This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/40c548-5cc6-47c3-9e8f-bddb29f85fb8/1/LreDM9o_4jG6OEjmO_dWYG_Jb_w.roa File: LreDM9o_4jG6OEjmO_dWYG_Jb_w.roa (raw, json) Hash identifier: ryTaJPSpPyp4HVacNx6TqyKRXMOPCVThkC5CxXFK++o= Subject key identifier: 2E:B7:83:33:DA:3F:E2:31:BA:38:48:E6:3B:F7:56:60:6F:C9:6F:FC Certificate issuer: /CN=903ec4c502a42c5bbfdb70ea9f440ca1500acc50 Certificate serial: 019B7AC7AEDB85699BA1F69F961EF05E7DF2 Authority key identifier: 90:3E:C4:C5:02:A4:2C:5B:BF:DB:70:EA:9F:44:0C:A1:50:0A:CC:50 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kD7ExQKkLFu_23Dqn0QMoVAKzFA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/40c548-5cc6-47c3-9e8f-bddb29f85fb8/1/LreDM9o_4jG6OEjmO_dWYG_Jb_w.roa Signing time: Thu 01 Jan 2026 18:17:45 +0000 ROA not before: Thu 01 Jan 2026 18:17:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15595 IP address blocks: 81.25.224.0/20 maxlen: 20 81.25.224.0/24 maxlen: 24 81.25.225.0/24 maxlen: 24 81.25.226.0/24 maxlen: 24 81.25.227.0/24 maxlen: 24 81.25.228.0/24 maxlen: 24 81.25.229.0/24 maxlen: 24 81.25.230.0/24 maxlen: 24 81.25.231.0/24 maxlen: 24 81.25.232.0/24 maxlen: 24 81.25.233.0/24 maxlen: 24 81.25.234.0/24 maxlen: 24 81.25.235.0/24 maxlen: 24 81.25.236.0/24 maxlen: 24 81.25.237.0/24 maxlen: 24 81.25.238.0/24 maxlen: 24 81.25.239.0/24 maxlen: 24 2a02:d300::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/40c548-5cc6-47c3-9e8f-bddb29f85fb8/1/kD7ExQKkLFu_23Dqn0QMoVAKzFA.crl rsync://rpki.ripe.net/repository/DEFAULT/34/40c548-5cc6-47c3-9e8f-bddb29f85fb8/1/kD7ExQKkLFu_23Dqn0QMoVAKzFA.mft rsync://rpki.ripe.net/repository/DEFAULT/kD7ExQKkLFu_23Dqn0QMoVAKzFA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:ae:db:85:69:9b:a1:f6:9f:96:1e:f0:5e:7d:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=903ec4c502a42c5bbfdb70ea9f440ca1500acc50 Validity Not Before: Jan 1 18:17:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2eb78333da3fe231ba3848e63bf756606fc96ffc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:c3:aa:d7:78:7b:e8:48:1c:c9:b8:07:84:64: af:e9:78:48:0f:bf:9f:b2:81:db:5e:d7:dd:e2:d8: 7e:86:07:f0:c4:4d:3c:30:af:54:e0:25:13:f4:e8: 18:a0:f3:d2:d3:7d:4d:30:4c:8a:08:ba:fd:67:4d: 68:2d:84:39:0a:fb:aa:d5:53:2a:13:1f:5b:0c:d5: fe:a2:5e:9b:6e:03:43:64:d6:30:71:c5:2f:7b:c6: a7:bb:f6:3b:6a:28:41:45:e1:41:9b:39:ea:fc:c1: 86:8d:88:39:6b:f8:4c:d6:56:38:43:c5:0f:7c:90: 9e:59:b9:7f:f0:39:20:64:b8:73:69:ce:b4:3a:96: d7:75:af:7c:f1:7c:be:e0:70:7e:e3:08:94:3e:86: 19:d6:df:96:da:7f:89:60:88:df:4b:ab:43:84:11: d6:4b:32:90:d0:ba:c8:94:0c:6c:52:dd:88:7a:84: dd:95:27:c5:c2:90:36:41:c5:9c:73:c2:cd:28:ac: dd:40:80:89:07:d4:07:4f:48:f8:11:5f:cf:be:d7: 01:95:b0:68:d9:59:92:8b:23:d5:89:0b:8b:24:7d: b3:0b:2d:82:ea:07:b2:f8:7f:df:2f:f5:1d:a2:3b: 11:d5:a1:c1:8a:9a:0b:3e:23:20:2d:8b:86:53:3e: c9:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:B7:83:33:DA:3F:E2:31:BA:38:48:E6:3B:F7:56:60:6F:C9:6F:FC X509v3 Authority Key Identifier: keyid:90:3E:C4:C5:02:A4:2C:5B:BF:DB:70:EA:9F:44:0C:A1:50:0A:CC:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kD7ExQKkLFu_23Dqn0QMoVAKzFA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/40c548-5cc6-47c3-9e8f-bddb29f85fb8/1/LreDM9o_4jG6OEjmO_dWYG_Jb_w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/40c548-5cc6-47c3-9e8f-bddb29f85fb8/1/kD7ExQKkLFu_23Dqn0QMoVAKzFA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.25.224.0/20 IPv6: 2a02:d300::/29 Signature Algorithm: sha256WithRSAEncryption 9f:e1:65:93:e5:fc:61:59:4f:f8:c4:a3:6c:f3:b7:99:8f:30: e2:8f:87:b6:ba:37:71:5d:de:5f:df:55:a0:dd:c8:44:3c:ca: c6:71:57:16:58:cd:89:52:c6:8e:73:f1:79:26:5d:ae:8f:cd: 6c:72:9d:98:be:9d:78:6b:90:ad:e5:e1:9d:1b:62:a8:eb:9f: 0a:83:07:7d:c0:57:3d:3d:5d:3f:cf:32:05:74:a2:e5:bd:fc: 2b:e3:08:57:e3:3f:2c:cc:44:90:66:d9:fb:97:84:33:f8:da: 31:ab:61:2d:c3:27:de:ff:13:07:ea:cc:e4:4a:80:07:f1:b5: e8:60:e7:d8:32:24:60:f7:17:d8:eb:8d:2f:9b:77:54:08:6e: f4:b1:67:29:13:21:87:32:4b:a9:10:95:fe:a7:13:63:59:7d: 7d:3c:13:6c:27:56:ba:b7:d6:6a:9b:14:7f:c7:64:ea:e5:f9: 89:58:44:27:c1:c2:45:81:c0:ca:64:a2:74:97:52:ed:fd:8f: db:0b:2f:33:a5:0e:c2:df:c6:f5:b4:cc:86:c7:17:38:85:35: 60:01:2d:50:ca:1a:76:66:28:90:0f:98:62:92:82:af:7a:6c: 6e:40:cf:a4:52:8f:0c:7d:f0:65:34:be:61:54:85:5c:a6:95: 8b:d3:b1:e6 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt6x67bhWmbofaflh7wXn3yMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkwM2VjNGM1MDJhNDJjNWJiZmRiNzBlYTlmNDQwY2ExNTAw YWNjNTAwHhcNMjYwMTAxMTgxNzQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZWI3ODMzM2RhM2ZlMjMxYmEzODQ4ZTYzYmY3NTY2MDZmYzk2ZmZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAncOq13h76EgcybgHhGSv6XhID7+f soHbXtfd4th+hgfwxE08MK9U4CUT9OgYoPPS031NMEyKCLr9Z01oLYQ5Cvuq1VMq Ex9bDNX+ol6bbgNDZNYwccUve8anu/Y7aihBReFBmznq/MGGjYg5a/hM1lY4Q8UP fJCeWbl/8DkgZLhzac60OpbXda988Xy+4HB+4wiUPoYZ1t+W2n+JYIjfS6tDhBHW SzKQ0LrIlAxsUt2IeoTdlSfFwpA2QcWcc8LNKKzdQICJB9QHT0j4EV/PvtcBlbBo 2VmSiyPViQuLJH2zCy2C6gey+H/fL/UdojsR1aHBipoLPiMgLYuGUz7J5wIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFC63gzPaP+IxujhI5jv3VmBvyW/8MB8GA1UdIwQY MBaAFJA+xMUCpCxbv9tw6p9EDKFQCsxQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva0Q3RXhRS2tMRnVfMjNEcW4wUU1vVkFLekZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC80MGM1NDgtNWNjNi00N2MzLTllOGYt YmRkYjI5Zjg1ZmI4LzEvTHJlRE05b180akc2T0VqbU9fZFdZR19KYl93LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC80MGM1NDgtNWNjNi00N2MzLTllOGYtYmRkYjI5Zjg1ZmI4 LzEva0Q3RXhRS2tMRnVfMjNEcW4wUU1vVkFLekZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQEURngMA0E AgACMAcDBQMqAtMAMA0GCSqGSIb3DQEBCwUAA4IBAQCf4WWT5fxhWU/4xKNs87eZ jzDij4e2ujdxXd5f31Wg3chEPMrGcVcWWM2JUsaOc/F5Jl2uj81scp2Yvp14a5Ct 5eGdG2Ko658Kgwd9wFc9PV0/zzIFdKLlvfwr4whX4z8szESQZtn7l4Qz+Noxq2Et wyfe/xMH6szkSoAH8bXoYOfYMiRg9xfY640vm3dUCG70sWcpEyGHMkupEJX+pxNj WX19PBNsJ1a6t9ZqmxR/x2Tq5fmJWEQnwcJFgcDKZKJ0l1Lt/Y/bCy8zpQ7C38b1 tMyGxxc4hTVgAS1Qyhp2ZiiQD5hikoKvemxuQM+kUo8MffBlNL5hVIVcppWL07Hm -----END CERTIFICATE-----Generated at Tue Feb 10 06:03:58 2026 by rpki-client