This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b48bfd-797d-47a9-8a62-44313b43e594/1/LkF8ib4KSmMJn8KFr7Mo8Jsbl_I.roa File: LkF8ib4KSmMJn8KFr7Mo8Jsbl_I.roa (raw, json) Hash identifier: H+EbsIZLpp43we2PwY+fe71qWJFbXMa5gMz7K0E3sIY= Subject key identifier: 2E:41:7C:89:BE:0A:4A:63:09:9F:C2:85:AF:B3:28:F0:9B:1B:97:F2 Certificate issuer: /CN=64c0bc594af811753dfc116af459b1b874471489 Certificate serial: 019B7A5B9673ACF0C26D168BAE2262E6A701 Authority key identifier: 64:C0:BC:59:4A:F8:11:75:3D:FC:11:6A:F4:59:B1:B8:74:47:14:89 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b48bfd-797d-47a9-8a62-44313b43e594/1/LkF8ib4KSmMJn8KFr7Mo8Jsbl_I.roa Signing time: Thu 01 Jan 2026 16:19:41 +0000 ROA not before: Thu 01 Jan 2026 16:19:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16276 IP address blocks: 185.30.212.0/23 maxlen: 23 185.30.214.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b48bfd-797d-47a9-8a62-44313b43e594/1/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/b48bfd-797d-47a9-8a62-44313b43e594/1/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.mft rsync://rpki.ripe.net/repository/DEFAULT/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:96:73:ac:f0:c2:6d:16:8b:ae:22:62:e6:a7:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64c0bc594af811753dfc116af459b1b874471489 Validity Not Before: Jan 1 16:19:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2e417c89be0a4a63099fc285afb328f09b1b97f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:60:cd:29:a4:f7:3d:38:9a:95:92:16:e1:a3: 1a:7a:96:09:eb:50:5e:2a:ae:b7:9a:2f:c7:d5:81: 17:90:56:bc:31:ac:ee:1a:14:e1:3b:a7:f1:45:fd: f5:55:3c:40:14:24:5c:f1:39:37:f7:25:c7:51:ae: d6:2e:82:07:bb:c6:9b:90:19:1b:d8:19:67:3b:12: ed:a7:06:e0:53:72:41:05:b0:4c:5b:74:2d:44:c0: 18:04:d0:0a:81:12:15:15:fb:6b:5b:fe:31:ca:3c: 5d:39:1b:4f:b5:7d:37:83:0f:6c:dd:07:90:f5:7b: a6:85:94:d8:3e:64:f6:3c:ab:a9:21:ec:87:9c:5a: 5f:f6:ef:49:2f:a2:b1:5d:6f:93:ae:4f:30:45:a6: 4f:21:39:4e:26:49:ca:af:26:bb:0d:1a:33:30:c8: 63:08:6b:e5:10:b5:75:74:dd:27:5e:67:e9:e7:89: cd:29:39:25:9a:ae:80:90:d8:b2:6f:b8:ac:98:fb: cc:58:2a:2b:53:fb:35:99:22:22:23:4c:7e:4d:d8: 4f:13:b6:85:8e:0d:63:70:ea:07:49:d4:e6:e7:1a: 55:64:89:22:6a:2d:97:0f:bf:bf:e8:7b:50:69:6b: ac:28:66:5b:7e:13:cd:eb:fe:57:c3:b7:5b:1d:aa: a5:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:41:7C:89:BE:0A:4A:63:09:9F:C2:85:AF:B3:28:F0:9B:1B:97:F2 X509v3 Authority Key Identifier: keyid:64:C0:BC:59:4A:F8:11:75:3D:FC:11:6A:F4:59:B1:B8:74:47:14:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b48bfd-797d-47a9-8a62-44313b43e594/1/LkF8ib4KSmMJn8KFr7Mo8Jsbl_I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b48bfd-797d-47a9-8a62-44313b43e594/1/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.30.212.0/22 Signature Algorithm: sha256WithRSAEncryption cd:aa:68:b5:8f:cf:85:fa:32:c0:69:cd:fd:21:83:31:f9:df: f6:fa:55:32:a8:50:45:f2:38:d5:4e:50:9a:a9:78:67:13:62: 9d:22:30:ee:45:4a:d3:86:d8:f7:dd:63:ca:8c:68:ab:7a:a0: d2:8f:4c:af:a7:35:62:92:84:61:4d:0b:1c:30:d7:c0:cd:14: 6a:51:73:0f:98:4d:ba:a1:a0:54:c8:1a:6a:2c:13:44:1f:75: f7:68:1f:22:48:ca:42:e3:72:2b:f5:78:5f:78:7f:9a:e3:46: 2f:0b:e0:f9:ac:0d:88:6e:58:9c:1f:ce:18:48:16:e9:ed:9a: e6:44:c0:88:9f:ad:8b:3b:e7:c1:ae:e2:00:14:21:f3:bc:bd: e7:96:96:57:62:c8:ad:82:0d:42:fb:bc:79:bd:b5:f2:33:3b: b5:14:4c:2e:48:d4:47:e4:9a:88:59:76:6d:e3:88:f2:7b:a3: 49:89:c4:6b:05:bc:a1:c9:b0:dd:c7:28:73:5b:92:70:c1:b4: 6e:2a:f4:b8:a1:6e:29:52:4e:54:23:e8:e8:97:fb:7d:8a:d6: ea:b4:dd:0e:bf:d7:9b:ae:5f:14:dc:d2:f8:a6:19:8e:14:1d: 7b:0b:94:4c:aa:b2:67:35:08:08:ba:77:4f:b8:73:06:94:0a: 63:fe:d0:7b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6W5ZzrPDCbRaLriJi5qcBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0YzBiYzU5NGFmODExNzUzZGZjMTE2YWY0NTliMWI4NzQ0 NzE0ODkwHhcNMjYwMTAxMTYxOTQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZTQxN2M4OWJlMGE0YTYzMDk5ZmMyODVhZmIzMjhmMDliMWI5N2YyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlmDNKaT3PTialZIW4aMaepYJ61Be Kq63mi/H1YEXkFa8MazuGhThO6fxRf31VTxAFCRc8Tk39yXHUa7WLoIHu8abkBkb 2BlnOxLtpwbgU3JBBbBMW3QtRMAYBNAKgRIVFftrW/4xyjxdORtPtX03gw9s3QeQ 9XumhZTYPmT2PKupIeyHnFpf9u9JL6KxXW+Trk8wRaZPITlOJknKrya7DRozMMhj CGvlELV1dN0nXmfp54nNKTklmq6AkNiyb7ismPvMWCorU/s1mSIiI0x+TdhPE7aF jg1jcOoHSdTm5xpVZIkiai2XD7+/6HtQaWusKGZbfhPN6/5Xw7dbHaqlhQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFC5BfIm+CkpjCZ/Cha+zKPCbG5fyMB8GA1UdIwQY MBaAFGTAvFlK+BF1PfwRavRZsbh0RxSJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWk1DOFdVcjRFWFU5X0JGcTlGbXh1SFJIRklrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9iNDhiZmQtNzk3ZC00N2E5LThhNjIt NDQzMTNiNDNlNTk0LzEvTGtGOGliNEtTbU1KbjhLRnI3TW84SnNibF9JLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi9iNDhiZmQtNzk3ZC00N2E5LThhNjItNDQzMTNiNDNlNTk0 LzEvWk1DOFdVcjRFWFU5X0JGcTlGbXh1SFJIRklrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuR7UMA0G CSqGSIb3DQEBCwUAA4IBAQDNqmi1j8+F+jLAac39IYMx+d/2+lUyqFBF8jjVTlCa qXhnE2KdIjDuRUrThtj33WPKjGireqDSj0yvpzVikoRhTQscMNfAzRRqUXMPmE26 oaBUyBpqLBNEH3X3aB8iSMpC43Ir9XhfeH+a40YvC+D5rA2IblicH84YSBbp7Zrm RMCIn62LO+fBruIAFCHzvL3nlpZXYsitgg1C+7x5vbXyMzu1FEwuSNRH5JqIWXZt 44jye6NJicRrBbyhybDdxyhzW5JwwbRuKvS4oW4pUk5UI+jol/t9itbqtN0Ov9eb rl8U3NL4phmOFB17C5RMqrJnNQgIundPuHMGlApj/tB7 -----END CERTIFICATE-----Generated at Sun Jan 25 09:19:21 2026 by rpki-client