This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/af3d81-0047-413c-91f4-0470b4bb30db/1/rL-iVMHxtGo5kWiOEpOPkt5AYVk.roa File: rL-iVMHxtGo5kWiOEpOPkt5AYVk.roa (raw, json) Hash identifier: gBSDL3GaTKepMFy7vrD/4/ZtzbB+iloDhAFlQ3Xiouc= Subject key identifier: AC:BF:A2:54:C1:F1:B4:6A:39:91:68:8E:12:93:8F:92:DE:40:61:59 Certificate issuer: /CN=f879988e0f49971a326f419e5cfacbfddcc993e7 Certificate serial: 019B7B3588970B799999C2827B45A324DD0E Authority key identifier: F8:79:98:8E:0F:49:97:1A:32:6F:41:9E:5C:FA:CB:FD:DC:C9:93:E7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/af3d81-0047-413c-91f4-0470b4bb30db/1/rL-iVMHxtGo5kWiOEpOPkt5AYVk.roa Signing time: Thu 01 Jan 2026 20:17:44 +0000 ROA not before: Thu 01 Jan 2026 20:17:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16276 IP address blocks: 83.136.214.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/af3d81-0047-413c-91f4-0470b4bb30db/1/1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.crl rsync://rpki.ripe.net/repository/DEFAULT/05/af3d81-0047-413c-91f4-0470b4bb30db/1/1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.mft rsync://rpki.ripe.net/repository/DEFAULT/1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:88:97:0b:79:99:99:c2:82:7b:45:a3:24:dd:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f879988e0f49971a326f419e5cfacbfddcc993e7 Validity Not Before: Jan 1 20:17:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=acbfa254c1f1b46a3991688e12938f92de406159 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:36:89:3c:30:fb:7e:1a:df:14:cb:56:2b:ed: 22:fd:fc:6c:dc:e5:f3:67:dd:2c:d4:26:05:87:35: 43:f2:db:89:71:43:37:24:97:df:0f:a0:6a:cc:7f: d3:79:2f:62:d0:40:db:ca:c3:c9:6c:de:8c:90:04: 06:45:05:27:a7:a1:e5:a2:4c:87:99:3c:dd:ed:52: 86:21:d8:b9:e7:42:b9:61:55:1c:4b:84:6d:12:6e: 65:22:7f:f4:79:ea:92:0e:e6:ab:11:f4:01:21:b2: 35:38:c9:b2:61:18:34:ad:c0:0e:6a:08:7a:1c:11: 16:46:dd:b3:ba:2b:b8:ec:54:f2:51:b4:c3:28:b8: 24:86:6c:3d:ec:85:86:c4:0a:4c:0b:ad:fd:d5:09: 4a:bf:b7:cc:e7:3f:c1:56:14:62:61:da:30:0c:8e: 8a:0d:f0:fb:3f:fa:8f:cd:e3:0d:bd:d2:f4:ee:09: 10:aa:4d:85:8e:d4:06:5a:d7:cf:bf:63:d6:d4:02: d7:08:93:75:06:df:fe:1f:48:55:16:67:cb:2d:f8: d1:01:04:cf:80:dd:70:cb:56:03:08:1d:c4:18:94: 10:2b:6e:c5:bc:3f:72:90:22:da:3a:a4:ed:f7:e1: 22:80:8e:bf:e4:5e:fb:dc:db:a1:97:5e:42:7d:8e: 3e:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:BF:A2:54:C1:F1:B4:6A:39:91:68:8E:12:93:8F:92:DE:40:61:59 X509v3 Authority Key Identifier: keyid:F8:79:98:8E:0F:49:97:1A:32:6F:41:9E:5C:FA:CB:FD:DC:C9:93:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/af3d81-0047-413c-91f4-0470b4bb30db/1/rL-iVMHxtGo5kWiOEpOPkt5AYVk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/af3d81-0047-413c-91f4-0470b4bb30db/1/1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 83.136.214.0/23 Signature Algorithm: sha256WithRSAEncryption 28:6f:63:e7:a7:cf:da:d5:5b:74:06:a7:a4:07:44:7e:1f:09: ef:7d:98:6e:3b:a0:cc:1d:86:5d:71:7a:60:21:3b:7c:cf:3c: cd:ca:93:e0:d0:af:ed:83:54:d3:ef:e4:b9:db:67:13:16:3b: a4:17:a3:45:0a:f5:a7:7c:34:52:ef:a7:32:a0:0f:c1:d9:9a: ef:0b:23:1f:3f:1e:5b:79:fe:00:9e:4c:ae:1f:3f:ab:21:46: a8:b6:53:2f:d2:18:a9:dc:10:42:ba:f7:72:d8:ca:7c:73:5d: 77:22:87:ad:cf:c4:b1:78:a9:e3:92:53:7b:c0:45:23:d0:10: 3b:16:d7:e7:c5:b3:c6:67:8f:92:52:cd:69:dd:d9:bd:2f:80: 5a:05:9a:d1:e8:f8:aa:68:61:6d:ca:2c:54:a8:d5:f4:cb:0f: c2:a6:09:bd:91:44:6e:07:1c:1c:e5:1a:08:5a:cf:3a:dd:c2: f0:61:40:3d:41:ca:91:39:c9:c2:34:5e:8b:74:89:8c:b1:fe: 10:46:97:95:c3:f5:8f:52:84:bc:6a:6c:2d:d8:ff:e6:ca:c0: db:f1:9d:f5:7e:ae:51:63:c5:85:b7:76:28:eb:61:f8:00:cf: 87:b2:bf:26:17:4b:fb:78:fd:97:fa:74:aa:ce:4f:aa:c0:dd: 98:03:58:02 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt7NYiXC3mZmcKCe0WjJN0OMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4Nzk5ODhlMGY0OTk3MWEzMjZmNDE5ZTVjZmFjYmZkZGNj OTkzZTcwHhcNMjYwMTAxMjAxNzQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhY2JmYTI1NGMxZjFiNDZhMzk5MTY4OGUxMjkzOGY5MmRlNDA2MTU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsjaJPDD7fhrfFMtWK+0i/fxs3OXz Z90s1CYFhzVD8tuJcUM3JJffD6BqzH/TeS9i0EDbysPJbN6MkAQGRQUnp6HlokyH mTzd7VKGIdi550K5YVUcS4RtEm5lIn/0eeqSDuarEfQBIbI1OMmyYRg0rcAOagh6 HBEWRt2zuiu47FTyUbTDKLgkhmw97IWGxApMC6391QlKv7fM5z/BVhRiYdowDI6K DfD7P/qPzeMNvdL07gkQqk2FjtQGWtfPv2PW1ALXCJN1Bt/+H0hVFmfLLfjRAQTP gN1wy1YDCB3EGJQQK27FvD9ykCLaOqTt9+EigI6/5F773Nuhl15CfY4+SwIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFKy/olTB8bRqOZFojhKTj5LeQGFZMB8GA1UdIwQY MBaAFPh5mI4PSZcaMm9Bnlz6y/3cyZPnMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1IbVlqZzlKbHhveWIwR2VYUHJMX2R6SmstYy5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDUvYWYzZDgxLTAwNDctNDEzYy05MWY0 LTA0NzBiNGJiMzBkYi8xL3JMLWlWTUh4dEdvNWtXaU9FcE9Qa3Q1QVlWay5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvMDUvYWYzZDgxLTAwNDctNDEzYy05MWY0LTA0NzBiNGJiMzBk Yi8xLzEtSG1Zamc5Smx4b3liMEdlWFByTF9kekprLWMuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFTiNYw DQYJKoZIhvcNAQELBQADggEBAChvY+enz9rVW3QGp6QHRH4fCe99mG47oMwdhl1x emAhO3zPPM3Kk+DQr+2DVNPv5LnbZxMWO6QXo0UK9ad8NFLvpzKgD8HZmu8LIx8/ Hlt5/gCeTK4fP6shRqi2Uy/SGKncEEK693LYynxzXXcih63PxLF4qeOSU3vARSPQ EDsW1+fFs8Znj5JSzWnd2b0vgFoFmtHo+KpoYW3KLFSo1fTLD8KmCb2RRG4HHBzl GghazzrdwvBhQD1BypE5ycI0Xot0iYyx/hBGl5XD9Y9ShLxqbC3Y/+bKwNvxnfV+ rlFjxYW3dijrYfgAz4eyvyYXS/t4/Zf6dKrOT6rA3ZgDWAI= -----END CERTIFICATE-----Generated at Tue Jan 20 02:13:53 2026 by rpki-client