This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/LN7WlJgWxXIKfcEXk8zrHtE8UEM.roa File: LN7WlJgWxXIKfcEXk8zrHtE8UEM.roa (raw, json) Hash identifier: 2axWvaqglWLCYWrWoeUMB2A1MQtWwtQyrtY/VGuBQSY= Subject key identifier: 2C:DE:D6:94:98:16:C5:72:0A:7D:C1:17:93:CC:EB:1E:D1:3C:50:43 Certificate issuer: /CN=0548cedf17029ed98a108113c6c109ecaccd82ec Certificate serial: 019B797ED0E199236468B35F3729DEA78146 Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/LN7WlJgWxXIKfcEXk8zrHtE8UEM.roa Signing time: Thu 01 Jan 2026 12:18:32 +0000 ROA not before: Thu 01 Jan 2026 12:18:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201326 IP address blocks: 78.83.212.0/24 maxlen: 24 78.83.213.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.mft rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:d0:e1:99:23:64:68:b3:5f:37:29:de:a7:81:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec Validity Not Before: Jan 1 12:18:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2cded6949816c5720a7dc11793cceb1ed13c5043 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:74:0f:45:5e:22:e5:5f:b8:49:33:ef:76:60: 43:c8:c9:a8:ea:81:69:97:e3:ba:f7:e3:7f:8b:77: 8b:7e:a6:7f:b0:70:c1:0d:50:e2:de:ef:c5:c7:58: 18:fb:08:14:79:50:81:53:43:5c:a4:34:40:1d:bd: 6c:aa:19:52:62:a7:06:06:3b:80:ef:15:a3:31:d2: d9:0d:f8:df:b9:62:2f:18:71:0f:cf:f5:e3:eb:a5: 08:9b:25:54:d4:70:fc:27:d4:45:59:7d:16:fc:a4: f7:c4:39:60:0c:06:4f:45:4d:7c:ce:0b:b5:35:b2: 6b:9b:71:50:1f:04:c3:00:67:db:26:ed:d8:18:c9: 37:b4:83:80:13:4b:a8:97:4c:6e:f3:04:29:f8:2b: 9e:72:4c:02:83:df:25:20:d6:e2:b4:4d:6b:0c:92: 24:f9:6c:06:df:d2:55:2c:29:54:94:74:5d:75:6a: 92:91:73:96:03:f2:01:75:1b:39:a2:40:8e:7a:af: 23:9d:cf:ed:70:1f:d1:03:aa:64:57:d4:f7:18:f6: 08:0b:a3:51:5f:04:b5:ae:24:fd:94:ee:ce:8a:7a: 48:ad:26:2b:93:e7:05:82:56:b9:50:0f:96:f3:78: 03:a5:7a:f3:f4:f5:5f:f1:cf:5d:94:0f:c4:1f:ad: 51:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:DE:D6:94:98:16:C5:72:0A:7D:C1:17:93:CC:EB:1E:D1:3C:50:43 X509v3 Authority Key Identifier: keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/LN7WlJgWxXIKfcEXk8zrHtE8UEM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.83.212.0/23 Signature Algorithm: sha256WithRSAEncryption 29:3c:6b:18:e6:21:dd:64:28:16:fb:60:10:67:03:5f:e4:37: 34:34:4c:f3:60:d1:e5:bf:db:44:20:89:83:fb:a2:3f:be:6a: d5:81:09:16:18:d7:a2:c5:0b:b3:dc:ae:c1:e3:b8:74:7a:ee: 10:b3:43:e5:5c:0f:3b:41:53:83:81:d6:8f:d6:bc:91:03:8a: e1:38:32:a7:ca:62:ec:4e:e0:b4:aa:2a:12:56:f7:ea:04:14: 61:45:df:37:57:c2:ab:32:ab:2f:44:d0:0f:f0:b9:f8:2d:cb: e9:0e:0b:a4:bf:f7:1d:66:b5:3a:f9:ec:da:a8:57:a7:d5:da: 26:98:a3:3e:62:1c:01:c6:b8:05:31:26:6c:07:29:1c:a4:79: bb:52:28:3d:3a:15:c6:44:e1:85:b7:1e:95:ff:66:03:ed:94: bc:9d:ed:b3:61:c0:42:a5:a6:b0:38:bb:d1:7b:3b:9d:0f:1b: f4:e6:b0:69:8e:a0:63:90:f4:a0:67:6a:1e:fb:ea:90:30:2c: 69:ef:37:49:7b:23:25:35:de:53:d0:73:bc:f1:50:18:b6:f3: ec:0e:9a:91:a5:bb:63:43:3e:43:a6:81:e0:65:c3:4e:72:f6: 4f:bb:7a:72:66:d6:4f:ee:6f:99:6f:fe:af:fd:64:87:ef:02: 93:97:94:88 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5ftDhmSNkaLNfNynep4FGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1NDhjZWRmMTcwMjllZDk4YTEwODExM2M2YzEwOWVjYWNj ZDgyZWMwHhcNMjYwMTAxMTIxODMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyY2RlZDY5NDk4MTZjNTcyMGE3ZGMxMTc5M2NjZWIxZWQxM2M1MDQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtHQPRV4i5V+4STPvdmBDyMmo6oFp l+O69+N/i3eLfqZ/sHDBDVDi3u/Fx1gY+wgUeVCBU0NcpDRAHb1sqhlSYqcGBjuA 7xWjMdLZDfjfuWIvGHEPz/Xj66UImyVU1HD8J9RFWX0W/KT3xDlgDAZPRU18zgu1 NbJrm3FQHwTDAGfbJu3YGMk3tIOAE0uol0xu8wQp+CueckwCg98lINbitE1rDJIk +WwG39JVLClUlHRddWqSkXOWA/IBdRs5okCOeq8jnc/tcB/RA6pkV9T3GPYIC6NR XwS1riT9lO7OinpIrSYrk+cFgla5UA+W83gDpXrz9PVf8c9dlA/EH61RBwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCze1pSYFsVyCn3BF5PM6x7RPFBDMB8GA1UdIwQY MBaAFAVIzt8XAp7ZihCBE8bBCeyszYLsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlVqTzN4Y0NudG1LRUlFVHhzRUo3S3pOZ3V3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS81NDFjMDUtOGQ3ZC00MmI4LWFiMDAt N2ZiYmFlNmY5NDM3LzEvTE43V2xKZ1d4WElLZmNFWGs4enJIdEU4VUVNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS81NDFjMDUtOGQ3ZC00MmI4LWFiMDAtN2ZiYmFlNmY5NDM3 LzEvQlVqTzN4Y0NudG1LRUlFVHhzRUo3S3pOZ3V3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBTlPUMA0G CSqGSIb3DQEBCwUAA4IBAQApPGsY5iHdZCgW+2AQZwNf5Dc0NEzzYNHlv9tEIImD +6I/vmrVgQkWGNeixQuz3K7B47h0eu4Qs0PlXA87QVODgdaP1ryRA4rhODKnymLs TuC0qioSVvfqBBRhRd83V8KrMqsvRNAP8Ln4LcvpDgukv/cdZrU6+ezaqFen1dom mKM+YhwBxrgFMSZsBykcpHm7Uig9OhXGROGFtx6V/2YD7ZS8ne2zYcBCpaawOLvR ezudDxv05rBpjqBjkPSgZ2oe++qQMCxp7zdJeyMlNd5T0HO88VAYtvPsDpqRpbtj Qz5DpoHgZcNOcvZPu3pyZtZP7m+Zb/6v/WSH7wKTl5SI -----END CERTIFICATE-----Generated at Mon Jan 26 17:25:25 2026 by rpki-client