This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/LFj2hJJ6E7iqYzWeILrxQrVLptk.roa File: LFj2hJJ6E7iqYzWeILrxQrVLptk.roa (raw, json) Hash identifier: snEdRhwSL+4U9//+ADUommVyc5tAITtVppKqVSgzWBs= Subject key identifier: 2C:58:F6:84:92:7A:13:B8:AA:63:35:9E:20:BA:F1:42:B5:4B:A6:D9 Certificate issuer: /CN=d3cb5cecc213b9f86dbba518521e8546ec93861c Certificate serial: 019B77595E5E7CD4E8BA6CF65121B40EB32E Authority key identifier: D3:CB:5C:EC:C2:13:B9:F8:6D:BB:A5:18:52:1E:85:46:EC:93:86:1C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/08tc7MITufhtu6UYUh6FRuyThhw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/LFj2hJJ6E7iqYzWeILrxQrVLptk.roa Signing time: Thu 01 Jan 2026 02:18:24 +0000 ROA not before: Thu 01 Jan 2026 02:18:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205727 IP address blocks: 80.211.240.0/20 maxlen: 24 176.107.128.0/20 maxlen: 24 2a00:6d47::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.mft rsync://rpki.ripe.net/repository/DEFAULT/08tc7MITufhtu6UYUh6FRuyThhw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 20:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:5e:5e:7c:d4:e8:ba:6c:f6:51:21:b4:0e:b3:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3cb5cecc213b9f86dbba518521e8546ec93861c Validity Not Before: Jan 1 02:18:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2c58f684927a13b8aa63359e20baf142b54ba6d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:85:48:c3:36:bf:75:bd:5b:09:a2:3e:9d:a9: b8:48:47:44:8e:95:68:5f:9b:9c:14:e0:4e:1b:27: 10:67:8c:5d:ef:29:8b:c7:91:b2:18:0e:6e:82:d3: c8:cf:2f:ba:ba:81:aa:e6:06:07:ae:72:8d:67:76: 4a:db:5d:43:92:98:b2:ba:c8:6d:73:4b:98:51:8f: 81:f1:90:14:16:e8:81:fd:dc:3b:30:4e:1f:61:af: 75:92:54:73:fe:f4:cf:d8:5f:a7:bd:e8:19:9b:66: 77:4d:c9:f4:f3:bd:df:78:c1:51:8e:21:ff:12:41: 3f:63:9c:16:56:b8:37:c4:c4:99:29:65:65:6f:e7: 0d:83:da:99:28:9a:03:2a:3d:35:97:e2:3f:80:49: 63:62:a6:21:e8:f6:b9:14:4d:68:49:e3:6d:9d:db: be:a8:dd:c4:1a:0e:2a:b4:a9:7c:2d:2d:bb:7a:34: bb:6a:e9:ad:55:b2:03:58:9d:28:12:c5:7d:09:04: 69:0f:b8:e5:ad:23:fe:f7:6a:8c:2e:89:96:56:02: fa:13:82:f5:a9:be:aa:a7:de:f4:7d:d0:97:1e:75: 5d:0c:9a:72:98:9e:ad:26:28:05:62:4a:51:91:cf: 0e:19:3d:47:7a:fa:bc:ab:8a:2b:55:17:fd:53:64: 41:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:58:F6:84:92:7A:13:B8:AA:63:35:9E:20:BA:F1:42:B5:4B:A6:D9 X509v3 Authority Key Identifier: keyid:D3:CB:5C:EC:C2:13:B9:F8:6D:BB:A5:18:52:1E:85:46:EC:93:86:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/08tc7MITufhtu6UYUh6FRuyThhw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/LFj2hJJ6E7iqYzWeILrxQrVLptk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.211.240.0/20 176.107.128.0/20 IPv6: 2a00:6d47::/36 Signature Algorithm: sha256WithRSAEncryption 1b:e0:9b:8f:1b:85:3c:7e:83:3f:05:e9:9b:ac:62:f6:f0:87: e0:df:d7:64:ba:2c:72:c2:c8:17:06:28:4b:2f:a7:30:2c:69: d1:9e:1e:1f:ac:8a:c8:26:a6:b2:e0:12:a0:5b:80:c3:29:c5: 5a:62:9e:80:12:cd:1c:72:fb:47:86:df:6d:ee:9e:eb:2b:9d: 92:4e:b1:08:cc:c6:ca:3d:13:c9:3a:db:b0:66:2b:41:89:ea: 4d:1e:03:75:2a:b3:ff:30:f2:0d:04:b6:29:0f:5a:97:f5:c2: ea:53:18:6e:98:bd:f5:8f:fa:b8:fa:8c:48:3f:10:de:16:db: e9:64:2b:74:e3:5c:61:49:15:dc:a8:39:33:9a:2a:c7:08:99: b1:94:0c:92:92:30:1d:3a:ae:1f:b4:31:85:ee:5f:06:ba:f5: a1:65:5e:af:9b:8c:4a:53:8d:9f:3b:8d:04:ec:04:4e:d4:6e: 7f:4d:94:c1:61:d1:5e:3a:6c:62:04:9f:40:d8:05:38:a6:35: e1:2c:19:c9:55:e9:07:da:3a:89:d9:3b:b8:06:8a:bd:27:30: 2d:c2:75:f8:0b:6c:36:e6:a5:ed:3c:0a:3e:3e:9c:fb:55:ef: ea:95:65:9e:04:11:0b:28:0a:23:11:8f:17:1d:9f:34:0a:17: a5:92:78:12 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgISAZt3WV5efNToumz2USG0DrMuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzY2I1Y2VjYzIxM2I5Zjg2ZGJiYTUxODUyMWU4NTQ2ZWM5 Mzg2MWMwHhcNMjYwMTAxMDIxODI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYzU4ZjY4NDkyN2ExM2I4YWE2MzM1OWUyMGJhZjE0MmI1NGJhNmQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuoVIwza/db1bCaI+nam4SEdEjpVo X5ucFOBOGycQZ4xd7ymLx5GyGA5ugtPIzy+6uoGq5gYHrnKNZ3ZK211Dkpiyusht c0uYUY+B8ZAUFuiB/dw7ME4fYa91klRz/vTP2F+nvegZm2Z3Tcn0873feMFRjiH/ EkE/Y5wWVrg3xMSZKWVlb+cNg9qZKJoDKj01l+I/gEljYqYh6Pa5FE1oSeNtndu+ qN3EGg4qtKl8LS27ejS7aumtVbIDWJ0oEsV9CQRpD7jlrSP+92qMLomWVgL6E4L1 qb6qp970fdCXHnVdDJpymJ6tJigFYkpRkc8OGT1Hevq8q4orVRf9U2RB3wIDAQAB o4ICHzCCAhswHQYDVR0OBBYEFCxY9oSSehO4qmM1niC68UK1S6bZMB8GA1UdIwQY MBaAFNPLXOzCE7n4bbulGFIehUbsk4YcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMDh0YzdNSVR1Zmh0dTZVWVVoNkZSdXlUaGh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy9lMTE3ZmUtYzllNy00ZDQxLTk0ZGYt ODQyNjk0MTJkNTYxLzEvTEZqMmhKSjZFN2lxWXpXZUlMcnhRclZMcHRrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy9lMTE3ZmUtYzllNy00ZDQxLTk0ZGYtODQyNjk0MTJkNTYx LzEvMDh0YzdNSVR1Zmh0dTZVWVVoNkZSdXlUaGh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDUGCCsGAQUFBwEHAQH/BCYwJDASBAIAATAMAwQEUNPwAwQE sGuAMA4EAgACMAgDBgQqAG1HADANBgkqhkiG9w0BAQsFAAOCAQEAG+CbjxuFPH6D PwXpm6xi9vCH4N/XZLoscsLIFwYoSy+nMCxp0Z4eH6yKyCamsuASoFuAwynFWmKe gBLNHHL7R4bfbe6e6yudkk6xCMzGyj0TyTrbsGYrQYnqTR4DdSqz/zDyDQS2KQ9a l/XC6lMYbpi99Y/6uPqMSD8Q3hbb6WQrdONcYUkV3Kg5M5oqxwiZsZQMkpIwHTqu H7Qxhe5fBrr1oWVer5uMSlONnzuNBOwETtRuf02UwWHRXjpsYgSfQNgFOKY14SwZ yVXpB9o6idk7uAaKvScwLcJ1+AtsNual7TwKPj6c+1Xv6pVlngQRCygKIxGPFx2f NAoXpZJ4Eg== -----END CERTIFICATE-----Generated at Mon Jan 26 04:20:22 2026 by rpki-client