This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/85ef35-647a-4172-8c64-6db3caef73d9/1/0lcvkJY4EGS5Mg_RRguRIVx_LFM.roa File: 0lcvkJY4EGS5Mg_RRguRIVx_LFM.roa (raw, json) Hash identifier: 2aLaPpHNjg1TOQAEQNSWmBYlO5P1laIf48JKkUR1mU8= Subject key identifier: D2:57:2F:90:96:38:10:64:B9:32:0F:D1:46:0B:91:21:5C:7F:2C:53 Certificate issuer: /CN=61e10dac1f773c55a244753346719e899f4d4432 Certificate serial: 019B7F809AD8C7E3508F344CD9384A468FF5 Authority key identifier: 61:E1:0D:AC:1F:77:3C:55:A2:44:75:33:46:71:9E:89:9F:4D:44:32 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YeENrB93PFWiRHUzRnGeiZ9NRDI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/85ef35-647a-4172-8c64-6db3caef73d9/1/0lcvkJY4EGS5Mg_RRguRIVx_LFM.roa Signing time: Fri 02 Jan 2026 16:18:13 +0000 ROA not before: Fri 02 Jan 2026 16:18:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31673 IP address blocks: 83.136.17.0/24 maxlen: 24 83.136.18.0/24 maxlen: 24 83.136.19.0/24 maxlen: 24 193.30.6.0/23 maxlen: 24 2a03:7000::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/85ef35-647a-4172-8c64-6db3caef73d9/1/YeENrB93PFWiRHUzRnGeiZ9NRDI.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/85ef35-647a-4172-8c64-6db3caef73d9/1/YeENrB93PFWiRHUzRnGeiZ9NRDI.mft rsync://rpki.ripe.net/repository/DEFAULT/YeENrB93PFWiRHUzRnGeiZ9NRDI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:80:9a:d8:c7:e3:50:8f:34:4c:d9:38:4a:46:8f:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61e10dac1f773c55a244753346719e899f4d4432 Validity Not Before: Jan 2 16:18:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d2572f9096381064b9320fd1460b91215c7f2c53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:52:8e:00:a2:c1:a5:09:64:78:22:12:3d:bc: 33:c0:5c:78:f6:5c:cf:8d:ff:59:ba:9a:69:6e:fd: 73:66:03:72:26:61:60:e2:3c:2c:6e:ca:9c:97:dd: 3b:f4:20:57:e3:a7:9c:8b:22:47:e6:ae:53:f5:2d: 98:dc:66:81:82:8e:69:68:2f:d9:c5:f7:94:8a:8b: 3c:67:4f:cf:14:b4:ff:8c:51:d4:a8:a9:f9:9b:4b: 25:76:b4:bc:87:2b:47:f2:70:cc:76:e4:62:6d:e0: 8b:46:38:1f:8e:12:7e:e2:d7:fa:1b:11:9e:57:dc: 5f:79:35:e6:77:c9:31:d5:6e:e7:a3:76:a3:a1:33: 59:71:15:a9:9e:58:8c:c1:2e:54:1f:68:4f:80:38: a3:9a:5f:01:2a:6a:f6:3a:66:68:26:94:c7:a2:f0: 98:8d:07:19:b7:59:9b:fa:a4:a4:fc:be:e8:b6:2e: b2:25:68:5a:45:a9:a1:19:fe:00:a2:4e:69:a4:27: 9e:0f:91:60:ea:95:9f:4e:e3:59:43:84:96:25:b1: ea:06:96:9b:8b:93:bd:ef:86:ed:3a:b4:83:6a:29: 71:6f:39:1e:bf:47:d2:b7:b3:f5:08:42:e9:b7:b1: 0e:75:08:fd:d6:0b:65:c3:c6:51:71:a5:81:99:1f: d7:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:57:2F:90:96:38:10:64:B9:32:0F:D1:46:0B:91:21:5C:7F:2C:53 X509v3 Authority Key Identifier: keyid:61:E1:0D:AC:1F:77:3C:55:A2:44:75:33:46:71:9E:89:9F:4D:44:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YeENrB93PFWiRHUzRnGeiZ9NRDI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/85ef35-647a-4172-8c64-6db3caef73d9/1/0lcvkJY4EGS5Mg_RRguRIVx_LFM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/85ef35-647a-4172-8c64-6db3caef73d9/1/YeENrB93PFWiRHUzRnGeiZ9NRDI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 83.136.17.0-83.136.19.255 193.30.6.0/23 IPv6: 2a03:7000::/32 Signature Algorithm: sha256WithRSAEncryption 08:03:32:11:0f:97:5b:51:7a:30:03:30:29:b9:f4:15:11:b1: ee:4b:fc:3f:89:ea:20:71:dd:4e:d9:34:21:c5:a7:4f:b0:a2: 5a:f5:06:88:35:e3:d9:be:85:89:ac:f0:53:15:c1:c3:61:5a: 22:68:29:1e:3d:f2:73:7b:c4:11:65:7d:b8:70:1c:49:87:ce: 7f:a5:ce:5d:39:a7:9e:1c:e1:02:93:3b:d8:de:45:4c:a3:b0: e3:02:ab:2c:18:4f:18:40:6d:60:e9:af:c7:a0:03:c9:09:b9: 91:dc:ed:7a:c9:ec:57:a8:b6:d4:bf:a0:37:d7:53:7d:69:2e: ce:ac:86:4b:21:b8:19:fa:35:39:29:63:13:64:a7:d8:18:c6: 35:5a:08:41:2d:4e:d6:06:3c:e9:32:89:f6:6f:39:dd:2c:4d: 84:84:40:58:63:f1:d9:0f:3e:8b:bc:c0:6c:1b:bc:22:bb:96: 1d:28:a2:5b:d9:f3:16:00:c8:1e:8a:ee:45:3c:1a:38:a7:cf: 14:fe:3c:9c:3f:59:64:bc:74:ab:46:a8:c8:d1:70:7d:77:70: d4:64:ae:10:43:2d:c8:28:e5:f0:4c:f5:62:85:e4:87:14:75: 45:9d:22:0c:53:50:32:73:49:15:14:3c:07:82:83:a7:7a:2d: 0e:68:68:72 -----BEGIN CERTIFICATE----- MIIFGjCCBAKgAwIBAgISAZt/gJrYx+NQjzRM2ThKRo/1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxZTEwZGFjMWY3NzNjNTVhMjQ0NzUzMzQ2NzE5ZTg5OWY0 ZDQ0MzIwHhcNMjYwMTAyMTYxODEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMjU3MmY5MDk2MzgxMDY0YjkzMjBmZDE0NjBiOTEyMTVjN2YyYzUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1FKOAKLBpQlkeCISPbwzwFx49lzP jf9Zupppbv1zZgNyJmFg4jwsbsqcl9079CBX46eciyJH5q5T9S2Y3GaBgo5paC/Z xfeUios8Z0/PFLT/jFHUqKn5m0sldrS8hytH8nDMduRibeCLRjgfjhJ+4tf6GxGe V9xfeTXmd8kx1W7no3ajoTNZcRWpnliMwS5UH2hPgDijml8BKmr2OmZoJpTHovCY jQcZt1mb+qSk/L7oti6yJWhaRamhGf4Aok5ppCeeD5Fg6pWfTuNZQ4SWJbHqBpab i5O974btOrSDailxbzkev0fSt7P1CELpt7EOdQj91gtlw8ZRcaWBmR/XRQIDAQAB o4ICJjCCAiIwHQYDVR0OBBYEFNJXL5CWOBBkuTIP0UYLkSFcfyxTMB8GA1UdIwQY MBaAFGHhDawfdzxVokR1M0ZxnomfTUQyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWWVFTnJCOTNQRldpUkhVelJuR2VpWjlOUkRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS84NWVmMzUtNjQ3YS00MTcyLThjNjQt NmRiM2NhZWY3M2Q5LzEvMGxjdmtKWTRFR1M1TWdfUlJndVJJVnhfTEZNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS84NWVmMzUtNjQ3YS00MTcyLThjNjQtNmRiM2NhZWY3M2Q5 LzEvWWVFTnJCOTNQRldpUkhVelJuR2VpWjlOUkRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDwGCCsGAQUFBwEHAQH/BC0wKzAaBAIAATAUMAwDBABTiBED BAJTiBADBAHBHgYwDQQCAAIwBwMFACoDcAAwDQYJKoZIhvcNAQELBQADggEBAAgD MhEPl1tRejADMCm59BURse5L/D+J6iBx3U7ZNCHFp0+wolr1Bog149m+hYms8FMV wcNhWiJoKR498nN7xBFlfbhwHEmHzn+lzl05p54c4QKTO9jeRUyjsOMCqywYTxhA bWDpr8egA8kJuZHc7XrJ7FeottS/oDfXU31pLs6shkshuBn6NTkpYxNkp9gYxjVa CEEtTtYGPOkyifZvOd0sTYSEQFhj8dkPPou8wGwbvCK7lh0oolvZ8xYAyB6K7kU8 GjinzxT+PJw/WWS8dKtGqMjRcH13cNRkrhBDLcgo5fBM9WKF5IcUdUWdIgxTUDJz SRUUPAeCg6d6LQ5oaHI= -----END CERTIFICATE-----Generated at Mon Jan 26 03:06:08 2026 by rpki-client