This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/9f682c-1c57-4ce5-bb98-0605c089fc38/1/l8uxf4gsRPeplSdss-OEMb-A0xg.roa File: l8uxf4gsRPeplSdss-OEMb-A0xg.roa (raw, json) Hash identifier: tdIVzUM2MKwiHz/KJ6t3ZqxB8ibUNsqITNrh2azbkDk= Subject key identifier: 97:CB:B1:7F:88:2C:44:F7:A9:95:27:6C:B3:E3:84:31:BF:80:D3:18 Certificate issuer: /CN=b38bb62a47b1a2aedb70f32f58c979ba0c777f06 Certificate serial: 019B79ECDD8B23F17897A73FD6604490F457 Authority key identifier: B3:8B:B6:2A:47:B1:A2:AE:DB:70:F3:2F:58:C9:79:BA:0C:77:7F:06 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s4u2Kkexoq7bcPMvWMl5ugx3fwY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/9f682c-1c57-4ce5-bb98-0605c089fc38/1/l8uxf4gsRPeplSdss-OEMb-A0xg.roa Signing time: Thu 01 Jan 2026 14:18:44 +0000 ROA not before: Thu 01 Jan 2026 14:18:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34245 IP address blocks: 85.91.0.0/19 maxlen: 24 87.192.80.0/24 maxlen: 24 87.192.220.0/23 maxlen: 24 87.198.0.0/16 maxlen: 24 87.198.204.0/24 maxlen: 24 87.232.32.0/19 maxlen: 24 87.232.64.0/18 maxlen: 24 87.232.128.0/21 maxlen: 24 87.232.134.0/24 maxlen: 24 87.232.193.0/24 maxlen: 24 87.232.224.0/24 maxlen: 24 87.232.250.0/23 maxlen: 24 87.232.252.0/22 maxlen: 24 89.124.242.0/23 maxlen: 24 89.124.244.0/24 maxlen: 24 89.127.252.0/23 maxlen: 24 89.127.252.0/24 maxlen: 24 89.127.253.0/24 maxlen: 24 185.106.88.0/22 maxlen: 24 212.17.32.0/19 maxlen: 24 213.79.32.0/19 maxlen: 24 213.159.128.0/22 maxlen: 24 2a01:148::/29 maxlen: 32 2a01:148::/32 maxlen: 32 2a01:14f::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/9f682c-1c57-4ce5-bb98-0605c089fc38/1/s4u2Kkexoq7bcPMvWMl5ugx3fwY.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/9f682c-1c57-4ce5-bb98-0605c089fc38/1/s4u2Kkexoq7bcPMvWMl5ugx3fwY.mft rsync://rpki.ripe.net/repository/DEFAULT/s4u2Kkexoq7bcPMvWMl5ugx3fwY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:dd:8b:23:f1:78:97:a7:3f:d6:60:44:90:f4:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b38bb62a47b1a2aedb70f32f58c979ba0c777f06 Validity Not Before: Jan 1 14:18:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=97cbb17f882c44f7a995276cb3e38431bf80d318 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:78:dd:73:95:e3:10:8f:c0:db:74:4b:bf:a8: 49:b3:50:12:e4:e5:64:5a:f0:46:a6:bc:57:09:e9: b2:62:97:70:70:ef:a3:05:a1:d8:ad:8b:d8:5e:6b: 96:d0:c3:c0:18:8b:c4:07:b0:f2:bb:47:0f:c5:6f: cc:37:20:03:7f:51:56:b5:32:a2:8b:98:ca:78:2f: cd:c2:e5:50:b1:9d:a1:3e:c6:99:f0:3b:61:87:cf: b1:1b:1a:79:d6:4c:e9:d6:3f:fe:29:cb:c0:ff:ae: d4:a2:67:8c:46:46:7c:16:ab:c4:29:d8:7b:f2:16: 37:df:f2:d4:a6:4e:5a:ee:61:a2:b5:6b:ef:b4:8c: 86:27:87:8c:10:de:f1:78:e5:00:b9:d2:51:9f:62: af:3c:02:39:58:d6:8e:2f:e1:c7:be:66:8b:76:b4: 80:d0:e7:84:81:bc:8a:75:37:c2:c4:d9:c6:40:49: ac:a8:b6:1e:c4:6f:dc:d0:e1:a6:db:19:8d:33:84: 59:86:80:b9:84:d0:1e:9f:02:17:6a:d8:e9:56:8a: 86:8b:23:35:3a:94:f3:04:03:6e:ad:9d:7d:80:a1: af:41:d0:87:3a:0a:2b:d0:1a:44:54:a5:97:8b:3b: 8d:5b:b1:01:10:88:ac:7c:db:f1:cf:ce:02:a8:03: bf:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:CB:B1:7F:88:2C:44:F7:A9:95:27:6C:B3:E3:84:31:BF:80:D3:18 X509v3 Authority Key Identifier: keyid:B3:8B:B6:2A:47:B1:A2:AE:DB:70:F3:2F:58:C9:79:BA:0C:77:7F:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s4u2Kkexoq7bcPMvWMl5ugx3fwY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9f682c-1c57-4ce5-bb98-0605c089fc38/1/l8uxf4gsRPeplSdss-OEMb-A0xg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9f682c-1c57-4ce5-bb98-0605c089fc38/1/s4u2Kkexoq7bcPMvWMl5ugx3fwY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.91.0.0/19 87.192.80.0/24 87.192.220.0/23 87.198.0.0/16 87.232.32.0-87.232.135.255 87.232.193.0/24 87.232.224.0/24 87.232.250.0-87.232.255.255 89.124.242.0-89.124.244.255 89.127.252.0/23 185.106.88.0/22 212.17.32.0/19 213.79.32.0/19 213.159.128.0/22 IPv6: 2a01:148::/29 Signature Algorithm: sha256WithRSAEncryption 4b:e4:41:db:9e:1d:25:71:a6:9f:1f:f1:5d:4d:32:1a:27:c9: fb:50:97:39:dd:47:b4:b5:9c:4f:e3:17:4e:91:59:43:ec:bb: cf:50:1e:18:aa:2e:d2:d5:85:8f:07:81:c5:ad:be:d2:cc:14: 13:ef:21:c7:65:ce:e8:3f:17:55:83:1e:84:5d:b1:98:72:3b: 3c:21:9f:5b:6c:f7:86:f1:b0:76:b8:5e:b1:d1:7c:5e:4a:de: 70:5d:2c:b9:22:62:3c:fb:12:c6:7c:b8:1d:78:94:09:ed:67: d3:e8:97:60:f3:e6:84:8b:34:e2:50:a1:b3:a5:7a:7f:01:6b: 90:c9:49:64:0b:7a:c7:83:41:b2:7b:4e:f6:bc:f7:5b:c0:3d: 20:88:33:b1:fc:3c:0e:8e:9f:80:ae:8d:54:e2:0a:77:14:ae: ab:52:13:08:90:d0:cc:15:ec:f2:dd:47:f3:5d:ea:fb:5d:84: 4c:fa:c1:bf:2e:67:24:af:cb:83:27:36:e4:54:ba:ab:1d:48: 61:2a:85:4a:2b:53:e2:09:38:21:87:dd:3c:29:ba:cf:53:5a: af:eb:b2:8a:f2:1b:73:dd:45:c8:ec:9a:cf:e7:78:15:0b:64: 5d:b4:ae:86:4e:fe:0d:b3:56:03:91:2a:b6:6b:f9:bf:0e:6e: 6f:f4:9e:dd -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt57N2LI/F4l6c/1mBEkPRXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzOGJiNjJhNDdiMWEyYWVkYjcwZjMyZjU4Yzk3OWJhMGM3 NzdmMDYwHhcNMjYwMTAxMTQxODQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5N2NiYjE3Zjg4MmM0NGY3YTk5NTI3NmNiM2UzODQzMWJmODBkMzE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn3jdc5XjEI/A23RLv6hJs1AS5OVk WvBGprxXCemyYpdwcO+jBaHYrYvYXmuW0MPAGIvEB7Dyu0cPxW/MNyADf1FWtTKi i5jKeC/NwuVQsZ2hPsaZ8Dthh8+xGxp51kzp1j/+KcvA/67UomeMRkZ8FqvEKdh7 8hY33/LUpk5a7mGitWvvtIyGJ4eMEN7xeOUAudJRn2KvPAI5WNaOL+HHvmaLdrSA 0OeEgbyKdTfCxNnGQEmsqLYexG/c0OGm2xmNM4RZhoC5hNAenwIXatjpVoqGiyM1 OpTzBANurZ19gKGvQdCHOgor0BpEVKWXizuNW7EBEIisfNvxz84CqAO/6wIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFJfLsX+ILET3qZUnbLPjhDG/gNMYMB8GA1UdIwQY MBaAFLOLtipHsaKu23DzL1jJeboMd38GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvczR1MktrZXhvcTdiY1BNdldNbDV1Z3gzZndZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi85ZjY4MmMtMWM1Ny00Y2U1LWJiOTgt MDYwNWMwODlmYzM4LzEvbDh1eGY0Z3NSUGVwbFNkc3MtT0VNYi1BMHhnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi85ZjY4MmMtMWM1Ny00Y2U1LWJiOTgtMDYwNWMwODlmYzM4 LzEvczR1MktrZXhvcTdiY1BNdldNbDV1Z3gzZndZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGUBggrBgEFBQcBBwEB/wSBhDCBgTBwBAIAATBqAwQFVVsA AwQAV8BQAwQBV8DcAwMAV8YwDAMEBVfoIAMEA1fogAMEAFfowQMEAFfo4DALAwQB V+j6AwMAV+gwDAMEAVl88gMEAFl89AMEAVl//AMEArlqWAMEBdQRIAMEBdVPIAME AtWfgDANBAIAAjAHAwUDKgEBSDANBgkqhkiG9w0BAQsFAAOCAQEAS+RB254dJXGm nx/xXU0yGifJ+1CXOd1HtLWcT+MXTpFZQ+y7z1AeGKou0tWFjweBxa2+0swUE+8h x2XO6D8XVYMehF2xmHI7PCGfW2z3hvGwdrhesdF8XkrecF0suSJiPPsSxny4HXiU Ce1n0+iXYPPmhIs04lChs6V6fwFrkMlJZAt6x4NBsntO9rz3W8A9IIgzsfw8Do6f gK6NVOIKdxSuq1ITCJDQzBXs8t1H813q+12ETPrBvy5nJK/Lgyc25FS6qx1IYSqF SitT4gk4IYfdPCm6z1Nar+uyivIbc91FyOyaz+d4FQtkXbSuhk7+DbNWA5Eqtmv5 vw5ub/Se3Q== -----END CERTIFICATE-----Generated at Mon Jan 26 04:39:21 2026 by rpki-client