This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/LuV8jZMfpsqO85mEYbDggWV_tk8.roa File: LuV8jZMfpsqO85mEYbDggWV_tk8.roa (raw, json) Hash identifier: r3xhEIVsxg4xLqB3ZMwhRVFMkhRRy3qJnwexiU8KIW4= Subject key identifier: 2E:E5:7C:8D:93:1F:A6:CA:8E:F3:99:84:61:B0:E0:81:65:7F:B6:4F Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d Certificate serial: 019B797E68F7AB06D4FFFF4013C68A934DCD Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/LuV8jZMfpsqO85mEYbDggWV_tk8.roa Signing time: Thu 01 Jan 2026 12:18:06 +0000 ROA not before: Thu 01 Jan 2026 12:18:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20473 IP address blocks: 91.226.56.0/24 maxlen: 24 194.61.74.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.mft rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:68:f7:ab:06:d4:ff:ff:40:13:c6:8a:93:4d:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d Validity Not Before: Jan 1 12:18:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2ee57c8d931fa6ca8ef3998461b0e081657fb64f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:44:c2:74:9d:95:17:2f:ba:f7:fc:4c:da:df: 3f:87:95:1f:8a:3d:98:31:8a:a1:b1:34:3d:a3:0e: 53:a9:22:0c:c6:fd:8d:5d:1b:31:78:82:13:3e:45: db:f0:4b:98:ba:e0:9b:40:91:5a:54:a4:cc:b1:a9: 79:ee:19:72:c4:75:35:2c:e4:06:60:89:8f:3b:95: 83:db:d1:52:d9:1c:a7:59:2c:3f:9e:cc:a7:45:94: 70:2c:2f:86:78:9b:5f:b3:b6:d3:ae:8e:dd:4f:cd: 1a:7a:fa:79:70:89:23:42:bd:14:ba:ff:be:bb:7c: 36:51:0c:eb:b2:9f:9f:3a:e8:b7:a7:7a:8b:90:54: c5:b2:0e:ad:6e:39:6e:3b:8e:0e:b8:c8:39:a5:73: 20:37:18:0b:93:b1:2f:fd:5c:61:fe:d8:ae:f8:2b: e4:e7:11:a7:7f:b2:2c:9c:f6:2d:b2:c4:86:48:32: ff:ed:d1:f3:bd:1d:5d:02:7e:51:45:7c:62:b1:c5: 59:e8:06:b2:71:9d:b9:c3:d6:d6:b1:00:9a:12:cb: e3:d4:22:44:8d:5c:13:b1:3f:3f:2d:6a:8e:c0:cd: e1:2c:fa:0f:36:7e:df:4b:6f:01:6b:c8:37:b7:e7: c1:b5:46:19:41:35:4b:98:ad:76:5b:fb:ac:6f:88: ed:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:E5:7C:8D:93:1F:A6:CA:8E:F3:99:84:61:B0:E0:81:65:7F:B6:4F X509v3 Authority Key Identifier: keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/LuV8jZMfpsqO85mEYbDggWV_tk8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.226.56.0/24 194.61.74.0/24 Signature Algorithm: sha256WithRSAEncryption 87:13:d7:cc:29:2f:0c:b9:25:d9:bf:df:d6:10:3e:5b:b8:db: fd:3b:90:f0:1c:1d:34:5e:3e:e7:82:df:c2:88:76:46:2c:a7: 1e:64:8f:29:6b:1d:09:b1:a8:ad:fd:55:ab:e8:de:4e:76:7b: dd:bd:08:68:95:a7:d4:e4:c5:2e:6a:38:35:0a:4b:e0:8e:d8: 36:c9:f2:20:a6:be:1f:14:ed:15:55:1c:6d:47:cd:02:c4:9b: ae:90:70:d7:dc:05:e0:c7:a7:99:2b:83:c7:28:c8:45:7a:23: 9a:1c:80:c7:cc:98:3a:b6:6f:dc:11:05:06:31:56:35:16:c0: 86:6a:6f:d1:4d:94:99:b2:f1:97:fd:dd:91:92:35:6d:77:db: d2:4c:f1:1e:71:71:22:90:3f:82:ff:9f:e7:30:67:06:88:66: cf:16:d0:fc:77:00:ca:3c:93:a2:c2:5e:8b:f9:d9:f3:3a:3f: 4c:87:6a:2d:6b:9c:d5:7a:4a:16:8e:91:7e:3c:3e:c5:23:56: d4:e9:66:20:2e:77:b8:81:be:4a:17:1a:23:ff:39:e4:d4:9d: 16:65:32:cb:09:4f:7d:b1:df:33:1e:3e:c2:38:a9:dc:3b:e9: d8:e4:ae:a4:22:40:16:2a:3b:99:63:9f:a3:78:ec:e4:93:a9: 22:5b:7b:fc -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt5fmj3qwbU//9AE8aKk03NMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzM2UzZjVlZjgyNTU1NmIwMTRhMDg1ZDMyNTY1YmIwY2Jj NWFjOGQwHhcNMjYwMTAxMTIxODA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZWU1N2M4ZDkzMWZhNmNhOGVmMzk5ODQ2MWIwZTA4MTY1N2ZiNjRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6UTCdJ2VFy+69/xM2t8/h5Ufij2Y MYqhsTQ9ow5TqSIMxv2NXRsxeIITPkXb8EuYuuCbQJFaVKTMsal57hlyxHU1LOQG YImPO5WD29FS2RynWSw/nsynRZRwLC+GeJtfs7bTro7dT80aevp5cIkjQr0Uuv++ u3w2UQzrsp+fOui3p3qLkFTFsg6tbjluO44OuMg5pXMgNxgLk7Ev/Vxh/tiu+Cvk 5xGnf7IsnPYtssSGSDL/7dHzvR1dAn5RRXxiscVZ6AaycZ25w9bWsQCaEsvj1CJE jVwTsT8/LWqOwM3hLPoPNn7fS28Ba8g3t+fBtUYZQTVLmK12W/usb4jtdwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFC7lfI2TH6bKjvOZhGGw4IFlf7ZPMB8GA1UdIwQY MBaAFIM+P174JVVrAUoIXTJWW7DLxayNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ3o0X1h2Z2xWV3NCU2doZE1sWmJzTXZGckkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9kMjY2MTgtYjM0MC00ZjUwLWIzMzAt MzE4YTI2ZDRhOGM5LzEvTHVWOGpaTWZwc3FPODVtRVliRGdnV1ZfdGs4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy9kMjY2MTgtYjM0MC00ZjUwLWIzMzAtMzE4YTI2ZDRhOGM5 LzEvZ3o0X1h2Z2xWV3NCU2doZE1sWmJzTXZGckkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAW+I4AwQA wj1KMA0GCSqGSIb3DQEBCwUAA4IBAQCHE9fMKS8MuSXZv9/WED5buNv9O5DwHB00 Xj7ngt/CiHZGLKceZI8pax0Jsait/VWr6N5OdnvdvQholafU5MUuajg1Ckvgjtg2 yfIgpr4fFO0VVRxtR80CxJuukHDX3AXgx6eZK4PHKMhFeiOaHIDHzJg6tm/cEQUG MVY1FsCGam/RTZSZsvGX/d2RkjVtd9vSTPEecXEikD+C/5/nMGcGiGbPFtD8dwDK PJOiwl6L+dnzOj9Mh2ota5zVekoWjpF+PD7FI1bU6WYgLne4gb5KFxoj/znk1J0W ZTLLCU99sd8zHj7COKncO+nY5K6kIkAWKjuZY5+jeOzkk6kiW3v8 -----END CERTIFICATE-----Generated at Mon Jan 19 13:54:15 2026 by rpki-client