This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/lEaeRIx-lRTxfxifBuoZQCoYWlU.roa File: lEaeRIx-lRTxfxifBuoZQCoYWlU.roa (raw, json) Hash identifier: ziVqLU/Nc5hEPI8oeUMxKVG8b8devqoib/3fqeWrCJk= Subject key identifier: 94:46:9E:44:8C:7E:95:14:F1:7F:18:9F:06:EA:19:40:2A:18:5A:55 Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722 Certificate serial: 019B7B35995E4A28EC0835DACDAC8707F9FC Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/lEaeRIx-lRTxfxifBuoZQCoYWlU.roa Signing time: Thu 01 Jan 2026 20:17:48 +0000 ROA not before: Thu 01 Jan 2026 20:17:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213323 IP address blocks: 80.96.48.0/23 maxlen: 23 80.97.144.0/23 maxlen: 23 80.97.150.0/23 maxlen: 23 81.181.28.0/23 maxlen: 23 81.181.114.0/23 maxlen: 23 81.181.232.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:99:5e:4a:28:ec:08:35:da:cd:ac:87:07:f9:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722 Validity Not Before: Jan 1 20:17:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=94469e448c7e9514f17f189f06ea19402a185a55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:30:7c:af:ad:c8:51:03:06:04:19:02:a5:90: c2:05:64:66:f1:c4:bd:f7:96:60:fe:5b:9e:a7:86: 93:e2:b8:76:9b:9e:fd:fc:28:0f:2b:79:8f:52:4d: 30:12:91:31:ef:ea:90:1d:e2:ff:76:cb:e6:05:6b: 14:90:18:3d:97:0b:68:51:ea:7d:39:03:db:03:a4: 10:48:69:d6:84:7c:e1:f9:91:08:f2:e8:e4:10:1f: 68:50:b3:69:ac:35:05:b0:cf:ea:e1:20:58:6f:cb: be:86:b5:b1:90:72:cc:5d:14:0b:b4:8a:23:d9:f6: 1f:14:7e:f1:55:2f:6e:09:80:eb:71:d8:33:f1:38: d7:66:da:9a:57:8b:cc:34:9e:b6:a6:26:c1:55:9f: 32:6a:b8:8c:6f:31:0b:69:6f:8a:a8:d2:df:d1:69: be:49:49:f2:74:a0:32:97:0e:b6:36:8b:2f:fd:46: a3:a8:a2:30:97:aa:41:5f:9a:49:de:91:d0:49:34: 06:65:b0:2a:d2:73:26:57:a1:cc:13:da:3e:0e:a8: b9:8d:a9:21:a2:83:f5:b1:8f:03:81:1d:17:70:71: b0:79:fb:20:ba:26:79:84:61:b1:92:fa:52:43:49: fe:e0:01:9c:c4:14:6a:52:8c:b8:79:5b:54:ea:3f: 68:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:46:9E:44:8C:7E:95:14:F1:7F:18:9F:06:EA:19:40:2A:18:5A:55 X509v3 Authority Key Identifier: keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/lEaeRIx-lRTxfxifBuoZQCoYWlU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.96.48.0/23 80.97.144.0/23 80.97.150.0/23 81.181.28.0/23 81.181.114.0/23 81.181.232.0/23 Signature Algorithm: sha256WithRSAEncryption a5:d0:cf:3f:a8:36:2c:e3:a9:ab:9c:87:5d:75:a4:a3:62:d2: e1:f3:e1:00:05:d0:af:72:59:3b:03:c1:1a:19:22:b6:c4:68: c1:28:05:a1:eb:d1:a8:be:a8:3c:bd:0f:a7:b5:af:96:af:fb: f3:f3:b9:7a:b4:19:a9:1d:41:98:e8:13:24:1e:7e:c4:3a:93: b7:2d:0f:78:b0:33:d7:db:db:e2:bd:bf:fd:c9:12:9f:c9:83: 0f:fa:ef:12:52:a8:84:47:5b:f9:ef:22:10:11:c2:7c:9e:4f: a5:29:db:78:31:96:34:03:f5:40:37:2a:0d:4c:25:c3:73:a3: 77:16:c7:0d:32:c3:6a:d1:29:b8:66:2e:a4:9a:ee:8f:80:fc: bc:a9:d9:10:1a:73:c3:10:60:21:ac:af:d1:d5:36:b2:7d:ff: aa:1a:d5:17:27:bb:1f:fa:8a:70:0e:d0:ff:9e:9c:55:a6:df: 07:07:b1:81:e9:8d:b8:62:60:fa:e1:3e:34:e0:0e:20:10:db: c8:a7:42:a4:d3:b5:73:3f:74:5c:b5:1b:2b:42:e8:44:86:cc: 31:f5:29:54:56:56:ea:20:c2:0d:71:57:dd:a0:8d:0f:a6:dc: 82:54:62:a5:37:f8:f1:92:63:fd:55:c9:af:f9:54:ef:37:59: 69:cb:38:dc -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgISAZt7NZleSijsCDXazayHB/n8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxODM3ODU5MTZjZDk4ZDdjNzcwZDY4NTE0NTQ5OWE4YTBh MTU3MjIwHhcNMjYwMTAxMjAxNzQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NDQ2OWU0NDhjN2U5NTE0ZjE3ZjE4OWYwNmVhMTk0MDJhMTg1YTU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxDB8r63IUQMGBBkCpZDCBWRm8cS9 95Zg/luep4aT4rh2m579/CgPK3mPUk0wEpEx7+qQHeL/dsvmBWsUkBg9lwtoUep9 OQPbA6QQSGnWhHzh+ZEI8ujkEB9oULNprDUFsM/q4SBYb8u+hrWxkHLMXRQLtIoj 2fYfFH7xVS9uCYDrcdgz8TjXZtqaV4vMNJ62pibBVZ8yariMbzELaW+KqNLf0Wm+ SUnydKAylw62Nosv/UajqKIwl6pBX5pJ3pHQSTQGZbAq0nMmV6HME9o+Dqi5jakh ooP1sY8DgR0XcHGwefsguiZ5hGGxkvpSQ0n+4AGcxBRqUoy4eVtU6j9o6QIDAQAB o4ICJzCCAiMwHQYDVR0OBBYEFJRGnkSMfpUU8X8YnwbqGUAqGFpVMB8GA1UdIwQY MBaAFDGDeFkWzZjXx3DWhRRUmaigoVciMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEt ZjUyYzQ3YzIyNWRiLzEvbEVhZVJJeC1sUlR4ZnhpZkJ1b1pRQ29ZV2xVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEtZjUyYzQ3YzIyNWRi LzEvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQBUGAwAwQB UGGQAwQBUGGWAwQBUbUcAwQBUbVyAwQBUbXoMA0GCSqGSIb3DQEBCwUAA4IBAQCl 0M8/qDYs46mrnIdddaSjYtLh8+EABdCvclk7A8EaGSK2xGjBKAWh69Govqg8vQ+n ta+Wr/vz87l6tBmpHUGY6BMkHn7EOpO3LQ94sDPX29vivb/9yRKfyYMP+u8SUqiE R1v57yIQEcJ8nk+lKdt4MZY0A/VANyoNTCXDc6N3FscNMsNq0Sm4Zi6kmu6PgPy8 qdkQGnPDEGAhrK/R1Tayff+qGtUXJ7sf+opwDtD/npxVpt8HB7GB6Y24YmD64T40 4A4gENvIp0Kk07VzP3RctRsrQuhEhswx9SlUVlbqIMINcVfdoI0PptyCVGKlN/jx kmP9Vcmv+VTvN1lpyzjc -----END CERTIFICATE-----Generated at Tue Jan 20 02:49:03 2026 by rpki-client