This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/749d77-e995-489a-87e0-d00a13aae540/1/lc54bO2qpbEp6ZuINe9U374Bnw0.roa File: lc54bO2qpbEp6ZuINe9U374Bnw0.roa (raw, json) Hash identifier: KvWJl722IjNTPYxbQCA4iUQ0TYdemSL5ZuAeqRqaebU= Subject key identifier: 95:CE:78:6C:ED:AA:A5:B1:29:E9:9B:88:35:EF:54:DF:BE:01:9F:0D Certificate issuer: /CN=a85ed55f144d71e673e63f4b7670c41344c09580 Certificate serial: 019B78A26EFA88E7A7E1E919B9E7CBCFDBC4 Authority key identifier: A8:5E:D5:5F:14:4D:71:E6:73:E6:3F:4B:76:70:C4:13:44:C0:95:80 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qF7VXxRNceZz5j9LdnDEE0TAlYA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/749d77-e995-489a-87e0-d00a13aae540/1/lc54bO2qpbEp6ZuINe9U374Bnw0.roa Signing time: Thu 01 Jan 2026 08:17:49 +0000 ROA not before: Thu 01 Jan 2026 08:17:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199113 IP address blocks: 91.242.56.0/21 maxlen: 21 176.123.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/749d77-e995-489a-87e0-d00a13aae540/1/qF7VXxRNceZz5j9LdnDEE0TAlYA.crl rsync://rpki.ripe.net/repository/DEFAULT/04/749d77-e995-489a-87e0-d00a13aae540/1/qF7VXxRNceZz5j9LdnDEE0TAlYA.mft rsync://rpki.ripe.net/repository/DEFAULT/qF7VXxRNceZz5j9LdnDEE0TAlYA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:6e:fa:88:e7:a7:e1:e9:19:b9:e7:cb:cf:db:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a85ed55f144d71e673e63f4b7670c41344c09580 Validity Not Before: Jan 1 08:17:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=95ce786cedaaa5b129e99b8835ef54dfbe019f0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:7a:40:2e:7c:94:14:19:78:84:7e:79:95:70: 1f:7e:75:f7:78:81:90:8c:3c:dc:c4:a5:b9:2b:02: af:92:34:af:0d:97:35:94:f9:98:09:33:98:a2:4d: d2:38:21:a1:83:4a:76:08:a7:cc:bd:1c:7d:4e:b9: d0:4f:f8:3d:25:9f:58:8d:05:a2:0f:e7:e4:c1:0b: 0b:c0:ec:ac:52:00:70:66:0b:be:bd:f4:da:a5:8e: 9e:13:b7:27:fe:52:69:10:3b:2e:aa:84:97:83:41: b8:f6:54:5b:88:8f:8d:21:b9:20:12:68:65:e7:e3: 25:50:74:2c:26:13:4b:f5:02:01:5f:0a:e6:46:51: 06:f5:85:11:b6:19:81:58:3d:c8:cd:cc:85:d0:1e: f7:32:07:41:c6:1e:b4:4f:e8:ba:a7:9a:95:02:b1: 0f:2a:88:1c:bd:41:ab:63:2b:06:82:8e:84:97:ba: 52:6f:d8:b7:7b:4f:31:8f:7e:9d:1b:26:b9:36:a5: 47:fb:e3:71:d6:68:f6:17:25:e1:af:0f:ef:d5:00: e1:33:e9:86:6d:ce:73:67:b5:0e:4d:a1:d7:c2:82: ca:22:96:f7:51:96:ce:a2:ee:d6:41:3e:af:73:bf: 2e:e4:a3:63:e8:58:f5:0b:f8:b0:5d:53:58:23:87: 35:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:CE:78:6C:ED:AA:A5:B1:29:E9:9B:88:35:EF:54:DF:BE:01:9F:0D X509v3 Authority Key Identifier: keyid:A8:5E:D5:5F:14:4D:71:E6:73:E6:3F:4B:76:70:C4:13:44:C0:95:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qF7VXxRNceZz5j9LdnDEE0TAlYA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/749d77-e995-489a-87e0-d00a13aae540/1/lc54bO2qpbEp6ZuINe9U374Bnw0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/04/749d77-e995-489a-87e0-d00a13aae540/1/qF7VXxRNceZz5j9LdnDEE0TAlYA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.242.56.0/21 176.123.223.0/24 Signature Algorithm: sha256WithRSAEncryption 4d:ed:f9:8d:67:4f:9d:38:6d:7e:4e:35:a9:65:8e:8e:15:b6: 3a:5a:bf:66:16:6b:ed:f2:04:49:25:63:fe:c3:12:1e:df:b5: 43:d4:d4:62:23:4d:47:0b:d4:23:48:40:c2:cf:37:fc:4a:db: 32:77:fe:3e:7d:04:2c:dc:36:e1:41:3b:6a:ee:a9:1f:58:9d: b9:cd:2b:13:f0:41:29:7c:c0:a8:fb:45:79:cf:15:81:43:55: df:85:d4:4e:db:c9:d1:00:6e:1f:e8:1c:2c:7a:bc:3c:d5:69: c4:58:ab:d7:36:21:fd:5b:af:35:d4:92:80:04:6b:61:7f:f8: 5c:7d:9b:d9:03:2c:fa:42:14:52:0a:48:b6:5b:c3:2e:5f:68: 30:7b:9d:ec:a4:93:a4:dc:97:24:d2:0a:1b:8d:41:9d:2c:e2: 73:6c:07:b8:a8:b1:44:46:d9:55:8c:19:82:d8:05:21:36:d8: 0d:f0:ad:cc:96:e7:31:94:6f:f6:90:7c:27:3c:d8:db:c7:9b: 41:d7:30:96:f6:1d:88:65:0c:ac:ab:06:0d:e4:0f:15:43:65: e9:6d:b1:8d:f8:c5:91:91:d3:ba:5c:3f:32:c2:4c:96:15:07: 8b:cb:5d:0e:b9:31:b6:fb:57:f3:f9:f4:35:b9:70:f0:a3:6d: b6:93:3b:bd -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt4om76iOen4ekZuefLz9vEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4NWVkNTVmMTQ0ZDcxZTY3M2U2M2Y0Yjc2NzBjNDEzNDRj MDk1ODAwHhcNMjYwMTAxMDgxNzQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NWNlNzg2Y2VkYWFhNWIxMjllOTliODgzNWVmNTRkZmJlMDE5ZjBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw3pALnyUFBl4hH55lXAffnX3eIGQ jDzcxKW5KwKvkjSvDZc1lPmYCTOYok3SOCGhg0p2CKfMvRx9TrnQT/g9JZ9YjQWi D+fkwQsLwOysUgBwZgu+vfTapY6eE7cn/lJpEDsuqoSXg0G49lRbiI+NIbkgEmhl 5+MlUHQsJhNL9QIBXwrmRlEG9YURthmBWD3IzcyF0B73MgdBxh60T+i6p5qVArEP KogcvUGrYysGgo6El7pSb9i3e08xj36dGya5NqVH++Nx1mj2FyXhrw/v1QDhM+mG bc5zZ7UOTaHXwoLKIpb3UZbOou7WQT6vc78u5KNj6Fj1C/iwXVNYI4c12wIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFJXOeGztqqWxKembiDXvVN++AZ8NMB8GA1UdIwQY MBaAFKhe1V8UTXHmc+Y/S3ZwxBNEwJWAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUY3Vlh4Uk5jZVp6NWo5TGRuREVFMFRBbFlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC83NDlkNzctZTk5NS00ODlhLTg3ZTAt ZDAwYTEzYWFlNTQwLzEvbGM1NGJPMnFwYkVwNlp1SU5lOVUzNzRCbncwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNC83NDlkNzctZTk5NS00ODlhLTg3ZTAtZDAwYTEzYWFlNTQw LzEvcUY3Vlh4Uk5jZVp6NWo5TGRuREVFMFRBbFlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDW/I4AwQA sHvfMA0GCSqGSIb3DQEBCwUAA4IBAQBN7fmNZ0+dOG1+TjWpZY6OFbY6Wr9mFmvt 8gRJJWP+wxIe37VD1NRiI01HC9QjSEDCzzf8Stsyd/4+fQQs3DbhQTtq7qkfWJ25 zSsT8EEpfMCo+0V5zxWBQ1XfhdRO28nRAG4f6Bwserw81WnEWKvXNiH9W6811JKA BGthf/hcfZvZAyz6QhRSCki2W8MuX2gwe53spJOk3Jck0gobjUGdLOJzbAe4qLFE RtlVjBmC2AUhNtgN8K3MlucxlG/2kHwnPNjbx5tB1zCW9h2IZQysqwYN5A8VQ2Xp bbGN+MWRkdO6XD8ywkyWFQeLy10OuTG2+1fz+fQ1uXDwo222kzu9 -----END CERTIFICATE-----Generated at Tue Feb 10 00:02:59 2026 by rpki-client