This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/74aee8-41a8-4ee7-ae4c-2183bc3844d2/1/34LZWsNGRIKWyIHXFffnM-VhclM.roa File: 34LZWsNGRIKWyIHXFffnM-VhclM.roa (raw, json) Hash identifier: HVcPE4gapBs4vsO0MGbu+wRDbzaDiPj/yDgrINHf82Y= Subject key identifier: DF:82:D9:5A:C3:46:44:82:96:C8:81:D7:15:F7:E7:33:E5:61:72:53 Certificate issuer: /CN=95b85e5ac055a12188ae50cdb007fa488b6aa88b Certificate serial: 019B7DCAE23A9BA888B75AD668846CAE717E Authority key identifier: 95:B8:5E:5A:C0:55:A1:21:88:AE:50:CD:B0:07:FA:48:8B:6A:A8:8B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lbheWsBVoSGIrlDNsAf6SItqqIs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/74aee8-41a8-4ee7-ae4c-2183bc3844d2/1/34LZWsNGRIKWyIHXFffnM-VhclM.roa Signing time: Fri 02 Jan 2026 08:20:06 +0000 ROA not before: Fri 02 Jan 2026 08:20:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39637 IP address blocks: 37.203.56.0/21 maxlen: 21 91.201.164.0/22 maxlen: 22 94.124.136.0/21 maxlen: 21 185.215.252.0/22 maxlen: 22 195.246.236.0/23 maxlen: 23 2a00:dc8::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/74aee8-41a8-4ee7-ae4c-2183bc3844d2/1/lbheWsBVoSGIrlDNsAf6SItqqIs.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/74aee8-41a8-4ee7-ae4c-2183bc3844d2/1/lbheWsBVoSGIrlDNsAf6SItqqIs.mft rsync://rpki.ripe.net/repository/DEFAULT/lbheWsBVoSGIrlDNsAf6SItqqIs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:e2:3a:9b:a8:88:b7:5a:d6:68:84:6c:ae:71:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95b85e5ac055a12188ae50cdb007fa488b6aa88b Validity Not Before: Jan 2 08:20:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=df82d95ac346448296c881d715f7e733e5617253 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:98:e5:8e:60:de:3e:52:b8:74:57:b2:df:6d: 10:a4:ad:c6:1d:c7:cf:3e:f5:a5:5d:68:83:49:ba: 70:3b:ea:2a:cc:d1:d2:ac:79:99:f6:2c:b7:01:ba: de:4a:d2:dd:a5:31:c1:10:1e:5d:54:1a:8c:4a:da: a3:3f:18:54:dd:5e:5d:94:48:4a:31:08:f7:d1:2d: 24:13:28:b5:c3:e7:15:fd:86:f5:29:3d:d7:35:e6: f0:31:79:17:63:75:c0:1f:34:34:99:64:26:e5:97: 0b:34:cf:2e:9d:97:68:b7:15:71:f8:fd:65:e1:5b: 71:70:c0:1a:79:aa:1d:c8:c0:70:a7:db:b0:08:9d: fb:2b:70:2d:ed:7b:02:68:2b:11:db:b2:a9:34:3c: 95:d3:be:53:b9:e2:7c:db:89:b0:e5:d2:8b:0b:2e: d6:8f:d2:71:fe:ab:f8:51:c1:4f:66:6a:46:75:0a: a6:23:da:91:9b:ee:04:f0:62:06:b1:0d:bd:57:55: a2:fa:40:dc:d4:c9:bb:1f:d4:3e:37:46:24:8d:9e: 46:2f:f8:59:7f:24:f3:40:8e:95:10:2e:cb:ad:4a: 47:96:17:42:58:04:47:2e:01:d4:45:8b:19:b9:4b: 01:76:d7:0d:e2:c1:89:19:bf:71:cf:42:73:be:b6: e8:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:82:D9:5A:C3:46:44:82:96:C8:81:D7:15:F7:E7:33:E5:61:72:53 X509v3 Authority Key Identifier: keyid:95:B8:5E:5A:C0:55:A1:21:88:AE:50:CD:B0:07:FA:48:8B:6A:A8:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lbheWsBVoSGIrlDNsAf6SItqqIs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/74aee8-41a8-4ee7-ae4c-2183bc3844d2/1/34LZWsNGRIKWyIHXFffnM-VhclM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/74aee8-41a8-4ee7-ae4c-2183bc3844d2/1/lbheWsBVoSGIrlDNsAf6SItqqIs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.203.56.0/21 91.201.164.0/22 94.124.136.0/21 185.215.252.0/22 195.246.236.0/23 IPv6: 2a00:dc8::/32 Signature Algorithm: sha256WithRSAEncryption 0e:b1:8c:9c:59:8e:73:d1:7b:b7:13:1b:2c:ca:b3:de:71:d7: 35:28:3d:73:ff:ce:1d:d8:d5:56:4a:70:ac:02:db:78:0d:af: 3a:12:e4:1f:af:64:82:52:18:e5:76:d0:ea:5f:47:86:a0:fa: 3c:2a:66:03:99:b5:bd:a0:8e:f4:26:3b:cd:fa:c3:da:77:96: 9b:a3:ad:5f:9b:dd:7f:0f:f4:ef:fe:bc:19:15:89:c1:93:1d: 95:2b:0b:63:bf:7c:12:ba:af:4f:bb:71:6f:89:5a:0b:b1:d3: dc:33:76:9a:78:53:99:9b:f6:eb:fc:2a:58:d3:a0:11:a3:0c: 1e:25:84:40:d2:17:6c:78:c5:eb:c0:4a:ab:6a:b2:91:09:41: cc:73:66:36:c3:9f:ae:39:80:9e:2d:c8:93:3d:20:07:4d:37: 58:43:15:1f:39:dc:cb:67:5d:ac:b5:56:96:df:d7:0b:59:9b: 60:20:7f:24:6a:a8:c8:51:bd:af:9e:ff:4c:4f:98:d8:5a:5f: cc:4a:5d:9c:17:76:2c:64:3c:0b:0f:4e:be:7d:a0:93:cb:ec: da:9f:27:0a:d7:ca:52:60:19:02:72:bd:ba:a3:e2:5e:cc:88: d8:4c:7d:a3:24:47:75:61:13:ab:75:e6:3e:35:1b:93:3b:69: b9:07:52:e1 -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgISAZt9yuI6m6iIt1rWaIRsrnF+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1Yjg1ZTVhYzA1NWExMjE4OGFlNTBjZGIwMDdmYTQ4OGI2 YWE4OGIwHhcNMjYwMTAyMDgyMDA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZjgyZDk1YWMzNDY0NDgyOTZjODgxZDcxNWY3ZTczM2U1NjE3MjUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJjljmDePlK4dFey320QpK3GHcfP PvWlXWiDSbpwO+oqzNHSrHmZ9iy3AbreStLdpTHBEB5dVBqMStqjPxhU3V5dlEhK MQj30S0kEyi1w+cV/Yb1KT3XNebwMXkXY3XAHzQ0mWQm5ZcLNM8unZdotxVx+P1l 4VtxcMAaeaodyMBwp9uwCJ37K3At7XsCaCsR27KpNDyV075TueJ824mw5dKLCy7W j9Jx/qv4UcFPZmpGdQqmI9qRm+4E8GIGsQ29V1Wi+kDc1Mm7H9Q+N0YkjZ5GL/hZ fyTzQI6VEC7LrUpHlhdCWARHLgHURYsZuUsBdtcN4sGJGb9xz0Jzvrbo/QIDAQAB o4ICMDCCAiwwHQYDVR0OBBYEFN+C2VrDRkSClsiB1xX35zPlYXJTMB8GA1UdIwQY MBaAFJW4XlrAVaEhiK5QzbAH+kiLaqiLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbGJoZVdzQlZvU0dJcmxETnNBZjZTSXRxcUlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS83NGFlZTgtNDFhOC00ZWU3LWFlNGMt MjE4M2JjMzg0NGQyLzEvMzRMWldzTkdSSUtXeUlIWEZmZm5NLVZoY2xNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS83NGFlZTgtNDFhOC00ZWU3LWFlNGMtMjE4M2JjMzg0NGQy LzEvbGJoZVdzQlZvU0dJcmxETnNBZjZTSXRxcUlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEHAQH/BDcwNTAkBAIAATAeAwQDJcs4AwQC W8mkAwQDXnyIAwQCudf8AwQBw/bsMA0EAgACMAcDBQAqAA3IMA0GCSqGSIb3DQEB CwUAA4IBAQAOsYycWY5z0Xu3ExssyrPecdc1KD1z/84d2NVWSnCsAtt4Da86EuQf r2SCUhjldtDqX0eGoPo8KmYDmbW9oI70JjvN+sPad5abo61fm91/D/Tv/rwZFYnB kx2VKwtjv3wSuq9Pu3FviVoLsdPcM3aaeFOZm/br/CpY06ARowweJYRA0hdseMXr wEqrarKRCUHMc2Y2w5+uOYCeLciTPSAHTTdYQxUfOdzLZ12stVaW39cLWZtgIH8k aqjIUb2vnv9MT5jYWl/MSl2cF3YsZDwLD06+faCTy+zanycK18pSYBkCcr26o+Je zIjYTH2jJEd1YROrdeY+NRuTO2m5B1Lh -----END CERTIFICATE-----Generated at Mon Jan 26 03:56:39 2026 by rpki-client