This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/lFwqvOhS0mYBrLmqUawXfAJtgQA.roa File: lFwqvOhS0mYBrLmqUawXfAJtgQA.roa (raw, json) Hash identifier: qlelBCJoTnOCmUNpvuqL67P7smNmWNZKkURiRJs7yrY= Subject key identifier: 94:5C:2A:BC:E8:52:D2:66:01:AC:B9:AA:51:AC:17:7C:02:6D:81:00 Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63 Certificate serial: 019B7AC8666779B2DD70901B43349E6327AC Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/lFwqvOhS0mYBrLmqUawXfAJtgQA.roa Signing time: Thu 01 Jan 2026 18:18:32 +0000 ROA not before: Thu 01 Jan 2026 18:18:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215724 IP address blocks: 14.102.231.0/24 maxlen: 24 77.111.97.0/24 maxlen: 24 77.111.102.0/24 maxlen: 24 85.208.10.0/24 maxlen: 24 89.106.17.0/24 maxlen: 24 89.106.19.0/24 maxlen: 24 89.106.20.0/24 maxlen: 24 89.106.24.0/24 maxlen: 24 194.36.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:66:67:79:b2:dd:70:90:1b:43:34:9e:63:27:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63 Validity Not Before: Jan 1 18:18:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=945c2abce852d26601acb9aa51ac177c026d8100 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:5e:fa:44:09:28:ec:7b:70:d5:4a:c9:5b:ab: 16:0f:01:be:66:45:a0:34:0e:23:2c:6a:4b:21:d5: b4:23:b5:a9:a0:43:bc:9d:27:ff:dc:c0:f5:ea:49: cf:cd:1f:b4:89:de:c2:67:0c:13:03:6d:28:29:14: c8:7e:54:64:c1:06:13:5d:b5:7b:47:37:b3:01:a0: 03:5f:ea:44:8e:cf:01:0a:81:30:d0:2e:b2:d7:c9: a6:b9:c4:4b:c8:68:95:7f:87:d6:2e:33:b2:46:18: c1:65:e7:25:f5:7a:7f:15:3f:23:69:62:35:16:a2: 09:2e:42:37:e3:43:29:3a:36:12:2d:6f:d2:73:32: 5f:f6:c8:b5:77:0f:10:3c:16:b0:5c:85:39:b0:6d: 00:41:b9:59:94:1a:d9:71:9a:7f:75:5d:ff:bd:15: 8c:f6:7c:a5:b6:29:c7:d7:34:1a:78:33:8b:e7:e6: 25:66:c1:32:dd:c0:ee:07:b8:ac:58:89:be:31:18: f5:c4:be:d7:bd:32:19:e9:4d:42:5c:79:f2:dd:18: 9c:12:b3:26:cd:41:a0:0f:20:b2:28:0a:bd:34:43: 1f:56:62:37:8f:e5:63:94:b0:fb:50:72:0d:8a:ed: 90:35:50:a6:2f:50:9a:9c:c0:5a:f9:95:e8:dc:92: aa:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:5C:2A:BC:E8:52:D2:66:01:AC:B9:AA:51:AC:17:7C:02:6D:81:00 X509v3 Authority Key Identifier: keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/lFwqvOhS0mYBrLmqUawXfAJtgQA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 14.102.231.0/24 77.111.97.0/24 77.111.102.0/24 85.208.10.0/24 89.106.17.0/24 89.106.19.0-89.106.20.255 89.106.24.0/24 194.36.32.0/24 Signature Algorithm: sha256WithRSAEncryption df:f1:a6:74:99:58:c6:a5:93:54:d8:b0:9f:f5:b4:6a:85:d4: dc:61:69:93:2a:fe:78:96:c3:9b:2e:84:72:87:22:81:97:f2: f9:88:14:3f:67:95:0a:4d:b6:4a:3a:95:06:f4:9b:17:0c:f4: 85:a4:ed:ee:89:19:35:47:b7:fe:9c:b2:6c:37:c1:ae:8b:ad: 55:a0:1e:16:eb:06:6f:e0:83:bd:34:54:5f:94:a7:26:b4:31: 17:37:2b:ff:6b:e1:e0:d4:2a:62:09:93:6b:5c:88:d5:b0:79: 15:2d:c6:59:73:bc:e5:45:94:74:07:59:de:18:ba:dc:5e:8b: 14:ca:e6:56:15:e2:0a:8f:83:85:e0:15:cd:17:e2:19:93:80: ef:14:02:43:6f:9b:0e:2c:75:7c:ea:14:f6:6f:e6:93:4f:2d: 65:71:0e:22:44:51:58:3d:84:23:e1:d1:2c:6f:ba:a1:3b:c0: 0c:a4:a6:e6:43:36:b2:ad:4a:a3:dc:56:2a:ed:8c:fe:01:49: 9a:e5:73:b0:53:7c:4d:26:af:85:fe:2f:b8:08:c3:46:90:0e: aa:d6:b2:04:ae:e6:49:e7:34:f3:c3:fd:fb:9a:86:18:ff:2a: 2b:64:5a:66:aa:2b:f5:1b:b8:bf:86:10:74:dd:ae:32:86:ba: b1:f4:12:bf -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgISAZt6yGZnebLdcJAbQzSeYyesMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlMWMzNDcyYzI1YWNkMzQ3MzY0YjdkNjMxMjYxOGFhMzUz MGNiNjMwHhcNMjYwMTAxMTgxODMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NDVjMmFiY2U4NTJkMjY2MDFhY2I5YWE1MWFjMTc3YzAyNmQ4MTAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn176RAko7Htw1UrJW6sWDwG+ZkWg NA4jLGpLIdW0I7WpoEO8nSf/3MD16knPzR+0id7CZwwTA20oKRTIflRkwQYTXbV7 RzezAaADX+pEjs8BCoEw0C6y18mmucRLyGiVf4fWLjOyRhjBZecl9Xp/FT8jaWI1 FqIJLkI340MpOjYSLW/SczJf9si1dw8QPBawXIU5sG0AQblZlBrZcZp/dV3/vRWM 9nyltinH1zQaeDOL5+YlZsEy3cDuB7isWIm+MRj1xL7XvTIZ6U1CXHny3RicErMm zUGgDyCyKAq9NEMfVmI3j+VjlLD7UHINiu2QNVCmL1CanMBa+ZXo3JKqWwIDAQAB o4ICOzCCAjcwHQYDVR0OBBYEFJRcKrzoUtJmAay5qlGsF3wCbYEAMB8GA1UdIwQY MBaAFO4cNHLCWs00c2S31jEmGKo1MMtjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYt YjRiOGRiMjBiMWZiLzEvbEZ3cXZPaFMwbVlCckxtcVVhd1hmQUp0Z1FBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYtYjRiOGRiMjBiMWZi LzEvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFEGCCsGAQUFBwEHAQH/BEIwQDA+BAIAATA4AwQADmbnAwQA TW9hAwQATW9mAwQAVdAKAwQAWWoRMAwDBABZahMDBABZahQDBABZahgDBADCJCAw DQYJKoZIhvcNAQELBQADggEBAN/xpnSZWMalk1TYsJ/1tGqF1NxhaZMq/niWw5su hHKHIoGX8vmIFD9nlQpNtko6lQb0mxcM9IWk7e6JGTVHt/6csmw3wa6LrVWgHhbr Bm/gg700VF+Upya0MRc3K/9r4eDUKmIJk2tciNWweRUtxllzvOVFlHQHWd4Yutxe ixTK5lYV4gqPg4XgFc0X4hmTgO8UAkNvmw4sdXzqFPZv5pNPLWVxDiJEUVg9hCPh 0SxvuqE7wAykpuZDNrKtSqPcVirtjP4BSZrlc7BTfE0mr4X+L7gIw0aQDqrWsgSu 5knnNPPD/fuahhj/KitkWmaqK/UbuL+GEHTdrjKGurH0Er8= -----END CERTIFICATE-----Generated at Sun Jan 25 13:54:01 2026 by rpki-client