This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/45772a-a10f-429d-b5db-9218f92f3036/1/lRPyn2QePJK0WhcWTY9j2nGmexk.roa File: lRPyn2QePJK0WhcWTY9j2nGmexk.roa (raw, json) Hash identifier: xAWF2k7h+INOernXeq2UXI+UZNCtrXr4mV/H1PEWqVI= Subject key identifier: 95:13:F2:9F:64:1E:3C:92:B4:5A:17:16:4D:8F:63:DA:71:A6:7B:19 Certificate issuer: /CN=e9057470fd56f1b773b2e40abaee79f9966e4436 Certificate serial: 019B7DCA05254DEFC6A38E4910C17582AAEA Authority key identifier: E9:05:74:70:FD:56:F1:B7:73:B2:E4:0A:BA:EE:79:F9:96:6E:44:36 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6QV0cP1W8bdzsuQKuu55-ZZuRDY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/45772a-a10f-429d-b5db-9218f92f3036/1/lRPyn2QePJK0WhcWTY9j2nGmexk.roa Signing time: Fri 02 Jan 2026 08:19:10 +0000 ROA not before: Fri 02 Jan 2026 08:19:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 58323 IP address blocks: 130.255.20.0/22 maxlen: 24 164.138.192.0/21 maxlen: 24 2a00:bac0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/45772a-a10f-429d-b5db-9218f92f3036/1/6QV0cP1W8bdzsuQKuu55-ZZuRDY.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/45772a-a10f-429d-b5db-9218f92f3036/1/6QV0cP1W8bdzsuQKuu55-ZZuRDY.mft rsync://rpki.ripe.net/repository/DEFAULT/6QV0cP1W8bdzsuQKuu55-ZZuRDY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:05:25:4d:ef:c6:a3:8e:49:10:c1:75:82:aa:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e9057470fd56f1b773b2e40abaee79f9966e4436 Validity Not Before: Jan 2 08:19:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9513f29f641e3c92b45a17164d8f63da71a67b19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:6f:4a:ff:1e:db:6e:83:44:12:0c:29:ef:f2: 35:86:30:d3:94:9a:25:e2:f4:90:01:fd:fa:20:79: 38:9d:89:73:22:85:81:96:06:80:b4:11:44:9e:65: d9:e4:a8:5c:3c:6f:e3:07:85:08:d3:cb:de:0e:5e: d0:82:d2:68:8c:3f:ae:b7:2d:2f:04:38:65:6c:23: 53:4d:c7:a8:df:c3:84:4f:de:b5:f6:bd:75:49:dc: 66:ac:a8:4b:32:5c:2a:fc:69:5a:18:d8:1d:56:9b: 3b:f8:2b:8e:9c:4c:b2:ed:d1:2b:4a:81:12:6a:82: a3:bd:5c:f4:fd:53:f4:63:de:f7:e5:f7:99:df:7d: f4:18:d2:4c:49:42:bb:de:04:d8:0b:5d:55:4b:83: 5f:70:91:28:df:8f:67:43:f8:d9:0d:a8:c6:c3:d7: 40:2d:25:f4:17:de:75:07:81:ea:82:8b:71:2d:ee: c5:14:70:8c:bb:fc:57:01:cf:6d:dc:d6:62:f9:3a: 33:b8:19:bd:88:06:70:be:f0:88:05:55:3e:6d:34: b4:e9:04:96:97:aa:7a:34:8c:c3:6e:03:0b:b9:f5: c9:8b:58:97:ee:59:8a:6c:3b:b0:55:ab:8c:bd:e2: c3:eb:89:9d:f3:c8:c9:df:5e:9c:61:30:55:b5:39: 0a:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:13:F2:9F:64:1E:3C:92:B4:5A:17:16:4D:8F:63:DA:71:A6:7B:19 X509v3 Authority Key Identifier: keyid:E9:05:74:70:FD:56:F1:B7:73:B2:E4:0A:BA:EE:79:F9:96:6E:44:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6QV0cP1W8bdzsuQKuu55-ZZuRDY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/45772a-a10f-429d-b5db-9218f92f3036/1/lRPyn2QePJK0WhcWTY9j2nGmexk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/45772a-a10f-429d-b5db-9218f92f3036/1/6QV0cP1W8bdzsuQKuu55-ZZuRDY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 130.255.20.0/22 164.138.192.0/21 IPv6: 2a00:bac0::/32 Signature Algorithm: sha256WithRSAEncryption 6c:24:2d:e6:f2:18:63:3c:8c:84:f0:02:7e:7d:ed:fd:29:a3: e0:06:66:d5:1e:0f:d1:c5:b8:b8:cc:ae:28:c1:c3:3c:40:67: 98:13:25:fc:1b:7c:4a:15:1a:fe:85:8d:48:f8:64:a3:33:21: 67:4b:12:8a:52:8b:67:a9:25:08:50:34:1d:52:95:92:dc:7e: c6:5b:a9:30:7a:bc:4c:3d:fa:51:e1:13:97:b4:3f:ad:41:40: 9e:06:72:12:eb:dc:e4:9f:38:a9:2c:46:36:ed:20:9f:0a:7b: 5a:ea:24:9c:28:5a:83:eb:f5:fe:c7:84:c7:33:9f:47:f1:0e: e3:f2:f6:68:72:1d:40:61:e0:1c:ee:a8:aa:0b:7f:04:8a:a6: 0b:47:18:e9:81:35:70:cc:02:b1:32:62:9b:30:3e:2e:56:a7: b4:ea:0f:da:1f:c0:47:a0:93:d8:b1:a2:0e:78:30:b8:81:5b: ec:bf:eb:50:c8:53:a0:6f:63:63:60:d3:b6:d2:8a:53:35:65: 7a:50:8d:f1:56:cc:f6:7c:0f:30:e1:70:47:5e:c8:65:5f:8a: 91:18:dc:f8:0f:18:29:72:c0:45:e7:c9:4d:95:f1:49:9e:ac: 85:de:d8:70:c1:76:85:be:e8:32:48:77:91:d3:c6:ba:84:8b: 24:31:af:78 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt9ygUlTe/Go45JEMF1gqrqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU5MDU3NDcwZmQ1NmYxYjc3M2IyZTQwYWJhZWU3OWY5OTY2 ZTQ0MzYwHhcNMjYwMTAyMDgxOTEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NTEzZjI5ZjY0MWUzYzkyYjQ1YTE3MTY0ZDhmNjNkYTcxYTY3YjE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx29K/x7bboNEEgwp7/I1hjDTlJol 4vSQAf36IHk4nYlzIoWBlgaAtBFEnmXZ5KhcPG/jB4UI08veDl7QgtJojD+uty0v BDhlbCNTTceo38OET9619r11SdxmrKhLMlwq/GlaGNgdVps7+CuOnEyy7dErSoES aoKjvVz0/VP0Y9735feZ3330GNJMSUK73gTYC11VS4NfcJEo349nQ/jZDajGw9dA LSX0F951B4HqgotxLe7FFHCMu/xXAc9t3NZi+TozuBm9iAZwvvCIBVU+bTS06QSW l6p6NIzDbgMLufXJi1iX7lmKbDuwVauMveLD64md88jJ316cYTBVtTkKpwIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFJUT8p9kHjyStFoXFk2PY9pxpnsZMB8GA1UdIwQY MBaAFOkFdHD9VvG3c7LkCrruefmWbkQ2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNlFWMGNQMVc4YmR6c3VRS3V1NTUtWlp1UkRZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80NTc3MmEtYTEwZi00MjlkLWI1ZGIt OTIxOGY5MmYzMDM2LzEvbFJQeW4yUWVQSkswV2hjV1RZOWoybkdtZXhrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC80NTc3MmEtYTEwZi00MjlkLWI1ZGItOTIxOGY5MmYzMDM2 LzEvNlFWMGNQMVc4YmR6c3VRS3V1NTUtWlp1UkRZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCgv8UAwQD pIrAMA0EAgACMAcDBQAqALrAMA0GCSqGSIb3DQEBCwUAA4IBAQBsJC3m8hhjPIyE 8AJ+fe39KaPgBmbVHg/Rxbi4zK4owcM8QGeYEyX8G3xKFRr+hY1I+GSjMyFnSxKK UotnqSUIUDQdUpWS3H7GW6kwerxMPfpR4ROXtD+tQUCeBnIS69zknzipLEY27SCf Cnta6iScKFqD6/X+x4THM59H8Q7j8vZoch1AYeAc7qiqC38EiqYLRxjpgTVwzAKx MmKbMD4uVqe06g/aH8BHoJPYsaIOeDC4gVvsv+tQyFOgb2NjYNO20opTNWV6UI3x Vsz2fA8w4XBHXshlX4qRGNz4DxgpcsBF58lNlfFJnqyF3thwwXaFvugySHeR08a6 hIskMa94 -----END CERTIFICATE-----Generated at Sun Jan 25 20:00:13 2026 by rpki-client