This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/979296-ef7a-4bac-8c15-67771359a2b3/1/LnCR0arWZWYp2eBdFpI9H-Lvr3Y.roa File: LnCR0arWZWYp2eBdFpI9H-Lvr3Y.roa (raw, json) Hash identifier: Bfa23AAQWStpV7GkB8TThtChQsiaP0XNU0Hs970PLeI= Subject key identifier: 2E:70:91:D1:AA:D6:65:66:29:D9:E0:5D:16:92:3D:1F:E2:EF:AF:76 Certificate issuer: /CN=20c5ee02d2e05861dd906fe06b3844f04d378c73 Certificate serial: 019B7D5AD0732A66FCFE0298D030074C6B1C Authority key identifier: 20:C5:EE:02:D2:E0:58:61:DD:90:6F:E0:6B:38:44:F0:4D:37:8C:73 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IMXuAtLgWGHdkG_gazhE8E03jHM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/979296-ef7a-4bac-8c15-67771359a2b3/1/LnCR0arWZWYp2eBdFpI9H-Lvr3Y.roa Signing time: Fri 02 Jan 2026 06:17:42 +0000 ROA not before: Fri 02 Jan 2026 06:17:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6697 IP address blocks: 185.179.80.0/24 maxlen: 24 185.179.81.0/24 maxlen: 24 195.137.160.0/24 maxlen: 24 2a0a:7d80::/48 maxlen: 48 2a0a:7d80:1::/48 maxlen: 48 2a0a:7d80:f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/979296-ef7a-4bac-8c15-67771359a2b3/1/IMXuAtLgWGHdkG_gazhE8E03jHM.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/979296-ef7a-4bac-8c15-67771359a2b3/1/IMXuAtLgWGHdkG_gazhE8E03jHM.mft rsync://rpki.ripe.net/repository/DEFAULT/IMXuAtLgWGHdkG_gazhE8E03jHM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5a:d0:73:2a:66:fc:fe:02:98:d0:30:07:4c:6b:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20c5ee02d2e05861dd906fe06b3844f04d378c73 Validity Not Before: Jan 2 06:17:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2e7091d1aad6656629d9e05d16923d1fe2efaf76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:08:45:77:ab:29:ac:e2:24:85:b4:d5:58:ee: 4d:b5:1d:4f:7c:88:58:d3:89:5f:15:8b:db:11:37: ad:3f:02:4a:dd:53:80:9c:07:c3:92:dd:6d:17:1c: 4f:14:11:7b:ea:2d:fa:8f:42:5d:d2:a8:0c:78:cc: a2:f9:43:98:5a:79:80:75:ed:36:b8:11:c2:da:f7: 25:27:3e:57:b7:e1:c9:2e:4f:ea:a7:4e:86:23:71: f4:1e:f0:9c:f2:7e:75:6f:a6:05:0e:a0:c6:a3:5c: 98:8b:9c:af:08:d4:39:41:19:b5:5a:50:77:9a:74: 7c:a5:44:40:89:95:eb:9d:f9:43:ee:fe:08:e2:9b: ce:53:be:66:61:5b:bc:d0:4b:67:65:7d:5c:e6:80: 85:09:72:2e:ea:f1:68:2b:6a:1b:33:29:43:13:80: bc:1e:d1:0d:86:28:90:7a:38:89:8f:0f:28:2d:7b: 66:7c:a9:02:1d:a2:b3:81:df:aa:a1:31:2e:3c:aa: cf:aa:d4:a3:31:91:3b:b7:9a:da:29:42:1b:29:eb: 05:0c:07:a8:5e:2d:71:81:8e:84:38:0c:96:93:37: 56:8a:f7:ff:03:24:52:f6:22:6a:e7:fa:e3:65:d5: d2:11:da:90:c2:86:7d:a9:32:d7:6a:04:7d:86:55: ba:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:70:91:D1:AA:D6:65:66:29:D9:E0:5D:16:92:3D:1F:E2:EF:AF:76 X509v3 Authority Key Identifier: keyid:20:C5:EE:02:D2:E0:58:61:DD:90:6F:E0:6B:38:44:F0:4D:37:8C:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IMXuAtLgWGHdkG_gazhE8E03jHM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/979296-ef7a-4bac-8c15-67771359a2b3/1/LnCR0arWZWYp2eBdFpI9H-Lvr3Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/979296-ef7a-4bac-8c15-67771359a2b3/1/IMXuAtLgWGHdkG_gazhE8E03jHM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.179.80.0/23 195.137.160.0/24 IPv6: 2a0a:7d80::/47 2a0a:7d80:f::/48 Signature Algorithm: sha256WithRSAEncryption 26:f9:5b:6e:7d:ab:50:97:f7:00:8d:28:67:c2:79:37:0d:95: 69:b5:07:10:18:a2:d0:39:03:38:3a:34:e3:cc:e7:4a:33:81: 56:27:ff:4d:a0:67:2f:bc:80:83:39:1b:26:07:1d:8c:8b:5c: 1c:93:88:d1:00:5e:b5:bb:69:40:e6:03:69:18:6f:29:57:18: 97:02:ea:81:82:36:48:af:65:27:76:c2:3f:78:be:1d:b8:b6: 3b:cc:95:4e:1f:f9:f8:b5:e1:af:f0:78:a9:9d:eb:1c:cd:7a: fd:3e:b7:4c:40:76:b5:65:82:63:a2:af:00:18:aa:0a:e3:cd: 65:c4:88:53:b6:9e:19:b1:b7:40:03:2c:c2:ec:05:bd:5c:ee: ca:c6:22:d3:1f:1e:f2:f0:80:81:76:36:65:43:bf:f1:dd:32: f8:c8:ea:42:e5:c1:14:95:9b:32:3c:e3:61:c4:37:b8:68:a1: 38:38:d6:d2:21:78:61:c3:55:d3:ac:73:ed:7c:28:6e:93:76: 35:f3:7f:a3:75:83:a2:ab:61:9f:e4:cf:0c:18:e8:6e:c4:7d: 3d:2c:9f:50:95:13:23:b5:e1:0b:b0:79:64:57:f6:d8:3c:7a: 1e:65:0a:7c:5d:82:5c:7e:d6:c5:54:ad:5d:77:68:af:4f:9d: c0:cd:eb:49 -----BEGIN CERTIFICATE----- MIIFHTCCBAWgAwIBAgISAZt9WtBzKmb8/gKY0DAHTGscMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwYzVlZTAyZDJlMDU4NjFkZDkwNmZlMDZiMzg0NGYwNGQz NzhjNzMwHhcNMjYwMTAyMDYxNzQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZTcwOTFkMWFhZDY2NTY2MjlkOWUwNWQxNjkyM2QxZmUyZWZhZjc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQhFd6sprOIkhbTVWO5NtR1PfIhY 04lfFYvbETetPwJK3VOAnAfDkt1tFxxPFBF76i36j0Jd0qgMeMyi+UOYWnmAde02 uBHC2vclJz5Xt+HJLk/qp06GI3H0HvCc8n51b6YFDqDGo1yYi5yvCNQ5QRm1WlB3 mnR8pURAiZXrnflD7v4I4pvOU75mYVu80EtnZX1c5oCFCXIu6vFoK2obMylDE4C8 HtENhiiQejiJjw8oLXtmfKkCHaKzgd+qoTEuPKrPqtSjMZE7t5raKUIbKesFDAeo Xi1xgY6EOAyWkzdWivf/AyRS9iJq5/rjZdXSEdqQwoZ9qTLXagR9hlW6nwIDAQAB o4ICKTCCAiUwHQYDVR0OBBYEFC5wkdGq1mVmKdngXRaSPR/i7692MB8GA1UdIwQY MBaAFCDF7gLS4Fhh3ZBv4Gs4RPBNN4xzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSU1YdUF0TGdXR0hka0dfZ2F6aEU4RTAzakhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC85NzkyOTYtZWY3YS00YmFjLThjMTUt Njc3NzEzNTlhMmIzLzEvTG5DUjBhcldaV1lwMmVCZEZwSTlILUx2cjNZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC85NzkyOTYtZWY3YS00YmFjLThjMTUtNjc3NzEzNTlhMmIz LzEvSU1YdUF0TGdXR0hka0dfZ2F6aEU4RTAzakhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjASBAIAATAMAwQBubNQAwQA w4mgMBgEAgACMBIDBwEqCn2AAAADBwAqCn2AAA8wDQYJKoZIhvcNAQELBQADggEB ACb5W259q1CX9wCNKGfCeTcNlWm1BxAYotA5Azg6NOPM50ozgVYn/02gZy+8gIM5 GyYHHYyLXByTiNEAXrW7aUDmA2kYbylXGJcC6oGCNkivZSd2wj94vh24tjvMlU4f +fi14a/weKmd6xzNev0+t0xAdrVlgmOirwAYqgrjzWXEiFO2nhmxt0ADLMLsBb1c 7srGItMfHvLwgIF2NmVDv/HdMvjI6kLlwRSVmzI842HEN7hooTg41tIheGHDVdOs c+18KG6TdjXzf6N1g6KrYZ/kzwwY6G7EfT0sn1CVEyO14QuweWRX9tg8eh5lCnxd glx+1sVUrV13aK9PncDN60k= -----END CERTIFICATE-----Generated at Sun Jan 25 22:15:15 2026 by rpki-client