This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/lERL5Mrj2Bt3hRDr7br_N3d-JkE.roa File: lERL5Mrj2Bt3hRDr7br_N3d-JkE.roa (raw, json) Hash identifier: /A5fyVRtCeR1gSok1lWq8T+wbRAaNz8PoEuYxSfdZSU= Subject key identifier: 94:44:4B:E4:CA:E3:D8:1B:77:85:10:EB:ED:BA:FF:37:77:7E:26:41 Certificate issuer: /CN=32474ac7ca85e09c2d48b33e7bf66f8ed764de0f Certificate serial: 019B7F1523391A5765BB33514E9FDB988E98 Authority key identifier: 32:47:4A:C7:CA:85:E0:9C:2D:48:B3:3E:7B:F6:6F:8E:D7:64:DE:0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/lERL5Mrj2Bt3hRDr7br_N3d-JkE.roa Signing time: Fri 02 Jan 2026 14:20:50 +0000 ROA not before: Fri 02 Jan 2026 14:20:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201882 IP address blocks: 185.73.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.mft rsync://rpki.ripe.net/repository/DEFAULT/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:23:39:1a:57:65:bb:33:51:4e:9f:db:98:8e:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32474ac7ca85e09c2d48b33e7bf66f8ed764de0f Validity Not Before: Jan 2 14:20:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=94444be4cae3d81b778510ebedbaff37777e2641 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:9f:8a:cb:a3:db:96:de:df:b6:71:c1:c5:90: 6e:eb:38:a0:ea:7c:6b:bc:4a:19:9e:8e:b1:42:94: bd:08:6c:b9:b7:55:c5:85:b2:b5:42:95:a6:d1:12: e2:d5:ce:b7:f7:a5:80:75:4b:df:d0:b0:98:a9:96: 30:67:de:89:de:ae:76:84:c9:51:86:5b:80:f2:bb: 61:31:c2:63:ff:87:d7:12:96:23:19:d0:17:aa:18: 59:b3:41:75:ef:de:02:9a:c8:dd:3a:20:18:a9:e8: 01:ab:be:9c:af:2b:c6:13:b1:c3:02:96:34:06:00: 32:50:1f:b8:ec:a0:63:cf:06:90:dd:85:7d:d1:40: fb:62:c5:ef:35:b8:46:0b:61:f8:53:3d:2f:98:14: e0:94:b9:6f:1f:9f:de:4b:2b:fe:f7:a9:1d:df:24: 51:62:dc:51:75:27:c7:a8:d5:c2:4e:8e:e1:2d:db: 9a:6d:ee:51:6e:1a:36:5a:85:6f:5b:ee:23:b1:59: 85:af:96:ac:78:24:ef:05:7f:f1:6d:5e:dd:18:79: fe:31:d7:1b:00:be:c0:c8:f6:00:c5:4b:e1:b7:46: cc:8a:f1:24:7e:de:60:72:4c:c4:32:74:c1:68:9c: c4:d3:61:52:21:a8:1c:fb:7d:94:99:e5:bd:db:95: 2f:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:44:4B:E4:CA:E3:D8:1B:77:85:10:EB:ED:BA:FF:37:77:7E:26:41 X509v3 Authority Key Identifier: keyid:32:47:4A:C7:CA:85:E0:9C:2D:48:B3:3E:7B:F6:6F:8E:D7:64:DE:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/lERL5Mrj2Bt3hRDr7br_N3d-JkE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.73.243.0/24 Signature Algorithm: sha256WithRSAEncryption 48:e7:83:ca:a4:01:0f:3a:55:56:fa:a7:f4:d1:af:85:06:9a: 30:1b:39:78:bf:92:4e:42:d9:c0:a7:5f:fc:9b:f6:de:71:b8: bb:ba:d3:16:4b:0b:7b:bf:99:0e:70:c3:43:05:fa:34:ca:b3: 76:20:44:7f:f6:fa:b3:08:d6:ef:bf:7c:e2:cd:fd:23:71:9f: c4:bb:83:01:ad:86:d9:24:e2:14:1c:8d:b5:6e:8c:e5:43:36: 65:1e:ff:81:a6:8f:4d:df:a6:31:0f:13:05:64:69:6c:eb:e3: d2:1e:33:42:49:c7:f5:97:04:99:46:8f:55:ab:60:8b:93:08: 1b:6c:c6:f4:57:bf:1a:2b:65:39:89:86:5c:71:13:68:d9:e6: ea:1d:2e:a6:7f:5f:1f:ad:c4:6a:c8:01:bc:0e:4f:83:45:9e: ab:45:1d:f1:38:5e:17:9c:8a:cc:b7:05:dd:3f:11:95:8e:98: 35:e5:62:10:a0:38:8e:6e:97:c5:eb:48:04:b8:98:e7:1a:8f: ed:73:39:b6:b4:29:80:ef:06:1c:11:36:93:f3:69:36:63:b8: f1:ea:9c:a9:82:b0:ca:c2:ed:4d:05:7c:14:76:b3:2b:7d:82: 04:8c:77:b5:24:0b:a1:03:12:e8:f1:bc:0d:f3:a7:42:d9:1f: 3e:d0:37:07 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FSM5GldluzNRTp/bmI6YMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyNDc0YWM3Y2E4NWUwOWMyZDQ4YjMzZTdiZjY2ZjhlZDc2 NGRlMGYwHhcNMjYwMTAyMTQyMDUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NDQ0NGJlNGNhZTNkODFiNzc4NTEwZWJlZGJhZmYzNzc3N2UyNjQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4p+Ky6Pblt7ftnHBxZBu6zig6nxr vEoZno6xQpS9CGy5t1XFhbK1QpWm0RLi1c6396WAdUvf0LCYqZYwZ96J3q52hMlR hluA8rthMcJj/4fXEpYjGdAXqhhZs0F1794CmsjdOiAYqegBq76cryvGE7HDApY0 BgAyUB+47KBjzwaQ3YV90UD7YsXvNbhGC2H4Uz0vmBTglLlvH5/eSyv+96kd3yRR YtxRdSfHqNXCTo7hLduabe5Rbho2WoVvW+4jsVmFr5aseCTvBX/xbV7dGHn+Mdcb AL7AyPYAxUvht0bMivEkft5gckzEMnTBaJzE02FSIagc+32UmeW925Uv9QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJRES+TK49gbd4UQ6+26/zd3fiZBMB8GA1UdIwQY MBaAFDJHSsfKheCcLUizPnv2b47XZN4PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTWtkS3g4cUY0Snd0U0xNLWVfWnZqdGRrM2c4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC8xZmQwYTYtNDUxNy00YTBiLWIzYzkt MTJlYzIyYzljNWEyLzEvbEVSTDVNcmoyQnQzaFJEcjdicl9OM2QtSmtFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC8xZmQwYTYtNDUxNy00YTBiLWIzYzktMTJlYzIyYzljNWEy LzEvTWtkS3g4cUY0Snd0U0xNLWVfWnZqdGRrM2c4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuUnzMA0G CSqGSIb3DQEBCwUAA4IBAQBI54PKpAEPOlVW+qf00a+FBpowGzl4v5JOQtnAp1/8 m/becbi7utMWSwt7v5kOcMNDBfo0yrN2IER/9vqzCNbvv3zizf0jcZ/Eu4MBrYbZ JOIUHI21bozlQzZlHv+Bpo9N36YxDxMFZGls6+PSHjNCScf1lwSZRo9Vq2CLkwgb bMb0V78aK2U5iYZccRNo2ebqHS6mf18frcRqyAG8Dk+DRZ6rRR3xOF4XnIrMtwXd PxGVjpg15WIQoDiObpfF60gEuJjnGo/tczm2tCmA7wYcETaT82k2Y7jx6pypgrDK wu1NBXwUdrMrfYIEjHe1JAuhAxLo8bwN86dC2R8+0DcH -----END CERTIFICATE-----Generated at Sun Jan 25 21:28:54 2026 by rpki-client