This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/8fbf5c-ef51-4fd0-9d3a-330b8ad424bd/1/lUzKNBJg8UfPcme69tlyDaYrw7I.roa File: lUzKNBJg8UfPcme69tlyDaYrw7I.roa (raw, json) Hash identifier: qrZuoQH6V4bS9GSWmYNEQuhGhYESYIo8galvFyCIozE= Subject key identifier: 95:4C:CA:34:12:60:F1:47:CF:72:67:BA:F6:D9:72:0D:A6:2B:C3:B2 Certificate issuer: /CN=a8f491f210c57bf46fb52d4af22e7ecf6f4cda80 Certificate serial: 019B7BA52D373413FB3536700853C9AFFE97 Authority key identifier: A8:F4:91:F2:10:C5:7B:F4:6F:B5:2D:4A:F2:2E:7E:CF:6F:4C:DA:80 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qPSR8hDFe_RvtS1K8i5-z29M2oA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/8fbf5c-ef51-4fd0-9d3a-330b8ad424bd/1/lUzKNBJg8UfPcme69tlyDaYrw7I.roa Signing time: Thu 01 Jan 2026 22:19:41 +0000 ROA not before: Thu 01 Jan 2026 22:19:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47202 IP address blocks: 89.31.224.0/21 maxlen: 21 94.126.144.0/21 maxlen: 21 103.117.124.0/22 maxlen: 22 185.124.124.0/22 maxlen: 22 185.136.52.0/22 maxlen: 22 193.218.156.0/22 maxlen: 22 195.184.240.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/8fbf5c-ef51-4fd0-9d3a-330b8ad424bd/1/qPSR8hDFe_RvtS1K8i5-z29M2oA.crl rsync://rpki.ripe.net/repository/DEFAULT/19/8fbf5c-ef51-4fd0-9d3a-330b8ad424bd/1/qPSR8hDFe_RvtS1K8i5-z29M2oA.mft rsync://rpki.ripe.net/repository/DEFAULT/qPSR8hDFe_RvtS1K8i5-z29M2oA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:2d:37:34:13:fb:35:36:70:08:53:c9:af:fe:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a8f491f210c57bf46fb52d4af22e7ecf6f4cda80 Validity Not Before: Jan 1 22:19:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=954cca341260f147cf7267baf6d9720da62bc3b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:67:8d:69:e9:d4:d8:70:cd:fa:b8:10:75:68: a8:09:7a:a6:c7:ba:77:dd:e9:dd:9d:53:30:53:56: 02:58:5e:e8:a3:82:0b:12:5e:63:ae:75:db:41:ce: d9:09:63:b9:b8:c8:7f:03:8b:25:a4:20:56:a3:1d: 51:9f:56:67:dd:b4:77:79:d3:f6:80:76:c5:90:6a: 43:4f:4b:c2:d0:60:79:eb:d6:d1:23:d6:93:81:0c: 48:1d:1d:34:f5:2f:ac:04:90:89:56:d3:63:3b:be: 7f:1d:ec:fc:df:5d:8f:21:79:8b:27:24:84:7f:4e: 60:85:95:26:34:de:a6:e9:6a:48:c8:8b:c7:86:8f: c2:2c:07:b5:ac:84:41:38:50:b6:f8:91:b9:ec:3f: e6:43:32:67:77:2a:33:5e:c9:83:bf:04:83:ce:d0: a6:8c:bc:62:86:50:24:bd:38:05:8b:d8:1c:75:e7: e3:9d:f4:34:37:61:e6:14:8d:6e:99:b8:83:20:e7: d6:06:0f:41:89:4a:17:ef:de:2c:c1:03:3c:f9:29: 64:3e:6e:47:1e:70:1d:a5:59:54:37:c4:96:c0:d3: f0:ff:36:38:90:c1:dc:52:f2:05:f3:ae:e2:53:ac: 39:f3:8d:39:06:e4:df:a3:76:51:c7:f2:23:e2:ee: 36:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:4C:CA:34:12:60:F1:47:CF:72:67:BA:F6:D9:72:0D:A6:2B:C3:B2 X509v3 Authority Key Identifier: keyid:A8:F4:91:F2:10:C5:7B:F4:6F:B5:2D:4A:F2:2E:7E:CF:6F:4C:DA:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qPSR8hDFe_RvtS1K8i5-z29M2oA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/8fbf5c-ef51-4fd0-9d3a-330b8ad424bd/1/lUzKNBJg8UfPcme69tlyDaYrw7I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/8fbf5c-ef51-4fd0-9d3a-330b8ad424bd/1/qPSR8hDFe_RvtS1K8i5-z29M2oA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.31.224.0/21 94.126.144.0/21 103.117.124.0/22 185.124.124.0/22 185.136.52.0/22 193.218.156.0/22 195.184.240.0/22 Signature Algorithm: sha256WithRSAEncryption 4a:af:09:10:5e:1a:e0:57:38:3c:7f:e1:ff:42:5d:8a:a5:a1: 5e:10:ab:16:35:fc:c5:71:79:c8:09:69:0b:45:03:bd:32:9d: b9:c9:de:63:8c:ee:8a:c0:b4:52:f1:58:f0:15:93:a5:9b:0d: 3a:5c:62:d0:80:87:17:24:02:6b:f8:18:b0:34:c7:62:00:c4: 69:be:6a:3c:29:35:11:2b:bc:a1:ae:cb:7d:c7:ce:27:a1:e2: dc:6e:ad:cb:f6:8b:14:9c:d6:4b:99:4b:26:71:1a:bb:97:85: 77:26:d1:bc:c3:20:8b:0d:2c:1a:24:87:69:49:2b:aa:17:3d: f1:bf:d8:75:07:a8:9e:e9:56:73:d9:15:7a:18:da:93:6c:ae: 29:62:68:09:f5:42:ef:7b:34:d2:4a:69:b9:f8:92:e6:6e:c7: 68:20:f9:94:02:da:81:52:8d:9b:af:bf:14:85:46:e0:c5:ab: e1:9d:9c:c5:2d:75:ab:a1:46:f4:56:c3:2b:85:07:bb:27:a9: 9d:a9:0d:b7:e6:9c:bc:d4:28:9c:e3:78:e9:2e:62:04:17:d6: 78:f8:e8:60:32:56:28:ee:0a:95:44:3d:e4:13:0f:54:e4:f1: 68:e5:e1:38:b8:ea:e5:20:9f:db:ea:fa:8b:48:06:6a:df:49: 16:9f:e4:a4 -----BEGIN CERTIFICATE----- MIIFITCCBAmgAwIBAgISAZt7pS03NBP7NTZwCFPJr/6XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4ZjQ5MWYyMTBjNTdiZjQ2ZmI1MmQ0YWYyMmU3ZWNmNmY0 Y2RhODAwHhcNMjYwMTAxMjIxOTQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NTRjY2EzNDEyNjBmMTQ3Y2Y3MjY3YmFmNmQ5NzIwZGE2MmJjM2IyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA32eNaenU2HDN+rgQdWioCXqmx7p3 3endnVMwU1YCWF7oo4ILEl5jrnXbQc7ZCWO5uMh/A4slpCBWox1Rn1Zn3bR3edP2 gHbFkGpDT0vC0GB569bRI9aTgQxIHR009S+sBJCJVtNjO75/Hez8312PIXmLJySE f05ghZUmNN6m6WpIyIvHho/CLAe1rIRBOFC2+JG57D/mQzJndyozXsmDvwSDztCm jLxihlAkvTgFi9gcdefjnfQ0N2HmFI1umbiDIOfWBg9BiUoX794swQM8+SlkPm5H HnAdpVlUN8SWwNPw/zY4kMHcUvIF867iU6w58405BuTfo3ZRx/Ij4u42iQIDAQAB o4ICLTCCAikwHQYDVR0OBBYEFJVMyjQSYPFHz3JnuvbZcg2mK8OyMB8GA1UdIwQY MBaAFKj0kfIQxXv0b7UtSvIufs9vTNqAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcVBTUjhoREZlX1J2dFMxSzhpNS16MjlNMm9BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS84ZmJmNWMtZWY1MS00ZmQwLTlkM2Et MzMwYjhhZDQyNGJkLzEvbFV6S05CSmc4VWZQY21lNjl0bHlEYVlydzdJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS84ZmJmNWMtZWY1MS00ZmQwLTlkM2EtMzMwYjhhZDQyNGJk LzEvcVBTUjhoREZlX1J2dFMxSzhpNS16MjlNMm9BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQDWR/gAwQD Xn6QAwQCZ3V8AwQCuXx8AwQCuYg0AwQCwdqcAwQCw7jwMA0GCSqGSIb3DQEBCwUA A4IBAQBKrwkQXhrgVzg8f+H/Ql2KpaFeEKsWNfzFcXnICWkLRQO9Mp25yd5jjO6K wLRS8VjwFZOlmw06XGLQgIcXJAJr+BiwNMdiAMRpvmo8KTURK7yhrst9x84noeLc bq3L9osUnNZLmUsmcRq7l4V3JtG8wyCLDSwaJIdpSSuqFz3xv9h1B6ie6VZz2RV6 GNqTbK4pYmgJ9ULvezTSSmm5+JLmbsdoIPmUAtqBUo2br78UhUbgxavhnZzFLXWr oUb0VsMrhQe7J6mdqQ235py81Cic43jpLmIEF9Z4+OhgMlYo7gqVRD3kEw9U5PFo 5eE4uOrlIJ/b6vqLSAZq30kWn+Sk -----END CERTIFICATE-----Generated at Mon Feb 9 22:16:56 2026 by rpki-client