This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/LFyDS5R4_TBEMs6H-1crPEFzhNk.roa File: LFyDS5R4_TBEMs6H-1crPEFzhNk.roa (raw, json) Hash identifier: 0asYZNw9q1pY2j9U6n30jJz2OzRdsQfwQG+5T29eA7E= Subject key identifier: 2C:5C:83:4B:94:78:FD:30:44:32:CE:87:FB:57:2B:3C:41:73:84:D9 Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722 Certificate serial: 019B7B3560F7DD11152C9363C27DB8DB60BC Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/LFyDS5R4_TBEMs6H-1crPEFzhNk.roa Signing time: Thu 01 Jan 2026 20:17:34 +0000 ROA not before: Thu 01 Jan 2026 20:17:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 21294 IP address blocks: 217.156.85.0/24 maxlen: 24 217.156.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:60:f7:dd:11:15:2c:93:63:c2:7d:b8:db:60:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722 Validity Not Before: Jan 1 20:17:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2c5c834b9478fd304432ce87fb572b3c417384d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:0f:3a:bb:07:b2:c6:0b:d5:c9:a0:cf:70:ab: 86:31:60:5c:a2:f4:15:8b:e2:65:a0:34:f2:d5:ed: 15:df:b7:70:4e:c3:b2:eb:6f:36:6a:42:21:f8:08: 19:91:d3:2a:0d:e9:58:ef:ff:b2:0d:80:2a:e9:8a: e9:2a:cf:dc:29:bb:5a:87:be:d2:23:af:99:42:e1: c2:96:13:9d:5f:0d:1b:87:a4:a1:ca:d2:e5:46:21: 32:34:2e:35:e8:f5:14:02:50:2c:94:7a:86:cb:b4: 59:b9:f9:1d:37:7c:8c:7f:58:dd:dc:13:e3:7a:8d: 36:9d:cf:7d:6a:d9:7d:cc:5d:84:4a:7f:c8:4a:42: ff:7c:74:14:6b:f7:f8:c5:6d:b9:e5:0c:3a:c3:f0: 5d:f9:66:6e:e8:51:38:10:24:d0:9e:41:f2:2e:e8: a0:cf:09:2e:d2:e1:94:00:bd:67:c4:dc:4b:e9:d7: 1e:59:de:68:8a:d9:bc:f4:77:4e:ae:8b:0d:9c:7a: 2b:b4:85:fd:50:01:f5:2c:cb:5d:52:e5:1f:04:5e: d9:b0:89:ce:8e:38:26:97:fe:81:92:81:3b:ba:11: f8:c2:15:cc:fb:02:fa:41:09:97:d7:76:89:9e:5c: 99:97:a8:6d:87:97:f7:20:07:21:62:91:f6:1f:3f: dc:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:5C:83:4B:94:78:FD:30:44:32:CE:87:FB:57:2B:3C:41:73:84:D9 X509v3 Authority Key Identifier: keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/LFyDS5R4_TBEMs6H-1crPEFzhNk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.156.85.0/24 217.156.99.0/24 Signature Algorithm: sha256WithRSAEncryption 84:7c:87:5c:bc:cd:17:da:5d:b8:05:2e:77:fa:6a:63:4b:fc: f1:6d:68:36:6e:d4:d5:4b:65:4f:86:ad:b3:fd:81:de:bd:e6: 09:f2:ac:43:87:73:a0:1c:25:a5:38:7e:b7:61:21:b3:00:93: 3f:4e:21:6e:91:00:47:5a:90:11:ae:74:54:a2:4b:19:f7:e2: 77:78:3e:7a:d1:cd:0d:60:de:07:4e:65:06:8f:49:1d:80:05: 1e:f9:d3:bd:46:de:f4:78:02:4c:c3:6c:25:65:b6:4b:0d:d8: d3:c9:99:af:0c:9a:e3:43:b8:4b:0d:b8:ae:61:68:f4:7a:63: 2f:1d:6f:b9:e1:0e:5f:7b:35:c4:ce:4a:6a:ee:2b:27:78:89: 77:08:7c:c4:2e:58:23:7c:60:e6:5c:af:be:1d:3d:a0:34:fd: 95:39:29:4a:64:88:0e:5a:a7:c5:2a:03:7a:83:2a:d6:4b:a7: 60:9e:03:3b:96:98:5c:2d:e1:c5:5c:0c:8c:62:85:a4:0b:98: 83:d0:f5:97:16:69:23:40:61:bb:a9:de:4e:b8:b1:cb:39:40: 91:d5:f2:56:c0:ed:f8:62:61:16:ac:1e:29:6b:d8:97:77:ee: c3:2d:db:6a:ba:f1:72:c8:8f:1b:55:91:e1:c1:bd:70:dd:20: c9:37:67:49 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt7NWD33REVLJNjwn2422C8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxODM3ODU5MTZjZDk4ZDdjNzcwZDY4NTE0NTQ5OWE4YTBh MTU3MjIwHhcNMjYwMTAxMjAxNzM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYzVjODM0Yjk0NzhmZDMwNDQzMmNlODdmYjU3MmIzYzQxNzM4NGQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjw86uweyxgvVyaDPcKuGMWBcovQV i+JloDTy1e0V37dwTsOy6282akIh+AgZkdMqDelY7/+yDYAq6YrpKs/cKbtah77S I6+ZQuHClhOdXw0bh6ShytLlRiEyNC416PUUAlAslHqGy7RZufkdN3yMf1jd3BPj eo02nc99atl9zF2ESn/ISkL/fHQUa/f4xW255Qw6w/Bd+WZu6FE4ECTQnkHyLuig zwku0uGUAL1nxNxL6dceWd5oitm89HdOrosNnHortIX9UAH1LMtdUuUfBF7ZsInO jjgml/6BkoE7uhH4whXM+wL6QQmX13aJnlyZl6hth5f3IAchYpH2Hz/cgQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFCxcg0uUeP0wRDLOh/tXKzxBc4TZMB8GA1UdIwQY MBaAFDGDeFkWzZjXx3DWhRRUmaigoVciMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEt ZjUyYzQ3YzIyNWRiLzEvTEZ5RFM1UjRfVEJFTXM2SC0xY3JQRUZ6aE5rLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEtZjUyYzQ3YzIyNWRi LzEvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQA2ZxVAwQA 2ZxjMA0GCSqGSIb3DQEBCwUAA4IBAQCEfIdcvM0X2l24BS53+mpjS/zxbWg2btTV S2VPhq2z/YHeveYJ8qxDh3OgHCWlOH63YSGzAJM/TiFukQBHWpARrnRUoksZ9+J3 eD560c0NYN4HTmUGj0kdgAUe+dO9Rt70eAJMw2wlZbZLDdjTyZmvDJrjQ7hLDbiu YWj0emMvHW+54Q5fezXEzkpq7isneIl3CHzELlgjfGDmXK++HT2gNP2VOSlKZIgO WqfFKgN6gyrWS6dgngM7lphcLeHFXAyMYoWkC5iD0PWXFmkjQGG7qd5OuLHLOUCR 1fJWwO34YmEWrB4pa9iXd+7DLdtquvFyyI8bVZHhwb1w3SDJN2dJ -----END CERTIFICATE-----Generated at Tue Jan 20 02:47:40 2026 by rpki-client