This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8b7fe9-5df2-473e-8018-b26341d38c3f/1/lcN_yuHnbi5WtHDyrC1WEMjdtHs.roa File: lcN_yuHnbi5WtHDyrC1WEMjdtHs.roa (raw, json) Hash identifier: ik5LzxvVAt9iL2/7h4zp/cur7V0L47uoz6AFvyo0fRE= Subject key identifier: 95:C3:7F:CA:E1:E7:6E:2E:56:B4:70:F2:AC:2D:56:10:C8:DD:B4:7B Certificate issuer: /CN=a82fb9b3418c458cdbc6cfd684514be24ad0c3c9 Certificate serial: 019B7EA6AB49AC15C7F859090C7F676A00D3 Authority key identifier: A8:2F:B9:B3:41:8C:45:8C:DB:C6:CF:D6:84:51:4B:E2:4A:D0:C3:C9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qC-5s0GMRYzbxs_WhFFL4krQw8k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8b7fe9-5df2-473e-8018-b26341d38c3f/1/lcN_yuHnbi5WtHDyrC1WEMjdtHs.roa Signing time: Fri 02 Jan 2026 12:20:10 +0000 ROA not before: Fri 02 Jan 2026 12:20:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 64428 IP address blocks: 185.165.40.0/24 maxlen: 24 185.165.41.0/24 maxlen: 24 185.165.42.0/24 maxlen: 24 185.165.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/8b7fe9-5df2-473e-8018-b26341d38c3f/1/qC-5s0GMRYzbxs_WhFFL4krQw8k.crl rsync://rpki.ripe.net/repository/DEFAULT/db/8b7fe9-5df2-473e-8018-b26341d38c3f/1/qC-5s0GMRYzbxs_WhFFL4krQw8k.mft rsync://rpki.ripe.net/repository/DEFAULT/qC-5s0GMRYzbxs_WhFFL4krQw8k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:ab:49:ac:15:c7:f8:59:09:0c:7f:67:6a:00:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a82fb9b3418c458cdbc6cfd684514be24ad0c3c9 Validity Not Before: Jan 2 12:20:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=95c37fcae1e76e2e56b470f2ac2d5610c8ddb47b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:7b:5f:f4:b1:c5:17:db:36:49:7f:1a:bb:96: ee:fa:a1:e7:8a:44:23:6e:72:10:9a:c4:92:51:77: cc:48:8f:36:d4:ec:74:d9:b2:25:a0:52:31:87:39: 6e:24:51:18:da:cd:06:b7:46:a7:fb:99:0d:59:d7: 1c:18:c4:1d:31:50:87:f7:dc:b8:3c:e7:82:43:88: e2:76:fe:df:d4:65:28:53:02:f9:fe:81:c3:46:89: 0a:57:38:da:e4:a6:1d:9e:33:2e:e8:e8:1e:97:f1: ee:38:79:6c:cd:d6:58:a5:b2:5a:b9:27:22:a7:db: 2a:ba:8b:ad:fc:78:f3:46:72:e3:72:66:46:0c:88: 92:34:52:34:c1:28:62:ea:23:46:b7:26:74:ee:f7: 38:a4:f4:ca:73:74:67:03:dc:81:d4:1e:c0:d9:ea: 2e:62:20:90:d1:5e:b4:52:7c:98:49:97:6b:59:b6: 2e:18:fb:b8:a2:02:14:a4:ee:0d:7c:61:1c:0b:f9: 82:06:51:1a:4d:bc:c2:78:40:00:e7:f1:77:7f:52: 90:e0:22:5d:b4:a6:0f:f0:bf:6b:e1:2e:3e:e6:3e: 74:5d:e7:ca:59:cf:7e:a6:1d:d6:60:8d:7c:84:b5: 8e:37:a9:87:ca:36:9a:f2:01:6a:aa:17:76:69:f3: 29:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:C3:7F:CA:E1:E7:6E:2E:56:B4:70:F2:AC:2D:56:10:C8:DD:B4:7B X509v3 Authority Key Identifier: keyid:A8:2F:B9:B3:41:8C:45:8C:DB:C6:CF:D6:84:51:4B:E2:4A:D0:C3:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qC-5s0GMRYzbxs_WhFFL4krQw8k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8b7fe9-5df2-473e-8018-b26341d38c3f/1/lcN_yuHnbi5WtHDyrC1WEMjdtHs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8b7fe9-5df2-473e-8018-b26341d38c3f/1/qC-5s0GMRYzbxs_WhFFL4krQw8k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.165.40.0/22 Signature Algorithm: sha256WithRSAEncryption 90:39:96:04:6d:a3:35:2d:9c:4a:6c:6f:27:3a:c4:c9:bc:a6: 76:4a:9a:d0:ce:f6:61:50:4c:af:dd:ff:dd:66:da:d6:47:5f: 3e:96:52:23:1e:af:18:90:c3:ac:08:5c:81:14:aa:24:8d:e6: 65:10:2d:0f:93:ee:56:67:ec:8b:bd:7b:ca:c2:fd:e8:23:46: 8f:91:36:32:a2:50:1d:30:66:e4:5c:a6:be:e1:40:4c:22:7e: 19:58:9b:74:e0:58:e0:29:86:05:f3:88:b7:4a:20:c5:26:a1: 0b:60:e3:44:76:47:52:79:c1:d0:93:90:62:62:0f:2c:55:59: 19:a4:27:0b:97:13:ef:19:74:11:70:97:22:37:59:38:86:dd: a9:54:01:dd:36:7d:86:62:d3:cf:f6:8d:6d:3b:bb:05:b1:77: 45:ad:ed:da:29:bb:26:22:02:71:3b:4a:7d:97:e9:d0:f1:b0: ef:97:c4:e1:ad:30:3e:97:44:e4:4f:23:75:01:74:17:8d:4f: aa:74:bf:da:b9:e6:e6:1d:9c:f4:d9:0b:a4:e5:67:04:fb:be: 19:a3:47:ef:a6:96:41:ce:33:d0:bc:d7:ca:01:6b:ee:76:ff: d1:b3:79:d3:1d:1c:f1:4f:80:63:68:62:6e:b7:97:63:b6:3d: fa:8d:ee:8d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pqtJrBXH+FkJDH9nagDTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4MmZiOWIzNDE4YzQ1OGNkYmM2Y2ZkNjg0NTE0YmUyNGFk MGMzYzkwHhcNMjYwMTAyMTIyMDEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NWMzN2ZjYWUxZTc2ZTJlNTZiNDcwZjJhYzJkNTYxMGM4ZGRiNDdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzXtf9LHFF9s2SX8au5bu+qHnikQj bnIQmsSSUXfMSI821Ox02bIloFIxhzluJFEY2s0Gt0an+5kNWdccGMQdMVCH99y4 POeCQ4jidv7f1GUoUwL5/oHDRokKVzja5KYdnjMu6Ogel/HuOHlszdZYpbJauSci p9squout/HjzRnLjcmZGDIiSNFI0wShi6iNGtyZ07vc4pPTKc3RnA9yB1B7A2eou YiCQ0V60UnyYSZdrWbYuGPu4ogIUpO4NfGEcC/mCBlEaTbzCeEAA5/F3f1KQ4CJd tKYP8L9r4S4+5j50XefKWc9+ph3WYI18hLWON6mHyjaa8gFqqhd2afMpkwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJXDf8rh524uVrRw8qwtVhDI3bR7MB8GA1UdIwQY MBaAFKgvubNBjEWM28bP1oRRS+JK0MPJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUMtNXMwR01SWXpieHNfV2hGRkw0a3JRdzhrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi84YjdmZTktNWRmMi00NzNlLTgwMTgt YjI2MzQxZDM4YzNmLzEvbGNOX3l1SG5iaTVXdEhEeXJDMVdFTWpkdEhzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi84YjdmZTktNWRmMi00NzNlLTgwMTgtYjI2MzQxZDM4YzNm LzEvcUMtNXMwR01SWXpieHNfV2hGRkw0a3JRdzhrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuaUoMA0G CSqGSIb3DQEBCwUAA4IBAQCQOZYEbaM1LZxKbG8nOsTJvKZ2SprQzvZhUEyv3f/d ZtrWR18+llIjHq8YkMOsCFyBFKokjeZlEC0Pk+5WZ+yLvXvKwv3oI0aPkTYyolAd MGbkXKa+4UBMIn4ZWJt04FjgKYYF84i3SiDFJqELYONEdkdSecHQk5BiYg8sVVkZ pCcLlxPvGXQRcJciN1k4ht2pVAHdNn2GYtPP9o1tO7sFsXdFre3aKbsmIgJxO0p9 l+nQ8bDvl8ThrTA+l0TkTyN1AXQXjU+qdL/auebmHZz02Quk5WcE+74Zo0fvppZB zjPQvNfKAWvudv/Rs3nTHRzxT4BjaGJut5djtj36je6N -----END CERTIFICATE-----Generated at Mon Jan 26 00:13:54 2026 by rpki-client