This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/036434-e95e-4426-8d1c-67280c8bbab8/1/lBelNikhE64GysX2fGFFE4vhjCQ.roa File: lBelNikhE64GysX2fGFFE4vhjCQ.roa (raw, json) Hash identifier: OyoE+SKk2HTXSgPYtWOQOXKI4eO+3EXXvE2q2Oo53nA= Subject key identifier: 94:17:A5:36:29:21:13:AE:06:CA:C5:F6:7C:61:45:13:8B:E1:8C:24 Certificate issuer: /CN=0239ae11188088547eb3e523483cca98556c115b Certificate serial: 019B7AC88CF2C0D58E7D1E3BFD0F1F5C85F2 Authority key identifier: 02:39:AE:11:18:80:88:54:7E:B3:E5:23:48:3C:CA:98:55:6C:11:5B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AjmuERiAiFR-s-UjSDzKmFVsEVs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/036434-e95e-4426-8d1c-67280c8bbab8/1/lBelNikhE64GysX2fGFFE4vhjCQ.roa Signing time: Thu 01 Jan 2026 18:18:42 +0000 ROA not before: Thu 01 Jan 2026 18:18:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 52126 IP address blocks: 37.26.240.0/21 maxlen: 21 77.83.208.0/22 maxlen: 22 95.130.8.0/21 maxlen: 21 147.78.36.0/22 maxlen: 22 152.89.112.0/22 maxlen: 22 185.12.34.0/23 maxlen: 23 185.32.216.0/22 maxlen: 22 2a02:a80::/29 maxlen: 32 2a02:ebc0::/29 maxlen: 29 2a10:7340::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/036434-e95e-4426-8d1c-67280c8bbab8/1/AjmuERiAiFR-s-UjSDzKmFVsEVs.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/036434-e95e-4426-8d1c-67280c8bbab8/1/AjmuERiAiFR-s-UjSDzKmFVsEVs.mft rsync://rpki.ripe.net/repository/DEFAULT/AjmuERiAiFR-s-UjSDzKmFVsEVs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:8c:f2:c0:d5:8e:7d:1e:3b:fd:0f:1f:5c:85:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0239ae11188088547eb3e523483cca98556c115b Validity Not Before: Jan 1 18:18:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9417a536292113ae06cac5f67c6145138be18c24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:80:58:05:61:22:cb:9c:6f:83:53:4c:c1:48: 77:e8:dd:4e:c4:2c:25:94:c6:34:ec:9f:e7:35:46: 7f:a4:ec:0b:58:1b:12:74:14:da:c7:ce:c4:9e:05: 2f:f3:a1:3f:37:5c:37:61:98:a3:04:27:f5:c5:a3: 0d:a5:8f:7a:20:fc:38:21:46:c3:1f:4e:38:ca:56: d1:92:9e:08:84:df:a6:9e:4a:f1:9a:50:25:ca:75: 73:01:34:50:55:ab:e0:12:69:9a:21:12:74:6e:34: 84:33:35:ff:99:cb:fe:57:c5:9d:70:95:e4:ab:8e: c8:4a:77:e4:90:a4:33:9a:06:72:2e:1b:63:bd:e2: 0a:c1:dc:85:6a:46:ad:66:74:87:5c:af:d1:0f:2d: 0c:cd:45:0a:be:05:27:ce:68:d4:c1:ac:30:45:d8: f7:7b:94:b8:12:3d:fa:45:70:28:d3:28:ec:89:2e: b1:d3:0b:e0:94:58:8f:75:fd:e8:0b:ef:b3:3b:76: a5:fa:fe:71:bb:d7:ee:7f:ee:6b:a8:67:22:0e:12: 13:33:9a:c6:a5:b1:79:91:c9:6e:c4:00:f3:54:28: 40:93:70:90:c6:d8:8d:69:4f:59:14:cc:b8:eb:42: 51:1d:25:a7:77:09:8b:12:3a:6e:f2:96:1d:c0:65: af:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:17:A5:36:29:21:13:AE:06:CA:C5:F6:7C:61:45:13:8B:E1:8C:24 X509v3 Authority Key Identifier: keyid:02:39:AE:11:18:80:88:54:7E:B3:E5:23:48:3C:CA:98:55:6C:11:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AjmuERiAiFR-s-UjSDzKmFVsEVs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/036434-e95e-4426-8d1c-67280c8bbab8/1/lBelNikhE64GysX2fGFFE4vhjCQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/036434-e95e-4426-8d1c-67280c8bbab8/1/AjmuERiAiFR-s-UjSDzKmFVsEVs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.26.240.0/21 77.83.208.0/22 95.130.8.0/21 147.78.36.0/22 152.89.112.0/22 185.12.34.0/23 185.32.216.0/22 IPv6: 2a02:a80::/29 2a02:ebc0::/29 2a10:7340::/29 Signature Algorithm: sha256WithRSAEncryption d9:c0:cd:93:8a:20:4d:18:2c:5a:1c:82:60:f6:3a:64:40:4e: 8f:3a:be:2b:50:fb:a5:14:05:04:a6:03:cb:4c:ec:57:07:7a: ec:72:18:12:df:3c:b7:b9:7f:a6:3c:40:8a:12:d7:7d:d3:a1: 84:4e:e1:ca:51:8d:69:c3:b3:d8:ea:d1:ff:f1:05:e5:31:cc: fc:68:59:18:2b:a1:e3:bd:1d:7a:b3:e5:71:bd:b5:93:d9:16: 5b:1d:9e:38:72:95:e0:95:2a:d4:5d:79:2f:42:6a:89:10:b6: 71:6d:ec:db:a6:72:44:1c:cd:9d:44:42:fb:22:1c:45:72:24: 96:6b:61:6a:a6:b7:95:bb:78:17:53:19:a4:4a:7d:15:fa:a3: b4:47:36:52:4d:8a:98:38:12:59:28:39:29:28:39:b2:7b:ce: 5f:1a:40:02:2d:0c:1f:80:13:67:53:cd:11:a7:41:5a:43:96: e3:6d:00:11:c6:04:f0:e6:26:bd:34:a0:3b:2b:99:1a:8d:4c: 5b:33:84:5d:a1:4c:36:49:6c:6c:91:90:25:47:35:7a:90:85: 70:c1:f7:10:cf:9a:cc:fa:e2:79:b4:a2:fd:a4:26:f6:a2:48: 54:10:51:ec:da:17:e1:ac:23:43:4e:48:21:8f:5e:72:cc:3e: 78:f9:cb:ff -----BEGIN CERTIFICATE----- MIIFPjCCBCagAwIBAgISAZt6yIzywNWOfR47/Q8fXIXyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAyMzlhZTExMTg4MDg4NTQ3ZWIzZTUyMzQ4M2NjYTk4NTU2 YzExNWIwHhcNMjYwMTAxMTgxODQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NDE3YTUzNjI5MjExM2FlMDZjYWM1ZjY3YzYxNDUxMzhiZTE4YzI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1oBYBWEiy5xvg1NMwUh36N1OxCwl lMY07J/nNUZ/pOwLWBsSdBTax87EngUv86E/N1w3YZijBCf1xaMNpY96IPw4IUbD H044ylbRkp4IhN+mnkrxmlAlynVzATRQVavgEmmaIRJ0bjSEMzX/mcv+V8WdcJXk q47ISnfkkKQzmgZyLhtjveIKwdyFakatZnSHXK/RDy0MzUUKvgUnzmjUwawwRdj3 e5S4Ej36RXAo0yjsiS6x0wvglFiPdf3oC++zO3al+v5xu9fuf+5rqGciDhITM5rG pbF5kcluxADzVChAk3CQxtiNaU9ZFMy460JRHSWndwmLEjpu8pYdwGWvvQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFJQXpTYpIROuBsrF9nxhRROL4YwkMB8GA1UdIwQY MBaAFAI5rhEYgIhUfrPlI0g8yphVbBFbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQWptdUVSaUFpRlItcy1ValNEekttRlZzRVZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS8wMzY0MzQtZTk1ZS00NDI2LThkMWMt NjcyODBjOGJiYWI4LzEvbEJlbE5pa2hFNjRHeXNYMmZHRkZFNHZoakNRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS8wMzY0MzQtZTk1ZS00NDI2LThkMWMtNjcyODBjOGJiYWI4 LzEvQWptdUVSaUFpRlItcy1ValNEekttRlZzRVZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGAGCCsGAQUFBwEHAQH/BFEwTzAwBAIAATAqAwQDJRrwAwQC TVPQAwQDX4IIAwQCk04kAwQCmFlwAwQBuQwiAwQCuSDYMBsEAgACMBUDBQMqAgqA AwUDKgLrwAMFAyoQc0AwDQYJKoZIhvcNAQELBQADggEBANnAzZOKIE0YLFocgmD2 OmRATo86vitQ+6UUBQSmA8tM7FcHeuxyGBLfPLe5f6Y8QIoS133ToYRO4cpRjWnD s9jq0f/xBeUxzPxoWRgroeO9HXqz5XG9tZPZFlsdnjhyleCVKtRdeS9CaokQtnFt 7NumckQczZ1EQvsiHEVyJJZrYWqmt5W7eBdTGaRKfRX6o7RHNlJNipg4ElkoOSko ObJ7zl8aQAItDB+AE2dTzRGnQVpDluNtABHGBPDmJr00oDsrmRqNTFszhF2hTDZJ bGyRkCVHNXqQhXDB9xDPmsz64nm0ov2kJvaiSFQQUezaF+GsI0NOSCGPXnLMPnj5 y/8= -----END CERTIFICATE-----Generated at Sun Jan 25 12:18:06 2026 by rpki-client