This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/lXlM4qJrFYO5mSnzpqzoLHsYhPA.roa File: lXlM4qJrFYO5mSnzpqzoLHsYhPA.roa (raw, json) Hash identifier: kg19z7nDRPpKgcHzRE1qTIEZfuD1WViAz+SCknZb3aU= Subject key identifier: 95:79:4C:E2:A2:6B:15:83:B9:99:29:F3:A6:AC:E8:2C:7B:18:84:F0 Certificate issuer: /CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa Certificate serial: 019B7D5B26F6D1E9D1EC56A2326514A81836 Authority key identifier: C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/lXlM4qJrFYO5mSnzpqzoLHsYhPA.roa Signing time: Fri 02 Jan 2026 06:18:04 +0000 ROA not before: Fri 02 Jan 2026 06:18:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212115 IP address blocks: 91.148.130.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.mft rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:26:f6:d1:e9:d1:ec:56:a2:32:65:14:a8:18:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa Validity Not Before: Jan 2 06:18:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=95794ce2a26b1583b99929f3a6ace82c7b1884f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:b3:42:3c:04:48:68:e8:55:70:0b:7a:11:e9: 99:59:9c:4d:56:5d:87:af:b8:fc:ca:07:67:04:9e: 5a:1d:73:da:c1:15:2d:39:c8:59:50:47:77:a4:35: 64:3e:f1:9f:28:c6:08:e5:e7:50:31:87:69:22:0e: 47:fc:46:f3:83:81:07:c8:89:fa:6d:4b:99:fe:40: 9a:1f:4c:c2:bc:7b:49:53:b2:0e:9d:f8:21:b6:ae: 2d:3a:af:cc:cd:39:76:06:dd:8b:89:15:40:d2:21: f8:ec:0b:b6:ce:9c:bf:b8:48:e9:4b:4f:43:6b:bf: 56:22:21:16:02:59:d2:9c:77:8a:75:44:7c:1d:b3: df:de:30:af:29:7b:5f:af:bc:fe:e6:a8:75:30:87: b8:b1:8e:25:32:4b:06:48:4e:aa:15:63:05:c6:b7: b7:34:30:6e:7e:14:fe:9c:97:9e:4a:13:e1:74:f5: 16:df:b0:f4:2b:b0:79:7b:8d:96:0a:da:01:41:6f: c6:25:48:85:14:73:65:52:5a:2e:ee:0c:2c:95:b9: 3d:ae:81:17:42:9e:c3:aa:cb:19:06:7a:9f:d2:ba: c2:c6:50:fa:9e:0a:c4:16:39:16:2e:93:d7:cf:59: 30:e9:3f:5b:5c:f8:26:46:42:ac:c2:dc:15:3a:d9: 9c:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:79:4C:E2:A2:6B:15:83:B9:99:29:F3:A6:AC:E8:2C:7B:18:84:F0 X509v3 Authority Key Identifier: keyid:C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/lXlM4qJrFYO5mSnzpqzoLHsYhPA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.148.130.0/24 Signature Algorithm: sha256WithRSAEncryption c9:54:e0:62:c9:49:32:e3:23:e8:a7:f9:9f:84:71:b4:3f:e4: 3d:c7:84:6b:a3:0e:95:34:5a:02:5f:90:1f:95:f9:42:60:96: b7:70:97:4d:25:07:e3:2a:3a:21:7d:32:ca:0d:75:d4:fb:20: de:71:cc:02:96:95:06:17:d4:74:a0:b5:61:50:5c:49:0a:4a: 02:0f:87:9c:84:1e:ff:e0:1d:fc:ec:f1:ed:ad:63:6e:73:91: d9:ab:2d:a3:30:3d:da:21:9f:eb:37:9f:95:57:ac:21:d9:b7: 59:80:72:4a:c6:8f:04:1f:f2:cb:78:4d:5a:76:a2:18:9d:e5: 84:85:11:82:b8:7e:5c:45:af:d1:a5:ac:4b:7f:72:ae:b3:92: 70:93:18:6b:93:6b:fd:7c:b7:79:6a:b0:76:f6:c7:13:f9:3c: c4:73:34:bc:5c:be:9d:ca:26:66:b4:77:37:81:9c:24:a1:d6: 35:06:66:6b:04:9d:1e:87:af:11:1d:74:48:b5:55:ea:ae:29: e4:97:5a:72:6d:6e:90:5c:31:63:8f:3b:a7:d4:1f:ea:26:e3: 8c:25:f5:f9:12:8b:a9:07:d6:88:58:52:a2:5e:b7:3e:e7:02: 06:5e:b0:df:1e:6c:be:0a:4e:c8:b7:b8:a3:73:2f:5f:3b:f3: b6:ca:de:4e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9Wyb20enR7FaiMmUUqBg2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzNWVhYzY0ZWE0ODAyZTY4MjQ2ODZmN2MwZDIwMWYyYzg1 Y2IyYWEwHhcNMjYwMTAyMDYxODA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NTc5NGNlMmEyNmIxNTgzYjk5OTI5ZjNhNmFjZTgyYzdiMTg4NGYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArrNCPARIaOhVcAt6EemZWZxNVl2H r7j8ygdnBJ5aHXPawRUtOchZUEd3pDVkPvGfKMYI5edQMYdpIg5H/Ebzg4EHyIn6 bUuZ/kCaH0zCvHtJU7IOnfghtq4tOq/MzTl2Bt2LiRVA0iH47Au2zpy/uEjpS09D a79WIiEWAlnSnHeKdUR8HbPf3jCvKXtfr7z+5qh1MIe4sY4lMksGSE6qFWMFxre3 NDBufhT+nJeeShPhdPUW37D0K7B5e42WCtoBQW/GJUiFFHNlUlou7gwslbk9roEX Qp7DqssZBnqf0rrCxlD6ngrEFjkWLpPXz1kw6T9bXPgmRkKswtwVOtmcLQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJV5TOKiaxWDuZkp86as6Cx7GITwMB8GA1UdIwQY MBaAFMNerGTqSALmgkaG98DSAfLIXLKqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdzE2c1pPcElBdWFDUm9iM3dOSUI4c2hjc3FvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9jY2RkOGItNzcyMC00ZGUwLThjNDMt ZGFjYjVmMzU2ZWEzLzEvbFhsTTRxSnJGWU81bVNuenBxem9MSHNZaFBBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9jY2RkOGItNzcyMC00ZGUwLThjNDMtZGFjYjVmMzU2ZWEz LzEvdzE2c1pPcElBdWFDUm9iM3dOSUI4c2hjc3FvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW5SCMA0G CSqGSIb3DQEBCwUAA4IBAQDJVOBiyUky4yPop/mfhHG0P+Q9x4Rrow6VNFoCX5Af lflCYJa3cJdNJQfjKjohfTLKDXXU+yDeccwClpUGF9R0oLVhUFxJCkoCD4echB7/ 4B387PHtrWNuc5HZqy2jMD3aIZ/rN5+VV6wh2bdZgHJKxo8EH/LLeE1adqIYneWE hRGCuH5cRa/RpaxLf3Kus5Jwkxhrk2v9fLd5arB29scT+TzEczS8XL6dyiZmtHc3 gZwkodY1BmZrBJ0eh68RHXRItVXqrinkl1pybW6QXDFjjzun1B/qJuOMJfX5Eoup B9aIWFKiXrc+5wIGXrDfHmy+Ck7It7ijcy9fO/O2yt5O -----END CERTIFICATE-----Generated at Fri Jan 23 18:50:48 2026 by rpki-client