This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/lKxpnXLQNARfqONah81rGmtc86w.roa File: lKxpnXLQNARfqONah81rGmtc86w.roa (raw, json) Hash identifier: eC37YRWZVPznB3X4x4RduQ4G+eGvRdFwA+NZ4sUf8CE= Subject key identifier: 94:AC:69:9D:72:D0:34:04:5F:A8:E3:5A:87:CD:6B:1A:6B:5C:F3:AC Certificate issuer: /CN=a539afebace899a8ee0bb4f8bb4475fe247a1528 Certificate serial: 019B783444C94735E09FB4018013BDE3DD8D Authority key identifier: A5:39:AF:EB:AC:E8:99:A8:EE:0B:B4:F8:BB:44:75:FE:24:7A:15:28 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pTmv66zomajuC7T4u0R1_iR6FSg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/lKxpnXLQNARfqONah81rGmtc86w.roa Signing time: Thu 01 Jan 2026 06:17:29 +0000 ROA not before: Thu 01 Jan 2026 06:17:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198022 IP address blocks: 144.208.215.96/28 maxlen: 28 2a00:11c0:47:df::/64 maxlen: 64 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/pTmv66zomajuC7T4u0R1_iR6FSg.crl rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/pTmv66zomajuC7T4u0R1_iR6FSg.mft rsync://rpki.ripe.net/repository/DEFAULT/pTmv66zomajuC7T4u0R1_iR6FSg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:44:c9:47:35:e0:9f:b4:01:80:13:bd:e3:dd:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a539afebace899a8ee0bb4f8bb4475fe247a1528 Validity Not Before: Jan 1 06:17:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=94ac699d72d034045fa8e35a87cd6b1a6b5cf3ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:e4:ab:5f:54:6d:79:80:25:73:bf:e0:5f:b8: 32:58:a4:b2:df:d2:88:89:71:15:78:a3:7e:81:70: 47:dd:b4:ad:a1:e5:44:72:8e:4c:04:4e:7b:6b:0c: 9f:c5:d4:14:68:fc:a9:fb:f3:2e:08:31:f2:21:51: b4:a5:2d:ff:23:f4:5e:60:43:be:a2:b1:32:c7:bb: 74:5d:bf:e8:5b:f3:85:ed:ec:dc:a1:68:a9:b6:4e: 91:d8:17:f4:6e:ca:8b:39:38:f3:93:b3:14:da:b4: fd:b7:0d:10:3d:b5:0a:23:25:e4:8c:66:f9:3d:a8: f4:75:5b:a8:02:a3:04:85:58:c5:2d:6c:ea:0b:e5: bd:1a:8e:d9:bc:3b:ce:18:c7:eb:89:60:f6:98:83: 8f:ee:a9:36:a1:cb:70:61:eb:b5:5c:ac:b6:f6:c0: 1d:d3:88:96:b5:97:8a:18:8b:96:4a:d6:f0:d7:8f: 48:0f:0d:8f:b3:cf:8c:a6:a4:d8:19:eb:41:70:02: 70:4c:b9:7f:7d:1d:85:c5:b6:bd:a9:5e:ed:00:6f: a9:ad:9f:6f:0f:f4:ee:34:84:a8:d9:66:df:87:30: cf:42:7e:64:a7:cb:0a:a6:27:d8:6d:9b:13:3b:6f: 8d:df:5d:c5:a8:99:02:d1:99:49:da:c5:58:df:c3: 10:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:AC:69:9D:72:D0:34:04:5F:A8:E3:5A:87:CD:6B:1A:6B:5C:F3:AC X509v3 Authority Key Identifier: keyid:A5:39:AF:EB:AC:E8:99:A8:EE:0B:B4:F8:BB:44:75:FE:24:7A:15:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pTmv66zomajuC7T4u0R1_iR6FSg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/lKxpnXLQNARfqONah81rGmtc86w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/pTmv66zomajuC7T4u0R1_iR6FSg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 144.208.215.96/28 IPv6: 2a00:11c0:47:df::/64 Signature Algorithm: sha256WithRSAEncryption 92:f7:be:07:21:10:16:1a:85:f2:06:a3:f1:a3:d2:fc:29:88: af:59:4f:86:f3:c8:bd:bc:57:df:67:5a:a2:a3:df:18:43:28: 5b:78:8a:31:ce:03:ea:38:5d:f4:36:b1:48:93:ca:e9:19:cc: db:06:0e:b4:14:55:2e:df:1b:e4:5b:bf:c7:3f:fc:8e:0e:f2: 1e:db:89:df:80:4c:5a:39:81:c2:b9:c8:82:f0:d4:db:52:94: 2e:5c:14:84:bf:cb:84:61:71:5a:39:90:e4:82:4b:a3:c0:d9: 07:55:c0:8e:18:f9:76:d8:8a:5f:fc:73:ae:7c:85:22:b1:12: df:7d:6b:07:53:52:d0:28:ff:ed:bc:48:1a:83:86:4e:aa:a2: ad:96:3a:8a:31:61:68:da:2e:da:ad:b4:0a:6d:b3:5b:0f:02: 32:3f:a0:1e:3c:d7:6e:71:04:01:fa:cd:7d:9d:17:d1:79:4b: fb:fa:dd:47:a4:9d:0a:ed:67:3e:7f:d4:a7:5b:ee:4a:38:ac: af:0c:6f:9f:ce:c0:af:48:b8:2f:f4:a3:c4:27:db:0b:c9:c8: b5:6c:42:9e:1f:6e:14:06:dd:d3:40:a0:7d:ab:c5:b1:a5:cb: d5:75:b5:56:97:b3:4e:89:47:7b:06:84:56:45:6d:37:15:f8: 57:c3:f8:b3 -----BEGIN CERTIFICATE----- MIIFETCCA/mgAwIBAgISAZt4NETJRzXgn7QBgBO9492NMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1MzlhZmViYWNlODk5YThlZTBiYjRmOGJiNDQ3NWZlMjQ3 YTE1MjgwHhcNMjYwMTAxMDYxNzI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NGFjNjk5ZDcyZDAzNDA0NWZhOGUzNWE4N2NkNmIxYTZiNWNmM2FjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxeSrX1RteYAlc7/gX7gyWKSy39KI iXEVeKN+gXBH3bStoeVEco5MBE57awyfxdQUaPyp+/MuCDHyIVG0pS3/I/ReYEO+ orEyx7t0Xb/oW/OF7ezcoWiptk6R2Bf0bsqLOTjzk7MU2rT9tw0QPbUKIyXkjGb5 Paj0dVuoAqMEhVjFLWzqC+W9Go7ZvDvOGMfriWD2mIOP7qk2octwYeu1XKy29sAd 04iWtZeKGIuWStbw149IDw2Ps8+MpqTYGetBcAJwTLl/fR2Fxba9qV7tAG+prZ9v D/TuNISo2WbfhzDPQn5kp8sKpifYbZsTO2+N313FqJkC0ZlJ2sVY38MQqQIDAQAB o4ICHTCCAhkwHQYDVR0OBBYEFJSsaZ1y0DQEX6jjWofNaxprXPOsMB8GA1UdIwQY MBaAFKU5r+us6Jmo7gu0+LtEdf4kehUoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcFRtdjY2em9tYWp1QzdUNHUwUjFfaVI2RlNnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS85OGM0ZWUtMmY1OS00NWE3LWFkYjYt NzQxMzk1OTEzMTJlLzEvbEt4cG5YTFFOQVJmcU9OYWg4MXJHbXRjODZ3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZS85OGM0ZWUtMmY1OS00NWE3LWFkYjYtNzQxMzk1OTEzMTJl LzEvcFRtdjY2em9tYWp1QzdUNHUwUjFfaVI2RlNnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjANBAIAATAHAwUEkNDXYDAR BAIAAjALAwkAKgARwABHAN8wDQYJKoZIhvcNAQELBQADggEBAJL3vgchEBYahfIG o/Gj0vwpiK9ZT4bzyL28V99nWqKj3xhDKFt4ijHOA+o4XfQ2sUiTyukZzNsGDrQU VS7fG+Rbv8c//I4O8h7bid+ATFo5gcK5yILw1NtSlC5cFIS/y4RhcVo5kOSCS6PA 2QdVwI4Y+XbYil/8c658hSKxEt99awdTUtAo/+28SBqDhk6qoq2WOooxYWjaLtqt tApts1sPAjI/oB48125xBAH6zX2dF9F5S/v63UeknQrtZz5/1Kdb7ko4rK8Mb5/O wK9IuC/0o8Qn2wvJyLVsQp4fbhQG3dNAoH2rxbGly9V1tVaXs06JR3sGhFZFbTcV +FfD+LM= -----END CERTIFICATE-----Generated at Mon Jan 26 01:22:28 2026 by rpki-client