This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/e5d5eb-ada0-4d5c-8664-f2b22c69d5fc/1/LYeebYhXQ4ozTkOxDiNrlwHyTZs.roa File: LYeebYhXQ4ozTkOxDiNrlwHyTZs.roa (raw, json) Hash identifier: l6hu36oMQogqFFPGyf6pGKkrBP0BChtip7eb8I8e7yY= Subject key identifier: 2D:87:9E:6D:88:57:43:8A:33:4E:43:B1:0E:23:6B:97:01:F2:4D:9B Certificate issuer: /CN=14d94a6b30920d1f7a2d15171b508f92266476e3 Certificate serial: 019B7BA53769A9C04E83B79FB88E76E28594 Authority key identifier: 14:D9:4A:6B:30:92:0D:1F:7A:2D:15:17:1B:50:8F:92:26:64:76:E3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FNlKazCSDR96LRUXG1CPkiZkduM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/e5d5eb-ada0-4d5c-8664-f2b22c69d5fc/1/LYeebYhXQ4ozTkOxDiNrlwHyTZs.roa Signing time: Thu 01 Jan 2026 22:19:43 +0000 ROA not before: Thu 01 Jan 2026 22:19:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 1103 IP address blocks: 136.231.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/e5d5eb-ada0-4d5c-8664-f2b22c69d5fc/1/FNlKazCSDR96LRUXG1CPkiZkduM.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/e5d5eb-ada0-4d5c-8664-f2b22c69d5fc/1/FNlKazCSDR96LRUXG1CPkiZkduM.mft rsync://rpki.ripe.net/repository/DEFAULT/FNlKazCSDR96LRUXG1CPkiZkduM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:37:69:a9:c0:4e:83:b7:9f:b8:8e:76:e2:85:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14d94a6b30920d1f7a2d15171b508f92266476e3 Validity Not Before: Jan 1 22:19:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2d879e6d8857438a334e43b10e236b9701f24d9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:bd:58:25:c3:19:46:60:6e:21:4e:fb:6b:3c: c2:e9:f9:85:3e:7d:22:b9:c5:5b:b4:82:e1:70:aa: 1c:46:7e:d9:63:6f:21:dd:eb:0f:df:9c:43:77:e9: 6e:b0:c8:36:02:67:76:b4:0d:ec:4b:03:ed:8e:8a: f4:34:9b:16:08:3d:2f:99:67:37:3b:5a:3b:f3:11: fd:c2:8e:1a:2f:b8:13:b2:c3:be:e6:8c:de:a8:d9: 8f:01:97:d4:d1:b6:f8:18:9d:97:a9:41:c1:a2:cd: 31:46:dd:5f:a1:19:a5:2c:64:52:6a:0a:b9:6d:f0: 30:dd:f0:ef:bd:c1:24:28:b9:a7:15:37:e0:f0:60: 61:18:6c:69:80:61:f1:c8:41:31:e9:18:5d:e1:ec: 24:38:ee:55:12:07:20:42:77:56:47:6c:df:74:6c: 92:92:c1:6b:83:48:00:ce:1f:a0:a2:5e:ad:dd:7a: cd:ad:a1:48:e5:71:a1:57:ff:88:06:30:59:3e:38: 36:ac:35:02:09:8a:ee:0b:09:40:05:f0:8a:77:56: 72:1a:17:bf:01:5d:30:ab:5b:4a:2e:d2:fd:e5:e5: 8e:63:58:e9:e1:d5:f7:bc:a0:ae:e3:3d:92:54:5f: bb:8f:e6:0d:3a:aa:9b:3a:c9:e4:e7:93:1f:72:f3: 8f:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:87:9E:6D:88:57:43:8A:33:4E:43:B1:0E:23:6B:97:01:F2:4D:9B X509v3 Authority Key Identifier: keyid:14:D9:4A:6B:30:92:0D:1F:7A:2D:15:17:1B:50:8F:92:26:64:76:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FNlKazCSDR96LRUXG1CPkiZkduM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/e5d5eb-ada0-4d5c-8664-f2b22c69d5fc/1/LYeebYhXQ4ozTkOxDiNrlwHyTZs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/e5d5eb-ada0-4d5c-8664-f2b22c69d5fc/1/FNlKazCSDR96LRUXG1CPkiZkduM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 136.231.0.0/16 Signature Algorithm: sha256WithRSAEncryption a6:dc:d5:22:bb:d8:77:57:f1:26:6f:39:e9:ec:84:ae:1b:14: 78:7b:85:09:28:6f:4a:75:6f:96:c7:2c:cd:a3:98:f6:ba:ff: 07:0b:63:60:03:63:cd:ae:a7:28:5a:d9:29:e5:ce:4a:b9:0f: 7f:f7:7c:14:f6:8b:ac:9d:4a:a2:3f:82:19:b2:91:93:0b:5d: 4e:73:33:03:03:ac:e7:c7:67:71:b9:2a:ec:d8:27:06:5a:1f: d8:98:1d:62:1c:2d:52:c6:26:a3:05:71:b1:16:48:b2:61:db: 73:28:0f:f6:b8:06:ec:78:25:13:85:19:d3:3e:9e:d6:10:6e: bd:c0:6f:55:64:5b:52:33:f3:36:ba:bc:e2:b2:30:a9:1b:07: 75:c1:3c:57:ef:5c:ca:29:ba:f0:d9:43:6b:c3:be:b4:79:cf: 54:ff:3e:ac:e4:9f:bd:c9:1d:23:2e:2c:33:1f:bb:d1:68:48: 00:24:82:d6:78:5c:7c:33:04:d6:67:16:c9:aa:b9:1c:51:74: f1:4d:86:6a:b1:76:0e:4f:f5:2e:34:3b:60:79:4f:48:e6:56: 52:30:82:d1:f1:5c:97:bf:5c:d5:52:46:bf:b4:e5:19:32:2e: 6c:0a:c5:58:f0:e9:aa:5e:92:26:40:8f:0d:22:55:a1:70:f0: 25:3e:59:fe -----BEGIN CERTIFICATE----- MIIE/DCCA+SgAwIBAgISAZt7pTdpqcBOg7efuI524oWUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE0ZDk0YTZiMzA5MjBkMWY3YTJkMTUxNzFiNTA4ZjkyMjY2 NDc2ZTMwHhcNMjYwMTAxMjIxOTQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZDg3OWU2ZDg4NTc0MzhhMzM0ZTQzYjEwZTIzNmI5NzAxZjI0ZDliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt71YJcMZRmBuIU77azzC6fmFPn0i ucVbtILhcKocRn7ZY28h3esP35xDd+lusMg2Amd2tA3sSwPtjor0NJsWCD0vmWc3 O1o78xH9wo4aL7gTssO+5ozeqNmPAZfU0bb4GJ2XqUHBos0xRt1foRmlLGRSagq5 bfAw3fDvvcEkKLmnFTfg8GBhGGxpgGHxyEEx6Rhd4ewkOO5VEgcgQndWR2zfdGyS ksFrg0gAzh+gol6t3XrNraFI5XGhV/+IBjBZPjg2rDUCCYruCwlABfCKd1ZyGhe/ AV0wq1tKLtL95eWOY1jp4dX3vKCu4z2SVF+7j+YNOqqbOsnk55MfcvOPOQIDAQAB o4ICCDCCAgQwHQYDVR0OBBYEFC2Hnm2IV0OKM05DsQ4ja5cB8k2bMB8GA1UdIwQY MBaAFBTZSmswkg0fei0VFxtQj5ImZHbjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRk5sS2F6Q1NEUjk2TFJVWEcxQ1BraVprZHVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS9lNWQ1ZWItYWRhMC00ZDVjLTg2NjQt ZjJiMjJjNjlkNWZjLzEvTFllZWJZaFhRNG96VGtPeERpTnJsd0h5VFpzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS9lNWQ1ZWItYWRhMC00ZDVjLTg2NjQtZjJiMjJjNjlkNWZj LzEvRk5sS2F6Q1NEUjk2TFJVWEcxQ1BraVprZHVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAiOcwDQYJ KoZIhvcNAQELBQADggEBAKbc1SK72HdX8SZvOenshK4bFHh7hQkob0p1b5bHLM2j mPa6/wcLY2ADY82upyha2Snlzkq5D3/3fBT2i6ydSqI/ghmykZMLXU5zMwMDrOfH Z3G5KuzYJwZaH9iYHWIcLVLGJqMFcbEWSLJh23MoD/a4Bux4JROFGdM+ntYQbr3A b1VkW1Iz8za6vOKyMKkbB3XBPFfvXMopuvDZQ2vDvrR5z1T/Pqzkn73JHSMuLDMf u9FoSAAkgtZ4XHwzBNZnFsmquRxRdPFNhmqxdg5P9S40O2B5T0jmVlIwgtHxXJe/ XNVSRr+05RkyLmwKxVjw6apekiZAjw0iVaFw8CU+Wf4= -----END CERTIFICATE-----Generated at Sun Jan 25 22:30:16 2026 by rpki-client