This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/8c83fd-52b5-40bb-9963-48873baa69a7/1/Lx3kSTB8cPwi2F0zi8APX0Mms_s.roa File: Lx3kSTB8cPwi2F0zi8APX0Mms_s.roa (raw, json) Hash identifier: f2ZlkqWb/qQdpjOOf0CV8hzupX2VUl1uaY/K5mbuupg= Subject key identifier: 2F:1D:E4:49:30:7C:70:FC:22:D8:5D:33:8B:C0:0F:5F:43:26:B3:FB Certificate issuer: /CN=881721281ffba5713e9d052af6fe6d1b040a2a39 Certificate serial: 019B78A27B84A226D5F033F1B86ED0905830 Authority key identifier: 88:17:21:28:1F:FB:A5:71:3E:9D:05:2A:F6:FE:6D:1B:04:0A:2A:39 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iBchKB_7pXE-nQUq9v5tGwQKKjk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/8c83fd-52b5-40bb-9963-48873baa69a7/1/Lx3kSTB8cPwi2F0zi8APX0Mms_s.roa Signing time: Thu 01 Jan 2026 08:17:52 +0000 ROA not before: Thu 01 Jan 2026 08:17:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34655 IP address blocks: 5.159.216.0/24 maxlen: 24 5.159.217.0/24 maxlen: 24 5.159.218.0/24 maxlen: 24 5.159.219.0/24 maxlen: 24 93.93.50.0/24 maxlen: 24 93.93.51.0/24 maxlen: 24 93.93.53.0/24 maxlen: 24 93.93.54.0/24 maxlen: 24 95.128.120.0/24 maxlen: 24 95.128.121.0/24 maxlen: 24 95.128.122.0/24 maxlen: 24 95.128.123.0/24 maxlen: 24 95.128.124.0/24 maxlen: 24 95.128.125.0/24 maxlen: 24 95.128.126.0/24 maxlen: 24 95.128.127.0/24 maxlen: 24 109.71.160.0/24 maxlen: 24 109.71.161.0/24 maxlen: 24 109.71.162.0/24 maxlen: 24 109.71.163.0/24 maxlen: 24 109.71.164.0/24 maxlen: 24 109.71.165.0/24 maxlen: 24 109.71.166.0/24 maxlen: 24 109.71.167.0/24 maxlen: 24 185.13.88.0/24 maxlen: 24 185.13.89.0/24 maxlen: 24 185.13.90.0/24 maxlen: 24 185.13.91.0/24 maxlen: 24 2a03:9c40::/48 maxlen: 48 2a03:9c40:200::/48 maxlen: 48 2a03:9c40:400::/48 maxlen: 48 2a03:9c40:600::/48 maxlen: 48 2a03:9c40:800::/48 maxlen: 48 2a03:9c40:1000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/8c83fd-52b5-40bb-9963-48873baa69a7/1/iBchKB_7pXE-nQUq9v5tGwQKKjk.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/8c83fd-52b5-40bb-9963-48873baa69a7/1/iBchKB_7pXE-nQUq9v5tGwQKKjk.mft rsync://rpki.ripe.net/repository/DEFAULT/iBchKB_7pXE-nQUq9v5tGwQKKjk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:7b:84:a2:26:d5:f0:33:f1:b8:6e:d0:90:58:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=881721281ffba5713e9d052af6fe6d1b040a2a39 Validity Not Before: Jan 1 08:17:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2f1de449307c70fc22d85d338bc00f5f4326b3fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:d9:69:e6:f0:04:ad:e1:56:20:4a:e3:22:7e: cb:6e:93:a1:12:42:25:89:78:d7:55:b9:75:dd:dc: f7:ec:f3:a7:84:67:7a:40:5c:ed:47:f0:36:2a:e5: 74:12:a4:c2:bd:9d:90:ed:7d:80:18:21:04:a6:dd: c8:9a:7d:45:ee:3c:38:b8:45:dd:ba:b5:1a:e9:10: 4d:73:58:e0:b3:45:29:2b:ba:ba:c0:6f:4c:29:e1: d7:c2:54:6f:63:92:88:8b:cd:a7:71:7a:44:fa:24: ac:b6:3c:bc:e0:54:e1:3d:c7:a0:8f:7f:ce:6b:9b: 24:84:d8:e7:d8:ca:c6:40:18:5a:6a:e5:86:5a:b1: c6:4d:49:fa:a8:a7:b4:15:94:43:20:a7:b4:b7:d3: d2:a6:67:de:22:fc:25:30:79:b6:a9:cf:64:96:b6: 26:00:dd:c0:4b:80:91:c3:12:ff:01:f3:db:5e:25: 3b:f5:5c:f1:dd:1a:df:3b:8e:d5:b8:67:79:f0:70: 72:f7:38:91:5c:80:2c:d3:11:87:b5:a5:92:7b:13: 32:3f:38:db:10:2c:01:64:e8:be:1f:a1:78:7f:bb: f4:99:9a:ae:4d:2e:97:3f:b9:bd:40:d1:3b:89:b6: a6:33:2a:1f:a1:ec:03:16:71:fe:00:ac:40:53:b5: b4:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:1D:E4:49:30:7C:70:FC:22:D8:5D:33:8B:C0:0F:5F:43:26:B3:FB X509v3 Authority Key Identifier: keyid:88:17:21:28:1F:FB:A5:71:3E:9D:05:2A:F6:FE:6D:1B:04:0A:2A:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iBchKB_7pXE-nQUq9v5tGwQKKjk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/8c83fd-52b5-40bb-9963-48873baa69a7/1/Lx3kSTB8cPwi2F0zi8APX0Mms_s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/8c83fd-52b5-40bb-9963-48873baa69a7/1/iBchKB_7pXE-nQUq9v5tGwQKKjk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.159.216.0/22 93.93.50.0/23 93.93.53.0-93.93.54.255 95.128.120.0/21 109.71.160.0/21 185.13.88.0/22 IPv6: 2a03:9c40::/48 2a03:9c40:200::/48 2a03:9c40:400::/48 2a03:9c40:600::/48 2a03:9c40:800::/48 2a03:9c40:1000::/48 Signature Algorithm: sha256WithRSAEncryption 05:49:de:11:ed:a4:98:69:8f:93:0f:2a:ad:0c:3c:35:17:bc: d0:b9:8a:5d:39:f4:a9:d2:93:79:60:fc:fa:8a:5f:af:58:d8: a1:99:96:97:cf:9c:cb:e2:19:c8:63:83:ba:b7:d4:97:0d:7e: 82:9b:ad:ba:69:41:ab:44:4a:c7:05:19:fe:45:27:86:96:14: 00:96:5b:82:06:a1:5d:07:af:74:86:1e:23:ce:d5:01:af:1a: 27:90:17:ba:53:8e:05:56:5f:fe:37:78:41:71:38:d4:a9:9c: fa:1e:d8:bc:05:db:97:60:e0:d5:fa:48:4d:29:f1:e9:1c:03: 4b:bf:ec:9f:89:02:ea:34:5a:b1:1e:0e:2a:66:b6:ad:c8:dd: 50:c7:89:28:ed:07:9c:8c:6c:63:cc:8a:5d:ce:dc:c6:8a:e8: a5:10:4a:1e:e6:1c:97:29:a8:cd:4c:95:49:b3:47:f2:09:f1: d6:a2:dc:94:e5:13:6c:ad:76:39:9d:f3:9a:ca:e6:ad:47:f4: 7d:c2:35:85:41:8f:4d:89:40:66:86:30:42:80:d7:4d:92:4c: ef:51:76:34:a1:b6:ac:6c:56:2f:c2:95:39:cf:92:99:6e:0b: a7:a3:d0:9b:1e:ae:d3:31:b2:c5:61:a0:d5:7f:ef:e1:ee:90: 33:60:ce:83 -----BEGIN CERTIFICATE----- MIIFYjCCBEqgAwIBAgISAZt4onuEoibV8DPxuG7QkFgwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4MTcyMTI4MWZmYmE1NzEzZTlkMDUyYWY2ZmU2ZDFiMDQw YTJhMzkwHhcNMjYwMTAxMDgxNzUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZjFkZTQ0OTMwN2M3MGZjMjJkODVkMzM4YmMwMGY1ZjQzMjZiM2ZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Nlp5vAEreFWIErjIn7LbpOhEkIl iXjXVbl13dz37POnhGd6QFztR/A2KuV0EqTCvZ2Q7X2AGCEEpt3Imn1F7jw4uEXd urUa6RBNc1jgs0UpK7q6wG9MKeHXwlRvY5KIi82ncXpE+iSstjy84FThPcegj3/O a5skhNjn2MrGQBhaauWGWrHGTUn6qKe0FZRDIKe0t9PSpmfeIvwlMHm2qc9klrYm AN3AS4CRwxL/AfPbXiU79Vzx3RrfO47VuGd58HBy9ziRXIAs0xGHtaWSexMyPzjb ECwBZOi+H6F4f7v0mZquTS6XP7m9QNE7ibamMyofoewDFnH+AKxAU7W0VwIDAQAB o4ICbjCCAmowHQYDVR0OBBYEFC8d5EkwfHD8IthdM4vAD19DJrP7MB8GA1UdIwQY MBaAFIgXISgf+6VxPp0FKvb+bRsECio5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUJjaEtCXzdwWEUtblFVcTl2NXRHd1FLS2prLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy84YzgzZmQtNTJiNS00MGJiLTk5NjMt NDg4NzNiYWE2OWE3LzEvTHgza1NUQjhjUHdpMkYwemk4QVBYME1tc19zLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy84YzgzZmQtNTJiNS00MGJiLTk5NjMtNDg4NzNiYWE2OWE3 LzEvaUJjaEtCXzdwWEUtblFVcTl2NXRHd1FLS2prLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGDBggrBgEFBQcBBwEB/wR0MHIwMgQCAAEwLAMEAgWf2AME AV1dMjAMAwQAXV01AwQAXV02AwQDX4B4AwQDbUegAwQCuQ1YMDwEAgACMDYDBwAq A5xAAAADBwAqA5xAAgADBwAqA5xABAADBwAqA5xABgADBwAqA5xACAADBwAqA5xA EAAwDQYJKoZIhvcNAQELBQADggEBAAVJ3hHtpJhpj5MPKq0MPDUXvNC5il059KnS k3lg/PqKX69Y2KGZlpfPnMviGchjg7q31JcNfoKbrbppQatESscFGf5FJ4aWFACW W4IGoV0Hr3SGHiPO1QGvGieQF7pTjgVWX/43eEFxONSpnPoe2LwF25dg4NX6SE0p 8ekcA0u/7J+JAuo0WrEeDipmtq3I3VDHiSjtB5yMbGPMil3O3MaK6KUQSh7mHJcp qM1MlUmzR/IJ8dai3JTlE2ytdjmd85rK5q1H9H3CNYVBj02JQGaGMEKA102STO9R djShtqxsVi/ClTnPkpluC6ej0JsertMxssVhoNV/7+HukDNgzoM= -----END CERTIFICATE-----Generated at Tue Feb 10 04:15:07 2026 by rpki-client