This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/bfe262-877b-4045-b684-e0f078e7643d/1/L_-Xb0Gx3YHqlx1tMQzx2NXADHY.roa File: L_-Xb0Gx3YHqlx1tMQzx2NXADHY.roa (raw, json) Hash identifier: 5dx2j75C/cFqrHYWYHYvkWEXYxWb1XkSbro/7cWI8AU= Subject key identifier: 2F:FF:97:6F:41:B1:DD:81:EA:97:1D:6D:31:0C:F1:D8:D5:C0:0C:76 Certificate issuer: /CN=e34a17c35dc17e43e774f82375afd50f33c536a4 Certificate serial: 019B78353A7E753D4DBBB336A401490BE409 Authority key identifier: E3:4A:17:C3:5D:C1:7E:43:E7:74:F8:23:75:AF:D5:0F:33:C5:36:A4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/40oXw13BfkPndPgjda_VDzPFNqQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/bfe262-877b-4045-b684-e0f078e7643d/1/L_-Xb0Gx3YHqlx1tMQzx2NXADHY.roa Signing time: Thu 01 Jan 2026 06:18:32 +0000 ROA not before: Thu 01 Jan 2026 06:18:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20719 IP address blocks: 176.119.248.0/21 maxlen: 21 176.119.248.0/22 maxlen: 24 176.119.251.0/24 maxlen: 24 176.119.252.0/22 maxlen: 24 176.119.253.0/24 maxlen: 24 176.119.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/bfe262-877b-4045-b684-e0f078e7643d/1/40oXw13BfkPndPgjda_VDzPFNqQ.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/bfe262-877b-4045-b684-e0f078e7643d/1/40oXw13BfkPndPgjda_VDzPFNqQ.mft rsync://rpki.ripe.net/repository/DEFAULT/40oXw13BfkPndPgjda_VDzPFNqQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:3a:7e:75:3d:4d:bb:b3:36:a4:01:49:0b:e4:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e34a17c35dc17e43e774f82375afd50f33c536a4 Validity Not Before: Jan 1 06:18:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2fff976f41b1dd81ea971d6d310cf1d8d5c00c76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:dc:05:b3:eb:90:36:64:fc:9c:15:ac:03:2f: b8:63:71:61:c2:74:b7:07:2d:1f:6b:b8:d2:ee:7b: 24:c4:82:29:80:89:0d:f0:69:5a:0b:91:b5:b7:6f: 4d:d0:6c:85:56:f2:61:0b:5b:a0:eb:5c:4b:d8:30: 56:d4:7e:50:0b:49:b2:bb:7a:78:5e:95:e6:7c:8c: b4:ed:ae:67:be:26:06:67:4e:7c:b2:53:0a:5a:6d: 8e:e2:2d:2c:c3:06:d3:59:21:fc:72:fc:28:5f:f7: 13:4f:70:f3:70:df:cf:c1:1e:11:a8:e4:63:c4:0a: ba:65:63:b2:93:bc:2d:c4:77:d4:13:67:36:12:28: d3:a3:0e:72:23:eb:c8:97:28:8a:da:8c:5c:47:20: 17:27:e1:a7:b2:4c:56:cb:f2:ca:e6:b5:c3:2f:9e: 07:69:61:9d:7e:8b:b8:3f:84:4d:d2:0c:76:3c:0e: 64:62:18:a3:38:29:d7:03:e6:60:93:d8:80:41:ae: 23:89:20:18:e4:98:ae:9b:c7:f5:96:67:15:c2:f9: 2b:74:54:9c:fd:97:72:fa:77:d6:e1:2b:69:3d:9d: be:a4:73:3f:df:86:fc:5a:59:c0:15:9f:07:45:12: e8:f9:13:01:89:bd:e3:f3:aa:81:07:fc:d9:07:c0: 16:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:FF:97:6F:41:B1:DD:81:EA:97:1D:6D:31:0C:F1:D8:D5:C0:0C:76 X509v3 Authority Key Identifier: keyid:E3:4A:17:C3:5D:C1:7E:43:E7:74:F8:23:75:AF:D5:0F:33:C5:36:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/40oXw13BfkPndPgjda_VDzPFNqQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/bfe262-877b-4045-b684-e0f078e7643d/1/L_-Xb0Gx3YHqlx1tMQzx2NXADHY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/bfe262-877b-4045-b684-e0f078e7643d/1/40oXw13BfkPndPgjda_VDzPFNqQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.119.248.0/21 Signature Algorithm: sha256WithRSAEncryption 27:3c:9c:d0:1e:4e:fe:df:c6:43:66:1f:2c:78:16:2e:75:1d: d4:29:ac:cb:b7:36:9d:cf:45:32:d6:f8:f1:47:98:ca:30:37: 4a:7b:07:ac:48:94:a7:88:8b:60:cf:23:30:01:22:21:b0:5d: e4:0d:b6:5e:11:de:1c:15:4f:e3:73:f3:fc:95:80:1c:21:f7: 0d:09:9d:b6:76:12:28:de:93:e1:23:ba:2b:c4:d2:14:8a:91: 2d:62:51:04:9f:87:2e:5d:0d:41:67:ad:68:be:bd:e9:9d:26: af:5f:6e:d8:61:62:ab:04:da:74:06:c9:d2:7c:43:f9:5c:d8: 15:99:bf:38:bd:33:6e:26:0c:4b:be:30:e5:b3:1d:3b:46:b6: 6a:03:8a:91:3e:48:30:c2:d5:7d:8e:f3:00:2c:6f:0c:88:de: 3f:10:41:f9:6f:b4:de:6b:b9:b6:7f:71:eb:fa:b4:54:06:23: c4:c7:b8:7e:b1:fd:6a:c8:36:1e:56:e0:02:79:97:c8:78:6d: 05:63:44:bc:f6:d6:80:66:73:05:05:41:a2:84:24:02:a1:db: a4:35:c8:fa:45:e3:86:71:95:7f:db:2f:9d:f4:d1:d1:1f:8f: dc:6c:d9:25:f0:ca:00:b2:8c:ee:93:87:2a:79:b3:e7:cd:5c: 1f:f5:17:ef -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NTp+dT1Nu7M2pAFJC+QJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzNGExN2MzNWRjMTdlNDNlNzc0ZjgyMzc1YWZkNTBmMzNj NTM2YTQwHhcNMjYwMTAxMDYxODMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZmZmOTc2ZjQxYjFkZDgxZWE5NzFkNmQzMTBjZjFkOGQ1YzAwYzc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqtwFs+uQNmT8nBWsAy+4Y3FhwnS3 By0fa7jS7nskxIIpgIkN8GlaC5G1t29N0GyFVvJhC1ug61xL2DBW1H5QC0myu3p4 XpXmfIy07a5nviYGZ058slMKWm2O4i0swwbTWSH8cvwoX/cTT3DzcN/PwR4RqORj xAq6ZWOyk7wtxHfUE2c2EijTow5yI+vIlyiK2oxcRyAXJ+GnskxWy/LK5rXDL54H aWGdfou4P4RN0gx2PA5kYhijOCnXA+Zgk9iAQa4jiSAY5Jium8f1lmcVwvkrdFSc /Zdy+nfW4StpPZ2+pHM/34b8WlnAFZ8HRRLo+RMBib3j86qBB/zZB8AWHQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFC//l29Bsd2B6pcdbTEM8djVwAx2MB8GA1UdIwQY MBaAFONKF8NdwX5D53T4I3Wv1Q8zxTakMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNDBvWHcxM0Jma1BuZFBnamRhX1ZEelBGTnFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy9iZmUyNjItODc3Yi00MDQ1LWI2ODQt ZTBmMDc4ZTc2NDNkLzEvTF8tWGIwR3gzWUhxbHgxdE1RengyTlhBREhZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy9iZmUyNjItODc3Yi00MDQ1LWI2ODQtZTBmMDc4ZTc2NDNk LzEvNDBvWHcxM0Jma1BuZFBnamRhX1ZEelBGTnFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDsHf4MA0G CSqGSIb3DQEBCwUAA4IBAQAnPJzQHk7+38ZDZh8seBYudR3UKazLtzadz0Uy1vjx R5jKMDdKewesSJSniItgzyMwASIhsF3kDbZeEd4cFU/jc/P8lYAcIfcNCZ22dhIo 3pPhI7orxNIUipEtYlEEn4cuXQ1BZ61ovr3pnSavX27YYWKrBNp0BsnSfEP5XNgV mb84vTNuJgxLvjDlsx07RrZqA4qRPkgwwtV9jvMALG8MiN4/EEH5b7Tea7m2f3Hr +rRUBiPEx7h+sf1qyDYeVuACeZfIeG0FY0S89taAZnMFBUGihCQCodukNcj6ReOG cZV/2y+d9NHRH4/cbNkl8MoAsozuk4cqebPnzVwf9Rfv -----END CERTIFICATE-----Generated at Sun Jan 25 23:03:40 2026 by rpki-client