This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/d0c17a-19b7-4142-b941-ffd646d05f67/1/lBUVAt70R1-1BAR2vy4_xkP_gao.roa File: lBUVAt70R1-1BAR2vy4_xkP_gao.roa (raw, json) Hash identifier: XL0AtgP0aRu8pzRocWYutB3KozJzOUh9bOk7zF939M8= Subject key identifier: 94:15:15:02:DE:F4:47:5F:B5:04:04:76:BF:2E:3F:C6:43:FF:81:AA Certificate issuer: /CN=c1acf260d23263a7c6bb6c59c19eebc6759b60be Certificate serial: 019B7AC832F5C0B33FBC858AB0E31777F3D2 Authority key identifier: C1:AC:F2:60:D2:32:63:A7:C6:BB:6C:59:C1:9E:EB:C6:75:9B:60:BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wazyYNIyY6fGu2xZwZ7rxnWbYL4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/d0c17a-19b7-4142-b941-ffd646d05f67/1/lBUVAt70R1-1BAR2vy4_xkP_gao.roa Signing time: Thu 01 Jan 2026 18:18:19 +0000 ROA not before: Thu 01 Jan 2026 18:18:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 5466 IP address blocks: 89.204.208.0/20 maxlen: 20 95.83.240.0/21 maxlen: 21 185.61.0.0/22 maxlen: 22 213.191.224.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/d0c17a-19b7-4142-b941-ffd646d05f67/1/wazyYNIyY6fGu2xZwZ7rxnWbYL4.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/d0c17a-19b7-4142-b941-ffd646d05f67/1/wazyYNIyY6fGu2xZwZ7rxnWbYL4.mft rsync://rpki.ripe.net/repository/DEFAULT/wazyYNIyY6fGu2xZwZ7rxnWbYL4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:32:f5:c0:b3:3f:bc:85:8a:b0:e3:17:77:f3:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1acf260d23263a7c6bb6c59c19eebc6759b60be Validity Not Before: Jan 1 18:18:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=94151502def4475fb5040476bf2e3fc643ff81aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:56:e2:81:6a:22:e8:9f:6b:94:cf:33:84:bb: 98:8a:bc:a3:1b:f5:6e:f6:00:50:0c:38:13:4b:29: 94:14:ae:39:ee:59:3e:08:b8:38:15:c1:d4:a7:27: e3:60:4d:a3:3d:00:0e:f1:13:1d:9a:c0:f2:3b:27: 43:e3:4a:62:1b:3d:b5:90:fe:52:b1:bf:39:8a:56: 59:e1:94:3d:c2:84:2c:09:96:e5:04:b4:dc:30:4b: 55:4f:28:43:9f:23:56:c1:98:55:ba:d7:ca:d7:06: 4e:cc:b3:45:a9:aa:1a:40:cc:8d:28:65:90:90:98: f7:e6:9d:2f:f2:b4:e9:e0:b4:c0:8f:32:aa:f0:47: f3:78:6b:fa:4f:35:5f:a4:b8:7d:f0:ac:2c:4f:8a: 96:e0:9b:f5:be:d1:28:2c:2e:18:11:6f:81:5c:73: c8:5e:8e:60:1b:d2:3b:ac:dc:04:82:cc:1b:39:ff: a0:b2:ab:93:d1:0c:85:c6:53:96:b3:c8:55:66:c7: e5:a0:b8:24:7f:16:f1:3f:ec:c3:fb:f2:92:b9:8a: e4:48:6d:f7:4b:c9:30:3d:4d:0b:f5:06:45:a0:fd: 41:2c:1d:98:97:84:4e:65:43:da:a1:39:e2:97:d9: 84:2d:9c:d8:b9:f2:0c:b2:3d:9d:e0:d5:70:33:57: ce:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:15:15:02:DE:F4:47:5F:B5:04:04:76:BF:2E:3F:C6:43:FF:81:AA X509v3 Authority Key Identifier: keyid:C1:AC:F2:60:D2:32:63:A7:C6:BB:6C:59:C1:9E:EB:C6:75:9B:60:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wazyYNIyY6fGu2xZwZ7rxnWbYL4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/d0c17a-19b7-4142-b941-ffd646d05f67/1/lBUVAt70R1-1BAR2vy4_xkP_gao.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/d0c17a-19b7-4142-b941-ffd646d05f67/1/wazyYNIyY6fGu2xZwZ7rxnWbYL4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.204.208.0/20 95.83.240.0/21 185.61.0.0/22 213.191.224.0/21 Signature Algorithm: sha256WithRSAEncryption 89:c1:88:c3:3e:d2:68:76:9e:e9:21:dc:54:9a:28:05:0a:44: e0:22:7f:d8:0a:62:04:b2:57:31:27:a1:35:fe:9f:ea:46:dd: 06:49:cb:3b:94:24:76:6d:58:07:81:49:e3:57:07:1f:1d:06: a0:35:4d:66:3f:4e:14:f0:8e:cd:c0:ae:39:da:1b:cb:22:06: 6b:19:ad:ff:90:e1:ea:55:f9:de:86:52:a3:97:69:b7:69:21: 48:b5:db:d0:c3:2f:01:4b:db:7d:f6:0e:a4:c4:56:4d:3f:c8: 49:30:6b:88:bc:8a:02:fb:31:71:fb:55:c8:53:32:0b:f2:f5: c3:03:fb:79:74:fb:2a:f5:5e:66:6a:d3:60:68:bb:fe:11:97: 01:d4:99:a5:40:96:3a:10:88:63:25:41:23:53:c5:e6:2b:63: 31:29:ec:8d:14:4e:35:97:1e:ca:f2:42:8c:a8:28:5a:6b:af: 80:d0:02:44:9e:21:c0:80:8e:75:33:e5:b0:de:af:97:9b:20: 53:88:5d:1e:5b:b0:a1:43:ac:59:4d:dc:6f:f2:e2:eb:72:91: 97:07:76:c1:10:7c:8e:73:6a:2d:4a:28:96:c5:c5:80:52:38: 46:15:cb:af:40:ad:4a:0c:35:4f:c4:95:a9:6f:7d:a8:a6:2e: 9e:64:b9:aa -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt6yDL1wLM/vIWKsOMXd/PSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxYWNmMjYwZDIzMjYzYTdjNmJiNmM1OWMxOWVlYmM2NzU5 YjYwYmUwHhcNMjYwMTAxMTgxODE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NDE1MTUwMmRlZjQ0NzVmYjUwNDA0NzZiZjJlM2ZjNjQzZmY4MWFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2VbigWoi6J9rlM8zhLuYiryjG/Vu 9gBQDDgTSymUFK457lk+CLg4FcHUpyfjYE2jPQAO8RMdmsDyOydD40piGz21kP5S sb85ilZZ4ZQ9woQsCZblBLTcMEtVTyhDnyNWwZhVutfK1wZOzLNFqaoaQMyNKGWQ kJj35p0v8rTp4LTAjzKq8EfzeGv6TzVfpLh98KwsT4qW4Jv1vtEoLC4YEW+BXHPI Xo5gG9I7rNwEgswbOf+gsquT0QyFxlOWs8hVZsfloLgkfxbxP+zD+/KSuYrkSG33 S8kwPU0L9QZFoP1BLB2Yl4ROZUPaoTnil9mELZzYufIMsj2d4NVwM1fOLwIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFJQVFQLe9EdftQQEdr8uP8ZD/4GqMB8GA1UdIwQY MBaAFMGs8mDSMmOnxrtsWcGe68Z1m2C+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd2F6eVlOSXlZNmZHdTJ4WndaN3J4bldiWUw0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS9kMGMxN2EtMTliNy00MTQyLWI5NDEt ZmZkNjQ2ZDA1ZjY3LzEvbEJVVkF0NzBSMS0xQkFSMnZ5NF94a1BfZ2FvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS9kMGMxN2EtMTliNy00MTQyLWI5NDEtZmZkNjQ2ZDA1ZjY3 LzEvd2F6eVlOSXlZNmZHdTJ4WndaN3J4bldiWUw0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQEWczQAwQD X1PwAwQCuT0AAwQD1b/gMA0GCSqGSIb3DQEBCwUAA4IBAQCJwYjDPtJodp7pIdxU migFCkTgIn/YCmIEslcxJ6E1/p/qRt0GScs7lCR2bVgHgUnjVwcfHQagNU1mP04U 8I7NwK452hvLIgZrGa3/kOHqVfnehlKjl2m3aSFItdvQwy8BS9t99g6kxFZNP8hJ MGuIvIoC+zFx+1XIUzIL8vXDA/t5dPsq9V5matNgaLv+EZcB1JmlQJY6EIhjJUEj U8XmK2MxKeyNFE41lx7K8kKMqChaa6+A0AJEniHAgI51M+Ww3q+XmyBTiF0eW7Ch Q6xZTdxv8uLrcpGXB3bBEHyOc2otSiiWxcWAUjhGFcuvQK1KDDVPxJWpb32opi6e ZLmq -----END CERTIFICATE-----Generated at Sun Jan 25 23:03:51 2026 by rpki-client