This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/lF-gIvCkM8tz1TF_ELmeC8qsyJI.roa File: lF-gIvCkM8tz1TF_ELmeC8qsyJI.roa (raw, json) Hash identifier: kqf9SUhWQk8Xudy6smsadsinO1weOTkBy/JpJTjE9Wo= Subject key identifier: 94:5F:A0:22:F0:A4:33:CB:73:D5:31:7F:10:B9:9E:0B:CA:AC:C8:92 Certificate issuer: /CN=1aca63df248b7adf3ddd07e8c2d3eedd02cef933 Certificate serial: 019B7D5CF9BF60804EDC0EC7487F359CF001 Authority key identifier: 1A:CA:63:DF:24:8B:7A:DF:3D:DD:07:E8:C2:D3:EE:DD:02:CE:F9:33 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/lF-gIvCkM8tz1TF_ELmeC8qsyJI.roa Signing time: Fri 02 Jan 2026 06:20:03 +0000 ROA not before: Fri 02 Jan 2026 06:20:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 2590 IP address blocks: 78.133.144.0/22 maxlen: 24 85.219.244.0/22 maxlen: 24 89.174.32.0/23 maxlen: 24 89.174.73.128/25 maxlen: 25 89.174.74.128/25 maxlen: 25 89.174.229.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/Gspj3ySLet893QfowtPu3QLO-TM.crl rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/Gspj3ySLet893QfowtPu3QLO-TM.mft rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:f9:bf:60:80:4e:dc:0e:c7:48:7f:35:9c:f0:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1aca63df248b7adf3ddd07e8c2d3eedd02cef933 Validity Not Before: Jan 2 06:20:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=945fa022f0a433cb73d5317f10b99e0bcaacc892 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:df:48:7b:fb:87:91:3f:89:66:22:22:98:9f: 95:a7:10:dd:e4:d2:cf:ca:8a:85:ed:f7:a2:d8:a3: da:da:75:9b:ab:03:c4:51:97:bc:05:64:98:71:40: a2:81:12:4a:83:77:fd:bd:00:c2:36:4f:cb:d5:d4: 76:d6:c7:a7:4f:7d:b7:8a:3a:06:ce:12:d8:03:ca: 8b:73:fa:e0:79:bd:50:da:b8:e9:ff:90:ea:74:aa: ed:92:f6:53:b4:35:d9:a0:cd:36:74:fb:69:ae:16: cd:fd:83:29:6c:de:94:ed:64:54:9b:55:56:a8:f8: 3f:f9:b7:40:10:ef:8e:f8:e3:93:af:fb:66:91:3f: ff:89:3f:cf:d5:17:06:da:b2:c1:ea:d4:2a:35:26: ba:b9:6d:27:47:4d:97:04:99:ee:d4:76:af:e4:49: 07:5d:c8:eb:2b:a8:96:a2:9c:ab:03:fb:21:9e:7a: e1:7e:fb:f7:39:c9:85:83:39:7c:13:c3:0b:52:6f: ed:8b:ed:a7:58:04:0f:39:15:df:47:09:a6:35:39: e0:38:e6:98:e2:4e:5c:15:e9:14:a8:1e:ab:52:14: 21:37:5b:15:3b:a1:94:2a:f3:67:0c:a6:2d:87:85: 3c:1d:82:82:18:81:c5:a6:2e:00:bb:ba:e5:1a:78: eb:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:5F:A0:22:F0:A4:33:CB:73:D5:31:7F:10:B9:9E:0B:CA:AC:C8:92 X509v3 Authority Key Identifier: keyid:1A:CA:63:DF:24:8B:7A:DF:3D:DD:07:E8:C2:D3:EE:DD:02:CE:F9:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/lF-gIvCkM8tz1TF_ELmeC8qsyJI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/Gspj3ySLet893QfowtPu3QLO-TM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.133.144.0/22 85.219.244.0/22 89.174.32.0/23 89.174.73.128/25 89.174.74.128/25 89.174.229.0/24 Signature Algorithm: sha256WithRSAEncryption 45:7e:b1:95:6e:c5:46:e5:58:67:83:d3:c3:ee:67:d2:c4:6e: 68:09:ec:4b:02:e2:da:fa:a7:da:6e:5a:e1:d1:6d:ee:23:7e: 66:10:a1:dd:a6:3d:97:20:03:70:54:3d:66:8c:0e:34:9b:27: 88:61:90:ee:32:73:fa:72:51:28:4e:18:51:54:36:2a:a7:ec: b5:52:79:be:d2:e3:1b:b5:56:0b:76:08:46:09:52:22:a2:aa: 52:59:b9:94:4d:56:0b:c1:5e:44:d6:76:53:6a:99:08:3b:a5: e5:34:e9:9c:fe:a7:aa:7f:f9:e9:1a:91:2a:d1:09:f0:10:cf: 19:ed:40:9d:60:23:62:d7:27:44:23:90:96:c1:71:58:bf:6a: 87:24:d8:20:cc:34:85:4d:fe:2b:3c:89:c6:dd:0a:5a:c1:fb: cc:a5:da:97:a7:23:47:7a:b1:85:3c:27:84:46:f2:ff:af:db: 01:fd:41:88:d8:5d:39:e1:02:07:f7:8b:7e:c4:cf:d1:64:be: 45:ed:a1:8b:64:b1:b3:8d:51:ce:98:30:80:a5:f7:fd:7a:a7: 53:45:b9:68:0a:7b:5a:32:c4:89:f4:e1:b5:30:54:c1:0e:ae: 5a:76:d1:d8:22:04:50:53:30:03:69:3b:da:3e:11:88:6b:7e: 10:b7:e8:65 -----BEGIN CERTIFICATE----- MIIFHTCCBAWgAwIBAgISAZt9XPm/YIBO3A7HSH81nPABMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhY2E2M2RmMjQ4YjdhZGYzZGRkMDdlOGMyZDNlZWRkMDJj ZWY5MzMwHhcNMjYwMTAyMDYyMDAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NDVmYTAyMmYwYTQzM2NiNzNkNTMxN2YxMGI5OWUwYmNhYWNjODkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAst9Ie/uHkT+JZiIimJ+VpxDd5NLP yoqF7fei2KPa2nWbqwPEUZe8BWSYcUCigRJKg3f9vQDCNk/L1dR21senT323ijoG zhLYA8qLc/rgeb1Q2rjp/5DqdKrtkvZTtDXZoM02dPtprhbN/YMpbN6U7WRUm1VW qPg/+bdAEO+O+OOTr/tmkT//iT/P1RcG2rLB6tQqNSa6uW0nR02XBJnu1Hav5EkH XcjrK6iWopyrA/shnnrhfvv3OcmFgzl8E8MLUm/ti+2nWAQPORXfRwmmNTngOOaY 4k5cFekUqB6rUhQhN1sVO6GUKvNnDKYth4U8HYKCGIHFpi4Au7rlGnjr/QIDAQAB o4ICKTCCAiUwHQYDVR0OBBYEFJRfoCLwpDPLc9UxfxC5ngvKrMiSMB8GA1UdIwQY MBaAFBrKY98ki3rfPd0H6MLT7t0CzvkzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3NwajN5U0xldDg5M1Fmb3d0UHUzUUxPLVRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS8xZjY0NTgtZGM3NS00YWRkLWFlNzIt OTFlMzE4NGJiMGFiLzEvbEYtZ0l2Q2tNOHR6MVRGX0VMbWVDOHFzeUpJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS8xZjY0NTgtZGM3NS00YWRkLWFlNzItOTFlMzE4NGJiMGFi LzEvR3NwajN5U0xldDg5M1Fmb3d0UHUzUUxPLVRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjAsBAIAATAmAwQCToWQAwQC Vdv0AwQBWa4gAwUHWa5JgAMFB1muSoADBABZruUwDQYJKoZIhvcNAQELBQADggEB AEV+sZVuxUblWGeD08PuZ9LEbmgJ7EsC4tr6p9puWuHRbe4jfmYQod2mPZcgA3BU PWaMDjSbJ4hhkO4yc/pyUShOGFFUNiqn7LVSeb7S4xu1Vgt2CEYJUiKiqlJZuZRN VgvBXkTWdlNqmQg7peU06Zz+p6p/+ekakSrRCfAQzxntQJ1gI2LXJ0QjkJbBcVi/ aock2CDMNIVN/is8icbdClrB+8yl2penI0d6sYU8J4RG8v+v2wH9QYjYXTnhAgf3 i37Ez9FkvkXtoYtksbONUc6YMICl9/16p1NFuWgKe1oyxIn04bUwVMEOrlp20dgi BFBTMANpO9o+EYhrfhC36GU= -----END CERTIFICATE-----Generated at Sun Jan 25 17:47:40 2026 by rpki-client