This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/lBEjVLx9UPVf3mcKeog5ZQV3LtM.roa File: lBEjVLx9UPVf3mcKeog5ZQV3LtM.roa (raw, json) Hash identifier: 5PONkDSDm4O23YWCWmopgsW9VDywl1oOhK6w+eFUBdI= Subject key identifier: 94:11:23:54:BC:7D:50:F5:5F:DE:67:0A:7A:88:39:65:05:77:2E:D3 Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Certificate serial: 019B783442B2A46A63B292416B10B431C86B Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/lBEjVLx9UPVf3mcKeog5ZQV3LtM.roa Signing time: Thu 01 Jan 2026 06:17:29 +0000 ROA not before: Thu 01 Jan 2026 06:17:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 5483 IP address blocks: 192.71.211.0/24 maxlen: 24 194.71.130.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:42:b2:a4:6a:63:b2:92:41:6b:10:b4:31:c8:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Validity Not Before: Jan 1 06:17:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=94112354bc7d50f55fde670a7a88396505772ed3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:a0:20:82:bd:5b:fe:41:9e:e4:d0:99:13:42: 04:cd:a7:50:0f:8e:41:0f:73:66:8a:c6:df:43:cb: 8f:4b:96:4e:8b:1f:b5:2a:98:3b:e3:bc:4e:56:65: d3:40:ed:2b:ed:1d:d6:54:17:a3:4c:af:83:df:5d: 45:a0:8e:27:ed:1c:22:e2:0f:20:fc:18:9e:36:b0: 50:c5:b4:8d:8d:75:9d:1b:25:74:91:f2:47:1f:c6: a6:04:91:e1:c0:f4:9b:60:44:15:e1:32:aa:57:3d: eb:d6:22:63:b7:08:3b:2a:35:f1:bc:18:01:92:af: 3e:a6:d1:f7:ad:bc:4b:c7:0a:03:5d:d7:5c:0b:7d: b3:0f:c7:95:f2:25:3e:8b:85:76:e8:a1:f0:85:af: ce:a9:8d:1c:08:77:bc:db:f4:ea:14:dc:bb:fc:9f: 76:10:6a:21:90:04:a5:0f:f3:64:5c:87:53:0f:bb: 02:46:fc:6f:4a:f0:87:60:29:59:eb:ad:7a:31:fa: 0d:d7:85:b9:fc:c7:9f:fd:d2:60:7c:fa:26:cf:76: 76:20:89:72:8e:94:c9:41:6c:cf:ee:11:72:0f:68: 5a:88:e3:e9:7f:aa:52:63:a3:87:81:fa:d5:b4:07: 5b:06:a8:01:b0:54:ff:75:2e:4d:7d:25:0b:8a:16: 04:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:11:23:54:BC:7D:50:F5:5F:DE:67:0A:7A:88:39:65:05:77:2E:D3 X509v3 Authority Key Identifier: keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/lBEjVLx9UPVf3mcKeog5ZQV3LtM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.71.211.0/24 194.71.130.0/24 Signature Algorithm: sha256WithRSAEncryption b2:1c:83:b0:dc:e2:e3:65:a0:b6:d2:5c:da:1c:b0:69:fb:e3: a7:99:6c:45:6f:71:92:3a:37:41:24:db:40:8a:ef:1d:a7:8b: 3f:63:20:4e:51:74:bf:6f:86:4d:2c:99:5c:4c:f8:ad:5e:43: d5:c7:a8:28:e8:44:27:f1:97:87:98:5e:7d:c1:36:96:ac:11: d0:a5:23:58:1f:74:86:9f:9c:9a:ba:9d:8c:fa:0a:52:e2:16: 7a:1a:37:3c:20:91:70:0e:6e:2b:61:6e:eb:44:a3:35:64:8d: 1e:df:12:9d:5f:c6:df:ec:dc:82:aa:90:0a:3b:7b:25:16:dd: ef:ca:d3:54:6c:48:a3:a6:1f:42:55:60:44:c1:d2:d3:85:f6: 81:fe:3e:ad:22:43:6e:50:98:23:02:d5:14:01:85:5b:83:1e: d4:94:3d:bc:a2:71:16:fb:d4:62:43:fc:3c:cd:70:ad:ca:a1: 46:3d:b9:ea:c9:93:5e:f5:9e:6d:da:8a:44:b5:1c:48:98:8f: 66:f5:9e:54:df:0a:11:b6:10:8d:d5:57:34:50:a6:d7:01:59: 94:72:3a:4c:6b:eb:c2:47:78:0f:a2:77:bf:1d:17:d3:d4:00: 83:78:ff:a1:6c:60:2d:0b:50:53:04:13:63:55:35:76:ef:d5: 94:60:79:c3 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt4NEKypGpjspJBaxC0MchrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxMzVjN2Y1NzFlZWZlYjY3NDA0YWI2YzQ1ZmQ0NzU1NTFh ZGFmMWIwHhcNMjYwMTAxMDYxNzI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NDExMjM1NGJjN2Q1MGY1NWZkZTY3MGE3YTg4Mzk2NTA1NzcyZWQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoaAggr1b/kGe5NCZE0IEzadQD45B D3NmisbfQ8uPS5ZOix+1Kpg747xOVmXTQO0r7R3WVBejTK+D311FoI4n7Rwi4g8g /BieNrBQxbSNjXWdGyV0kfJHH8amBJHhwPSbYEQV4TKqVz3r1iJjtwg7KjXxvBgB kq8+ptH3rbxLxwoDXddcC32zD8eV8iU+i4V26KHwha/OqY0cCHe82/TqFNy7/J92 EGohkASlD/NkXIdTD7sCRvxvSvCHYClZ6616MfoN14W5/Mef/dJgfPomz3Z2IIly jpTJQWzP7hFyD2haiOPpf6pSY6OHgfrVtAdbBqgBsFT/dS5NfSULihYE5QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFJQRI1S8fVD1X95nCnqIOWUFdy7TMB8GA1UdIwQY MBaAFCE1x/Vx7v62dASrbEX9R1VRra8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDIt OTQzZDAzMzIxMzI2LzEvbEJFalZMeDlVUFZmM21jS2VvZzVaUVYzTHRNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDItOTQzZDAzMzIxMzI2 LzEvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwEfTAwQA wkeCMA0GCSqGSIb3DQEBCwUAA4IBAQCyHIOw3OLjZaC20lzaHLBp++OnmWxFb3GS OjdBJNtAiu8dp4s/YyBOUXS/b4ZNLJlcTPitXkPVx6go6EQn8ZeHmF59wTaWrBHQ pSNYH3SGn5yaup2M+gpS4hZ6Gjc8IJFwDm4rYW7rRKM1ZI0e3xKdX8bf7NyCqpAK O3slFt3vytNUbEijph9CVWBEwdLThfaB/j6tIkNuUJgjAtUUAYVbgx7UlD28onEW +9RiQ/w8zXCtyqFGPbnqyZNe9Z5t2opEtRxImI9m9Z5U3woRthCN1Vc0UKbXAVmU cjpMa+vCR3gPone/HRfT1ACDeP+hbGAtC1BTBBNjVTV279WUYHnD -----END CERTIFICATE-----Generated at Sun Jan 25 09:04:24 2026 by rpki-client