This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/cfc4af-17e6-43de-921f-6baf3007905c/1/lDMBJ-BcmPZK4Hzw0eOcJ11uY2M.roa File: lDMBJ-BcmPZK4Hzw0eOcJ11uY2M.roa (raw, json) Hash identifier: BegtqmJXIzLJcbrc0HIdp7rcPGJlIn1UUJw6YBMx/38= Subject key identifier: 94:33:01:27:E0:5C:98:F6:4A:E0:7C:F0:D1:E3:9C:27:5D:6E:63:63 Certificate issuer: /CN=585e4f4b4a9ef5531dfe50f41541c912a335fbf1 Certificate serial: 019B7AC7A719EBA66DD949BD72A70F46C8F6 Authority key identifier: 58:5E:4F:4B:4A:9E:F5:53:1D:FE:50:F4:15:41:C9:12:A3:35:FB:F1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WF5PS0qe9VMd_lD0FUHJEqM1-_E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/cfc4af-17e6-43de-921f-6baf3007905c/1/lDMBJ-BcmPZK4Hzw0eOcJ11uY2M.roa Signing time: Thu 01 Jan 2026 18:17:43 +0000 ROA not before: Thu 01 Jan 2026 18:17:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204372 IP address blocks: 195.246.96.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/cfc4af-17e6-43de-921f-6baf3007905c/1/WF5PS0qe9VMd_lD0FUHJEqM1-_E.crl rsync://rpki.ripe.net/repository/DEFAULT/67/cfc4af-17e6-43de-921f-6baf3007905c/1/WF5PS0qe9VMd_lD0FUHJEqM1-_E.mft rsync://rpki.ripe.net/repository/DEFAULT/WF5PS0qe9VMd_lD0FUHJEqM1-_E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:a7:19:eb:a6:6d:d9:49:bd:72:a7:0f:46:c8:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=585e4f4b4a9ef5531dfe50f41541c912a335fbf1 Validity Not Before: Jan 1 18:17:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=94330127e05c98f64ae07cf0d1e39c275d6e6363 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:a3:35:b1:e0:df:94:eb:34:50:77:db:91:69: 59:03:6f:9f:98:e2:1b:86:3a:a7:4f:2c:0e:4a:40: c8:68:ad:10:17:d1:23:9e:0c:b6:5f:9a:06:44:7e: 3c:3e:27:eb:bd:6b:a4:3b:83:8c:8f:53:fe:3e:a1: 3e:a6:86:4b:db:8b:1e:95:d6:53:e1:85:f7:e1:3d: 39:73:f4:cc:8c:b2:c5:e3:5a:79:1c:d5:c0:2a:f6: 6e:2a:58:59:2b:1a:64:64:b6:29:27:f5:e7:fe:48: c4:b0:a5:b9:6d:8b:c5:e9:16:e9:90:9a:86:bc:64: fb:83:c9:35:75:e3:89:86:a6:2a:b8:28:8e:15:a9: 72:89:3b:af:c1:5b:2b:83:01:11:11:13:97:22:ec: a1:5e:07:b7:c9:27:d4:a9:cc:b5:89:bb:19:4c:70: 08:bd:42:02:fa:00:78:8e:1e:80:91:13:db:db:46: b4:3d:e1:e5:7f:d1:cf:8f:1c:33:f1:f5:6a:3a:2e: c9:d9:6f:cd:da:70:bc:58:63:11:20:7e:d0:eb:af: b4:9b:7f:b6:05:05:8e:c4:20:60:73:b4:cd:e8:b3: 47:2f:d8:0a:50:3a:5c:38:4d:4c:45:e3:aa:7b:c3: 0e:15:27:ea:65:c6:9a:88:b6:8b:8b:6c:93:fb:7b: f4:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:33:01:27:E0:5C:98:F6:4A:E0:7C:F0:D1:E3:9C:27:5D:6E:63:63 X509v3 Authority Key Identifier: keyid:58:5E:4F:4B:4A:9E:F5:53:1D:FE:50:F4:15:41:C9:12:A3:35:FB:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WF5PS0qe9VMd_lD0FUHJEqM1-_E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/cfc4af-17e6-43de-921f-6baf3007905c/1/lDMBJ-BcmPZK4Hzw0eOcJ11uY2M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/67/cfc4af-17e6-43de-921f-6baf3007905c/1/WF5PS0qe9VMd_lD0FUHJEqM1-_E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.246.96.0/23 Signature Algorithm: sha256WithRSAEncryption ad:31:7d:0d:2a:08:4e:1c:ac:40:57:fc:1f:8a:14:a3:dd:27: 01:26:aa:7c:25:83:26:d7:ff:60:49:70:cf:90:87:64:0a:f5: 4a:8d:90:0b:b6:43:64:60:47:d8:a3:0f:12:1e:87:8e:1f:40: d8:2a:70:77:c5:f3:96:d3:8f:12:25:88:bd:3b:9a:2e:94:17: d8:c3:ed:8a:fc:9f:f4:72:f2:8f:76:3f:5a:12:b0:a4:df:19: 5e:c6:9d:43:e2:19:8a:66:8d:bf:33:07:e8:c8:32:32:11:28: f0:84:08:11:ac:2d:1a:8b:b0:9e:0b:3d:57:24:58:13:09:cc: 2e:12:de:de:ca:f5:56:82:56:b7:b1:de:bf:69:75:34:b9:47: 4f:29:64:30:f9:48:d2:32:cf:ae:cf:7b:3f:b0:c3:24:e9:8e: a0:4c:6a:e8:62:e9:ee:24:d3:55:3c:af:26:c4:96:8a:d2:bc: 99:75:86:93:c6:b6:35:42:17:fd:01:29:6c:b5:a1:e1:50:4a: 30:a8:eb:3d:8a:75:9a:51:23:3b:6c:cb:88:ee:3e:40:31:ab: aa:b2:0c:23:a7:e1:1f:d7:4e:c8:a0:1a:85:72:6a:75:73:be: 70:30:12:4c:f7:f8:00:09:f4:75:22:5c:d0:c5:7a:b8:34:99: 39:c4:21:b8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6x6cZ66Zt2Um9cqcPRsj2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4NWU0ZjRiNGE5ZWY1NTMxZGZlNTBmNDE1NDFjOTEyYTMz NWZiZjEwHhcNMjYwMTAxMTgxNzQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NDMzMDEyN2UwNWM5OGY2NGFlMDdjZjBkMWUzOWMyNzVkNmU2MzYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxqM1seDflOs0UHfbkWlZA2+fmOIb hjqnTywOSkDIaK0QF9Ejngy2X5oGRH48PifrvWukO4OMj1P+PqE+poZL24seldZT 4YX34T05c/TMjLLF41p5HNXAKvZuKlhZKxpkZLYpJ/Xn/kjEsKW5bYvF6RbpkJqG vGT7g8k1deOJhqYquCiOFalyiTuvwVsrgwEREROXIuyhXge3ySfUqcy1ibsZTHAI vUIC+gB4jh6AkRPb20a0PeHlf9HPjxwz8fVqOi7J2W/N2nC8WGMRIH7Q66+0m3+2 BQWOxCBgc7TN6LNHL9gKUDpcOE1MReOqe8MOFSfqZcaaiLaLi2yT+3v0rQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJQzASfgXJj2SuB88NHjnCddbmNjMB8GA1UdIwQY MBaAFFheT0tKnvVTHf5Q9BVByRKjNfvxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0Y1UFMwcWU5Vk1kX2xEMEZVSEpFcU0xLV9FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny9jZmM0YWYtMTdlNi00M2RlLTkyMWYt NmJhZjMwMDc5MDVjLzEvbERNQkotQmNtUFpLNEh6dzBlT2NKMTF1WTJNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ny9jZmM0YWYtMTdlNi00M2RlLTkyMWYtNmJhZjMwMDc5MDVj LzEvV0Y1UFMwcWU5Vk1kX2xEMEZVSEpFcU0xLV9FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBw/ZgMA0G CSqGSIb3DQEBCwUAA4IBAQCtMX0NKghOHKxAV/wfihSj3ScBJqp8JYMm1/9gSXDP kIdkCvVKjZALtkNkYEfYow8SHoeOH0DYKnB3xfOW048SJYi9O5oulBfYw+2K/J/0 cvKPdj9aErCk3xlexp1D4hmKZo2/MwfoyDIyESjwhAgRrC0ai7CeCz1XJFgTCcwu Et7eyvVWgla3sd6/aXU0uUdPKWQw+UjSMs+uz3s/sMMk6Y6gTGroYunuJNNVPK8m xJaK0ryZdYaTxrY1Qhf9ASlstaHhUEowqOs9inWaUSM7bMuI7j5AMauqsgwjp+Ef 107IoBqFcmp1c75wMBJM9/gACfR1IlzQxXq4NJk5xCG4 -----END CERTIFICATE-----Generated at Sun Jan 25 17:35:54 2026 by rpki-client