This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/b69bba-7200-4f52-b631-fe0a658d9ded/1/lwxiv3kekrPmCweGpFX4WJfrhX0.roa File: lwxiv3kekrPmCweGpFX4WJfrhX0.roa (raw, json) Hash identifier: 2lW/SbMqaftEHsN9ssTuGMfD/ZAuKFXzBYGrp9TrmHI= Subject key identifier: 97:0C:62:BF:79:1E:92:B3:E6:0B:07:86:A4:55:F8:58:97:EB:85:7D Certificate issuer: /CN=f1bd02ea44a9bee35b63d1ab3e25b14f19a35a55 Certificate serial: 019B7AC78C19750973EBC51B0982577E3B4E Authority key identifier: F1:BD:02:EA:44:A9:BE:E3:5B:63:D1:AB:3E:25:B1:4F:19:A3:5A:55 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8b0C6kSpvuNbY9GrPiWxTxmjWlU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/b69bba-7200-4f52-b631-fe0a658d9ded/1/lwxiv3kekrPmCweGpFX4WJfrhX0.roa Signing time: Thu 01 Jan 2026 18:17:36 +0000 ROA not before: Thu 01 Jan 2026 18:17:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44709 IP address blocks: 185.229.226.0/24 maxlen: 24 212.115.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/b69bba-7200-4f52-b631-fe0a658d9ded/1/8b0C6kSpvuNbY9GrPiWxTxmjWlU.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/b69bba-7200-4f52-b631-fe0a658d9ded/1/8b0C6kSpvuNbY9GrPiWxTxmjWlU.mft rsync://rpki.ripe.net/repository/DEFAULT/8b0C6kSpvuNbY9GrPiWxTxmjWlU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:8c:19:75:09:73:eb:c5:1b:09:82:57:7e:3b:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f1bd02ea44a9bee35b63d1ab3e25b14f19a35a55 Validity Not Before: Jan 1 18:17:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=970c62bf791e92b3e60b0786a455f85897eb857d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:3b:e3:bf:a0:22:1e:98:0d:33:6e:9d:7f:b3: b1:c2:2b:be:a5:11:25:6d:4c:27:6c:18:dd:0d:0f: a1:35:b5:97:a9:ea:2e:8f:b9:6a:1a:33:3e:07:12: 54:42:4f:9d:b8:19:d6:25:4c:77:19:f0:98:e4:a5: 29:36:a3:dc:5f:ff:db:72:11:65:f0:a2:11:be:98: 88:b7:12:98:16:9c:79:bc:9c:2b:88:bd:da:93:39: 37:c7:6e:a5:46:ce:11:56:2f:f9:0b:af:0a:57:41: ad:aa:0d:0e:00:78:ee:11:9f:b0:de:42:8e:37:14: 6e:18:d4:ba:e3:fa:ba:c6:61:04:02:fa:6b:6b:8f: b2:44:61:a9:2a:68:6b:9f:be:a4:f2:12:12:93:b4: ba:8f:c0:d3:70:e5:fa:0c:d6:85:26:7b:50:12:ea: d8:07:4a:c4:12:97:46:e2:72:c1:77:5b:62:95:09: b0:e3:fc:f0:21:d2:c2:ba:46:31:28:4c:70:d0:12: 6d:08:1e:bc:d1:f2:d5:17:a8:de:96:3f:49:b8:cb: c3:a9:c9:fe:d3:f8:23:f2:62:4a:c4:e1:c3:0d:26: 3d:b3:ba:13:18:5d:8b:5b:e3:97:79:4e:92:ae:17: 04:39:8e:56:30:d9:d1:2d:9f:f4:4c:e0:04:a0:7e: d6:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:0C:62:BF:79:1E:92:B3:E6:0B:07:86:A4:55:F8:58:97:EB:85:7D X509v3 Authority Key Identifier: keyid:F1:BD:02:EA:44:A9:BE:E3:5B:63:D1:AB:3E:25:B1:4F:19:A3:5A:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b0C6kSpvuNbY9GrPiWxTxmjWlU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b69bba-7200-4f52-b631-fe0a658d9ded/1/lwxiv3kekrPmCweGpFX4WJfrhX0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b69bba-7200-4f52-b631-fe0a658d9ded/1/8b0C6kSpvuNbY9GrPiWxTxmjWlU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.229.226.0/24 212.115.111.0/24 Signature Algorithm: sha256WithRSAEncryption b8:25:59:c0:01:04:dc:63:6d:15:44:5c:49:20:b8:f3:e4:e3: 36:fa:a9:52:2a:78:39:75:3d:67:58:f0:20:74:41:22:30:85: 8a:9f:05:9b:c4:16:ce:52:c4:08:ec:85:e0:cc:e7:1c:1f:6d: 86:b6:9e:66:62:23:e6:74:cc:e1:f2:ff:d2:6e:0e:aa:40:22: 77:3f:7d:9c:05:94:6d:b0:18:13:54:65:c5:d1:5f:38:6e:46: 7b:b1:fd:0f:c3:d6:82:3d:91:9b:fc:00:39:d3:ba:fb:15:97: c0:7f:b7:51:49:a2:02:2a:af:7b:e3:7f:f0:1d:15:3f:a3:57: f2:d3:1f:bb:12:b2:1d:1b:d7:a2:19:02:bf:49:c5:0d:d7:52: b5:23:fe:0a:f1:11:a0:5a:6b:40:bc:be:05:75:7e:a0:94:69: af:7f:28:1b:02:31:8b:44:fb:2b:44:b8:53:6f:16:2b:c1:16: 4a:a8:ac:ac:22:9b:b8:7a:bf:d1:28:ec:3a:5c:b4:7b:b8:08: 2e:34:1c:0f:c1:cf:91:33:89:07:49:09:a7:cb:18:ba:cd:7d: 43:1b:89:47:1f:c3:22:5e:db:ff:4f:6e:b5:34:56:b3:1f:c7: 95:df:65:01:38:c3:9e:d5:26:b6:72:20:45:c8:43:8b:ad:e2: 4a:97:d4:56 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt6x4wZdQlz68UbCYJXfjtOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxYmQwMmVhNDRhOWJlZTM1YjYzZDFhYjNlMjViMTRmMTlh MzVhNTUwHhcNMjYwMTAxMTgxNzM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NzBjNjJiZjc5MWU5MmIzZTYwYjA3ODZhNDU1Zjg1ODk3ZWI4NTdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtTvjv6AiHpgNM26df7Oxwiu+pREl bUwnbBjdDQ+hNbWXqeouj7lqGjM+BxJUQk+duBnWJUx3GfCY5KUpNqPcX//bchFl 8KIRvpiItxKYFpx5vJwriL3akzk3x26lRs4RVi/5C68KV0Gtqg0OAHjuEZ+w3kKO NxRuGNS64/q6xmEEAvpra4+yRGGpKmhrn76k8hISk7S6j8DTcOX6DNaFJntQEurY B0rEEpdG4nLBd1tilQmw4/zwIdLCukYxKExw0BJtCB680fLVF6jelj9JuMvDqcn+ 0/gj8mJKxOHDDSY9s7oTGF2LW+OXeU6SrhcEOY5WMNnRLZ/0TOAEoH7WVQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFJcMYr95HpKz5gsHhqRV+FiX64V9MB8GA1UdIwQY MBaAFPG9AupEqb7jW2PRqz4lsU8Zo1pVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOGIwQzZrU3B2dU5iWTlHclBpV3hUeG1qV2xVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9iNjliYmEtNzIwMC00ZjUyLWI2MzEt ZmUwYTY1OGQ5ZGVkLzEvbHd4aXYza2VrclBtQ3dlR3BGWDRXSmZyaFgwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy9iNjliYmEtNzIwMC00ZjUyLWI2MzEtZmUwYTY1OGQ5ZGVk LzEvOGIwQzZrU3B2dU5iWTlHclBpV3hUeG1qV2xVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAueXiAwQA 1HNvMA0GCSqGSIb3DQEBCwUAA4IBAQC4JVnAAQTcY20VRFxJILjz5OM2+qlSKng5 dT1nWPAgdEEiMIWKnwWbxBbOUsQI7IXgzOccH22Gtp5mYiPmdMzh8v/Sbg6qQCJ3 P32cBZRtsBgTVGXF0V84bkZ7sf0Pw9aCPZGb/AA507r7FZfAf7dRSaICKq9743/w HRU/o1fy0x+7ErIdG9eiGQK/ScUN11K1I/4K8RGgWmtAvL4FdX6glGmvfygbAjGL RPsrRLhTbxYrwRZKqKysIpu4er/RKOw6XLR7uAguNBwPwc+RM4kHSQmnyxi6zX1D G4lHH8MiXtv/T261NFazH8eV32UBOMOe1Sa2ciBFyEOLreJKl9RW -----END CERTIFICATE-----Generated at Sun Jan 25 16:37:51 2026 by rpki-client