This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/67d834-2612-4739-9f4b-7d70374d76d2/1/ljGQpGa82Fq4AfYrsYkkXWHmbQ4.roa File: ljGQpGa82Fq4AfYrsYkkXWHmbQ4.roa (raw, json) Hash identifier: XBY4/UtnM0b8oNJm9u2YyPgXyoTfFMPyMfliMhcU86s= Subject key identifier: 96:31:90:A4:66:BC:D8:5A:B8:01:F6:2B:B1:89:24:5D:61:E6:6D:0E Certificate issuer: /CN=0febfbfd6f937c5ae39e3e38e8ab8384107421a6 Certificate serial: 019B7A5AB1223224D77E0228A18CE2C6EE17 Authority key identifier: 0F:EB:FB:FD:6F:93:7C:5A:E3:9E:3E:38:E8:AB:83:84:10:74:21:A6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D-v7_W-TfFrjnj446KuDhBB0IaY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/67d834-2612-4739-9f4b-7d70374d76d2/1/ljGQpGa82Fq4AfYrsYkkXWHmbQ4.roa Signing time: Thu 01 Jan 2026 16:18:42 +0000 ROA not before: Thu 01 Jan 2026 16:18:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200590 IP address blocks: 5.188.174.0/24 maxlen: 24 5.188.175.0/24 maxlen: 24 91.192.82.0/24 maxlen: 24 93.189.59.0/24 maxlen: 24 213.183.34.0/24 maxlen: 24 213.183.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/67d834-2612-4739-9f4b-7d70374d76d2/1/D-v7_W-TfFrjnj446KuDhBB0IaY.crl rsync://rpki.ripe.net/repository/DEFAULT/be/67d834-2612-4739-9f4b-7d70374d76d2/1/D-v7_W-TfFrjnj446KuDhBB0IaY.mft rsync://rpki.ripe.net/repository/DEFAULT/D-v7_W-TfFrjnj446KuDhBB0IaY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:b1:22:32:24:d7:7e:02:28:a1:8c:e2:c6:ee:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0febfbfd6f937c5ae39e3e38e8ab8384107421a6 Validity Not Before: Jan 1 16:18:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=963190a466bcd85ab801f62bb189245d61e66d0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:a4:04:b7:94:3a:10:4a:6f:3f:43:5c:e6:f5: 09:17:eb:0e:81:98:c0:b7:88:5c:8f:ec:65:db:b0: eb:f8:a7:98:52:0e:c2:07:c7:d6:11:a8:3e:d6:71: 89:20:b9:27:b1:f4:ca:04:3a:75:6b:99:ee:13:cf: da:a9:05:82:a9:99:51:47:8b:90:fe:01:07:a5:46: 10:23:40:fd:71:b6:0d:8c:b4:1a:07:7f:11:1e:60: 13:3d:22:51:57:1f:e8:b9:8a:6d:14:08:be:32:69: e3:1d:19:4f:08:63:2e:52:c0:8e:85:66:90:eb:ec: cf:70:27:5c:51:81:45:d7:3b:8e:d3:91:84:5c:1b: 9c:4d:8b:6a:2a:54:cb:ff:ba:bd:b0:04:df:75:f4: ec:df:1d:4a:76:24:d0:20:1e:9d:74:5f:54:4b:a1: 7a:cd:bc:6f:fd:5c:bd:81:af:04:51:9e:42:41:c7: ab:ad:45:78:6a:f2:b7:c7:47:b8:b5:80:99:c8:a8: 2b:21:59:e8:53:6b:7b:ea:ab:07:cc:2e:24:13:97: 66:e8:57:93:8a:3a:4c:4c:c4:c9:5c:f6:67:43:88: c5:60:fe:96:aa:c2:d2:51:83:91:20:95:fc:44:4a: 0d:54:93:3d:2f:57:b9:e2:8d:9f:79:eb:df:87:04: 26:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:31:90:A4:66:BC:D8:5A:B8:01:F6:2B:B1:89:24:5D:61:E6:6D:0E X509v3 Authority Key Identifier: keyid:0F:EB:FB:FD:6F:93:7C:5A:E3:9E:3E:38:E8:AB:83:84:10:74:21:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D-v7_W-TfFrjnj446KuDhBB0IaY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/67d834-2612-4739-9f4b-7d70374d76d2/1/ljGQpGa82Fq4AfYrsYkkXWHmbQ4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/67d834-2612-4739-9f4b-7d70374d76d2/1/D-v7_W-TfFrjnj446KuDhBB0IaY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.188.174.0/23 91.192.82.0/24 93.189.59.0/24 213.183.34.0/23 Signature Algorithm: sha256WithRSAEncryption 3e:51:16:88:6f:20:9c:5a:20:79:c1:2b:4b:d7:1a:fb:ce:e8: bf:ce:6a:0f:86:ea:49:e1:a7:9b:c9:5a:fe:22:d3:78:31:c5: 7a:16:7a:00:0f:f7:55:4c:a9:2a:c4:7d:c7:40:b6:0d:3d:80: 30:8a:cd:a6:f4:67:cb:79:8f:5d:95:ba:74:ff:19:db:d1:6b: 8d:f9:de:5c:61:bb:74:a6:8f:32:27:30:81:33:54:36:53:3e: 37:99:cf:00:fd:93:82:bd:eb:ce:2a:17:3e:8c:22:54:e7:dd: 43:07:36:4d:8a:c0:f3:59:5e:b4:d0:fe:bf:ab:f7:4e:d7:e2: 74:b5:6c:cf:8d:e5:f8:99:19:d7:b4:9c:71:ed:de:c5:82:15: 53:9f:1e:3b:5d:e7:11:94:f4:07:71:a2:2a:aa:a9:5a:a0:dc: 01:4e:48:02:3a:43:c1:d7:5c:52:b2:75:ef:5a:34:27:52:0e: 51:35:71:7b:4c:5e:ec:d2:34:a5:b0:21:84:48:70:74:79:4a: b9:71:e8:7a:da:27:32:a9:a1:18:c5:d3:47:b9:7c:20:f3:41: a2:38:d8:37:d6:c0:a3:b9:44:c7:b3:22:76:29:63:34:fd:de: de:a5:91:c3:ac:2a:4e:d1:e0:a9:fc:88:4c:d1:f8:fb:79:1f: 14:d2:f9:d1 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt6WrEiMiTXfgIooYzixu4XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmZWJmYmZkNmY5MzdjNWFlMzllM2UzOGU4YWI4Mzg0MTA3 NDIxYTYwHhcNMjYwMTAxMTYxODQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NjMxOTBhNDY2YmNkODVhYjgwMWY2MmJiMTg5MjQ1ZDYxZTY2ZDBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3aQEt5Q6EEpvP0Nc5vUJF+sOgZjA t4hcj+xl27Dr+KeYUg7CB8fWEag+1nGJILknsfTKBDp1a5nuE8/aqQWCqZlRR4uQ /gEHpUYQI0D9cbYNjLQaB38RHmATPSJRVx/ouYptFAi+MmnjHRlPCGMuUsCOhWaQ 6+zPcCdcUYFF1zuO05GEXBucTYtqKlTL/7q9sATfdfTs3x1KdiTQIB6ddF9US6F6 zbxv/Vy9ga8EUZ5CQcerrUV4avK3x0e4tYCZyKgrIVnoU2t76qsHzC4kE5dm6FeT ijpMTMTJXPZnQ4jFYP6WqsLSUYORIJX8REoNVJM9L1e54o2feevfhwQmBwIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFJYxkKRmvNhauAH2K7GJJF1h5m0OMB8GA1UdIwQY MBaAFA/r+/1vk3xa454+OOirg4QQdCGmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRC12N19XLVRmRnJqbmo0NDZLdURoQkIwSWFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS82N2Q4MzQtMjYxMi00NzM5LTlmNGIt N2Q3MDM3NGQ3NmQyLzEvbGpHUXBHYTgyRnE0QWZZcnNZa2tYV0htYlE0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS82N2Q4MzQtMjYxMi00NzM5LTlmNGItN2Q3MDM3NGQ3NmQy LzEvRC12N19XLVRmRnJqbmo0NDZLdURoQkIwSWFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQBBbyuAwQA W8BSAwQAXb07AwQB1bciMA0GCSqGSIb3DQEBCwUAA4IBAQA+URaIbyCcWiB5wStL 1xr7zui/zmoPhupJ4aebyVr+ItN4McV6FnoAD/dVTKkqxH3HQLYNPYAwis2m9GfL eY9dlbp0/xnb0WuN+d5cYbt0po8yJzCBM1Q2Uz43mc8A/ZOCvevOKhc+jCJU591D BzZNisDzWV600P6/q/dO1+J0tWzPjeX4mRnXtJxx7d7FghVTnx47XecRlPQHcaIq qqlaoNwBTkgCOkPB11xSsnXvWjQnUg5RNXF7TF7s0jSlsCGESHB0eUq5ceh62icy qaEYxdNHuXwg80GiONg31sCjuUTHsyJ2KWM0/d7epZHDrCpO0eCp/IhM0fj7eR8U 0vnR -----END CERTIFICATE-----Generated at Mon Jan 26 01:43:06 2026 by rpki-client