This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/31d1f0-94e5-4fd4-87f2-ee96e28ea6e9/1/lKcxCQ3OfOPdVqWrI13qDrj054k.roa File: lKcxCQ3OfOPdVqWrI13qDrj054k.roa (raw, json) Hash identifier: xLZ+rUY4dQ+17ft3i45+DuMCNmea8sukddDn1Ts3WII= Subject key identifier: 94:A7:31:09:0D:CE:7C:E3:DD:56:A5:AB:23:5D:EA:0E:B8:F4:E7:89 Certificate issuer: /CN=e5a70a81aa0308a3cbbf68578b180f356b6ed8ac Certificate serial: 019B7758B02F6F6F8A371E5BB67D795E4998 Authority key identifier: E5:A7:0A:81:AA:03:08:A3:CB:BF:68:57:8B:18:0F:35:6B:6E:D8:AC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5acKgaoDCKPLv2hXixgPNWtu2Kw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/31d1f0-94e5-4fd4-87f2-ee96e28ea6e9/1/lKcxCQ3OfOPdVqWrI13qDrj054k.roa Signing time: Thu 01 Jan 2026 02:17:39 +0000 ROA not before: Thu 01 Jan 2026 02:17:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41625 IP address blocks: 185.219.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/31d1f0-94e5-4fd4-87f2-ee96e28ea6e9/1/5acKgaoDCKPLv2hXixgPNWtu2Kw.crl rsync://rpki.ripe.net/repository/DEFAULT/81/31d1f0-94e5-4fd4-87f2-ee96e28ea6e9/1/5acKgaoDCKPLv2hXixgPNWtu2Kw.mft rsync://rpki.ripe.net/repository/DEFAULT/5acKgaoDCKPLv2hXixgPNWtu2Kw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:b0:2f:6f:6f:8a:37:1e:5b:b6:7d:79:5e:49:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e5a70a81aa0308a3cbbf68578b180f356b6ed8ac Validity Not Before: Jan 1 02:17:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=94a731090dce7ce3dd56a5ab235dea0eb8f4e789 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:27:89:00:fa:3f:20:e9:ae:ff:1d:ad:f1:73: 21:08:37:e2:07:43:5b:c2:28:30:90:89:b3:fe:9f: e0:36:1a:04:27:bd:10:d3:5e:14:91:8e:9b:96:38: dc:dc:31:08:0d:bd:18:39:68:bb:a2:ae:44:64:19: 49:de:4d:a8:40:e9:19:9f:1b:54:33:a7:a8:84:f9: c1:f0:14:26:7e:38:ab:59:30:8c:a8:ab:81:ab:3c: 7c:39:2a:43:b9:a6:6c:c7:44:1d:7f:99:68:8d:22: f7:c6:4a:a8:e9:4e:e3:99:f3:2f:c4:75:b4:60:0b: 4d:52:a2:27:8e:b4:50:d1:49:da:4e:8f:71:ec:e9: 7f:1e:61:27:b5:85:4c:6a:dc:ab:c2:b2:17:dc:2f: d8:16:08:fa:d5:10:48:c8:a4:34:30:8a:ca:a7:45: 40:43:e2:18:54:f3:3f:9e:72:8a:d0:78:19:f6:6a: 00:b6:57:83:9e:a8:46:d1:20:03:a8:35:73:99:02: 2a:5b:8c:34:c2:4c:8b:6d:a4:60:20:3f:5e:64:45: c7:85:15:6c:f5:53:f6:ac:c3:73:2f:54:67:30:fd: 77:58:11:83:e5:17:26:f9:9d:6b:0e:d1:1a:6f:1d: ba:1b:05:62:6b:be:f6:ad:90:ac:85:ba:f8:ac:ee: 10:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:A7:31:09:0D:CE:7C:E3:DD:56:A5:AB:23:5D:EA:0E:B8:F4:E7:89 X509v3 Authority Key Identifier: keyid:E5:A7:0A:81:AA:03:08:A3:CB:BF:68:57:8B:18:0F:35:6B:6E:D8:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5acKgaoDCKPLv2hXixgPNWtu2Kw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/31d1f0-94e5-4fd4-87f2-ee96e28ea6e9/1/lKcxCQ3OfOPdVqWrI13qDrj054k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/31d1f0-94e5-4fd4-87f2-ee96e28ea6e9/1/5acKgaoDCKPLv2hXixgPNWtu2Kw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.219.89.0/24 Signature Algorithm: sha256WithRSAEncryption d0:a5:49:40:b4:42:f4:18:98:7d:2c:28:52:43:c6:bb:f0:c8: 03:03:23:00:f2:80:fd:e9:40:68:03:e5:96:6c:dc:d0:91:75: dd:f8:a6:2f:a3:a9:67:73:01:83:05:cf:cc:4a:0c:dc:67:9f: 8f:6d:ba:bd:57:b2:74:d2:c8:9e:c7:f4:0a:87:60:58:0b:62: ed:35:a1:f9:6b:5d:7e:21:28:b9:db:db:8b:14:2b:17:ab:3b: 89:ae:89:53:d6:38:fb:64:85:f5:fd:6c:aa:95:e7:2d:5c:18: 98:89:3b:70:bb:b5:91:6c:88:40:f7:ca:fd:80:76:37:97:0e: ed:3d:c5:69:e3:cb:c0:54:a1:e8:0b:de:6e:28:e6:d7:1f:d0: d1:ee:47:f2:ec:1a:8d:c7:29:74:4f:87:e7:81:4e:b1:5c:76: d4:00:dc:b3:ae:26:48:a9:68:8d:63:79:ca:92:d2:37:cb:85: 54:bc:d6:a0:70:f3:54:3e:9c:a1:ef:d6:e4:9f:83:a3:21:4a: 31:ea:52:69:99:27:40:35:13:c1:3c:64:0e:c7:95:62:fb:12: 7a:70:60:e2:04:44:f7:3b:20:a3:a8:b5:8a:7e:bf:f0:f5:2e: bc:b9:ec:d5:c1:cd:94:09:74:1f:5f:f7:6c:4b:ad:44:ad:37: 07:47:fb:86 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WLAvb2+KNx5btn15XkmYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU1YTcwYTgxYWEwMzA4YTNjYmJmNjg1NzhiMTgwZjM1NmI2 ZWQ4YWMwHhcNMjYwMTAxMDIxNzM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NGE3MzEwOTBkY2U3Y2UzZGQ1NmE1YWIyMzVkZWEwZWI4ZjRlNzg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoSeJAPo/IOmu/x2t8XMhCDfiB0Nb wigwkImz/p/gNhoEJ70Q014UkY6bljjc3DEIDb0YOWi7oq5EZBlJ3k2oQOkZnxtU M6eohPnB8BQmfjirWTCMqKuBqzx8OSpDuaZsx0Qdf5lojSL3xkqo6U7jmfMvxHW0 YAtNUqInjrRQ0UnaTo9x7Ol/HmEntYVMatyrwrIX3C/YFgj61RBIyKQ0MIrKp0VA Q+IYVPM/nnKK0HgZ9moAtleDnqhG0SADqDVzmQIqW4w0wkyLbaRgID9eZEXHhRVs 9VP2rMNzL1RnMP13WBGD5Rcm+Z1rDtEabx26GwVia772rZCshbr4rO4QVQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJSnMQkNznzj3ValqyNd6g649OeJMB8GA1UdIwQY MBaAFOWnCoGqAwijy79oV4sYDzVrbtisMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNWFjS2dhb0RDS1BMdjJoWGl4Z1BOV3R1Mkt3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS8zMWQxZjAtOTRlNS00ZmQ0LTg3ZjIt ZWU5NmUyOGVhNmU5LzEvbEtjeENRM09mT1BkVnFXckkxM3FEcmowNTRrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS8zMWQxZjAtOTRlNS00ZmQ0LTg3ZjItZWU5NmUyOGVhNmU5 LzEvNWFjS2dhb0RDS1BMdjJoWGl4Z1BOV3R1Mkt3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAudtZMA0G CSqGSIb3DQEBCwUAA4IBAQDQpUlAtEL0GJh9LChSQ8a78MgDAyMA8oD96UBoA+WW bNzQkXXd+KYvo6lncwGDBc/MSgzcZ5+Pbbq9V7J00siex/QKh2BYC2LtNaH5a11+ ISi529uLFCsXqzuJrolT1jj7ZIX1/WyqlectXBiYiTtwu7WRbIhA98r9gHY3lw7t PcVp48vAVKHoC95uKObXH9DR7kfy7BqNxyl0T4fngU6xXHbUANyzriZIqWiNY3nK ktI3y4VUvNagcPNUPpyh79bkn4OjIUox6lJpmSdANRPBPGQOx5Vi+xJ6cGDiBET3 OyCjqLWKfr/w9S68uezVwc2UCXQfX/dsS61ErTcHR/uG -----END CERTIFICATE-----Generated at Mon Jan 26 02:22:19 2026 by rpki-client