client