This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/851cac-e1d8-4571-82a6-46bf762618e7/1/lEa7f0eLXgjArF1LEaeojBKXxKA.roa File: lEa7f0eLXgjArF1LEaeojBKXxKA.roa (raw, json) Hash identifier: lYkiwAvw6j6fNlAACyFWw/jZm7zIocbJ2aVwtdy9bz0= Subject key identifier: 94:46:BB:7F:47:8B:5E:08:C0:AC:5D:4B:11:A7:A8:8C:12:97:C4:A0 Certificate issuer: /CN=1cbbfa49877bc5d9e4cf446950fd14279929f49a Certificate serial: 019B77C6C5CD109D57E4062DD979CA6B8E8E Authority key identifier: 1C:BB:FA:49:87:7B:C5:D9:E4:CF:44:69:50:FD:14:27:99:29:F4:9A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/851cac-e1d8-4571-82a6-46bf762618e7/1/lEa7f0eLXgjArF1LEaeojBKXxKA.roa Signing time: Thu 01 Jan 2026 04:17:53 +0000 ROA not before: Thu 01 Jan 2026 04:17:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 1935 IP address blocks: 164.81.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/851cac-e1d8-4571-82a6-46bf762618e7/1/HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.crl rsync://rpki.ripe.net/repository/DEFAULT/ec/851cac-e1d8-4571-82a6-46bf762618e7/1/HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.mft rsync://rpki.ripe.net/repository/DEFAULT/HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:c5:cd:10:9d:57:e4:06:2d:d9:79:ca:6b:8e:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1cbbfa49877bc5d9e4cf446950fd14279929f49a Validity Not Before: Jan 1 04:17:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9446bb7f478b5e08c0ac5d4b11a7a88c1297c4a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:ce:a2:a0:fb:3c:63:54:e1:d0:07:23:1e:a8: f9:e0:98:c1:8a:b8:a8:e9:98:68:b0:1f:8a:bc:c9: f1:27:73:9e:9d:ae:d8:4a:f9:78:09:cc:d0:d8:1f: f2:c3:e5:9f:11:1a:7d:28:c2:d5:71:c8:b6:a3:2f: b0:5e:ea:f7:0a:e3:42:78:09:12:05:c6:06:3f:55: 76:86:86:0c:b4:f2:18:ef:71:f6:52:36:2d:d7:15: e6:53:fa:84:6e:63:7e:cf:a9:66:03:f6:16:3d:0f: c0:68:bf:32:d3:50:ad:bb:35:76:0d:ba:58:a0:ec: a8:db:82:f1:7c:00:70:cb:46:50:d3:34:10:8b:ea: 30:45:aa:cc:2b:96:14:50:cd:2c:20:37:b4:23:fb: 40:d0:34:f7:1d:f4:53:79:a7:5d:cf:9c:08:ee:90: e8:ba:e7:40:8f:4a:66:6c:22:98:0a:25:97:6e:7b: 0d:d8:d9:27:8c:1f:00:cb:1b:17:15:ec:41:d4:b2: 7e:31:fb:fd:fe:d0:46:dd:b2:50:f6:4a:06:1e:7a: 4c:b5:60:46:34:9d:3d:df:ea:cf:66:85:a4:6c:0e: 7d:47:e7:b2:1f:d9:d1:05:69:22:34:38:57:4c:74: d6:4b:ae:38:7c:ec:d3:79:9a:d2:ee:4a:6d:bd:d6: 7f:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:46:BB:7F:47:8B:5E:08:C0:AC:5D:4B:11:A7:A8:8C:12:97:C4:A0 X509v3 Authority Key Identifier: keyid:1C:BB:FA:49:87:7B:C5:D9:E4:CF:44:69:50:FD:14:27:99:29:F4:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/851cac-e1d8-4571-82a6-46bf762618e7/1/lEa7f0eLXgjArF1LEaeojBKXxKA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/851cac-e1d8-4571-82a6-46bf762618e7/1/HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 164.81.0.0/16 Signature Algorithm: sha256WithRSAEncryption 16:9b:29:c9:c1:14:46:d8:47:b7:db:f9:87:b3:46:c4:0b:76: f9:71:eb:a5:e1:c5:7b:a7:f1:50:de:54:50:de:2d:c2:f0:08: 71:38:fc:36:8f:a9:06:98:06:e5:97:d1:51:10:69:2b:0f:ea: 41:2d:9f:0c:76:60:a1:c8:6f:68:24:b3:fc:de:84:8d:78:74: 49:6f:c9:ef:18:80:02:07:a1:55:3c:ab:70:ac:8a:1c:0d:9c: e2:a0:ef:09:19:b1:f7:65:02:e9:ba:cf:48:f9:72:49:2a:49: f0:c4:e4:66:7a:f1:4c:b4:38:e3:bf:a5:88:57:b1:5c:75:80: 6d:9c:1e:26:e4:82:49:d8:a0:b4:01:be:75:34:f3:6d:74:d5: c0:90:17:b4:5e:0e:bb:e5:e8:25:ee:48:9c:2c:ea:4c:c5:45: e0:a9:78:36:78:83:0d:47:41:df:d0:3e:f1:86:86:a6:36:1e: 6a:1e:e6:cc:13:db:f9:c2:f6:6f:ab:0c:e3:91:30:68:b6:ff: c5:4e:a3:ed:0a:bf:9f:ec:cf:32:8d:47:78:33:ef:9d:82:ca: c0:70:56:0d:4b:aa:8b:67:d3:eb:e8:6a:e5:26:e3:76:18:64: 35:69:c6:a9:a2:18:30:85:0d:37:45:d5:d4:6b:a9:88:e1:97: 5c:46:e4:88 -----BEGIN CERTIFICATE----- MIIE/DCCA+SgAwIBAgISAZt3xsXNEJ1X5AYt2XnKa46OMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjYmJmYTQ5ODc3YmM1ZDllNGNmNDQ2OTUwZmQxNDI3OTky OWY0OWEwHhcNMjYwMTAxMDQxNzUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NDQ2YmI3ZjQ3OGI1ZTA4YzBhYzVkNGIxMWE3YTg4YzEyOTdjNGEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzs6ioPs8Y1Th0AcjHqj54JjBirio 6ZhosB+KvMnxJ3Oena7YSvl4CczQ2B/yw+WfERp9KMLVcci2oy+wXur3CuNCeAkS BcYGP1V2hoYMtPIY73H2UjYt1xXmU/qEbmN+z6lmA/YWPQ/AaL8y01CtuzV2DbpY oOyo24LxfABwy0ZQ0zQQi+owRarMK5YUUM0sIDe0I/tA0DT3HfRTeaddz5wI7pDo uudAj0pmbCKYCiWXbnsN2NknjB8AyxsXFexB1LJ+Mfv9/tBG3bJQ9koGHnpMtWBG NJ093+rPZoWkbA59R+eyH9nRBWkiNDhXTHTWS644fOzTeZrS7kptvdZ/KQIDAQAB o4ICCDCCAgQwHQYDVR0OBBYEFJRGu39Hi14IwKxdSxGnqIwSl8SgMB8GA1UdIwQY MBaAFBy7+kmHe8XZ5M9EaVD9FCeZKfSaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEx2NlNZZDd4ZG5rejBScFVQMFVKNWtwOUpvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy84NTFjYWMtZTFkOC00NTcxLTgyYTYt NDZiZjc2MjYxOGU3LzEvbEVhN2YwZUxYZ2pBckYxTEVhZW9qQktYeEtBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYy84NTFjYWMtZTFkOC00NTcxLTgyYTYtNDZiZjc2MjYxOGU3 LzEvSEx2NlNZZDd4ZG5rejBScFVQMFVKNWtwOUpvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMApFEwDQYJ KoZIhvcNAQELBQADggEBABabKcnBFEbYR7fb+YezRsQLdvlx66XhxXun8VDeVFDe LcLwCHE4/DaPqQaYBuWX0VEQaSsP6kEtnwx2YKHIb2gks/zehI14dElvye8YgAIH oVU8q3CsihwNnOKg7wkZsfdlAum6z0j5ckkqSfDE5GZ68Uy0OOO/pYhXsVx1gG2c HibkgknYoLQBvnU082101cCQF7ReDrvl6CXuSJws6kzFReCpeDZ4gw1HQd/QPvGG hqY2Hmoe5swT2/nC9m+rDOORMGi2/8VOo+0Kv5/szzKNR3gz752CysBwVg1Lqotn 0+voauUm43YYZDVpxqmiGDCFDTdF1dRrqYjhl1xG5Ig= -----END CERTIFICATE-----Generated at Mon Jan 26 09:37:01 2026 by rpki-client