This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/77fe48-d1f1-449a-807d-4c19ec5b57ca/1/lfENbqRcmLVwqdcIrs_dIngMNaU.roa File: lfENbqRcmLVwqdcIrs_dIngMNaU.roa (raw, json) Hash identifier: Ccs8DxZ+yX5BpwYTUURzMbg1XTsNy8SpPhcN0nLXzBg= Subject key identifier: 95:F1:0D:6E:A4:5C:98:B5:70:A9:D7:08:AE:CF:DD:22:78:0C:35:A5 Certificate issuer: /CN=09cd218abcdf66e79500ab913cd21cf06e405d4e Certificate serial: 019B7C7FEB7AA55B61F1054FFBCBDC6BD763 Authority key identifier: 09:CD:21:8A:BC:DF:66:E7:95:00:AB:91:3C:D2:1C:F0:6E:40:5D:4E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cc0hirzfZueVAKuRPNIc8G5AXU4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/77fe48-d1f1-449a-807d-4c19ec5b57ca/1/lfENbqRcmLVwqdcIrs_dIngMNaU.roa Signing time: Fri 02 Jan 2026 02:18:36 +0000 ROA not before: Fri 02 Jan 2026 02:18:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35753 IP address blocks: 80.240.64.0/20 maxlen: 20 82.167.0.0/16 maxlen: 24 82.167.0.0/17 maxlen: 17 82.167.0.0/18 maxlen: 24 82.167.64.0/22 maxlen: 22 82.167.68.0/22 maxlen: 22 82.167.72.0/22 maxlen: 22 82.167.76.0/22 maxlen: 22 82.167.80.0/22 maxlen: 22 82.167.84.0/22 maxlen: 22 82.167.88.0/22 maxlen: 22 82.167.92.0/22 maxlen: 22 82.167.96.0/22 maxlen: 22 82.167.100.0/22 maxlen: 22 82.167.104.0/22 maxlen: 22 82.167.108.0/22 maxlen: 22 82.167.112.0/22 maxlen: 22 82.167.116.0/22 maxlen: 22 82.167.120.0/22 maxlen: 22 82.167.124.0/22 maxlen: 22 82.167.128.0/19 maxlen: 19 82.167.144.0/22 maxlen: 22 82.167.148.0/22 maxlen: 22 82.167.152.0/22 maxlen: 22 82.167.156.0/22 maxlen: 22 82.167.160.0/22 maxlen: 22 82.167.164.0/22 maxlen: 22 82.167.168.0/22 maxlen: 22 82.167.172.0/22 maxlen: 22 82.167.180.0/22 maxlen: 22 82.167.180.0/23 maxlen: 23 82.167.192.0/18 maxlen: 18 82.167.192.0/20 maxlen: 20 82.167.208.0/20 maxlen: 20 82.167.224.0/21 maxlen: 21 82.167.232.0/21 maxlen: 21 82.167.240.0/22 maxlen: 22 82.167.244.0/22 maxlen: 22 82.167.248.0/24 maxlen: 24 82.167.249.0/24 maxlen: 24 82.167.250.0/23 maxlen: 23 82.167.252.0/23 maxlen: 23 82.167.254.0/23 maxlen: 23 82.167.254.0/24 maxlen: 24 82.167.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/77fe48-d1f1-449a-807d-4c19ec5b57ca/1/Cc0hirzfZueVAKuRPNIc8G5AXU4.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/77fe48-d1f1-449a-807d-4c19ec5b57ca/1/Cc0hirzfZueVAKuRPNIc8G5AXU4.mft rsync://rpki.ripe.net/repository/DEFAULT/Cc0hirzfZueVAKuRPNIc8G5AXU4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 08:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:eb:7a:a5:5b:61:f1:05:4f:fb:cb:dc:6b:d7:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09cd218abcdf66e79500ab913cd21cf06e405d4e Validity Not Before: Jan 2 02:18:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=95f10d6ea45c98b570a9d708aecfdd22780c35a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:08:36:0c:a3:20:9e:55:74:17:81:cd:b9:06: ef:b2:cb:4c:3f:21:1f:b3:d2:a0:76:50:5a:a2:1e: b5:f0:c9:a9:16:ed:6d:25:d4:4a:ab:5a:51:89:4e: 85:30:ee:42:80:ca:03:83:60:ba:3b:5e:76:6f:a4: 08:86:08:cd:f8:a7:b9:b3:92:96:7e:81:2c:55:74: 60:1c:e0:55:28:49:30:74:7c:d5:5a:67:90:a5:b8: f2:e9:98:f3:d9:a7:8f:bc:c5:6e:d8:ad:00:70:e7: 80:93:53:1d:40:75:1a:96:3b:21:61:29:ac:16:9d: 56:48:30:33:d9:5f:5d:50:11:37:70:16:0f:74:15: 58:bf:37:5e:7f:02:2d:eb:15:f9:c9:cd:04:05:0f: cf:99:e2:2c:fb:12:6b:23:7c:0a:9c:9c:24:5d:31: f2:54:05:4b:e9:1a:19:65:64:a1:09:36:60:31:78: cd:14:fd:d9:fd:03:c6:02:f2:4f:db:21:46:7e:3b: 2e:38:73:f5:df:cb:b8:84:17:66:00:b7:cb:ba:6b: 8b:e8:5f:21:93:68:12:2e:32:36:42:94:37:d4:65: 5a:3d:2a:59:65:18:a3:a3:b8:f2:ce:27:b6:86:3f: 19:7a:fd:ea:e7:5b:db:69:4a:0f:c2:c5:29:54:75: b6:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:F1:0D:6E:A4:5C:98:B5:70:A9:D7:08:AE:CF:DD:22:78:0C:35:A5 X509v3 Authority Key Identifier: keyid:09:CD:21:8A:BC:DF:66:E7:95:00:AB:91:3C:D2:1C:F0:6E:40:5D:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cc0hirzfZueVAKuRPNIc8G5AXU4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/77fe48-d1f1-449a-807d-4c19ec5b57ca/1/lfENbqRcmLVwqdcIrs_dIngMNaU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/77fe48-d1f1-449a-807d-4c19ec5b57ca/1/Cc0hirzfZueVAKuRPNIc8G5AXU4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.240.64.0/20 82.167.0.0/16 Signature Algorithm: sha256WithRSAEncryption 94:a7:da:b6:12:9e:8e:e9:37:94:b8:80:ad:b2:42:1a:c6:95: 2f:46:6f:d2:2d:4f:ed:1a:e8:ab:d8:fa:1c:e2:45:50:64:49: a7:6d:c2:a8:23:53:4f:32:32:8a:4a:c7:0c:ee:ba:03:8d:7a: 23:ae:20:78:64:64:90:d9:cb:30:22:7c:e4:45:67:25:24:06: 20:e6:f4:a6:8a:45:80:be:c9:33:e0:86:0c:73:7a:8d:80:39: d6:a4:22:1c:bd:fd:9b:4f:fa:b8:21:f1:39:3d:a4:c7:53:49: 07:11:6f:dc:80:e2:23:67:2d:c1:f6:39:71:76:68:a3:93:9c: 47:44:02:b6:19:2f:a9:68:21:da:d6:c8:02:6a:aa:18:c1:79: a1:2e:6f:fb:e9:d8:7e:4f:8a:9c:67:20:6b:d2:ea:f0:33:11: a6:9e:40:1f:8b:fb:be:07:0b:8f:29:8e:6f:d3:2b:a8:16:3b: 7c:24:5e:78:f8:7b:a7:1b:2a:de:a8:d8:96:f2:4d:6b:52:14: e7:8d:b8:03:93:62:a7:2b:d8:55:26:50:d5:dd:a2:09:15:da: 21:c3:b3:54:11:e5:a8:1d:de:b6:02:b0:8b:14:ee:a0:b8:31: 6b:92:07:9a:56:d8:d6:97:0c:04:c3:75:3c:d1:5b:ff:5b:c5: a7:f0:3a:70 -----BEGIN CERTIFICATE----- MIIFAjCCA+qgAwIBAgISAZt8f+t6pVth8QVP+8vca9djMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5Y2QyMThhYmNkZjY2ZTc5NTAwYWI5MTNjZDIxY2YwNmU0 MDVkNGUwHhcNMjYwMTAyMDIxODM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NWYxMGQ2ZWE0NWM5OGI1NzBhOWQ3MDhhZWNmZGQyMjc4MGMzNWE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Qg2DKMgnlV0F4HNuQbvsstMPyEf s9KgdlBaoh618MmpFu1tJdRKq1pRiU6FMO5CgMoDg2C6O152b6QIhgjN+Ke5s5KW foEsVXRgHOBVKEkwdHzVWmeQpbjy6Zjz2aePvMVu2K0AcOeAk1MdQHUaljshYSms Fp1WSDAz2V9dUBE3cBYPdBVYvzdefwIt6xX5yc0EBQ/PmeIs+xJrI3wKnJwkXTHy VAVL6RoZZWShCTZgMXjNFP3Z/QPGAvJP2yFGfjsuOHP138u4hBdmALfLumuL6F8h k2gSLjI2QpQ31GVaPSpZZRijo7jyzie2hj8Zev3q51vbaUoPwsUpVHW2cQIDAQAB o4ICDjCCAgowHQYDVR0OBBYEFJXxDW6kXJi1cKnXCK7P3SJ4DDWlMB8GA1UdIwQY MBaAFAnNIYq832bnlQCrkTzSHPBuQF1OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2MwaGlyemZadWVWQUt1UlBOSWM4RzVBWFU0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi83N2ZlNDgtZDFmMS00NDlhLTgwN2Qt NGMxOWVjNWI1N2NhLzEvbGZFTmJxUmNtTFZ3cWRjSXJzX2RJbmdNTmFVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi83N2ZlNDgtZDFmMS00NDlhLTgwN2QtNGMxOWVjNWI1N2Nh LzEvQ2MwaGlyemZadWVWQUt1UlBOSWM4RzVBWFU0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAATALAwQEUPBAAwMA UqcwDQYJKoZIhvcNAQELBQADggEBAJSn2rYSno7pN5S4gK2yQhrGlS9Gb9ItT+0a 6KvY+hziRVBkSadtwqgjU08yMopKxwzuugONeiOuIHhkZJDZyzAifORFZyUkBiDm 9KaKRYC+yTPghgxzeo2AOdakIhy9/ZtP+rgh8Tk9pMdTSQcRb9yA4iNnLcH2OXF2 aKOTnEdEArYZL6loIdrWyAJqqhjBeaEub/vp2H5PipxnIGvS6vAzEaaeQB+L+74H C48pjm/TK6gWO3wkXnj4e6cbKt6o2JbyTWtSFOeNuAOTYqcr2FUmUNXdogkV2iHD s1QR5agd3rYCsIsU7qC4MWuSB5pW2NaXDATDdTzRW/9bxafwOnA= -----END CERTIFICATE-----Generated at Sun Jan 25 18:20:46 2026 by rpki-client