This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/49a221-67f5-4edd-b00d-4d2c4c5ad14e/1/LKRFm8Pw00kXQoKIo5cZaR03rQg.roa File: LKRFm8Pw00kXQoKIo5cZaR03rQg.roa (raw, json) Hash identifier: ROfiKIWzfySuULtZm3Vy25ggedOkAvvyQXevFfnrv84= Subject key identifier: 2C:A4:45:9B:C3:F0:D3:49:17:42:82:88:A3:97:19:69:1D:37:AD:08 Certificate issuer: /CN=465c62c6bcd4cfb8933bcb6a61cf7b3dad2fb118 Certificate serial: 019B7FF1E8839E835E2E68BB8844E35F3D5D Authority key identifier: 46:5C:62:C6:BC:D4:CF:B8:93:3B:CB:6A:61:CF:7B:3D:AD:2F:B1:18 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RlxixrzUz7iTO8tqYc97Pa0vsRg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/49a221-67f5-4edd-b00d-4d2c4c5ad14e/1/LKRFm8Pw00kXQoKIo5cZaR03rQg.roa Signing time: Fri 02 Jan 2026 18:21:58 +0000 ROA not before: Fri 02 Jan 2026 18:21:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16303 IP address blocks: 77.95.114.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/49a221-67f5-4edd-b00d-4d2c4c5ad14e/1/RlxixrzUz7iTO8tqYc97Pa0vsRg.crl rsync://rpki.ripe.net/repository/DEFAULT/18/49a221-67f5-4edd-b00d-4d2c4c5ad14e/1/RlxixrzUz7iTO8tqYc97Pa0vsRg.mft rsync://rpki.ripe.net/repository/DEFAULT/RlxixrzUz7iTO8tqYc97Pa0vsRg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:e8:83:9e:83:5e:2e:68:bb:88:44:e3:5f:3d:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=465c62c6bcd4cfb8933bcb6a61cf7b3dad2fb118 Validity Not Before: Jan 2 18:21:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2ca4459bc3f0d34917428288a39719691d37ad08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:bc:46:e9:68:e8:a3:f7:65:83:da:ff:71:da: 9e:af:32:eb:de:ff:c8:5c:b1:68:fc:21:43:ff:6c: b8:96:d5:a4:4a:09:6a:2e:e1:9e:f5:51:a4:5c:f8: 1f:59:45:a7:8a:50:46:81:3d:3f:31:e6:7d:5d:6b: 4e:a6:58:03:5c:d4:20:6a:c1:03:81:dc:4a:83:8d: 5c:d4:92:49:6b:81:b9:29:af:79:58:92:ff:a1:81: f7:43:3b:05:32:c0:8c:0e:2d:42:ca:3f:51:fb:b4: 5c:0c:75:c6:31:f8:4f:08:b4:ed:00:70:23:c5:31: a3:03:a1:70:29:25:32:75:50:b4:db:4e:fa:0e:54: d0:49:a3:68:da:89:28:05:c7:ef:45:f9:2e:6a:06: 9a:7e:0b:8b:6a:3b:87:4b:f0:27:83:cd:0f:c0:b1: 89:0c:c3:10:90:11:6b:34:de:80:13:6f:b7:2f:a8: 3b:42:86:86:22:88:35:ad:79:0d:a3:20:69:21:12: e7:df:41:5f:0a:9a:17:38:ca:32:75:c3:10:4e:9c: d8:3b:bb:a1:b9:af:a3:72:ad:61:62:b1:91:0c:64: 21:20:bf:fb:26:5c:e4:b4:05:35:33:fe:00:c3:68: 1a:47:6f:f0:7c:83:58:90:a1:89:ca:61:35:5b:65: 52:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:A4:45:9B:C3:F0:D3:49:17:42:82:88:A3:97:19:69:1D:37:AD:08 X509v3 Authority Key Identifier: keyid:46:5C:62:C6:BC:D4:CF:B8:93:3B:CB:6A:61:CF:7B:3D:AD:2F:B1:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RlxixrzUz7iTO8tqYc97Pa0vsRg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/49a221-67f5-4edd-b00d-4d2c4c5ad14e/1/LKRFm8Pw00kXQoKIo5cZaR03rQg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/49a221-67f5-4edd-b00d-4d2c4c5ad14e/1/RlxixrzUz7iTO8tqYc97Pa0vsRg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.95.114.0/24 Signature Algorithm: sha256WithRSAEncryption 41:08:f2:23:e9:a0:14:87:63:fc:d2:36:1e:b9:2e:23:2c:65: cd:91:9f:a1:2f:3e:44:42:d6:cc:17:e1:13:b0:c6:31:d3:0a: 27:06:69:6b:06:2d:10:af:b3:4f:fa:26:5b:79:21:d0:14:3b: 66:2a:31:ce:08:68:52:0a:94:8a:a9:b1:f5:f8:00:4d:e3:c9: 4a:ea:09:9e:b0:8c:71:83:ff:6f:95:77:6b:14:9e:14:9d:95: 46:3f:76:99:8a:39:61:f4:69:62:a5:9d:2c:1d:75:4f:7b:47: 3a:b5:1f:d0:e8:1f:ea:56:e6:75:17:04:65:88:d9:af:b5:6e: ea:82:43:27:27:81:57:57:a9:af:75:b5:71:ef:2f:f4:bf:87: 09:d3:db:ea:91:12:ba:2a:c0:5f:73:08:10:48:7e:a1:17:cf: ec:fa:f6:59:bc:ad:37:d0:58:aa:f6:1e:46:02:19:c6:ef:49: 75:02:f7:d7:2c:cb:e8:a7:f9:27:b2:28:49:c0:b0:21:d6:2a: c4:6e:f3:50:33:97:99:37:7b:b3:fd:9f:91:c8:9a:6f:a2:0d: d6:c3:b4:1c:f2:c1:b7:1d:80:bc:11:fc:fa:46:51:9a:74:47: 50:8c:b1:39:cb:83:9b:87:09:a0:66:2d:a0:c5:ce:3f:e8:21: 9d:6f:b2:fc -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/8eiDnoNeLmi7iETjXz1dMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2NWM2MmM2YmNkNGNmYjg5MzNiY2I2YTYxY2Y3YjNkYWQy ZmIxMTgwHhcNMjYwMTAyMTgyMTU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyY2E0NDU5YmMzZjBkMzQ5MTc0MjgyODhhMzk3MTk2OTFkMzdhZDA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr7xG6Wjoo/dlg9r/cdqerzLr3v/I XLFo/CFD/2y4ltWkSglqLuGe9VGkXPgfWUWnilBGgT0/MeZ9XWtOplgDXNQgasED gdxKg41c1JJJa4G5Ka95WJL/oYH3QzsFMsCMDi1Cyj9R+7RcDHXGMfhPCLTtAHAj xTGjA6FwKSUydVC02076DlTQSaNo2okoBcfvRfkuagaafguLajuHS/Ang80PwLGJ DMMQkBFrNN6AE2+3L6g7QoaGIog1rXkNoyBpIRLn30FfCpoXOMoydcMQTpzYO7uh ua+jcq1hYrGRDGQhIL/7JlzktAU1M/4Aw2gaR2/wfINYkKGJymE1W2VSAwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCykRZvD8NNJF0KCiKOXGWkdN60IMB8GA1UdIwQY MBaAFEZcYsa81M+4kzvLamHPez2tL7EYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUmx4aXhyelV6N2lUTzh0cVljOTdQYTB2c1JnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC80OWEyMjEtNjdmNS00ZWRkLWIwMGQt NGQyYzRjNWFkMTRlLzEvTEtSRm04UHcwMGtYUW9LSW81Y1phUjAzclFnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC80OWEyMjEtNjdmNS00ZWRkLWIwMGQtNGQyYzRjNWFkMTRl LzEvUmx4aXhyelV6N2lUTzh0cVljOTdQYTB2c1JnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATV9yMA0G CSqGSIb3DQEBCwUAA4IBAQBBCPIj6aAUh2P80jYeuS4jLGXNkZ+hLz5EQtbMF+ET sMYx0wonBmlrBi0Qr7NP+iZbeSHQFDtmKjHOCGhSCpSKqbH1+ABN48lK6gmesIxx g/9vlXdrFJ4UnZVGP3aZijlh9GlipZ0sHXVPe0c6tR/Q6B/qVuZ1FwRliNmvtW7q gkMnJ4FXV6mvdbVx7y/0v4cJ09vqkRK6KsBfcwgQSH6hF8/s+vZZvK030Fiq9h5G AhnG70l1AvfXLMvop/knsihJwLAh1irEbvNQM5eZN3uz/Z+RyJpvog3Ww7Qc8sG3 HYC8Efz6RlGadEdQjLE5y4ObhwmgZi2gxc4/6CGdb7L8 -----END CERTIFICATE-----Generated at Mon Feb 9 19:55:03 2026 by rpki-client