This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/4bcb1b-ff41-48e0-8db8-6212ac49ca3b/1/lGfy-skAnLgxdiq51q1vJk9OXZg.roa File: lGfy-skAnLgxdiq51q1vJk9OXZg.roa (raw, json) Hash identifier: 905M+SG71AWuwma3AVwJNMrg+VeownsgNGw18kPIIEs= Subject key identifier: 94:67:F2:FA:C9:00:9C:B8:31:76:2A:B9:D6:AD:6F:26:4F:4E:5D:98 Certificate issuer: /CN=ddb71471373bb0603c356eeded4b918292b5beee Certificate serial: 019B791142911DC7105BF517755FB80AB73B Authority key identifier: DD:B7:14:71:37:3B:B0:60:3C:35:6E:ED:ED:4B:91:82:92:B5:BE:EE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3bcUcTc7sGA8NW7t7UuRgpK1vu4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/4bcb1b-ff41-48e0-8db8-6212ac49ca3b/1/lGfy-skAnLgxdiq51q1vJk9OXZg.roa Signing time: Thu 01 Jan 2026 10:18:52 +0000 ROA not before: Thu 01 Jan 2026 10:18:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 1136 IP address blocks: 145.8.176.0/24 maxlen: 24 145.8.177.0/24 maxlen: 24 145.8.178.0/24 maxlen: 24 145.8.179.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/4bcb1b-ff41-48e0-8db8-6212ac49ca3b/1/3bcUcTc7sGA8NW7t7UuRgpK1vu4.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/4bcb1b-ff41-48e0-8db8-6212ac49ca3b/1/3bcUcTc7sGA8NW7t7UuRgpK1vu4.mft rsync://rpki.ripe.net/repository/DEFAULT/3bcUcTc7sGA8NW7t7UuRgpK1vu4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:42:91:1d:c7:10:5b:f5:17:75:5f:b8:0a:b7:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ddb71471373bb0603c356eeded4b918292b5beee Validity Not Before: Jan 1 10:18:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9467f2fac9009cb831762ab9d6ad6f264f4e5d98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:b4:f5:79:3e:1d:b9:fe:09:9e:46:f6:33:bf: 7e:eb:06:eb:be:05:ee:d2:19:95:d6:f4:bf:e4:d9: e1:43:e4:c9:ab:2b:69:85:1f:17:cb:f0:20:df:0e: 96:46:5e:23:29:4c:78:bf:94:ba:25:23:c3:cc:90: 30:7c:a6:85:73:16:f2:50:bc:6c:97:08:36:65:4c: 0e:13:84:cf:f5:89:9e:d6:47:fa:bd:19:bf:35:51: ac:e9:15:dd:43:9f:38:17:95:a2:13:8f:bc:37:56: c0:fd:d4:de:1f:14:1f:2d:67:8d:1e:56:37:17:9d: 0a:32:8c:c0:eb:98:13:ce:9f:79:1c:a5:7b:66:77: c6:70:2d:2f:b6:1a:36:9a:dc:c1:45:ef:bc:35:a2: 46:b2:b5:9d:5d:f5:90:c5:9b:08:1b:8c:a7:cc:b5: b1:98:bd:57:a2:ad:f1:5e:9e:dc:ab:80:85:ae:2e: f8:91:0a:e6:41:88:79:87:c6:bd:d0:b8:ce:09:08: 5a:ce:2b:6a:51:38:97:21:a2:7f:7c:b0:b8:7d:aa: 0b:52:a0:ef:7a:9d:64:8d:e1:40:21:bb:5e:ee:6c: 9a:56:6a:17:1f:e3:75:59:44:c6:09:eb:13:84:52: 50:4c:bc:6a:1c:54:b4:5f:0d:a1:82:1e:52:d7:ee: 92:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:67:F2:FA:C9:00:9C:B8:31:76:2A:B9:D6:AD:6F:26:4F:4E:5D:98 X509v3 Authority Key Identifier: keyid:DD:B7:14:71:37:3B:B0:60:3C:35:6E:ED:ED:4B:91:82:92:B5:BE:EE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3bcUcTc7sGA8NW7t7UuRgpK1vu4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/4bcb1b-ff41-48e0-8db8-6212ac49ca3b/1/lGfy-skAnLgxdiq51q1vJk9OXZg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/4bcb1b-ff41-48e0-8db8-6212ac49ca3b/1/3bcUcTc7sGA8NW7t7UuRgpK1vu4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 145.8.176.0/22 Signature Algorithm: sha256WithRSAEncryption 9e:7e:31:ea:06:61:4c:c6:1c:ae:84:d0:f0:77:ec:27:57:81: 80:69:d6:9f:1d:35:27:01:e7:97:36:46:07:b9:9f:87:98:85: 4d:8a:65:25:39:57:c3:17:69:19:84:0e:5f:e5:6d:c8:8a:5d: d9:26:ef:d9:c8:ad:0a:18:15:c7:58:25:14:ff:f0:b5:e5:9e: c4:88:52:a2:c7:de:53:76:e1:88:d1:a1:9e:a1:b9:ca:1c:94: 8d:ed:4b:7d:9d:31:98:42:3c:46:6d:fd:bf:1a:0c:f4:3d:a9: 02:a2:a5:e4:84:47:d9:5b:e6:2c:47:38:3a:e6:bf:68:0c:4a: a6:e4:88:67:c6:ca:e5:a1:86:57:b3:18:1d:23:49:95:ef:5d: bf:e7:bc:42:1a:07:2d:d3:53:b6:13:80:db:74:92:47:18:45: b9:c8:4c:0e:51:f3:71:3e:b9:91:99:c7:69:db:3d:b2:cf:de: a2:58:66:d1:57:50:60:bb:f6:cc:6b:7f:c7:66:04:46:d1:6f: 07:4d:44:d1:0f:12:eb:62:63:5f:a2:a8:33:1c:e0:fb:73:54: 3f:7f:8c:b1:df:2d:c4:44:85:29:50:89:f8:50:cc:24:9c:b7: 6d:4c:03:84:2a:c4:6d:d2:62:75:72:fe:fd:e8:55:0f:77:08: 0f:b8:dd:8e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EUKRHccQW/UXdV+4Crc7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRkYjcxNDcxMzczYmIwNjAzYzM1NmVlZGVkNGI5MTgyOTJi NWJlZWUwHhcNMjYwMTAxMTAxODUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NDY3ZjJmYWM5MDA5Y2I4MzE3NjJhYjlkNmFkNmYyNjRmNGU1ZDk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq7T1eT4duf4Jnkb2M79+6wbrvgXu 0hmV1vS/5NnhQ+TJqytphR8Xy/Ag3w6WRl4jKUx4v5S6JSPDzJAwfKaFcxbyULxs lwg2ZUwOE4TP9Yme1kf6vRm/NVGs6RXdQ584F5WiE4+8N1bA/dTeHxQfLWeNHlY3 F50KMozA65gTzp95HKV7ZnfGcC0vtho2mtzBRe+8NaJGsrWdXfWQxZsIG4ynzLWx mL1Xoq3xXp7cq4CFri74kQrmQYh5h8a90LjOCQhazitqUTiXIaJ/fLC4faoLUqDv ep1kjeFAIbte7myaVmoXH+N1WUTGCesThFJQTLxqHFS0Xw2hgh5S1+6SQwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJRn8vrJAJy4MXYqudatbyZPTl2YMB8GA1UdIwQY MBaAFN23FHE3O7BgPDVu7e1LkYKStb7uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM2JjVWNUYzdzR0E4Tlc3dDdVdVJncEsxdnU0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy80YmNiMWItZmY0MS00OGUwLThkYjgt NjIxMmFjNDljYTNiLzEvbEdmeS1za0FuTGd4ZGlxNTFxMXZKazlPWFpnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy80YmNiMWItZmY0MS00OGUwLThkYjgtNjIxMmFjNDljYTNi LzEvM2JjVWNUYzdzR0E4Tlc3dDdVdVJncEsxdnU0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCkQiwMA0G CSqGSIb3DQEBCwUAA4IBAQCefjHqBmFMxhyuhNDwd+wnV4GAadafHTUnAeeXNkYH uZ+HmIVNimUlOVfDF2kZhA5f5W3Iil3ZJu/ZyK0KGBXHWCUU//C15Z7EiFKix95T duGI0aGeobnKHJSN7Ut9nTGYQjxGbf2/Ggz0PakCoqXkhEfZW+YsRzg65r9oDEqm 5IhnxsrloYZXsxgdI0mV712/57xCGgct01O2E4DbdJJHGEW5yEwOUfNxPrmRmcdp 2z2yz96iWGbRV1Bgu/bMa3/HZgRG0W8HTUTRDxLrYmNfoqgzHOD7c1Q/f4yx3y3E RIUpUIn4UMwknLdtTAOEKsRt0mJ1cv796FUPdwgPuN2O -----END CERTIFICATE-----Generated at Sun Jan 25 23:32:26 2026 by rpki-client