This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/lZQHIeCnZssGLsA85mZ9KIurnaY.roa File: lZQHIeCnZssGLsA85mZ9KIurnaY.roa (raw, json) Hash identifier: NY1O2T3/+rRBnNbURMYBFQhlPcrj6EOkiVEnp39DkB8= Subject key identifier: 95:94:07:21:E0:A7:66:CB:06:2E:C0:3C:E6:66:7D:28:8B:AB:9D:A6 Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722 Certificate serial: 019B7B356B8BE712773793F08077BABFBE70 Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/lZQHIeCnZssGLsA85mZ9KIurnaY.roa Signing time: Thu 01 Jan 2026 20:17:37 +0000 ROA not before: Thu 01 Jan 2026 20:17:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39737 IP address blocks: 81.181.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:6b:8b:e7:12:77:37:93:f0:80:77:ba:bf:be:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722 Validity Not Before: Jan 1 20:17:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=95940721e0a766cb062ec03ce6667d288bab9da6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:1f:9d:c9:d6:10:08:5f:0a:e6:26:bf:47:24: 34:ea:57:07:d2:55:a2:c6:57:14:04:8f:ff:bb:34: 0b:ca:88:1b:8b:e7:85:b0:65:80:5b:f8:a4:11:d6: 8a:cd:d4:b9:cd:6e:e3:2e:c9:a9:51:d3:82:ec:29: e1:38:94:d8:e4:09:3f:2d:84:16:23:e9:66:e4:36: 16:1e:58:f3:23:b3:c4:f7:82:37:ad:5a:d8:5f:2e: b4:2d:60:55:5b:e5:a2:0a:1b:7a:1a:13:09:a0:29: 60:72:cd:e3:ef:1a:65:9c:08:fd:e3:7d:b8:88:e7: f1:46:8b:ed:ea:8f:cc:6d:43:9a:4d:40:f7:f0:60: e7:16:88:0b:4a:6e:0e:b6:96:4c:be:1f:d1:34:db: 2e:bc:36:6b:52:3d:57:8b:31:de:60:63:fc:6d:d4: 0b:ac:f7:48:6c:a6:d1:a8:9f:f7:9a:31:2b:0c:17: 6e:ea:b4:a5:e8:20:d9:eb:91:a7:fa:ed:54:d6:9e: 19:3a:fe:33:3a:9f:0d:31:a3:05:79:80:67:e5:91: 25:90:c9:9f:ea:69:ce:86:af:25:6c:15:6b:da:fb: c5:e2:bb:22:5f:1c:39:75:fe:f9:23:ab:fc:2e:61: 8f:92:8a:0a:9e:bb:03:67:9c:0b:0b:00:b7:d9:94: 31:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:94:07:21:E0:A7:66:CB:06:2E:C0:3C:E6:66:7D:28:8B:AB:9D:A6 X509v3 Authority Key Identifier: keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/lZQHIeCnZssGLsA85mZ9KIurnaY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.181.247.0/24 Signature Algorithm: sha256WithRSAEncryption 3b:ce:89:c0:32:cf:a3:9a:cf:05:50:8c:bf:88:ef:5c:ee:bc: 4b:a3:7c:82:5f:06:d6:34:0f:77:b2:6e:43:5c:a2:82:6a:87: c9:07:35:37:1e:61:c1:a0:91:3e:0e:46:f1:ba:0f:c3:83:5d: 67:55:70:f0:cc:18:48:72:c0:4a:09:01:7d:f1:ef:77:96:22: 41:2d:0b:68:5c:ff:3d:82:02:55:05:00:eb:e6:a1:2e:39:ea: 86:77:8d:ba:4c:36:54:6e:b1:ab:34:66:02:56:6d:34:6f:12: a4:f7:df:f1:35:d5:9b:d8:ac:93:23:61:11:06:b0:ba:68:ec: 56:9f:b3:35:85:80:fc:1e:18:cb:f3:76:c5:f3:41:e5:8e:b8: 63:bd:5b:63:05:06:3d:ea:ae:a3:8f:ef:27:4d:a6:14:22:d9: 4d:be:8e:d9:29:68:12:79:14:a2:e0:25:df:a6:7c:98:0f:28: dc:b7:df:2e:c1:7b:a8:35:6f:3f:fe:fe:d4:80:22:00:65:73: 7d:69:88:72:fb:7a:87:41:58:a1:90:b1:df:0e:8c:30:73:4c: 27:37:86:34:bf:7b:f9:56:58:b0:aa:3e:f8:d7:da:9f:49:68: 47:c6:16:85:b8:5b:39:ba:02:04:2e:63:a4:74:f8:fd:2e:3f: e1:9f:e4:9b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NWuL5xJ3N5PwgHe6v75wMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxODM3ODU5MTZjZDk4ZDdjNzcwZDY4NTE0NTQ5OWE4YTBh MTU3MjIwHhcNMjYwMTAxMjAxNzM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NTk0MDcyMWUwYTc2NmNiMDYyZWMwM2NlNjY2N2QyODhiYWI5ZGE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtB+dydYQCF8K5ia/RyQ06lcH0lWi xlcUBI//uzQLyogbi+eFsGWAW/ikEdaKzdS5zW7jLsmpUdOC7CnhOJTY5Ak/LYQW I+lm5DYWHljzI7PE94I3rVrYXy60LWBVW+WiCht6GhMJoClgcs3j7xplnAj94324 iOfxRovt6o/MbUOaTUD38GDnFogLSm4OtpZMvh/RNNsuvDZrUj1XizHeYGP8bdQL rPdIbKbRqJ/3mjErDBdu6rSl6CDZ65Gn+u1U1p4ZOv4zOp8NMaMFeYBn5ZElkMmf 6mnOhq8lbBVr2vvF4rsiXxw5df75I6v8LmGPkooKnrsDZ5wLCwC32ZQxfwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJWUByHgp2bLBi7APOZmfSiLq52mMB8GA1UdIwQY MBaAFDGDeFkWzZjXx3DWhRRUmaigoVciMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEt ZjUyYzQ3YzIyNWRiLzEvbFpRSEllQ25ac3NHTHNBODVtWjlLSXVybmFZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEtZjUyYzQ3YzIyNWRi LzEvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUbX3MA0G CSqGSIb3DQEBCwUAA4IBAQA7zonAMs+jms8FUIy/iO9c7rxLo3yCXwbWNA93sm5D XKKCaofJBzU3HmHBoJE+Dkbxug/Dg11nVXDwzBhIcsBKCQF98e93liJBLQtoXP89 ggJVBQDr5qEuOeqGd426TDZUbrGrNGYCVm00bxKk99/xNdWb2KyTI2ERBrC6aOxW n7M1hYD8HhjL83bF80HljrhjvVtjBQY96q6jj+8nTaYUItlNvo7ZKWgSeRSi4CXf pnyYDyjct98uwXuoNW8//v7UgCIAZXN9aYhy+3qHQVihkLHfDowwc0wnN4Y0v3v5 Vliwqj7419qfSWhHxhaFuFs5ugIELmOkdPj9Lj/hn+Sb -----END CERTIFICATE-----Generated at Tue Jan 20 02:48:55 2026 by rpki-client