This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/b5cf0b-ec31-4705-8f68-6f1fece87c89/1/LImjrbhHeMS0SUwTfOwECe9lV9U.roa File: LImjrbhHeMS0SUwTfOwECe9lV9U.roa (raw, json) Hash identifier: wbFO9smdaTd3aArmdgq4cu6zQEi7JikJkE330MQeczQ= Subject key identifier: 2C:89:A3:AD:B8:47:78:C4:B4:49:4C:13:7C:EC:04:09:EF:65:57:D5 Certificate issuer: /CN=22d54df89b8fd921dada3f0daa29efff5cce0a79 Certificate serial: 019B7AC84E8E8EDC5E45DB1891C3F9F123DC Authority key identifier: 22:D5:4D:F8:9B:8F:D9:21:DA:DA:3F:0D:AA:29:EF:FF:5C:CE:0A:79 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ItVN-JuP2SHa2j8Nqinv_1zOCnk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/b5cf0b-ec31-4705-8f68-6f1fece87c89/1/LImjrbhHeMS0SUwTfOwECe9lV9U.roa Signing time: Thu 01 Jan 2026 18:18:26 +0000 ROA not before: Thu 01 Jan 2026 18:18:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51333 IP address blocks: 185.58.4.0/22 maxlen: 24 188.65.80.0/21 maxlen: 24 188.65.80.0/24 maxlen: 24 188.65.81.0/24 maxlen: 24 188.65.83.0/24 maxlen: 24 188.65.84.0/24 maxlen: 24 188.65.85.0/24 maxlen: 24 188.65.86.0/24 maxlen: 24 188.65.87.0/24 maxlen: 24 194.36.72.0/22 maxlen: 24 2a02:6120::/29 maxlen: 29 2a0c:bdc0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/b5cf0b-ec31-4705-8f68-6f1fece87c89/1/ItVN-JuP2SHa2j8Nqinv_1zOCnk.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/b5cf0b-ec31-4705-8f68-6f1fece87c89/1/ItVN-JuP2SHa2j8Nqinv_1zOCnk.mft rsync://rpki.ripe.net/repository/DEFAULT/ItVN-JuP2SHa2j8Nqinv_1zOCnk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 03:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:4e:8e:8e:dc:5e:45:db:18:91:c3:f9:f1:23:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22d54df89b8fd921dada3f0daa29efff5cce0a79 Validity Not Before: Jan 1 18:18:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2c89a3adb84778c4b4494c137cec0409ef6557d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:6c:b1:e0:2c:52:76:39:4e:63:38:a2:50:fd: 44:c7:36:42:e0:0b:10:17:64:a3:51:75:d1:a1:f0: e3:51:64:55:8e:a2:4a:45:78:0c:ec:a5:d8:78:4d: a2:91:68:75:aa:d6:29:be:5e:37:7a:5a:4f:57:da: 44:77:2c:cb:89:c1:1d:2a:35:3b:f2:eb:a3:0a:5a: 2a:9a:c7:b7:bc:39:ab:45:94:53:50:6c:cb:4b:67: 51:91:e4:83:e4:ec:fa:4a:25:3a:65:e0:76:9a:01: a4:d2:06:79:92:69:47:39:ad:9b:71:2d:30:05:0c: 6a:79:4f:52:43:fb:0e:0f:68:34:44:0e:a2:fd:fd: 2c:51:e2:7d:5b:16:6f:db:3d:5a:28:7d:4e:b5:81: fc:44:a3:e8:44:54:66:46:55:62:b3:58:99:64:d9: 87:d3:82:90:b0:3d:47:f0:02:6b:6a:69:03:c6:42: 63:be:02:aa:4d:fb:bc:b6:1d:38:4d:94:43:f7:88: 09:51:b7:17:b6:87:ac:1e:31:48:89:28:6c:83:09: 33:22:f1:d0:79:42:e5:51:c4:b3:70:00:dc:e3:99: 59:fb:d2:bb:2f:9e:5c:24:0c:b8:0b:dc:ff:d2:f5: 97:8b:0d:24:8b:1e:f7:5f:cb:56:b7:5b:9a:1c:4f: 84:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:89:A3:AD:B8:47:78:C4:B4:49:4C:13:7C:EC:04:09:EF:65:57:D5 X509v3 Authority Key Identifier: keyid:22:D5:4D:F8:9B:8F:D9:21:DA:DA:3F:0D:AA:29:EF:FF:5C:CE:0A:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ItVN-JuP2SHa2j8Nqinv_1zOCnk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/b5cf0b-ec31-4705-8f68-6f1fece87c89/1/LImjrbhHeMS0SUwTfOwECe9lV9U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/b5cf0b-ec31-4705-8f68-6f1fece87c89/1/ItVN-JuP2SHa2j8Nqinv_1zOCnk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.58.4.0/22 188.65.80.0/21 194.36.72.0/22 IPv6: 2a02:6120::/29 2a0c:bdc0::/29 Signature Algorithm: sha256WithRSAEncryption 65:d9:d1:ee:11:3c:5a:27:b8:7b:2e:4b:92:ab:18:13:3e:a4: be:7f:c6:fa:74:e1:65:70:e5:08:30:57:d0:12:35:b1:86:f4: d4:5f:bd:ea:92:ee:b7:cf:f0:2d:49:c1:e4:73:4b:2a:49:db: eb:ee:7b:a9:88:62:ed:6a:7f:0a:d6:bf:d9:70:4a:2c:6d:45: 8c:22:42:16:4b:f6:a5:c2:41:f3:2d:48:86:2b:ea:23:a7:ac: d1:9d:9b:af:eb:f4:1c:6f:ba:f0:97:23:4c:68:ca:03:84:02: c5:bd:66:8e:73:3d:6f:17:c6:dc:f4:1c:7d:45:d6:67:ca:43: 96:85:bc:97:11:e9:25:ba:68:ec:71:f9:01:00:7e:1a:2b:c1: 16:a3:ef:92:72:e0:8d:40:bb:97:07:4b:da:7b:19:5a:14:91: fc:88:73:60:99:3a:da:6c:c9:e5:f5:70:9d:e8:a4:8f:1c:4e: 30:67:62:c8:6c:56:cd:f1:d5:06:dd:81:c7:16:0e:16:b6:32: c1:ad:b4:a4:17:ca:da:3f:00:6b:bd:50:2e:36:dc:33:22:ed: 6d:8f:4e:6f:18:e6:b4:d8:18:df:ef:6e:30:19:58:7b:e4:c9: c8:77:a8:73:ed:f5:d5:e6:99:55:f1:3c:da:9a:fa:c6:5e:b9: fb:93:49:08 -----BEGIN CERTIFICATE----- MIIFHzCCBAegAwIBAgISAZt6yE6OjtxeRdsYkcP58SPcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyZDU0ZGY4OWI4ZmQ5MjFkYWRhM2YwZGFhMjllZmZmNWNj ZTBhNzkwHhcNMjYwMTAxMTgxODI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYzg5YTNhZGI4NDc3OGM0YjQ0OTRjMTM3Y2VjMDQwOWVmNjU1N2Q1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl2yx4CxSdjlOYziiUP1ExzZC4AsQ F2SjUXXRofDjUWRVjqJKRXgM7KXYeE2ikWh1qtYpvl43elpPV9pEdyzLicEdKjU7 8uujCloqmse3vDmrRZRTUGzLS2dRkeSD5Oz6SiU6ZeB2mgGk0gZ5kmlHOa2bcS0w BQxqeU9SQ/sOD2g0RA6i/f0sUeJ9WxZv2z1aKH1OtYH8RKPoRFRmRlVis1iZZNmH 04KQsD1H8AJramkDxkJjvgKqTfu8th04TZRD94gJUbcXtoesHjFIiShsgwkzIvHQ eULlUcSzcADc45lZ+9K7L55cJAy4C9z/0vWXiw0kix73X8tWt1uaHE+EDwIDAQAB o4ICKzCCAicwHQYDVR0OBBYEFCyJo624R3jEtElME3zsBAnvZVfVMB8GA1UdIwQY MBaAFCLVTfibj9kh2to/Daop7/9czgp5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXRWTi1KdVAyU0hhMmo4TnFpbnZfMXpPQ25rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9iNWNmMGItZWMzMS00NzA1LThmNjgt NmYxZmVjZTg3Yzg5LzEvTEltanJiaEhlTVMwU1V3VGZPd0VDZTlsVjlVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy9iNWNmMGItZWMzMS00NzA1LThmNjgtNmYxZmVjZTg3Yzg5 LzEvSXRWTi1KdVAyU0hhMmo4TnFpbnZfMXpPQ25rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEEGCCsGAQUFBwEHAQH/BDIwMDAYBAIAATASAwQCuToEAwQD vEFQAwQCwiRIMBQEAgACMA4DBQMqAmEgAwUDKgy9wDANBgkqhkiG9w0BAQsFAAOC AQEAZdnR7hE8Wie4ey5LkqsYEz6kvn/G+nThZXDlCDBX0BI1sYb01F+96pLut8/w LUnB5HNLKknb6+57qYhi7Wp/Cta/2XBKLG1FjCJCFkv2pcJB8y1IhivqI6es0Z2b r+v0HG+68JcjTGjKA4QCxb1mjnM9bxfG3PQcfUXWZ8pDloW8lxHpJbpo7HH5AQB+ GivBFqPvknLgjUC7lwdL2nsZWhSR/IhzYJk62mzJ5fVwneikjxxOMGdiyGxWzfHV Bt2BxxYOFrYywa20pBfK2j8Aa71QLjbcMyLtbY9ObxjmtNgY3+9uMBlYe+TJyHeo c+311eaZVfE82pr6xl65+5NJCA== -----END CERTIFICATE-----Generated at Mon Jan 26 12:20:47 2026 by rpki-client