This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/b3f912-36d1-4366-ac3c-6660238b03ce/1/l2imbiusoMKFDayNbJoOchhQjKo.roa File: l2imbiusoMKFDayNbJoOchhQjKo.roa (raw, json) Hash identifier: YYelOZGI0tep3ojBK7JJq7+uS3WslSPQkey1gLDWKRs= Subject key identifier: 97:68:A6:6E:2B:AC:A0:C2:85:0D:AC:8D:6C:9A:0E:72:18:50:8C:AA Certificate issuer: /CN=a5f6a71a180dcf8b230c414f09f7b71baea9781c Certificate serial: 019B7DC9F4C2DFFD74FB3F8BAA74FA9956B8 Authority key identifier: A5:F6:A7:1A:18:0D:CF:8B:23:0C:41:4F:09:F7:B7:1B:AE:A9:78:1C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pfanGhgNz4sjDEFPCfe3G66peBw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/b3f912-36d1-4366-ac3c-6660238b03ce/1/l2imbiusoMKFDayNbJoOchhQjKo.roa Signing time: Fri 02 Jan 2026 08:19:06 +0000 ROA not before: Fri 02 Jan 2026 08:19:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201155 IP address blocks: 45.143.212.0/22 maxlen: 24 45.157.224.0/22 maxlen: 24 185.84.4.0/22 maxlen: 24 2a05:a1c0::/29 maxlen: 48 2a0f:6cc0::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/b3f912-36d1-4366-ac3c-6660238b03ce/1/pfanGhgNz4sjDEFPCfe3G66peBw.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/b3f912-36d1-4366-ac3c-6660238b03ce/1/pfanGhgNz4sjDEFPCfe3G66peBw.mft rsync://rpki.ripe.net/repository/DEFAULT/pfanGhgNz4sjDEFPCfe3G66peBw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:c9:f4:c2:df:fd:74:fb:3f:8b:aa:74:fa:99:56:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a5f6a71a180dcf8b230c414f09f7b71baea9781c Validity Not Before: Jan 2 08:19:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9768a66e2baca0c2850dac8d6c9a0e7218508caa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:f3:a9:98:d5:96:e7:41:b1:88:0c:5c:b9:e8: a7:5d:b7:ee:52:fc:d0:cb:00:ec:75:0d:52:28:02: e3:e3:4e:8d:f7:48:23:0a:33:ff:3b:64:a8:e3:d5: 5e:9c:70:49:fb:4b:07:d6:70:39:77:29:0a:35:c6: c3:70:9d:e3:c1:96:5e:a6:d7:66:51:5f:6c:3e:04: 4f:4d:b0:24:0d:62:66:3d:5b:3d:47:6d:7a:cf:f8: 61:82:22:24:bf:60:82:30:ae:8d:83:88:c4:37:22: 80:3e:48:6d:58:e6:ea:ba:90:b0:5a:3c:2c:ba:c2: 2e:9b:14:3c:ae:1c:91:b1:d5:09:31:31:4c:c0:20: e9:66:ab:e8:ec:a2:66:45:eb:0d:ee:29:b9:ed:23: ba:38:28:2f:7b:c1:1d:7b:c0:05:43:b8:8a:b1:86: 05:7d:8d:b5:80:02:38:47:bf:12:16:2a:d3:b6:6e: 11:0f:b6:29:87:63:63:84:f6:e7:c4:bd:a1:63:e8: 20:be:55:2c:7f:94:d0:c2:d4:c7:fa:07:86:f4:99: 14:96:e9:f7:c5:8b:5c:c0:87:62:2c:ba:c8:31:21: 5d:64:fe:42:31:a4:ae:69:f2:bf:3e:21:29:4d:ca: 06:d2:bf:f9:3d:2f:c8:4b:25:56:96:99:ee:21:38: 9c:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:68:A6:6E:2B:AC:A0:C2:85:0D:AC:8D:6C:9A:0E:72:18:50:8C:AA X509v3 Authority Key Identifier: keyid:A5:F6:A7:1A:18:0D:CF:8B:23:0C:41:4F:09:F7:B7:1B:AE:A9:78:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pfanGhgNz4sjDEFPCfe3G66peBw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b3f912-36d1-4366-ac3c-6660238b03ce/1/l2imbiusoMKFDayNbJoOchhQjKo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b3f912-36d1-4366-ac3c-6660238b03ce/1/pfanGhgNz4sjDEFPCfe3G66peBw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.143.212.0/22 45.157.224.0/22 185.84.4.0/22 IPv6: 2a05:a1c0::/29 2a0f:6cc0::/29 Signature Algorithm: sha256WithRSAEncryption 86:61:7e:81:86:07:46:c7:ef:0d:3f:f1:4c:7e:2b:d7:94:58: e1:1f:27:a9:09:5c:a9:aa:ca:1b:1b:81:34:9d:c2:ce:ca:db: dd:36:87:8e:ed:ca:56:b2:83:5c:4a:0e:72:35:57:e7:e6:e4: a0:b1:a7:89:0b:e0:14:3c:a7:45:b3:ac:65:4c:a5:02:b6:4d: 3b:f6:32:44:b6:15:6f:f3:10:04:f2:3d:94:b3:25:f0:ce:78: 59:60:c1:63:a0:9a:36:37:60:26:d4:ad:ee:95:aa:60:f7:ee: c8:dd:35:00:d5:f0:f7:19:b6:f1:47:97:87:11:2b:28:f7:b7: 18:42:23:03:1d:2d:a6:01:7b:38:5b:3e:23:d4:ed:02:73:c6: 1e:7c:df:ba:b9:f8:56:3f:d5:dd:7c:ed:b3:f8:e8:46:41:a4: e1:4a:77:74:79:d8:61:9c:e0:56:ba:38:28:65:82:ba:08:31: 4e:e5:79:e6:dc:57:83:4c:05:2d:c1:c3:bd:5d:3e:cc:4d:2b: 92:db:5c:b0:c7:b4:ec:52:a7:29:6a:fd:d3:cd:d5:61:ec:37: e5:0b:20:22:c9:77:f6:19:23:49:e6:d0:79:1f:e8:bf:ae:ba: 73:c2:40:78:b4:49:cf:de:d1:ba:d1:8a:47:08:e6:ea:b0:a0: c4:b4:d2:75 -----BEGIN CERTIFICATE----- MIIFHzCCBAegAwIBAgISAZt9yfTC3/10+z+LqnT6mVa4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1ZjZhNzFhMTgwZGNmOGIyMzBjNDE0ZjA5ZjdiNzFiYWVh OTc4MWMwHhcNMjYwMTAyMDgxOTA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NzY4YTY2ZTJiYWNhMGMyODUwZGFjOGQ2YzlhMGU3MjE4NTA4Y2FhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArPOpmNWW50GxiAxcueinXbfuUvzQ ywDsdQ1SKALj406N90gjCjP/O2So49VenHBJ+0sH1nA5dykKNcbDcJ3jwZZeptdm UV9sPgRPTbAkDWJmPVs9R216z/hhgiIkv2CCMK6Ng4jENyKAPkhtWObqupCwWjws usIumxQ8rhyRsdUJMTFMwCDpZqvo7KJmResN7im57SO6OCgve8Ede8AFQ7iKsYYF fY21gAI4R78SFirTtm4RD7Yph2NjhPbnxL2hY+ggvlUsf5TQwtTH+geG9JkUlun3 xYtcwIdiLLrIMSFdZP5CMaSuafK/PiEpTcoG0r/5PS/ISyVWlpnuITic+wIDAQAB o4ICKzCCAicwHQYDVR0OBBYEFJdopm4rrKDChQ2sjWyaDnIYUIyqMB8GA1UdIwQY MBaAFKX2pxoYDc+LIwxBTwn3txuuqXgcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGZhbkdoZ056NHNqREVGUENmZTNHNjZwZUJ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS9iM2Y5MTItMzZkMS00MzY2LWFjM2Mt NjY2MDIzOGIwM2NlLzEvbDJpbWJpdXNvTUtGRGF5TmJKb09jaGhRaktvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS9iM2Y5MTItMzZkMS00MzY2LWFjM2MtNjY2MDIzOGIwM2Nl LzEvcGZhbkdoZ056NHNqREVGUENmZTNHNjZwZUJ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEEGCCsGAQUFBwEHAQH/BDIwMDAYBAIAATASAwQCLY/UAwQC LZ3gAwQCuVQEMBQEAgACMA4DBQMqBaHAAwUDKg9swDANBgkqhkiG9w0BAQsFAAOC AQEAhmF+gYYHRsfvDT/xTH4r15RY4R8nqQlcqarKGxuBNJ3Czsrb3TaHju3KVrKD XEoOcjVX5+bkoLGniQvgFDynRbOsZUylArZNO/YyRLYVb/MQBPI9lLMl8M54WWDB Y6CaNjdgJtSt7pWqYPfuyN01ANXw9xm28UeXhxErKPe3GEIjAx0tpgF7OFs+I9Tt AnPGHnzfurn4Vj/V3Xzts/joRkGk4Up3dHnYYZzgVro4KGWCuggxTuV55txXg0wF LcHDvV0+zE0rkttcsMe07FKnKWr9083VYew35QsgIsl39hkjSebQeR/ov666c8JA eLRJz97RutGKRwjm6rCgxLTSdQ== -----END CERTIFICATE-----Generated at Mon Jan 26 01:41:50 2026 by rpki-client