This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/0d4810-902a-4b7d-9818-3cef5625aed6/1/lpfk7UVcGKZO2jgTSznBpb0u8Pk.roa File: lpfk7UVcGKZO2jgTSznBpb0u8Pk.roa (raw, json) Hash identifier: DMe8L1nI8dyjjoOJsf6UQZzDm/D+LPuRxMoaepRymzk= Subject key identifier: 96:97:E4:ED:45:5C:18:A6:4E:DA:38:13:4B:39:C1:A5:BD:2E:F0:F9 Certificate issuer: /CN=dfa69c3d98385d415405fc6fd30a800363c017c1 Certificate serial: 019B77596D209019FBE5107238A8B6FA3FF7 Authority key identifier: DF:A6:9C:3D:98:38:5D:41:54:05:FC:6F:D3:0A:80:03:63:C0:17:C1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/36acPZg4XUFUBfxv0wqAA2PAF8E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/0d4810-902a-4b7d-9818-3cef5625aed6/1/lpfk7UVcGKZO2jgTSznBpb0u8Pk.roa Signing time: Thu 01 Jan 2026 02:18:27 +0000 ROA not before: Thu 01 Jan 2026 02:18:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44466 IP address blocks: 185.160.160.0/23 maxlen: 24 185.160.162.0/23 maxlen: 24 188.215.108.0/24 maxlen: 24 188.215.109.0/24 maxlen: 24 188.215.110.0/24 maxlen: 24 188.215.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/0d4810-902a-4b7d-9818-3cef5625aed6/1/36acPZg4XUFUBfxv0wqAA2PAF8E.crl rsync://rpki.ripe.net/repository/DEFAULT/ec/0d4810-902a-4b7d-9818-3cef5625aed6/1/36acPZg4XUFUBfxv0wqAA2PAF8E.mft rsync://rpki.ripe.net/repository/DEFAULT/36acPZg4XUFUBfxv0wqAA2PAF8E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 20:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:6d:20:90:19:fb:e5:10:72:38:a8:b6:fa:3f:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dfa69c3d98385d415405fc6fd30a800363c017c1 Validity Not Before: Jan 1 02:18:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9697e4ed455c18a64eda38134b39c1a5bd2ef0f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:f5:8c:1b:6d:99:b6:9c:42:58:03:de:3e:e6: 86:ee:f0:ce:9a:fb:52:20:48:f5:c7:57:c7:3d:f2: 64:dd:ee:2a:66:69:d7:86:90:ea:91:2a:cd:d0:75: f8:af:45:e7:0b:bd:34:ae:d2:f6:40:ec:78:23:44: 0b:fc:66:e5:d4:99:11:54:c5:88:71:00:16:13:68: 59:49:b6:28:5b:ad:f9:dd:1b:7b:03:5d:c2:ef:17: 5f:3d:3a:7d:7e:41:87:fe:72:64:ed:bb:c5:1f:c1: 34:23:49:33:99:b1:a7:08:ff:45:88:ed:01:ff:a3: e8:cf:ac:79:d5:2c:ac:a0:a7:2a:d2:18:d0:7a:97: 9d:ef:38:f1:d1:1f:92:15:56:08:74:8c:94:d0:44: d3:9d:aa:7d:43:47:7c:c7:3f:78:3e:8d:74:88:7d: f5:f7:63:6c:81:82:1f:53:93:b5:c6:4e:33:79:6b: 32:96:f1:9c:78:a9:62:43:bf:fe:2f:ab:bb:cd:82: 73:2c:72:94:da:d3:9a:aa:02:7e:ef:39:53:38:76: 4f:b2:12:63:d9:0c:8e:23:3e:c1:7f:ad:0f:af:99: 92:28:91:41:f8:18:22:b7:a5:96:56:2c:2e:87:86: 3d:a7:4a:56:dc:d3:07:53:a1:56:e1:fa:57:ea:2d: 0f:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:97:E4:ED:45:5C:18:A6:4E:DA:38:13:4B:39:C1:A5:BD:2E:F0:F9 X509v3 Authority Key Identifier: keyid:DF:A6:9C:3D:98:38:5D:41:54:05:FC:6F:D3:0A:80:03:63:C0:17:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/36acPZg4XUFUBfxv0wqAA2PAF8E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/0d4810-902a-4b7d-9818-3cef5625aed6/1/lpfk7UVcGKZO2jgTSznBpb0u8Pk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/0d4810-902a-4b7d-9818-3cef5625aed6/1/36acPZg4XUFUBfxv0wqAA2PAF8E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.160.160.0/22 188.215.108.0/22 Signature Algorithm: sha256WithRSAEncryption 61:55:8b:f5:e1:09:4f:2b:6a:8f:e7:3c:e7:9e:da:d2:12:fd: e6:39:e6:36:59:12:ac:2c:f6:5a:43:1a:fd:25:12:f7:d9:27: 2a:12:7b:0d:d5:92:94:39:a1:37:f0:9e:4c:53:7b:07:28:bc: e5:4c:57:c6:cc:8f:24:d3:6e:b2:7c:e4:e8:72:ff:31:f8:26: a3:ec:c0:78:00:2c:0b:6d:87:6b:84:0d:a7:ce:a6:c0:d6:7b: b3:d0:32:ce:44:79:04:70:99:23:e4:8d:30:ad:1c:43:8e:55: 29:37:9a:d5:f7:c6:21:6d:4f:52:e9:11:38:4c:56:3a:ca:a7: 33:21:27:23:a7:09:66:2b:11:38:0b:b2:ba:21:c1:64:a2:7e: c1:ee:4b:20:70:65:bf:29:20:47:24:5b:7a:c0:c9:5b:7a:87: 1f:46:d5:ad:d9:db:6b:42:30:a6:44:16:90:68:72:79:35:3e: 2f:4b:43:6f:5f:5d:b0:20:af:57:ba:da:84:9f:96:5b:97:dd: 98:ef:c7:68:c7:de:b1:fc:50:fd:ae:47:da:49:8b:68:c0:46: de:b5:f1:65:25:ce:26:db:71:10:aa:17:83:1d:08:ea:78:f5: 72:67:e4:01:7e:25:02:e9:0f:db:7d:d2:54:d1:8a:bc:23:3a: 06:70:2a:a4 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt3WW0gkBn75RByOKi2+j/3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmYTY5YzNkOTgzODVkNDE1NDA1ZmM2ZmQzMGE4MDAzNjNj MDE3YzEwHhcNMjYwMTAxMDIxODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5Njk3ZTRlZDQ1NWMxOGE2NGVkYTM4MTM0YjM5YzFhNWJkMmVmMGY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5vWMG22ZtpxCWAPePuaG7vDOmvtS IEj1x1fHPfJk3e4qZmnXhpDqkSrN0HX4r0XnC700rtL2QOx4I0QL/Gbl1JkRVMWI cQAWE2hZSbYoW6353Rt7A13C7xdfPTp9fkGH/nJk7bvFH8E0I0kzmbGnCP9FiO0B /6Poz6x51SysoKcq0hjQeped7zjx0R+SFVYIdIyU0ETTnap9Q0d8xz94Po10iH31 92NsgYIfU5O1xk4zeWsylvGceKliQ7/+L6u7zYJzLHKU2tOaqgJ+7zlTOHZPshJj 2QyOIz7Bf60Pr5mSKJFB+Bgit6WWViwuh4Y9p0pW3NMHU6FW4fpX6i0P/QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFJaX5O1FXBimTto4E0s5waW9LvD5MB8GA1UdIwQY MBaAFN+mnD2YOF1BVAX8b9MKgANjwBfBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMzZhY1BaZzRYVUZVQmZ4djB3cUFBMlBBRjhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy8wZDQ4MTAtOTAyYS00YjdkLTk4MTgt M2NlZjU2MjVhZWQ2LzEvbHBmazdVVmNHS1pPMmpnVFN6bkJwYjB1OFBrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYy8wZDQ4MTAtOTAyYS00YjdkLTk4MTgtM2NlZjU2MjVhZWQ2 LzEvMzZhY1BaZzRYVUZVQmZ4djB3cUFBMlBBRjhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCuaCgAwQC vNdsMA0GCSqGSIb3DQEBCwUAA4IBAQBhVYv14QlPK2qP5zznntrSEv3mOeY2WRKs LPZaQxr9JRL32ScqEnsN1ZKUOaE38J5MU3sHKLzlTFfGzI8k026yfOTocv8x+Caj 7MB4ACwLbYdrhA2nzqbA1nuz0DLORHkEcJkj5I0wrRxDjlUpN5rV98YhbU9S6RE4 TFY6yqczIScjpwlmKxE4C7K6IcFkon7B7ksgcGW/KSBHJFt6wMlbeocfRtWt2dtr QjCmRBaQaHJ5NT4vS0NvX12wIK9XutqEn5Zbl92Y78dox96x/FD9rkfaSYtowEbe tfFlJc4m23EQqheDHQjqePVyZ+QBfiUC6Q/bfdJU0Yq8IzoGcCqk -----END CERTIFICATE-----Generated at Mon Jan 26 05:43:51 2026 by rpki-client