This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/398bbb-184f-4851-b2a0-91f49d8d115d/1/lSVqAAvEWKUv1GrOr_KbEfWQpGk.roa File: lSVqAAvEWKUv1GrOr_KbEfWQpGk.roa (raw, json) Hash identifier: Ugj+m6NNSZeK/sMmtv36B6LB9pkXvcsE/Io4aKNy8r8= Subject key identifier: 95:25:6A:00:0B:C4:58:A5:2F:D4:6A:CE:AF:F2:9B:11:F5:90:A4:69 Certificate issuer: /CN=4cf80802c6579a4d4a10608dcf92e9ace9905b16 Certificate serial: 019B797EDB4B979E9408FA116328D6C04CE1 Authority key identifier: 4C:F8:08:02:C6:57:9A:4D:4A:10:60:8D:CF:92:E9:AC:E9:90:5B:16 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TPgIAsZXmk1KEGCNz5LprOmQWxY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/398bbb-184f-4851-b2a0-91f49d8d115d/1/lSVqAAvEWKUv1GrOr_KbEfWQpGk.roa Signing time: Thu 01 Jan 2026 12:18:35 +0000 ROA not before: Thu 01 Jan 2026 12:18:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214503 IP address blocks: 45.84.104.0/22 maxlen: 24 45.84.107.0/24 maxlen: 24 81.27.77.0/24 maxlen: 24 213.177.169.0/24 maxlen: 24 2a0d:bbc1::/48 maxlen: 48 2a0d:bbc7::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/398bbb-184f-4851-b2a0-91f49d8d115d/1/TPgIAsZXmk1KEGCNz5LprOmQWxY.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/398bbb-184f-4851-b2a0-91f49d8d115d/1/TPgIAsZXmk1KEGCNz5LprOmQWxY.mft rsync://rpki.ripe.net/repository/DEFAULT/TPgIAsZXmk1KEGCNz5LprOmQWxY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:db:4b:97:9e:94:08:fa:11:63:28:d6:c0:4c:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4cf80802c6579a4d4a10608dcf92e9ace9905b16 Validity Not Before: Jan 1 12:18:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=95256a000bc458a52fd46aceaff29b11f590a469 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:21:a1:c6:09:ac:17:45:de:84:a1:2e:25:8a: da:eb:60:3c:5c:e2:03:f2:d3:af:db:45:ab:35:7b: 32:9a:e1:ad:0d:5a:40:cc:23:eb:1e:98:81:1c:60: d6:a1:de:a8:6e:4f:d7:cb:e1:30:48:84:db:4a:37: 0f:ae:81:62:ed:0b:f9:1a:7e:b1:e5:ce:7b:15:06: 01:41:69:4b:1b:fe:a7:b9:af:53:22:39:12:50:b7: 25:a2:28:e9:00:d7:93:84:ae:bd:42:79:3f:b0:c0: 60:f9:3b:bd:35:66:c6:d6:38:5b:29:c0:0e:52:bd: 0a:ca:01:43:9d:62:0d:a5:d0:e4:8d:63:fe:17:77: 7e:24:79:87:72:ba:03:25:27:f9:b9:1c:06:4b:8b: 3a:59:f0:3f:8f:45:5c:15:76:64:5c:cf:e1:bf:3f: 51:da:44:fe:9a:26:9d:9d:de:aa:3f:1a:f6:92:dd: 14:9e:3a:c3:38:18:03:ea:95:ad:c4:b0:bc:72:c8: f0:1c:76:a0:30:58:fc:7f:06:59:40:85:2a:de:aa: f0:fb:e5:9f:1f:d8:78:0b:f3:7a:6f:fd:8c:5f:ae: 07:ea:df:9a:fa:71:a1:7c:ae:fc:4e:0a:90:76:2f: bb:31:00:e0:f7:dd:fa:57:d3:9e:d7:f8:4a:ec:55: 22:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:25:6A:00:0B:C4:58:A5:2F:D4:6A:CE:AF:F2:9B:11:F5:90:A4:69 X509v3 Authority Key Identifier: keyid:4C:F8:08:02:C6:57:9A:4D:4A:10:60:8D:CF:92:E9:AC:E9:90:5B:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TPgIAsZXmk1KEGCNz5LprOmQWxY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/398bbb-184f-4851-b2a0-91f49d8d115d/1/lSVqAAvEWKUv1GrOr_KbEfWQpGk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/398bbb-184f-4851-b2a0-91f49d8d115d/1/TPgIAsZXmk1KEGCNz5LprOmQWxY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.84.104.0/22 81.27.77.0/24 213.177.169.0/24 IPv6: 2a0d:bbc1::/48 2a0d:bbc7::/48 Signature Algorithm: sha256WithRSAEncryption 96:9f:08:46:0a:e9:a2:06:71:b2:fa:6e:d5:9f:65:9c:01:25: 63:d0:69:a1:9d:07:dd:66:01:1b:fd:8f:d9:05:69:8a:05:65: 57:d0:32:cc:9a:74:45:5d:2a:a2:48:e0:17:4f:a6:c3:df:ca: 6f:24:96:eb:9c:76:fa:dd:15:61:4c:fa:b0:7b:ea:48:29:bd: 77:58:27:77:6e:e7:99:26:64:77:b8:aa:3c:5f:2e:0b:e5:13: a6:db:44:e3:29:6d:a1:57:d3:f5:7f:71:b9:18:0e:5e:63:1d: ab:8b:ac:d6:33:e5:04:19:75:96:7e:5a:34:81:ad:15:93:a1: 91:a8:ae:3d:bf:94:3e:4f:4d:f3:c5:81:32:15:18:c8:40:c4: cc:21:2c:f9:95:99:4b:d5:5a:d3:6f:16:a1:61:91:92:25:a0: 60:96:da:14:b8:f8:63:08:df:c8:09:11:fe:13:1d:63:20:5d: 8b:1b:ee:bd:ea:c6:9c:54:19:c4:b9:43:f5:3f:3f:1d:c9:d8: af:08:ae:7b:96:b8:15:1a:94:6c:79:ea:8c:3f:d1:d2:84:0b: 95:2a:47:67:65:11:1f:70:48:07:68:0b:2f:84:e3:3d:a5:11: cc:12:a9:a2:7f:2b:48:31:4c:e4:a1:50:56:7f:28:2e:05:a0: 1b:bd:8b:db -----BEGIN CERTIFICATE----- MIIFIzCCBAugAwIBAgISAZt5fttLl56UCPoRYyjWwEzhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjZjgwODAyYzY1NzlhNGQ0YTEwNjA4ZGNmOTJlOWFjZTk5 MDViMTYwHhcNMjYwMTAxMTIxODM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NTI1NmEwMDBiYzQ1OGE1MmZkNDZhY2VhZmYyOWIxMWY1OTBhNDY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArSGhxgmsF0XehKEuJYra62A8XOID 8tOv20WrNXsymuGtDVpAzCPrHpiBHGDWod6obk/Xy+EwSITbSjcProFi7Qv5Gn6x 5c57FQYBQWlLG/6nua9TIjkSULcloijpANeThK69Qnk/sMBg+Tu9NWbG1jhbKcAO Ur0KygFDnWINpdDkjWP+F3d+JHmHcroDJSf5uRwGS4s6WfA/j0VcFXZkXM/hvz9R 2kT+miadnd6qPxr2kt0UnjrDOBgD6pWtxLC8csjwHHagMFj8fwZZQIUq3qrw++Wf H9h4C/N6b/2MX64H6t+a+nGhfK78TgqQdi+7MQDg9936V9Oe1/hK7FUiBQIDAQAB o4ICLzCCAiswHQYDVR0OBBYEFJUlagALxFilL9Rqzq/ymxH1kKRpMB8GA1UdIwQY MBaAFEz4CALGV5pNShBgjc+S6azpkFsWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVFBnSUFzWlhtazFLRUdDTno1THByT21RV3hZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS8zOThiYmItMTg0Zi00ODUxLWIyYTAt OTFmNDlkOGQxMTVkLzEvbFNWcUFBdkVXS1V2MUdyT3JfS2JFZldRcEdrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS8zOThiYmItMTg0Zi00ODUxLWIyYTAtOTFmNDlkOGQxMTVk LzEvVFBnSUFzWlhtazFLRUdDTno1THByT21RV3hZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEUGCCsGAQUFBwEHAQH/BDYwNDAYBAIAATASAwQCLVRoAwQA URtNAwQA1bGpMBgEAgACMBIDBwAqDbvBAAADBwAqDbvHAAAwDQYJKoZIhvcNAQEL BQADggEBAJafCEYK6aIGcbL6btWfZZwBJWPQaaGdB91mARv9j9kFaYoFZVfQMsya dEVdKqJI4BdPpsPfym8kluucdvrdFWFM+rB76kgpvXdYJ3du55kmZHe4qjxfLgvl E6bbROMpbaFX0/V/cbkYDl5jHauLrNYz5QQZdZZ+WjSBrRWToZGorj2/lD5PTfPF gTIVGMhAxMwhLPmVmUvVWtNvFqFhkZIloGCW2hS4+GMI38gJEf4THWMgXYsb7r3q xpxUGcS5Q/U/Px3J2K8IrnuWuBUalGx56ow/0dKEC5UqR2dlER9wSAdoCy+E4z2l EcwSqaJ/K0gxTOShUFZ/KC4FoBu9i9s= -----END CERTIFICATE-----Generated at Sun Jan 25 20:30:13 2026 by rpki-client