This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/ff0e61-1c92-418c-9267-d3a487295491/1/LfgI9rpN293BrrnzaHSQkYw-4Vo.roa File: LfgI9rpN293BrrnzaHSQkYw-4Vo.roa (raw, json) Hash identifier: 17vv8CHDmx8Pt5VIpPIqTVbzDuzHnEYkz/7k/nREMI0= Subject key identifier: 2D:F8:08:F6:BA:4D:DB:DD:C1:AE:B9:F3:68:74:90:91:8C:3E:E1:5A Certificate issuer: /CN=8251e7fb6b960d406b2236d25e4e20e245359db2 Certificate serial: 019B79EC7312A182534C18048A7D26E1946C Authority key identifier: 82:51:E7:FB:6B:96:0D:40:6B:22:36:D2:5E:4E:20:E2:45:35:9D:B2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/glHn-2uWDUBrIjbSXk4g4kU1nbI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/ff0e61-1c92-418c-9267-d3a487295491/1/LfgI9rpN293BrrnzaHSQkYw-4Vo.roa Signing time: Thu 01 Jan 2026 14:18:17 +0000 ROA not before: Thu 01 Jan 2026 14:18:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42040 IP address blocks: 45.13.152.0/24 maxlen: 24 45.13.153.0/24 maxlen: 24 45.13.154.0/24 maxlen: 24 45.13.155.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/ff0e61-1c92-418c-9267-d3a487295491/1/glHn-2uWDUBrIjbSXk4g4kU1nbI.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/ff0e61-1c92-418c-9267-d3a487295491/1/glHn-2uWDUBrIjbSXk4g4kU1nbI.mft rsync://rpki.ripe.net/repository/DEFAULT/glHn-2uWDUBrIjbSXk4g4kU1nbI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:73:12:a1:82:53:4c:18:04:8a:7d:26:e1:94:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8251e7fb6b960d406b2236d25e4e20e245359db2 Validity Not Before: Jan 1 14:18:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2df808f6ba4ddbddc1aeb9f3687490918c3ee15a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:d7:00:a8:e3:dc:37:57:e7:26:1b:2e:f9:25: fc:53:80:90:ab:6e:c3:fb:d4:e8:cf:7a:70:a6:04: 03:85:d8:d2:a2:b6:6a:d7:f7:fd:ea:b8:ba:5b:70: 8e:60:c7:59:9f:07:82:6e:52:47:7a:f0:e4:9d:0f: 69:b6:e9:6e:3e:17:bd:5a:5f:f5:8f:7e:bb:27:78: ee:20:8f:d9:d5:e2:fb:16:ae:c0:a9:bc:75:3a:7e: 8f:6a:0a:80:e9:09:e2:34:09:b0:31:c7:73:dc:06: 0a:ab:d6:90:0e:0c:1f:e6:9a:5c:76:8e:ff:72:41: c4:ba:33:ad:82:07:97:8e:1d:5d:ee:8c:f1:d8:02: 2a:06:e3:86:d3:0b:15:01:b1:9f:8d:cc:be:65:44: 28:0f:06:55:5f:63:d2:52:0c:49:ff:18:d4:67:dc: c4:1f:c5:1e:3e:8f:9b:86:4a:f2:7e:91:8a:a5:dc: 0f:55:31:e0:bb:b5:96:83:9a:89:b3:e6:b5:23:5b: 88:5a:78:a1:b8:4f:89:a7:cd:21:88:27:74:53:a6: 76:24:df:9c:e7:b7:79:3d:d0:cb:69:ee:fc:e6:ff: b9:8e:a3:b7:78:b5:a9:36:37:e0:3c:9f:51:51:64: 7f:5a:73:ff:f8:6c:24:71:73:fb:ac:aa:00:4f:44: 4c:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:F8:08:F6:BA:4D:DB:DD:C1:AE:B9:F3:68:74:90:91:8C:3E:E1:5A X509v3 Authority Key Identifier: keyid:82:51:E7:FB:6B:96:0D:40:6B:22:36:D2:5E:4E:20:E2:45:35:9D:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/glHn-2uWDUBrIjbSXk4g4kU1nbI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/ff0e61-1c92-418c-9267-d3a487295491/1/LfgI9rpN293BrrnzaHSQkYw-4Vo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/ff0e61-1c92-418c-9267-d3a487295491/1/glHn-2uWDUBrIjbSXk4g4kU1nbI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.13.152.0/22 Signature Algorithm: sha256WithRSAEncryption 42:a8:16:1d:35:8c:99:db:99:6b:33:66:97:d6:46:ca:f8:34: 53:1a:7e:14:b1:5b:5c:39:12:bd:e7:b9:56:97:fc:0c:0b:44: 61:a9:de:f8:70:1c:af:90:19:84:22:d9:81:5c:49:1b:5c:4f: 87:7d:91:4f:bc:40:9b:4b:f3:cc:39:d3:47:c6:5f:5b:b0:87: 76:78:fd:d5:41:4d:e6:3e:05:b0:74:68:f4:89:45:56:cf:df: e9:c2:43:73:7d:c8:c8:90:aa:7a:ac:87:66:be:47:3f:c4:cd: fc:b9:13:86:35:f5:f4:5a:08:47:1e:d2:dc:b8:22:4b:65:00: 99:f4:f1:c5:a1:69:b4:bf:ec:4e:d4:45:15:36:52:69:34:88: 1e:96:f7:e2:0a:01:a9:fe:d1:9a:52:cb:69:7d:38:d4:fe:b5: 7b:33:ef:6b:72:0e:72:1e:22:d8:dc:b9:33:3e:f2:55:c6:4b: 87:18:85:9b:33:d6:08:69:f4:1b:d5:ae:72:eb:6a:d8:b1:b5: 51:47:02:42:4a:5b:a8:46:e6:6f:6a:ec:c2:67:75:97:68:ae: 50:96:54:2a:ac:74:a0:d2:fb:2b:90:f1:a7:7b:c6:55:79:dd: 79:37:4e:cc:2c:b5:26:2b:a8:33:25:08:53:9a:59:cc:d0:09: db:da:81:15 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57HMSoYJTTBgEin0m4ZRsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyNTFlN2ZiNmI5NjBkNDA2YjIyMzZkMjVlNGUyMGUyNDUz NTlkYjIwHhcNMjYwMTAxMTQxODE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZGY4MDhmNmJhNGRkYmRkYzFhZWI5ZjM2ODc0OTA5MThjM2VlMTVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9dcAqOPcN1fnJhsu+SX8U4CQq27D +9Toz3pwpgQDhdjSorZq1/f96ri6W3COYMdZnweCblJHevDknQ9ptuluPhe9Wl/1 j367J3juII/Z1eL7Fq7Aqbx1On6PagqA6QniNAmwMcdz3AYKq9aQDgwf5ppcdo7/ ckHEujOtggeXjh1d7ozx2AIqBuOG0wsVAbGfjcy+ZUQoDwZVX2PSUgxJ/xjUZ9zE H8UePo+bhkryfpGKpdwPVTHgu7WWg5qJs+a1I1uIWnihuE+Jp80hiCd0U6Z2JN+c 57d5PdDLae785v+5jqO3eLWpNjfgPJ9RUWR/WnP/+GwkcXP7rKoAT0RMjQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFC34CPa6Tdvdwa6582h0kJGMPuFaMB8GA1UdIwQY MBaAFIJR5/trlg1AayI20l5OIOJFNZ2yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ2xIbi0ydVdEVUJySWpiU1hrNGc0a1UxbmJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC9mZjBlNjEtMWM5Mi00MThjLTkyNjct ZDNhNDg3Mjk1NDkxLzEvTGZnSTlycE4yOTNCcnJuemFIU1FrWXctNFZvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC9mZjBlNjEtMWM5Mi00MThjLTkyNjctZDNhNDg3Mjk1NDkx LzEvZ2xIbi0ydVdEVUJySWpiU1hrNGc0a1UxbmJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLQ2YMA0G CSqGSIb3DQEBCwUAA4IBAQBCqBYdNYyZ25lrM2aX1kbK+DRTGn4UsVtcORK957lW l/wMC0Rhqd74cByvkBmEItmBXEkbXE+HfZFPvECbS/PMOdNHxl9bsId2eP3VQU3m PgWwdGj0iUVWz9/pwkNzfcjIkKp6rIdmvkc/xM38uROGNfX0WghHHtLcuCJLZQCZ 9PHFoWm0v+xO1EUVNlJpNIgelvfiCgGp/tGaUstpfTjU/rV7M+9rcg5yHiLY3Lkz PvJVxkuHGIWbM9YIafQb1a5y62rYsbVRRwJCSluoRuZvauzCZ3WXaK5QllQqrHSg 0vsrkPGne8ZVed15N07MLLUmK6gzJQhTmlnM0Anb2oEV -----END CERTIFICATE-----Generated at Sun Jan 25 22:17:07 2026 by rpki-client