This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/90843e-6663-4ee1-b1f4-a9b88fdab668/1/LvE1FOOjXHAB_ZBIESGtUGStN-w.roa File: LvE1FOOjXHAB_ZBIESGtUGStN-w.roa (raw, json) Hash identifier: uFYfE2aGUIZRnV1OPNvCDoBelhKF2bgbMXml4HQyyPw= Subject key identifier: 2E:F1:35:14:E3:A3:5C:70:01:FD:90:48:11:21:AD:50:64:AD:37:EC Certificate issuer: /CN=1eb99c120ec994f3b70dbfc5e019a2e8b187cd0c Certificate serial: 019B79ECB24B47BCF774C12116D13427CE47 Authority key identifier: 1E:B9:9C:12:0E:C9:94:F3:B7:0D:BF:C5:E0:19:A2:E8:B1:87:CD:0C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HrmcEg7JlPO3Db_F4Bmi6LGHzQw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/90843e-6663-4ee1-b1f4-a9b88fdab668/1/LvE1FOOjXHAB_ZBIESGtUGStN-w.roa Signing time: Thu 01 Jan 2026 14:18:33 +0000 ROA not before: Thu 01 Jan 2026 14:18:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50939 IP address blocks: 45.134.160.0/22 maxlen: 22 2a0f:4480::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/90843e-6663-4ee1-b1f4-a9b88fdab668/1/HrmcEg7JlPO3Db_F4Bmi6LGHzQw.crl rsync://rpki.ripe.net/repository/DEFAULT/87/90843e-6663-4ee1-b1f4-a9b88fdab668/1/HrmcEg7JlPO3Db_F4Bmi6LGHzQw.mft rsync://rpki.ripe.net/repository/DEFAULT/HrmcEg7JlPO3Db_F4Bmi6LGHzQw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:b2:4b:47:bc:f7:74:c1:21:16:d1:34:27:ce:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1eb99c120ec994f3b70dbfc5e019a2e8b187cd0c Validity Not Before: Jan 1 14:18:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2ef13514e3a35c7001fd90481121ad5064ad37ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:64:05:25:ef:a6:3e:7d:d1:6d:1d:42:96:c5: 6f:da:96:74:15:16:f0:a9:4c:9d:7f:b3:59:30:5f: 12:86:42:60:b8:4c:a2:52:82:5d:7a:93:cb:2d:48: f9:a5:19:02:93:22:60:67:94:a3:54:1c:80:14:ad: 5f:d8:a1:d9:9d:2a:29:4b:79:03:ae:c7:9a:06:d0: f8:6a:e3:03:49:02:a0:89:f3:a6:82:e6:69:66:91: 90:7c:76:1b:fb:54:df:e4:da:11:79:24:8c:4b:23: d9:3c:e0:cd:2f:d3:da:4a:a9:65:4f:3c:7a:64:75: 70:53:39:69:35:9b:11:34:51:69:84:e4:89:56:3e: 83:67:88:d8:41:6d:14:4a:50:90:9f:6f:57:e0:34: ba:9b:02:e4:08:4e:cf:73:a1:6d:b1:52:57:46:2b: 35:92:bf:4a:ce:a8:fd:87:dc:2c:e9:6f:a2:c8:58: 85:80:51:03:1d:b5:a8:ad:17:5d:45:25:db:9d:38: bb:54:97:96:72:7d:03:3a:7b:66:41:6b:b2:5a:fe: 18:c6:c2:43:f8:7e:c4:b7:b3:0b:2b:d4:74:62:26: d0:c3:69:1d:b8:ff:ad:6a:bf:c0:58:93:8a:0c:14: d9:b1:c6:a6:1a:f5:b0:86:de:92:f5:2c:a3:a2:d9: 0b:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:F1:35:14:E3:A3:5C:70:01:FD:90:48:11:21:AD:50:64:AD:37:EC X509v3 Authority Key Identifier: keyid:1E:B9:9C:12:0E:C9:94:F3:B7:0D:BF:C5:E0:19:A2:E8:B1:87:CD:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HrmcEg7JlPO3Db_F4Bmi6LGHzQw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/90843e-6663-4ee1-b1f4-a9b88fdab668/1/LvE1FOOjXHAB_ZBIESGtUGStN-w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/90843e-6663-4ee1-b1f4-a9b88fdab668/1/HrmcEg7JlPO3Db_F4Bmi6LGHzQw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.134.160.0/22 IPv6: 2a0f:4480::/48 Signature Algorithm: sha256WithRSAEncryption 30:a0:18:c5:24:0f:1a:28:33:36:04:68:00:05:fa:46:9b:3f: d1:27:fe:d0:40:96:5a:b8:c2:22:ba:7d:ae:ed:7e:8a:fb:84: 23:5d:55:8d:a7:c4:fd:6e:b9:57:83:1a:65:e0:5a:b9:d2:ca: c3:04:d9:c3:6b:2c:ed:ce:da:3a:f0:3e:18:ca:1c:ae:0b:0f: 98:be:0e:43:00:eb:3e:08:62:66:be:bd:5d:77:91:89:e5:14: 46:6d:ac:0a:cc:ab:20:32:69:b2:05:c7:ee:e3:bf:a1:52:b5: fd:37:c8:99:cd:c9:b2:b2:1d:3c:9f:49:80:e5:a4:c6:87:71: 53:4b:5c:a3:a5:00:84:f8:2a:b9:f1:2f:2c:f4:fd:91:d3:17: f9:1d:39:93:f1:bc:b1:ab:c4:12:ac:7f:73:09:ae:cd:cc:7c: eb:4c:6a:2e:e8:97:9e:db:c7:11:65:63:c6:67:0d:97:87:95: 35:03:d1:2f:81:8d:56:75:a9:ce:7c:b5:fe:43:eb:86:35:d7: e4:05:d3:f7:8e:c2:b4:00:db:20:64:44:20:9c:1b:e9:f8:79: de:29:23:9b:e6:6a:db:51:06:3e:9b:ff:ff:4d:6c:4b:e6:b5: a1:b2:cc:8b:34:94:82:39:3a:83:f3:72:52:bb:8f:f9:42:8f: 97:6a:ec:00 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt57LJLR7z3dMEhFtE0J85HMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlYjk5YzEyMGVjOTk0ZjNiNzBkYmZjNWUwMTlhMmU4YjE4 N2NkMGMwHhcNMjYwMTAxMTQxODMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZWYxMzUxNGUzYTM1YzcwMDFmZDkwNDgxMTIxYWQ1MDY0YWQzN2VjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyGQFJe+mPn3RbR1ClsVv2pZ0FRbw qUydf7NZMF8ShkJguEyiUoJdepPLLUj5pRkCkyJgZ5SjVByAFK1f2KHZnSopS3kD rseaBtD4auMDSQKgifOmguZpZpGQfHYb+1Tf5NoReSSMSyPZPODNL9PaSqllTzx6 ZHVwUzlpNZsRNFFphOSJVj6DZ4jYQW0USlCQn29X4DS6mwLkCE7Pc6FtsVJXRis1 kr9Kzqj9h9ws6W+iyFiFgFEDHbWorRddRSXbnTi7VJeWcn0DOntmQWuyWv4YxsJD +H7Et7MLK9R0YibQw2kduP+tar/AWJOKDBTZscamGvWwht6S9SyjotkLlQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFC7xNRTjo1xwAf2QSBEhrVBkrTfsMB8GA1UdIwQY MBaAFB65nBIOyZTztw2/xeAZouixh80MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSHJtY0VnN0psUE8zRGJfRjRCbWk2TEdIelF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny85MDg0M2UtNjY2My00ZWUxLWIxZjQt YTliODhmZGFiNjY4LzEvTHZFMUZPT2pYSEFCX1pCSUVTR3RVR1N0Ti13LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny85MDg0M2UtNjY2My00ZWUxLWIxZjQtYTliODhmZGFiNjY4 LzEvSHJtY0VnN0psUE8zRGJfRjRCbWk2TEdIelF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQCLYagMA8E AgACMAkDBwAqD0SAAAAwDQYJKoZIhvcNAQELBQADggEBADCgGMUkDxooMzYEaAAF +kabP9En/tBAllq4wiK6fa7tfor7hCNdVY2nxP1uuVeDGmXgWrnSysME2cNrLO3O 2jrwPhjKHK4LD5i+DkMA6z4IYma+vV13kYnlFEZtrArMqyAyabIFx+7jv6FStf03 yJnNybKyHTyfSYDlpMaHcVNLXKOlAIT4KrnxLyz0/ZHTF/kdOZPxvLGrxBKsf3MJ rs3MfOtMai7ol57bxxFlY8ZnDZeHlTUD0S+BjVZ1qc58tf5D64Y11+QF0/eOwrQA 2yBkRCCcG+n4ed4pI5vmattRBj6b//9NbEvmtaGyzIs0lII5OoPzclK7j/lCj5dq 7AA= -----END CERTIFICATE-----Generated at Sun Jan 25 19:38:22 2026 by rpki-client