This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/e4e696-9d78-414c-af40-cf56c66a0ac0/1/1LkKTJE8VWFRjFVsY2vc5JNxUyo.roa File: 1LkKTJE8VWFRjFVsY2vc5JNxUyo.roa (raw, json) Hash identifier: gqvXE5VHGf5Er/eIvJDh+DnQ30d/N/LUShz/R2QWX8s= Subject key identifier: D4:B9:0A:4C:91:3C:55:61:51:8C:55:6C:63:6B:DC:E4:93:71:53:2A Certificate issuer: /CN=4c93213d88fa874eb4460e2c5cf1bb1a91da9078 Certificate serial: 019A008F8C74D1C62936A47A094B64EC2A9A Authority key identifier: 4C:93:21:3D:88:FA:87:4E:B4:46:0E:2C:5C:F1:BB:1A:91:DA:90:78 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TJMhPYj6h060Rg4sXPG7GpHakHg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/e4e696-9d78-414c-af40-cf56c66a0ac0/1/1LkKTJE8VWFRjFVsY2vc5JNxUyo.roa Signing time: Mon 20 Oct 2025 07:39:58 +0000 ROA not before: Mon 20 Oct 2025 07:39:58 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 41073 IP address blocks: 89.207.56.0/21 maxlen: 24 185.54.104.0/22 maxlen: 24 2a00:1ed8::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/e4e696-9d78-414c-af40-cf56c66a0ac0/1/TJMhPYj6h060Rg4sXPG7GpHakHg.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/e4e696-9d78-414c-af40-cf56c66a0ac0/1/TJMhPYj6h060Rg4sXPG7GpHakHg.mft rsync://rpki.ripe.net/repository/DEFAULT/TJMhPYj6h060Rg4sXPG7GpHakHg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:00:8f:8c:74:d1:c6:29:36:a4:7a:09:4b:64:ec:2a:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c93213d88fa874eb4460e2c5cf1bb1a91da9078 Validity Not Before: Oct 20 07:39:58 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=d4b90a4c913c5561518c556c636bdce49371532a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:ac:e0:66:f9:2d:f5:b1:bf:45:24:61:b7:9a: cc:ff:81:bc:89:93:94:c4:41:3c:0c:dc:99:25:81: 5c:bf:fa:01:47:f5:a1:8b:76:65:10:0b:0c:eb:21: 1f:83:84:58:83:55:20:ff:18:b3:fe:e6:e1:dc:62: 75:9d:6f:57:c8:6c:6e:e2:c7:58:62:36:a5:cd:fd: cf:a6:1f:28:c0:65:08:13:33:05:0a:33:19:25:df: e2:7f:50:0f:93:9f:6c:29:34:52:df:03:5d:83:f3: ab:57:0f:cf:a8:1a:50:6a:c5:24:83:04:45:8a:bf: 58:f7:57:c6:3f:d4:4f:11:63:de:5a:bd:c1:d9:7f: ae:f2:6b:8c:6a:60:2d:45:53:46:22:6c:55:86:bb: 69:6a:0b:97:b8:75:f0:29:c3:0d:b2:8c:b0:e0:4c: 03:a8:2b:c5:c7:76:56:83:a4:32:2f:4c:7e:66:11: 24:d1:2e:13:22:31:29:1d:af:53:d0:82:1b:45:f7: ea:52:2a:46:4f:5f:97:dd:f2:5c:8a:8b:ad:e9:42: 1d:39:e1:83:ae:87:f3:8c:4f:a7:51:05:21:16:30: d4:ca:78:11:40:1d:e5:fc:b8:45:06:fa:a7:47:ec: e0:07:16:48:df:e5:ef:88:f6:f1:4c:64:ce:7d:01: f6:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:B9:0A:4C:91:3C:55:61:51:8C:55:6C:63:6B:DC:E4:93:71:53:2A X509v3 Authority Key Identifier: keyid:4C:93:21:3D:88:FA:87:4E:B4:46:0E:2C:5C:F1:BB:1A:91:DA:90:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TJMhPYj6h060Rg4sXPG7GpHakHg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/e4e696-9d78-414c-af40-cf56c66a0ac0/1/1LkKTJE8VWFRjFVsY2vc5JNxUyo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/e4e696-9d78-414c-af40-cf56c66a0ac0/1/TJMhPYj6h060Rg4sXPG7GpHakHg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.207.56.0/21 185.54.104.0/22 IPv6: 2a00:1ed8::/29 Signature Algorithm: sha256WithRSAEncryption 7c:cf:95:3b:92:37:49:5a:7b:27:41:d4:5e:c0:66:23:53:c1: d9:f6:a0:3a:db:c2:04:c7:35:d7:4a:68:4b:f5:1b:12:f3:c3: eb:70:16:10:19:42:ad:ff:e5:eb:fd:56:1f:8a:f4:f5:4e:ee: 9e:f0:89:7b:f8:76:dc:08:56:cd:a7:e9:18:7d:f9:a8:7e:33: c7:6c:af:c5:06:e5:f1:e1:b9:84:a9:92:02:85:18:16:a3:14: f3:4e:6d:4f:d3:cb:6f:8f:b0:2e:f9:7b:0d:48:fa:ab:6c:cc: 62:87:ba:d2:fb:42:d0:e7:d0:8f:65:f1:4a:c0:44:de:60:68: bd:38:d0:11:0f:3c:3d:82:aa:29:1f:a1:82:0f:5a:de:48:7f: f8:c3:8d:8c:87:1f:d8:d1:12:a0:a8:0a:4a:26:06:c0:78:25: b4:3d:6a:64:93:84:15:f5:b3:52:05:e4:75:79:73:53:f7:c8: ef:f7:aa:c7:fe:f1:34:ef:00:94:96:71:30:91:d5:75:b2:3f: 5f:02:cb:da:46:68:05:78:83:80:53:4b:45:40:32:da:14:f1: 7d:fd:a3:57:59:09:95:71:dd:14:ae:a4:d2:df:9a:7d:9c:ab: 36:a6:ce:68:e7:cf:59:c4:50:ef:02:bf:2a:55:4a:71:fb:2b: 30:a6:9c:e0 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZoAj4x00cYpNqR6CUtk7CqaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjOTMyMTNkODhmYTg3NGViNDQ2MGUyYzVjZjFiYjFhOTFk YTkwNzgwHhcNMjUxMDIwMDczOTU4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNGI5MGE0YzkxM2M1NTYxNTE4YzU1NmM2MzZiZGNlNDkzNzE1MzJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2qzgZvkt9bG/RSRht5rM/4G8iZOU xEE8DNyZJYFcv/oBR/Whi3ZlEAsM6yEfg4RYg1Ug/xiz/ubh3GJ1nW9XyGxu4sdY Yjalzf3Pph8owGUIEzMFCjMZJd/if1APk59sKTRS3wNdg/OrVw/PqBpQasUkgwRF ir9Y91fGP9RPEWPeWr3B2X+u8muMamAtRVNGImxVhrtpaguXuHXwKcMNsoyw4EwD qCvFx3ZWg6QyL0x+ZhEk0S4TIjEpHa9T0IIbRffqUipGT1+X3fJciout6UIdOeGD rofzjE+nUQUhFjDUyngRQB3l/LhFBvqnR+zgBxZI3+XviPbxTGTOfQH29wIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFNS5CkyRPFVhUYxVbGNr3OSTcVMqMB8GA1UdIwQY MBaAFEyTIT2I+odOtEYOLFzxuxqR2pB4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVEpNaFBZajZoMDYwUmc0c1hQRzdHcEhha0hnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS9lNGU2OTYtOWQ3OC00MTRjLWFmNDAt Y2Y1NmM2NmEwYWMwLzEvMUxrS1RKRThWV0ZSakZWc1kydmM1Sk54VXlvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS9lNGU2OTYtOWQ3OC00MTRjLWFmNDAtY2Y1NmM2NmEwYWMw LzEvVEpNaFBZajZoMDYwUmc0c1hQRzdHcEhha0hnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQDWc84AwQC uTZoMA0EAgACMAcDBQMqAB7YMA0GCSqGSIb3DQEBCwUAA4IBAQB8z5U7kjdJWnsn QdRewGYjU8HZ9qA628IExzXXSmhL9RsS88PrcBYQGUKt/+Xr/VYfivT1Tu6e8Il7 +HbcCFbNp+kYffmofjPHbK/FBuXx4bmEqZIChRgWoxTzTm1P08tvj7Au+XsNSPqr bMxih7rS+0LQ59CPZfFKwETeYGi9ONARDzw9gqopH6GCD1reSH/4w42Mhx/Y0RKg qApKJgbAeCW0PWpkk4QV9bNSBeR1eXNT98jv96rH/vE07wCUlnEwkdV1sj9fAsva RmgFeIOAU0tFQDLaFPF9/aNXWQmVcd0UrqTS35p9nKs2ps5o589ZxFDvAr8qVUpx +yswppzg -----END CERTIFICATE-----Generated at Sat Dec 6 20:52:25 2025 by rpki-client