This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/95fa61-17fb-4890-9598-1d3a1e9b7545/1/lK_21cfqHhmJDzSShJrfpf28gUs.roa File: lK_21cfqHhmJDzSShJrfpf28gUs.roa (raw, json) Hash identifier: kBqpwIbu+aOiILYXAzJqhtjAR9DT0AhDNrOMT8mT30s= Subject key identifier: 94:AF:F6:D5:C7:EA:1E:19:89:0F:34:92:84:9A:DF:A5:FD:BC:81:4B Certificate issuer: /CN=2d2f9339fbb8cb33c522751c530f3a20a753547c Certificate serial: 019B7F153DE8BE56AA10FEB12E3DC4171D6A Authority key identifier: 2D:2F:93:39:FB:B8:CB:33:C5:22:75:1C:53:0F:3A:20:A7:53:54:7C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LS-TOfu4yzPFInUcUw86IKdTVHw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/95fa61-17fb-4890-9598-1d3a1e9b7545/1/lK_21cfqHhmJDzSShJrfpf28gUs.roa Signing time: Fri 02 Jan 2026 14:20:57 +0000 ROA not before: Fri 02 Jan 2026 14:20:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209671 IP address blocks: 185.104.208.0/22 maxlen: 24 2a06:3340::/32 maxlen: 32 2a09:de80::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/95fa61-17fb-4890-9598-1d3a1e9b7545/1/LS-TOfu4yzPFInUcUw86IKdTVHw.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/95fa61-17fb-4890-9598-1d3a1e9b7545/1/LS-TOfu4yzPFInUcUw86IKdTVHw.mft rsync://rpki.ripe.net/repository/DEFAULT/LS-TOfu4yzPFInUcUw86IKdTVHw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 23:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:3d:e8:be:56:aa:10:fe:b1:2e:3d:c4:17:1d:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d2f9339fbb8cb33c522751c530f3a20a753547c Validity Not Before: Jan 2 14:20:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=94aff6d5c7ea1e19890f3492849adfa5fdbc814b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:f1:3c:80:a3:39:d6:97:1e:a9:04:8a:0e:54: 69:e2:98:7c:cb:2c:84:23:57:d0:29:e8:d9:23:7c: 67:4a:5e:50:ae:aa:53:d6:6b:bb:26:8f:9d:b6:a8: c8:25:bc:93:f2:a9:d8:88:3b:3d:ad:e7:c0:80:76: 5e:fa:d5:c9:e7:3a:23:21:a5:3d:cf:90:67:9d:a6: 13:84:a4:44:10:16:8f:e5:3b:4d:c6:48:26:f8:6e: c7:66:1c:58:66:91:be:a4:45:d7:f5:2a:c7:eb:d1: c7:a0:33:a3:50:70:a7:4c:cb:77:15:3f:b1:d2:c4: df:25:15:1b:56:16:5f:fe:12:7d:61:6a:dd:ea:bb: 73:5a:ed:56:8a:8d:bd:8a:6c:b1:7f:95:7b:9e:85: a9:88:14:a1:be:ae:50:6c:d4:3f:dd:78:9f:67:ff: d3:05:5f:6d:cd:ac:b2:e6:2d:33:04:03:f6:29:2a: f5:04:ee:b3:63:a9:de:15:a9:03:48:2e:71:f4:03: 43:d7:93:17:76:e3:7c:16:60:e3:40:24:a7:52:3c: cf:7c:d1:4a:ac:19:5b:c1:54:f0:fb:29:79:40:92: 51:e4:f9:04:13:cd:a3:a8:8d:16:80:64:03:08:91: 06:1a:19:9e:c4:c9:7b:17:83:e4:02:81:3e:24:aa: 74:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:AF:F6:D5:C7:EA:1E:19:89:0F:34:92:84:9A:DF:A5:FD:BC:81:4B X509v3 Authority Key Identifier: keyid:2D:2F:93:39:FB:B8:CB:33:C5:22:75:1C:53:0F:3A:20:A7:53:54:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LS-TOfu4yzPFInUcUw86IKdTVHw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/95fa61-17fb-4890-9598-1d3a1e9b7545/1/lK_21cfqHhmJDzSShJrfpf28gUs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/95fa61-17fb-4890-9598-1d3a1e9b7545/1/LS-TOfu4yzPFInUcUw86IKdTVHw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.104.208.0/22 IPv6: 2a06:3340::/32 2a09:de80::/32 Signature Algorithm: sha256WithRSAEncryption 3f:1d:c5:5e:ce:7b:f9:84:c2:e9:83:22:bb:57:b0:f8:9a:b8: 05:3f:f5:0c:48:5a:33:62:2d:22:50:cd:f4:f9:13:90:45:4c: 64:1b:08:b0:d3:02:c6:42:97:39:7f:51:07:c3:9d:b5:41:10: aa:19:06:59:9f:42:0d:3e:31:2c:0d:2d:46:c2:af:b2:da:ca: bc:f4:74:6c:94:60:b6:6f:77:90:ef:f1:52:88:7b:be:b5:a9: 16:1d:3e:7f:e4:c4:99:a8:15:aa:94:5d:fe:f0:47:63:ce:5e: 87:36:8e:47:a4:96:ae:23:24:cc:3e:3e:33:f0:0f:84:04:56: 11:a3:fe:27:7e:32:5c:66:33:85:b4:85:35:d2:e8:18:2f:91: ec:94:76:1e:69:f1:83:e3:cf:38:b6:b5:b8:f3:1c:d4:c6:dd: 15:b3:26:66:08:bb:19:cf:58:84:5e:c8:c5:a4:df:e3:74:5c: 2b:c8:58:0b:84:e6:96:b4:1a:d0:12:bb:49:17:5a:1c:73:3c: 59:bc:bd:c8:e9:14:3a:a2:6c:e9:f3:f5:0f:f2:53:62:00:96: 59:ef:5f:6e:1b:00:b6:bf:c2:31:4e:f2:a0:e3:c5:b0:fb:0c: bf:18:52:e5:27:b6:32:06:b8:0a:4c:2b:d6:29:81:89:37:4a: 93:eb:d3:47 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgISAZt/FT3ovlaqEP6xLj3EFx1qMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJkMmY5MzM5ZmJiOGNiMzNjNTIyNzUxYzUzMGYzYTIwYTc1 MzU0N2MwHhcNMjYwMTAyMTQyMDU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NGFmZjZkNWM3ZWExZTE5ODkwZjM0OTI4NDlhZGZhNWZkYmM4MTRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwPE8gKM51pceqQSKDlRp4ph8yyyE I1fQKejZI3xnSl5QrqpT1mu7Jo+dtqjIJbyT8qnYiDs9refAgHZe+tXJ5zojIaU9 z5BnnaYThKREEBaP5TtNxkgm+G7HZhxYZpG+pEXX9SrH69HHoDOjUHCnTMt3FT+x 0sTfJRUbVhZf/hJ9YWrd6rtzWu1Wio29imyxf5V7noWpiBShvq5QbNQ/3XifZ//T BV9tzayy5i0zBAP2KSr1BO6zY6neFakDSC5x9AND15MXduN8FmDjQCSnUjzPfNFK rBlbwVTw+yl5QJJR5PkEE82jqI0WgGQDCJEGGhmexMl7F4PkAoE+JKp03QIDAQAB o4ICHzCCAhswHQYDVR0OBBYEFJSv9tXH6h4ZiQ80koSa36X9vIFLMB8GA1UdIwQY MBaAFC0vkzn7uMszxSJ1HFMPOiCnU1R8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTFMtVE9mdTR5elBGSW5VY1V3ODZJS2RUVkh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi85NWZhNjEtMTdmYi00ODkwLTk1OTgt MWQzYTFlOWI3NTQ1LzEvbEtfMjFjZnFIaG1KRHpTU2hKcmZwZjI4Z1VzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi85NWZhNjEtMTdmYi00ODkwLTk1OTgtMWQzYTFlOWI3NTQ1 LzEvTFMtVE9mdTR5elBGSW5VY1V3ODZJS2RUVkh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDUGCCsGAQUFBwEHAQH/BCYwJDAMBAIAATAGAwQCuWjQMBQE AgACMA4DBQAqBjNAAwUAKgnegDANBgkqhkiG9w0BAQsFAAOCAQEAPx3FXs57+YTC 6YMiu1ew+Jq4BT/1DEhaM2ItIlDN9PkTkEVMZBsIsNMCxkKXOX9RB8OdtUEQqhkG WZ9CDT4xLA0tRsKvstrKvPR0bJRgtm93kO/xUoh7vrWpFh0+f+TEmagVqpRd/vBH Y85ehzaOR6SWriMkzD4+M/APhARWEaP+J34yXGYzhbSFNdLoGC+R7JR2Hmnxg+PP OLa1uPMc1MbdFbMmZgi7Gc9YhF7IxaTf43RcK8hYC4TmlrQa0BK7SRdaHHM8Wby9 yOkUOqJs6fP1D/JTYgCWWe9fbhsAtr/CMU7yoOPFsPsMvxhS5Se2Mga4Ckwr1imB iTdKk+vTRw== -----END CERTIFICATE-----Generated at Sun Jan 18 08:53:42 2026 by rpki-client