This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/d048f6-341c-4c64-b3d9-15d5deb228dd/1/lfErVfdcsg1i7vmEMxFgsv4bocY.roa File: lfErVfdcsg1i7vmEMxFgsv4bocY.roa (raw, json) Hash identifier: 8hpg8Z6qBYfbCxzlnCltHugOjct8isyofGtd0CKT8v8= Subject key identifier: 95:F1:2B:55:F7:5C:B2:0D:62:EE:F9:84:33:11:60:B2:FE:1B:A1:C6 Certificate issuer: /CN=1904ce28eae682c97acd2d862fee2897c3b096fd Certificate serial: 019B7B35BB00BE48A8F9E35DFBE79280381D Authority key identifier: 19:04:CE:28:EA:E6:82:C9:7A:CD:2D:86:2F:EE:28:97:C3:B0:96:FD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GQTOKOrmgsl6zS2GL-4ol8Owlv0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/d048f6-341c-4c64-b3d9-15d5deb228dd/1/lfErVfdcsg1i7vmEMxFgsv4bocY.roa Signing time: Thu 01 Jan 2026 20:17:57 +0000 ROA not before: Thu 01 Jan 2026 20:17:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44725 IP address blocks: 5.250.192.0/19 maxlen: 19 37.114.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/d048f6-341c-4c64-b3d9-15d5deb228dd/1/GQTOKOrmgsl6zS2GL-4ol8Owlv0.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/d048f6-341c-4c64-b3d9-15d5deb228dd/1/GQTOKOrmgsl6zS2GL-4ol8Owlv0.mft rsync://rpki.ripe.net/repository/DEFAULT/GQTOKOrmgsl6zS2GL-4ol8Owlv0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 14:01:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:bb:00:be:48:a8:f9:e3:5d:fb:e7:92:80:38:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1904ce28eae682c97acd2d862fee2897c3b096fd Validity Not Before: Jan 1 20:17:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=95f12b55f75cb20d62eef984331160b2fe1ba1c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:23:f4:83:e1:11:4f:8b:89:81:c8:4e:4d:c6: fe:fd:d6:d1:a0:0e:6c:46:67:9f:7a:8e:5b:cf:1a: 6a:2c:4b:a7:af:1a:32:15:0b:8f:08:5f:17:71:4c: b1:18:6d:af:c6:9a:43:f1:21:5a:41:07:b3:b4:9f: 9c:d9:6d:2f:60:23:dc:35:33:20:ab:9a:a5:05:7f: f0:00:cd:59:92:76:ec:be:25:23:82:c8:98:f9:67: b4:5e:10:3e:ed:c0:2c:20:12:e3:1c:2f:07:fb:ee: 85:df:b2:10:44:91:d6:7a:ec:f5:cd:cc:c3:20:c9: 14:18:44:7e:96:b0:cd:6d:16:8a:81:9e:9a:34:e4: 56:ec:e4:e7:56:9f:84:b9:a8:13:a1:d9:30:40:c2: a8:80:ad:2a:35:78:8a:21:00:f0:0f:fe:05:b9:f2: 5d:09:43:ad:ba:e8:24:3d:84:05:e2:85:60:92:d1: 56:f1:77:4b:f5:27:2d:65:39:68:01:c1:1e:34:92: e4:40:52:e5:d4:be:4d:b5:48:e7:3a:bb:1f:11:94: 06:4b:11:33:3a:b3:67:0b:d5:f2:65:78:36:d0:91: 45:56:f7:40:d3:49:5b:fb:0f:9a:a7:18:68:8e:c4: b8:50:f2:98:5b:9f:ba:89:a3:7e:90:98:b5:8f:bd: 1d:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:F1:2B:55:F7:5C:B2:0D:62:EE:F9:84:33:11:60:B2:FE:1B:A1:C6 X509v3 Authority Key Identifier: keyid:19:04:CE:28:EA:E6:82:C9:7A:CD:2D:86:2F:EE:28:97:C3:B0:96:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GQTOKOrmgsl6zS2GL-4ol8Owlv0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/d048f6-341c-4c64-b3d9-15d5deb228dd/1/lfErVfdcsg1i7vmEMxFgsv4bocY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/d048f6-341c-4c64-b3d9-15d5deb228dd/1/GQTOKOrmgsl6zS2GL-4ol8Owlv0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.250.192.0/19 37.114.128.0/24 Signature Algorithm: sha256WithRSAEncryption 2b:ff:ab:8d:bc:b2:b8:f2:00:b0:8f:19:53:a4:f8:5b:7f:ef: 1a:cb:4f:60:44:be:3e:68:ed:78:09:3e:5c:6e:ac:22:3c:6a: bc:27:7f:c1:df:c4:b6:e6:5f:90:65:c8:6e:f4:69:61:0a:39: 45:b6:2d:54:c6:31:7e:2d:e1:c2:8b:d8:59:a9:10:53:ea:89: 0f:19:0f:ad:55:ba:06:47:a6:8a:c3:b6:33:05:88:e8:5b:a1: e1:a6:ab:84:2a:fd:62:d4:98:30:da:cd:ec:1e:56:a9:e6:b5: 2e:f0:3a:9f:19:c8:d9:05:00:09:ef:08:ae:aa:07:22:0f:18: 59:e8:16:54:23:2d:ad:33:4b:4e:3b:37:de:7d:d9:4b:b5:c3: c7:e2:ab:a7:f4:7c:04:8e:b4:c9:66:c9:f1:74:3c:76:40:d3: 43:10:35:84:a3:d3:48:29:2b:db:3c:71:e9:20:41:b6:80:b0: 39:d4:6d:14:5f:5c:53:9a:78:6c:d1:15:ab:6b:61:1e:26:ec: 32:57:c9:af:88:83:e6:ff:75:90:6d:15:a0:06:e2:ef:7c:86: d6:c0:48:b0:86:f4:74:22:be:80:5e:06:40:b3:fb:96:b4:71: 38:78:e5:4b:99:0e:1e:5a:79:7e:9d:f4:3f:62:dc:76:f9:0b: eb:49:ff:77 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt7NbsAvkio+eNd++eSgDgdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5MDRjZTI4ZWFlNjgyYzk3YWNkMmQ4NjJmZWUyODk3YzNi MDk2ZmQwHhcNMjYwMTAxMjAxNzU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NWYxMmI1NWY3NWNiMjBkNjJlZWY5ODQzMzExNjBiMmZlMWJhMWM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzyP0g+ERT4uJgchOTcb+/dbRoA5s Rmefeo5bzxpqLEunrxoyFQuPCF8XcUyxGG2vxppD8SFaQQeztJ+c2W0vYCPcNTMg q5qlBX/wAM1ZknbsviUjgsiY+We0XhA+7cAsIBLjHC8H++6F37IQRJHWeuz1zczD IMkUGER+lrDNbRaKgZ6aNORW7OTnVp+EuagTodkwQMKogK0qNXiKIQDwD/4FufJd CUOtuugkPYQF4oVgktFW8XdL9SctZTloAcEeNJLkQFLl1L5NtUjnOrsfEZQGSxEz OrNnC9XyZXg20JFFVvdA00lb+w+apxhojsS4UPKYW5+6iaN+kJi1j70dsQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFJXxK1X3XLINYu75hDMRYLL+G6HGMB8GA1UdIwQY MBaAFBkEzijq5oLJes0thi/uKJfDsJb9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR1FUT0tPcm1nc2w2elMyR0wtNG9sOE93bHYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9kMDQ4ZjYtMzQxYy00YzY0LWIzZDkt MTVkNWRlYjIyOGRkLzEvbGZFclZmZGNzZzFpN3ZtRU14RmdzdjRib2NZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi9kMDQ4ZjYtMzQxYy00YzY0LWIzZDktMTVkNWRlYjIyOGRk LzEvR1FUT0tPcm1nc2w2elMyR0wtNG9sOE93bHYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQFBfrAAwQA JXKAMA0GCSqGSIb3DQEBCwUAA4IBAQAr/6uNvLK48gCwjxlTpPhbf+8ay09gRL4+ aO14CT5cbqwiPGq8J3/B38S25l+QZchu9GlhCjlFti1UxjF+LeHCi9hZqRBT6okP GQ+tVboGR6aKw7YzBYjoW6HhpquEKv1i1Jgw2s3sHlap5rUu8DqfGcjZBQAJ7wiu qgciDxhZ6BZUIy2tM0tOOzfefdlLtcPH4qun9HwEjrTJZsnxdDx2QNNDEDWEo9NI KSvbPHHpIEG2gLA51G0UX1xTmnhs0RWra2EeJuwyV8mviIPm/3WQbRWgBuLvfIbW wEiwhvR0Ir6AXgZAs/uWtHE4eOVLmQ4eWnl+nfQ/Ytx2+QvrSf93 -----END CERTIFICATE-----Generated at Tue Jan 27 00:24:12 2026 by rpki-client