This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/_lbeczJhxKq8mWTvakofqaD_O4Y.roa File: _lbeczJhxKq8mWTvakofqaD_O4Y.roa (raw, json) Hash identifier: ARuck6NxRTtU6I4moc2f0TUGi3iV7mN/+Evj4ewbrmM= Subject key identifier: FE:56:DE:73:32:61:C4:AA:BC:99:64:EF:6A:4A:1F:A9:A0:FF:3B:86 Certificate issuer: /CN=253a3b5f51808168c212c094a2baaff38e16464a Certificate serial: 019B77C74C6A0534E6B9D009C18A8670C6D2 Authority key identifier: 25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/_lbeczJhxKq8mWTvakofqaD_O4Y.roa Signing time: Thu 01 Jan 2026 04:18:28 +0000 ROA not before: Thu 01 Jan 2026 04:18:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208427 IP address blocks: 62.76.142.0/24 maxlen: 24 195.19.92.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.mft rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:4c:6a:05:34:e6:b9:d0:09:c1:8a:86:70:c6:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=253a3b5f51808168c212c094a2baaff38e16464a Validity Not Before: Jan 1 04:18:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fe56de733261c4aabc9964ef6a4a1fa9a0ff3b86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:66:38:f4:a5:ec:cb:25:f3:e5:7d:e8:c4:5f: fa:a8:69:cb:6e:9f:ae:fa:47:f8:8a:de:71:59:af: bb:08:51:86:36:ff:0b:74:5a:6d:7c:2b:9c:3c:83: 0a:20:f3:7e:b0:5b:18:02:7d:5d:4a:2f:f3:6b:0f: b7:3d:0b:6f:5c:75:ff:05:60:14:a1:85:02:bb:9e: ec:e2:e2:01:4a:d2:88:c3:5d:e1:c0:f7:0f:00:f1: 63:52:8d:86:fc:a8:80:8a:6d:0b:b6:4f:bb:7c:37: 8e:bd:5b:29:94:ab:39:f3:cc:08:21:c5:d4:21:bf: 0d:1e:ed:98:ab:05:f4:95:13:ba:b6:fb:db:53:a9: d5:38:a7:fd:d0:fa:29:72:e9:4b:f8:ea:ad:aa:6e: 43:57:1c:87:14:c3:30:62:40:f7:90:09:1f:e8:ee: 91:65:8a:7f:85:cc:55:46:53:a3:a8:92:f6:d7:e3: 4d:16:90:17:ad:ea:b9:10:69:7a:fc:43:45:b1:97: 33:9f:79:66:d3:c9:c2:81:84:56:de:9e:dc:be:12: 80:1e:0d:c2:b8:92:4a:39:91:8d:f4:7f:31:53:44: 61:8e:2f:ae:0a:fe:45:e2:3a:76:d3:7d:61:3d:6d: 64:a5:5a:df:ff:d7:9d:4d:dc:ad:0a:57:89:24:2b: 26:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:56:DE:73:32:61:C4:AA:BC:99:64:EF:6A:4A:1F:A9:A0:FF:3B:86 X509v3 Authority Key Identifier: keyid:25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/_lbeczJhxKq8mWTvakofqaD_O4Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.76.142.0/24 195.19.92.0/24 Signature Algorithm: sha256WithRSAEncryption 24:74:0f:33:d4:19:01:a2:02:52:fc:40:d3:b2:ab:db:8a:09: 92:9e:4d:21:e5:bb:a6:96:82:35:41:a1:10:b6:02:95:78:92: 62:14:49:26:fd:4b:48:35:e9:6f:f2:0c:de:9d:70:36:43:aa: c6:c3:0e:0c:16:0c:84:09:d0:78:97:b9:a0:54:79:4b:eb:24: 8b:b3:1f:52:f0:84:47:8f:92:9b:76:1c:82:79:4b:6b:c5:55: d5:f9:76:8e:7d:29:77:92:ad:2b:4a:2c:3e:c7:14:3c:eb:24: 39:b2:db:a0:0b:95:dc:b7:ee:6c:a2:5f:82:03:b0:2c:c2:42: c7:31:bb:19:14:1f:ae:9f:0f:e0:be:c7:f0:ec:30:02:18:64: 79:7b:fd:c5:3c:9e:01:fd:25:8d:91:af:ba:5e:3c:40:95:2b: af:eb:e4:64:2c:1d:de:92:f1:75:9b:39:bc:d4:9d:0e:c4:76: 92:f5:c4:42:3d:0d:f9:85:c0:df:88:cc:57:b9:bf:19:6f:43: b4:e7:4f:3b:b3:3f:fa:55:93:63:d4:c3:81:db:2d:23:d9:d7: 6a:ab:2a:38:b0:bf:03:e5:b9:85:3e:18:ae:69:f9:fd:61:37: 7d:d3:4e:ba:bd:e8:11:cc:f1:d0:39:ac:90:b8:87:07:15:96: bf:b1:21:1a -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt3x0xqBTTmudAJwYqGcMbSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1M2EzYjVmNTE4MDgxNjhjMjEyYzA5NGEyYmFhZmYzOGUx NjQ2NGEwHhcNMjYwMTAxMDQxODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZTU2ZGU3MzMyNjFjNGFhYmM5OTY0ZWY2YTRhMWZhOWEwZmYzYjg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6GY49KXsyyXz5X3oxF/6qGnLbp+u +kf4it5xWa+7CFGGNv8LdFptfCucPIMKIPN+sFsYAn1dSi/zaw+3PQtvXHX/BWAU oYUCu57s4uIBStKIw13hwPcPAPFjUo2G/KiAim0Ltk+7fDeOvVsplKs588wIIcXU Ib8NHu2YqwX0lRO6tvvbU6nVOKf90PopculL+Oqtqm5DVxyHFMMwYkD3kAkf6O6R ZYp/hcxVRlOjqJL21+NNFpAXreq5EGl6/ENFsZczn3lm08nCgYRW3p7cvhKAHg3C uJJKOZGN9H8xU0Rhji+uCv5F4jp2031hPW1kpVrf/9edTdytCleJJCsmfQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFP5W3nMyYcSqvJlk72pKH6mg/zuGMB8GA1UdIwQY MBaAFCU6O19RgIFowhLAlKK6r/OOFkZKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSlRvN1gxR0FnV2pDRXNDVW9ycXY4NDRXUmtvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS85NzQ3NGMtMWRjMi00NjJjLWFhZGQt OWU5YTFlMDM3MzhlLzEvX2xiZWN6Smh4S3E4bVdUdmFrb2ZxYURfTzRZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS85NzQ3NGMtMWRjMi00NjJjLWFhZGQtOWU5YTFlMDM3Mzhl LzEvSlRvN1gxR0FnV2pDRXNDVW9ycXY4NDRXUmtvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAPkyOAwQA wxNcMA0GCSqGSIb3DQEBCwUAA4IBAQAkdA8z1BkBogJS/EDTsqvbigmSnk0h5bum loI1QaEQtgKVeJJiFEkm/UtINelv8gzenXA2Q6rGww4MFgyECdB4l7mgVHlL6ySL sx9S8IRHj5KbdhyCeUtrxVXV+XaOfSl3kq0rSiw+xxQ86yQ5stugC5Xct+5sol+C A7AswkLHMbsZFB+unw/gvsfw7DACGGR5e/3FPJ4B/SWNka+6XjxAlSuv6+RkLB3e kvF1mzm81J0OxHaS9cRCPQ35hcDfiMxXub8Zb0O05087sz/6VZNj1MOB2y0j2ddq qyo4sL8D5bmFPhiuafn9YTd90066vegRzPHQOayQuIcHFZa/sSEa -----END CERTIFICATE-----Generated at Sun Jan 25 14:39:02 2026 by rpki-client