This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/910bd4-7fda-4934-a403-b136fe40df4d/1/lXioRR_EVL0NPAzIqI7FX4MelJo.roa File: lXioRR_EVL0NPAzIqI7FX4MelJo.roa (raw, json) Hash identifier: S7jrVKRJiz72hirUXIrytitbQsTNlzUASHFJ52S5ht4= Subject key identifier: 95:78:A8:45:1F:C4:54:BD:0D:3C:0C:C8:A8:8E:C5:5F:83:1E:94:9A Certificate issuer: /CN=7698c999e7f0493ee36634e892b37c9f3bf9407d Certificate serial: 019B77C6604FAF0EAD0F7D9C644C1DFCC652 Authority key identifier: 76:98:C9:99:E7:F0:49:3E:E3:66:34:E8:92:B3:7C:9F:3B:F9:40:7D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dpjJmefwST7jZjTokrN8nzv5QH0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/910bd4-7fda-4934-a403-b136fe40df4d/1/lXioRR_EVL0NPAzIqI7FX4MelJo.roa Signing time: Thu 01 Jan 2026 04:17:28 +0000 ROA not before: Thu 01 Jan 2026 04:17:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35627 IP address blocks: 195.160.166.0/23 maxlen: 24 195.160.166.0/24 maxlen: 24 2001:67c:5c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/910bd4-7fda-4934-a403-b136fe40df4d/1/dpjJmefwST7jZjTokrN8nzv5QH0.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/910bd4-7fda-4934-a403-b136fe40df4d/1/dpjJmefwST7jZjTokrN8nzv5QH0.mft rsync://rpki.ripe.net/repository/DEFAULT/dpjJmefwST7jZjTokrN8nzv5QH0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:60:4f:af:0e:ad:0f:7d:9c:64:4c:1d:fc:c6:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7698c999e7f0493ee36634e892b37c9f3bf9407d Validity Not Before: Jan 1 04:17:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9578a8451fc454bd0d3c0cc8a88ec55f831e949a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:7c:63:2b:b5:fb:86:17:4e:e7:08:28:00:5c: ba:97:e7:67:b6:84:28:92:33:1a:fa:c0:72:ff:6b: d5:db:ac:7f:ef:94:ba:1b:d2:44:a0:61:72:5c:e3: 7a:b7:f2:3b:e6:67:9e:74:3b:4d:d5:69:2c:10:63: 47:ec:0d:bb:d5:4b:2c:2d:ee:0b:46:3f:28:ce:15: 01:f5:c4:fa:f4:13:3a:9b:c8:44:5c:74:16:8f:d9: 49:b7:93:9f:2a:0b:f7:14:44:80:e1:1a:5b:94:c2: fc:bc:c3:e1:75:e1:45:2f:24:aa:3c:ad:ec:11:b0: 8c:15:bd:15:6a:40:29:3f:54:1e:38:b7:05:46:a9: 6b:31:fb:76:36:84:58:4f:7a:fe:b5:47:08:b6:83: 99:34:35:dc:69:73:88:9c:e3:ff:1b:60:3d:20:35: 17:b2:88:02:26:5c:d5:2f:45:d5:2b:fe:20:1d:d0: 82:a5:e0:74:7a:2f:63:3e:eb:93:97:c1:4c:eb:e2: 68:91:dc:c3:e7:5c:ab:33:59:80:37:b8:6d:75:f4: e7:2c:64:20:f0:f7:33:50:93:b7:63:ba:4e:c7:45: c3:1c:75:a2:f3:66:f6:28:4a:70:44:d4:98:40:9d: c1:f0:89:99:97:5e:3a:89:66:c0:d1:5c:19:7d:00: 1e:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:78:A8:45:1F:C4:54:BD:0D:3C:0C:C8:A8:8E:C5:5F:83:1E:94:9A X509v3 Authority Key Identifier: keyid:76:98:C9:99:E7:F0:49:3E:E3:66:34:E8:92:B3:7C:9F:3B:F9:40:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dpjJmefwST7jZjTokrN8nzv5QH0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/910bd4-7fda-4934-a403-b136fe40df4d/1/lXioRR_EVL0NPAzIqI7FX4MelJo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/910bd4-7fda-4934-a403-b136fe40df4d/1/dpjJmefwST7jZjTokrN8nzv5QH0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.160.166.0/23 IPv6: 2001:67c:5c::/48 Signature Algorithm: sha256WithRSAEncryption d4:51:ed:97:9e:f3:28:4d:ac:11:f9:41:01:30:e5:b1:75:1a: 2e:41:ac:c4:ac:21:c0:2f:d6:76:f9:bf:d7:06:32:71:10:c2: 9a:d6:35:6a:3a:b8:17:31:ed:34:84:89:17:80:51:22:b7:a6: 20:f8:9b:02:03:59:58:2c:54:ed:bd:e5:e6:f0:b2:89:69:ab: b0:cb:b0:e5:46:3d:4a:9e:f6:fb:78:e0:c9:b2:60:73:4a:0f: 67:2f:1e:f6:72:ab:ef:d9:69:38:58:17:94:4a:0e:de:da:bc: 09:2f:1d:e7:20:c9:a4:4f:4c:61:ab:4a:29:58:24:36:22:06: 65:a5:8d:c4:3d:30:76:96:d3:11:16:70:52:ec:a7:3b:3d:98: 5b:2c:90:69:7e:25:b3:7d:f9:55:54:08:3f:ad:55:f6:3d:f7: ab:1a:c5:19:5d:2f:aa:58:e9:30:62:f2:cd:a2:04:18:6e:ca: 83:e0:f4:f5:1f:e0:b3:fc:dd:88:07:12:a3:2b:c8:02:0b:77: 4d:e2:01:19:70:29:61:cd:09:e1:48:26:d3:b3:d2:cb:67:80: ff:8d:d1:29:e5:e3:71:1c:90:b1:a9:3a:d0:ff:b8:9e:c5:e2: 8a:96:ac:62:8a:eb:ae:5f:e1:fe:f8:1d:e2:93:a7:0c:35:a3: bf:74:88:6d -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt3xmBPrw6tD32cZEwd/MZSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2OThjOTk5ZTdmMDQ5M2VlMzY2MzRlODkyYjM3YzlmM2Jm OTQwN2QwHhcNMjYwMTAxMDQxNzI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NTc4YTg0NTFmYzQ1NGJkMGQzYzBjYzhhODhlYzU1ZjgzMWU5NDlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmHxjK7X7hhdO5wgoAFy6l+dntoQo kjMa+sBy/2vV26x/75S6G9JEoGFyXON6t/I75meedDtN1WksEGNH7A271UssLe4L Rj8ozhUB9cT69BM6m8hEXHQWj9lJt5OfKgv3FESA4RpblML8vMPhdeFFLySqPK3s EbCMFb0VakApP1QeOLcFRqlrMft2NoRYT3r+tUcItoOZNDXcaXOInOP/G2A9IDUX sogCJlzVL0XVK/4gHdCCpeB0ei9jPuuTl8FM6+JokdzD51yrM1mAN7htdfTnLGQg 8PczUJO3Y7pOx0XDHHWi82b2KEpwRNSYQJ3B8ImZl146iWbA0VwZfQAePwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFJV4qEUfxFS9DTwMyKiOxV+DHpSaMB8GA1UdIwQY MBaAFHaYyZnn8Ek+42Y06JKzfJ87+UB9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZHBqSm1lZndTVDdqWmpUb2tyTjhuenY1UUgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC85MTBiZDQtN2ZkYS00OTM0LWE0MDMt YjEzNmZlNDBkZjRkLzEvbFhpb1JSX0VWTDBOUEF6SXFJN0ZYNE1lbEpvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC85MTBiZDQtN2ZkYS00OTM0LWE0MDMtYjEzNmZlNDBkZjRk LzEvZHBqSm1lZndTVDdqWmpUb2tyTjhuenY1UUgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBw6CmMA8E AgACMAkDBwAgAQZ8AFwwDQYJKoZIhvcNAQELBQADggEBANRR7Zee8yhNrBH5QQEw 5bF1Gi5BrMSsIcAv1nb5v9cGMnEQwprWNWo6uBcx7TSEiReAUSK3piD4mwIDWVgs VO295ebwsolpq7DLsOVGPUqe9vt44MmyYHNKD2cvHvZyq+/ZaThYF5RKDt7avAkv HecgyaRPTGGrSilYJDYiBmWljcQ9MHaW0xEWcFLspzs9mFsskGl+JbN9+VVUCD+t VfY996saxRldL6pY6TBi8s2iBBhuyoPg9PUf4LP83YgHEqMryAILd03iARlwKWHN CeFIJtOz0stngP+N0Snl43EckLGpOtD/uJ7F4oqWrGKK665f4f74HeKTpww1o790 iG0= -----END CERTIFICATE-----Generated at Tue Feb 10 03:11:14 2026 by rpki-client