This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/LrCK0JNUB76KNtayOBkJ_dMifq8.roa File: LrCK0JNUB76KNtayOBkJ_dMifq8.roa (raw, json) Hash identifier: QKvainYCr7djj3WCpdc5H4lJSPbUdIxikL2By9WSzzI= Subject key identifier: 2E:B0:8A:D0:93:54:07:BE:8A:36:D6:B2:38:19:09:FD:D3:22:7E:AF Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5 Certificate serial: 019B7EA75BA8971BEC40F07F75765B5D974D Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/LrCK0JNUB76KNtayOBkJ_dMifq8.roa Signing time: Fri 02 Jan 2026 12:20:55 +0000 ROA not before: Fri 02 Jan 2026 12:20:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203061 IP address blocks: 185.239.244.0/24 maxlen: 24 185.239.246.0/23 maxlen: 23 185.244.105.0/24 maxlen: 24 185.246.236.0/22 maxlen: 24 185.254.16.0/24 maxlen: 24 185.254.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 04 Jan 2026 15:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:5b:a8:97:1b:ec:40:f0:7f:75:76:5b:5d:97:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5 Validity Not Before: Jan 2 12:20:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2eb08ad0935407be8a36d6b2381909fdd3227eaf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:1e:8f:e5:96:74:eb:23:60:7b:3b:67:d4:81: 1d:68:d9:f4:c0:f5:53:e9:8b:18:07:04:ac:55:cc: ec:6d:8f:33:7a:e5:74:91:af:86:ff:d1:e3:b1:a9: b1:ea:a8:82:fe:48:63:24:0d:82:57:f2:78:10:47: 32:89:9f:81:75:08:34:4e:96:d8:3b:b1:ed:e5:9a: e9:12:cc:78:9d:6c:36:4d:f3:0f:d2:65:73:b6:9f: 3f:28:e6:89:75:ac:8b:96:63:90:ec:24:f1:b7:9a: 8d:29:49:c7:4f:c4:9c:28:b4:47:97:15:3d:6c:37: 92:79:7d:ed:e4:38:07:66:3e:91:2c:9b:6f:1a:6c: be:cd:7a:29:2e:70:52:ea:3a:78:36:70:ec:52:c7: 82:30:b5:e4:92:d3:0a:f0:41:fd:d4:41:1f:a5:c8: d6:b7:bb:9d:8b:c7:ef:08:d9:d1:f7:39:62:3f:fa: 92:64:ad:13:da:cc:b9:bb:75:b3:13:47:e2:e8:f6: 9d:e4:f3:5c:0a:05:a7:44:10:f9:6e:36:f3:3e:fe: 64:33:0b:ad:3f:05:87:60:f5:c7:6f:0b:0d:39:16: ed:48:bc:05:a3:90:34:aa:a8:b3:d1:7c:c3:70:63: fb:c6:15:ac:a3:87:c5:15:ab:94:94:d2:59:d1:ca: e1:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:B0:8A:D0:93:54:07:BE:8A:36:D6:B2:38:19:09:FD:D3:22:7E:AF X509v3 Authority Key Identifier: keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/LrCK0JNUB76KNtayOBkJ_dMifq8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.239.244.0/24 185.239.246.0/23 185.244.105.0/24 185.246.236.0/22 185.254.16.0/23 Signature Algorithm: sha256WithRSAEncryption 09:21:ae:25:db:33:9c:5f:7d:7b:5d:6e:d5:66:0e:3d:1a:ef: 98:90:9e:99:be:59:17:2e:4d:00:59:f2:3f:01:73:58:8d:e6: eb:f7:dc:75:06:c3:ce:fc:42:51:8f:0d:e2:ba:b4:02:9e:17: df:be:09:03:18:a6:5e:f6:85:04:9a:ab:7f:61:0d:12:24:ce: 98:23:c3:98:f6:6d:13:6f:f4:67:d8:37:62:9e:d3:cf:d5:00: 3b:11:d6:ca:60:49:57:b6:c2:63:56:b8:b6:c1:3d:7c:02:18: e0:78:5e:57:f8:fe:0e:2a:f2:98:59:cc:27:d8:9a:18:fa:31: 1c:c8:21:ea:70:e7:cd:84:d6:45:e7:2a:06:bc:54:35:5f:4f: a6:87:a1:3f:15:5f:5f:42:dc:f6:b6:73:6a:8a:b6:ea:8d:e1: 8a:a6:fe:8a:c7:80:0d:c2:e8:b0:76:e4:9b:a6:4f:2a:72:9c: 4c:b3:be:db:ad:d9:72:da:d4:4a:3c:18:ce:79:8e:1f:d4:64: d4:47:1a:c6:48:01:f6:13:30:2a:5e:ad:28:25:d3:72:69:cc: be:bb:f0:24:85:b5:e9:6f:72:b4:af:ab:35:6f:8f:55:3b:29: a0:f9:4d:12:a2:1d:1a:c0:06:2a:31:40:34:81:05:5f:44:86: 26:61:66:8d -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZt+p1uolxvsQPB/dXZbXZdNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMTQxMTJkMDVlOWQ4NzYxNDlkMjc3OGQ0OGVkYWFhMzI0 ZGIwYTUwHhcNMjYwMTAyMTIyMDU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZWIwOGFkMDkzNTQwN2JlOGEzNmQ2YjIzODE5MDlmZGQzMjI3ZWFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtR6P5ZZ06yNgeztn1IEdaNn0wPVT 6YsYBwSsVczsbY8zeuV0ka+G/9Hjsamx6qiC/khjJA2CV/J4EEcyiZ+BdQg0TpbY O7Ht5ZrpEsx4nWw2TfMP0mVztp8/KOaJdayLlmOQ7CTxt5qNKUnHT8ScKLRHlxU9 bDeSeX3t5DgHZj6RLJtvGmy+zXopLnBS6jp4NnDsUseCMLXkktMK8EH91EEfpcjW t7udi8fvCNnR9zliP/qSZK0T2sy5u3WzE0fi6Pad5PNcCgWnRBD5bjbzPv5kMwut PwWHYPXHbwsNORbtSLwFo5A0qqiz0XzDcGP7xhWso4fFFauUlNJZ0crhJwIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFC6witCTVAe+ijbWsjgZCf3TIn6vMB8GA1UdIwQY MBaAFE8UES0F6dh2FJ0neNSO2qoyTbClMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhRUkxRWHAySFlVblNkNDFJN2FxakpOc0tVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8zY2FhNTEtN2EyMS00OTlkLWE1NDUt YmFmYmRmYzgxMzJhLzEvTHJDSzBKTlVCNzZLTnRheU9Ca0pfZE1pZnE4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS8zY2FhNTEtN2EyMS00OTlkLWE1NDUtYmFmYmRmYzgxMzJh LzEvVHhRUkxRWHAySFlVblNkNDFJN2FxakpOc0tVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAue/0AwQB ue/2AwQAufRpAwQCufbsAwQBuf4QMA0GCSqGSIb3DQEBCwUAA4IBAQAJIa4l2zOc X317XW7VZg49Gu+YkJ6ZvlkXLk0AWfI/AXNYjebr99x1BsPO/EJRjw3iurQCnhff vgkDGKZe9oUEmqt/YQ0SJM6YI8OY9m0Tb/Rn2DdintPP1QA7EdbKYElXtsJjVri2 wT18AhjgeF5X+P4OKvKYWcwn2JoY+jEcyCHqcOfNhNZF5yoGvFQ1X0+mh6E/FV9f Qtz2tnNqirbqjeGKpv6Kx4ANwuiwduSbpk8qcpxMs77brdly2tRKPBjOeY4f1GTU RxrGSAH2EzAqXq0oJdNyacy+u/AkhbXpb3K0r6s1b49VOymg+U0Soh0awAYqMUA0 gQVfRIYmYWaN -----END CERTIFICATE-----Generated at Sat Jan 3 18:59:59 2026 by rpki-client