This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/Lk6MHJqbLJwPya4Np54xeRkrP5Y.roa File: Lk6MHJqbLJwPya4Np54xeRkrP5Y.roa (raw, json) Hash identifier: tbEgbXkmW9qHuVSGUjOVErC6z6ahNtBuKdGhXGRxRnw= Subject key identifier: 2E:4E:8C:1C:9A:9B:2C:9C:0F:C9:AE:0D:A7:9E:31:79:19:2B:3F:96 Certificate issuer: /CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc Certificate serial: 019B77C7750E225D868748D3806D83989E5C Authority key identifier: 88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/Lk6MHJqbLJwPya4Np54xeRkrP5Y.roa Signing time: Thu 01 Jan 2026 04:18:38 +0000 ROA not before: Thu 01 Jan 2026 04:18:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25198 IP address blocks: 185.253.61.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.mft rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:75:0e:22:5d:86:87:48:d3:80:6d:83:98:9e:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc Validity Not Before: Jan 1 04:18:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2e4e8c1c9a9b2c9c0fc9ae0da79e3179192b3f96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:95:a7:4c:0c:78:68:ed:13:1b:9a:07:b7:82: 96:b5:09:62:c4:74:3c:ed:14:e6:b0:46:f1:7d:68: 51:bd:59:44:19:d3:67:4d:5e:57:71:50:7b:a4:a5: d4:28:b9:14:09:79:87:06:b3:a2:ea:db:7e:25:f0: 15:4f:8e:a4:ca:2d:6f:b6:f9:45:84:76:33:33:8d: b6:bd:72:6d:67:11:60:33:2d:60:e8:9a:4c:c2:5b: dc:e2:0b:bc:31:60:61:ff:95:af:3c:95:80:80:8d: 9c:98:df:58:a7:0d:39:1f:16:48:59:28:91:db:1c: b8:e6:d8:a9:0f:30:11:06:7e:ce:ec:67:aa:ec:53: b4:f1:b0:b6:54:cd:cf:8e:ac:43:ad:1d:4e:db:fd: a4:4e:7c:1e:8c:89:f6:fd:5b:ed:ba:cd:43:9c:2f: 19:21:d5:35:b2:59:55:8f:ab:eb:eb:a6:b6:b1:54: 15:c1:a8:2d:b8:c1:5d:f2:d7:e0:d8:fb:d0:5c:63: 8c:82:61:89:ab:52:38:02:db:40:cd:36:15:5c:48: 0a:df:b0:05:eb:2f:4b:d0:1f:f2:cb:83:d2:5e:b8: 94:50:1e:8b:e1:60:0c:e8:2d:6b:9d:46:2c:88:e1: bc:d3:25:4f:9a:58:2f:67:43:6d:77:ec:00:f2:13: 1a:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:4E:8C:1C:9A:9B:2C:9C:0F:C9:AE:0D:A7:9E:31:79:19:2B:3F:96 X509v3 Authority Key Identifier: keyid:88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/Lk6MHJqbLJwPya4Np54xeRkrP5Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.253.61.0/24 Signature Algorithm: sha256WithRSAEncryption 36:d4:09:1b:72:bf:25:d4:27:7a:db:02:00:26:fb:aa:52:91: e9:e8:1b:2d:83:9e:15:ed:90:4e:c8:8a:53:fd:71:2e:b4:2f: 90:e0:26:87:9c:4c:fd:d3:7e:ec:2c:6c:8d:c6:d2:92:56:85: 5a:6a:9b:e3:37:b8:a8:b6:7b:48:4e:31:ab:7d:c9:e9:42:a3: 57:3c:d5:7b:1b:aa:c3:53:ac:18:9f:17:28:0a:56:14:f6:a1: a8:5c:e6:f3:00:9a:08:c5:84:d8:7a:23:1b:90:d7:60:81:af: c2:cc:14:d4:e1:06:0e:32:bc:1b:24:8a:98:21:d6:bc:7f:c0: b1:c1:2a:fb:cb:c7:62:04:78:b4:6c:fc:02:6d:8c:ac:e4:4c: 5f:1c:7a:48:2d:ef:9c:35:a6:39:ff:b2:fc:ae:41:39:78:4a: cf:e1:fc:70:d8:ef:fb:4b:08:45:b8:ec:d0:5e:f4:b1:ac:9f: 31:ec:ea:c8:be:74:91:a4:f5:b2:94:d7:cd:0f:2d:a8:81:2e: 9c:47:bf:db:69:1c:0f:dc:a6:84:0d:cf:70:ae:a5:d7:37:5c: d3:bc:d8:a6:27:21:bb:75:fc:15:86:f0:38:4d:c5:f1:3a:3c: 12:ca:bb:63:a7:76:64:cf:4e:91:d4:0e:4a:b5:b6:50:25:7c: 30:fc:7c:d8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3x3UOIl2Gh0jTgG2DmJ5cMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4YWRkOWI2NzFmN2EzNmViMjM2N2UzNGZlZTRiY2IxM2I4 ZjY2Y2MwHhcNMjYwMTAxMDQxODM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZTRlOGMxYzlhOWIyYzljMGZjOWFlMGRhNzllMzE3OTE5MmIzZjk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv5WnTAx4aO0TG5oHt4KWtQlixHQ8 7RTmsEbxfWhRvVlEGdNnTV5XcVB7pKXUKLkUCXmHBrOi6tt+JfAVT46kyi1vtvlF hHYzM422vXJtZxFgMy1g6JpMwlvc4gu8MWBh/5WvPJWAgI2cmN9Ypw05HxZIWSiR 2xy45tipDzARBn7O7Geq7FO08bC2VM3PjqxDrR1O2/2kTnwejIn2/Vvtus1DnC8Z IdU1sllVj6vr66a2sVQVwagtuMFd8tfg2PvQXGOMgmGJq1I4AttAzTYVXEgK37AF 6y9L0B/yy4PSXriUUB6L4WAM6C1rnUYsiOG80yVPmlgvZ0Ntd+wA8hMaiQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFC5OjByamyycD8muDaeeMXkZKz+WMB8GA1UdIwQY MBaAFIit2bZx96NusjZ+NP7kvLE7j2bMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUszWnRuSDNvMjZ5Tm40MF91UzhzVHVQWnN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy8zZWQwMGEtMTVlZS00NjY0LWE3ZjEt YTFiOTZiOWI3MGY4LzEvTGs2TUhKcWJMSndQeWE0TnA1NHhlUmtyUDVZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy8zZWQwMGEtMTVlZS00NjY0LWE3ZjEtYTFiOTZiOWI3MGY4 LzEvaUszWnRuSDNvMjZ5Tm40MF91UzhzVHVQWnN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuf09MA0G CSqGSIb3DQEBCwUAA4IBAQA21Akbcr8l1Cd62wIAJvuqUpHp6Bstg54V7ZBOyIpT /XEutC+Q4CaHnEz9037sLGyNxtKSVoVaapvjN7iotntITjGrfcnpQqNXPNV7G6rD U6wYnxcoClYU9qGoXObzAJoIxYTYeiMbkNdgga/CzBTU4QYOMrwbJIqYIda8f8Cx wSr7y8diBHi0bPwCbYys5ExfHHpILe+cNaY5/7L8rkE5eErP4fxw2O/7SwhFuOzQ XvSxrJ8x7OrIvnSRpPWylNfNDy2ogS6cR7/baRwP3KaEDc9wrqXXN1zTvNimJyG7 dfwVhvA4TcXxOjwSyrtjp3Zkz06R1A5KtbZQJXww/HzY -----END CERTIFICATE-----Generated at Mon Jan 19 16:50:39 2026 by rpki-client