This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/ddc27c-7937-4560-be22-dcb5fb33c178/1/Lv7nZi0Ca4VD-5H2MSb5yq4Mxf8.roa File: Lv7nZi0Ca4VD-5H2MSb5yq4Mxf8.roa (raw, json) Hash identifier: kAeb16gDeMymOsy5vSRtUWw4R89UmFmfcQyy8hoRkQs= Subject key identifier: 2E:FE:E7:66:2D:02:6B:85:43:FB:91:F6:31:26:F9:CA:AE:0C:C5:FF Certificate issuer: /CN=7e8e09724f472e76689c61dca60a7c641f2ac8f9 Certificate serial: 019BE09FD76861E1211FFFE2DF0A1EB3BA7E Authority key identifier: 7E:8E:09:72:4F:47:2E:76:68:9C:61:DC:A6:0A:7C:64:1F:2A:C8:F9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fo4Jck9HLnZonGHcpgp8ZB8qyPk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/ddc27c-7937-4560-be22-dcb5fb33c178/1/Lv7nZi0Ca4VD-5H2MSb5yq4Mxf8.roa Signing time: Wed 21 Jan 2026 12:55:30 +0000 ROA not before: Wed 21 Jan 2026 12:55:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 21034 IP address blocks: 185.2.146.0/23 maxlen: 23 185.179.103.0/24 maxlen: 24 212.43.96.0/19 maxlen: 19 2a00:1be0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/ddc27c-7937-4560-be22-dcb5fb33c178/1/fo4Jck9HLnZonGHcpgp8ZB8qyPk.crl rsync://rpki.ripe.net/repository/DEFAULT/82/ddc27c-7937-4560-be22-dcb5fb33c178/1/fo4Jck9HLnZonGHcpgp8ZB8qyPk.mft rsync://rpki.ripe.net/repository/DEFAULT/fo4Jck9HLnZonGHcpgp8ZB8qyPk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 09:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:e0:9f:d7:68:61:e1:21:1f:ff:e2:df:0a:1e:b3:ba:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e8e09724f472e76689c61dca60a7c641f2ac8f9 Validity Not Before: Jan 21 12:55:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2efee7662d026b8543fb91f63126f9caae0cc5ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:c6:10:af:a6:d3:f9:ae:a0:72:ab:48:e3:65: 15:47:7c:1d:5f:6d:7b:9c:36:5b:21:a9:62:9f:51: 47:7b:0b:c8:01:3c:f7:f2:82:3f:20:ce:37:50:ce: 3e:5f:25:61:f1:21:2d:c9:3c:25:0b:c2:0e:d3:52: 3a:df:ea:21:66:ce:eb:1c:f9:b9:d6:75:be:67:55: eb:ed:0b:9b:75:74:c0:75:bc:8b:67:bf:70:2b:c0: bd:5f:2b:9d:a5:52:5e:d9:b7:bc:9f:db:79:16:35: 6a:1d:13:3a:cc:f8:ba:b4:3b:d1:1a:ea:7d:a3:ed: 6d:3d:a5:67:3a:29:b4:46:7d:9d:e2:bd:e7:9d:1a: ec:50:7d:ad:2a:90:8a:b5:31:d5:65:03:75:dd:93: 43:c6:17:65:8d:91:cb:b3:79:95:66:12:55:82:84: b3:3f:33:86:b3:93:8b:4f:fd:96:a4:73:26:8e:04: e0:83:ba:8f:a4:78:06:9f:58:04:20:bb:07:e3:40: 45:47:d0:a5:be:23:43:8a:ee:76:2d:6d:51:5e:11: ed:be:e9:db:7e:ec:43:46:8f:40:0b:b9:23:0c:99: 89:70:97:79:65:67:ea:18:1b:4e:3e:9f:0a:1b:d3: 72:97:7b:f4:91:d2:7d:5e:95:ad:f5:49:92:88:85: 24:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:FE:E7:66:2D:02:6B:85:43:FB:91:F6:31:26:F9:CA:AE:0C:C5:FF X509v3 Authority Key Identifier: keyid:7E:8E:09:72:4F:47:2E:76:68:9C:61:DC:A6:0A:7C:64:1F:2A:C8:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fo4Jck9HLnZonGHcpgp8ZB8qyPk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/ddc27c-7937-4560-be22-dcb5fb33c178/1/Lv7nZi0Ca4VD-5H2MSb5yq4Mxf8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/82/ddc27c-7937-4560-be22-dcb5fb33c178/1/fo4Jck9HLnZonGHcpgp8ZB8qyPk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.2.146.0/23 185.179.103.0/24 212.43.96.0/19 IPv6: 2a00:1be0::/32 Signature Algorithm: sha256WithRSAEncryption 03:4e:62:52:98:56:db:e8:30:80:ce:bc:06:31:7b:05:cd:7c: 70:ec:ae:52:bf:d3:d7:fa:b7:34:a9:1e:34:98:ec:bb:9f:59: 85:80:d6:07:d0:44:b0:7d:1c:c3:fb:b5:66:5d:22:6d:47:cd: d0:02:11:a1:be:9c:a8:51:05:53:34:e2:23:48:f2:b1:72:2d: 63:80:73:14:76:2a:dd:c4:24:31:84:91:5b:39:3e:d0:94:15: 6e:a6:da:4b:20:87:a2:78:6e:51:bf:30:5a:23:84:04:f9:8a: 5a:27:db:8b:fa:cf:e9:88:2c:67:48:5a:4d:16:55:c9:6a:8e: 73:cb:9c:e9:9c:13:81:42:11:32:6f:c6:d2:01:72:7a:2e:ff: fd:ea:76:43:b9:4c:13:70:73:89:d9:9a:95:06:de:47:e3:02: ac:a6:0d:3d:ba:f7:02:48:a7:d6:f2:d8:2c:59:90:09:2d:c3: 22:a4:39:ef:04:33:07:76:82:a5:d9:1a:0b:06:2e:30:fd:3c: 93:0b:08:0b:b2:0f:59:dd:05:db:93:46:cf:5c:ba:a9:3e:7a: 6c:0e:74:c7:28:71:74:f0:68:a1:bf:5f:33:a2:51:19:42:d9: 52:45:28:31:6b:dd:3f:0f:35:f9:f8:15:90:83:c0:d1:f4:b4: 17:f7:25:04 -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZvgn9doYeEhH//i3woes7p+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlOGUwOTcyNGY0NzJlNzY2ODljNjFkY2E2MGE3YzY0MWYy YWM4ZjkwHhcNMjYwMTIxMTI1NTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZWZlZTc2NjJkMDI2Yjg1NDNmYjkxZjYzMTI2ZjljYWFlMGNjNWZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjMYQr6bT+a6gcqtI42UVR3wdX217 nDZbIalin1FHewvIATz38oI/IM43UM4+XyVh8SEtyTwlC8IO01I63+ohZs7rHPm5 1nW+Z1Xr7QubdXTAdbyLZ79wK8C9XyudpVJe2be8n9t5FjVqHRM6zPi6tDvRGup9 o+1tPaVnOim0Rn2d4r3nnRrsUH2tKpCKtTHVZQN13ZNDxhdljZHLs3mVZhJVgoSz PzOGs5OLT/2WpHMmjgTgg7qPpHgGn1gEILsH40BFR9ClviNDiu52LW1RXhHtvunb fuxDRo9AC7kjDJmJcJd5ZWfqGBtOPp8KG9Nyl3v0kdJ9XpWt9UmSiIUkLwIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFC7+52YtAmuFQ/uR9jEm+cquDMX/MB8GA1UdIwQY MBaAFH6OCXJPRy52aJxh3KYKfGQfKsj5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZm80SmNrOUhMblpvbkdIY3BncDhaQjhxeVBrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi9kZGMyN2MtNzkzNy00NTYwLWJlMjIt ZGNiNWZiMzNjMTc4LzEvTHY3blppMENhNFZELTVIMk1TYjV5cTRNeGY4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Mi9kZGMyN2MtNzkzNy00NTYwLWJlMjItZGNiNWZiMzNjMTc4 LzEvZm80SmNrOUhMblpvbkdIY3BncDhaQjhxeVBrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQBuQKSAwQA ubNnAwQF1CtgMA0EAgACMAcDBQAqABvgMA0GCSqGSIb3DQEBCwUAA4IBAQADTmJS mFbb6DCAzrwGMXsFzXxw7K5Sv9PX+rc0qR40mOy7n1mFgNYH0ESwfRzD+7VmXSJt R83QAhGhvpyoUQVTNOIjSPKxci1jgHMUdirdxCQxhJFbOT7QlBVuptpLIIeieG5R vzBaI4QE+YpaJ9uL+s/piCxnSFpNFlXJao5zy5zpnBOBQhEyb8bSAXJ6Lv/96nZD uUwTcHOJ2ZqVBt5H4wKspg09uvcCSKfW8tgsWZAJLcMipDnvBDMHdoKl2RoLBi4w /TyTCwgLsg9Z3QXbk0bPXLqpPnpsDnTHKHF08Gihv18zolEZQtlSRSgxa90/DzX5 +BWQg8DR9LQX9yUE -----END CERTIFICATE-----Generated at Mon Jan 26 18:36:37 2026 by rpki-client