This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/f9d0e9-bda4-42b2-8e7a-d60f44a934b1/1/lkOGQ8G7v7KQ2Y0qWOrKVoZYTms.roa File: lkOGQ8G7v7KQ2Y0qWOrKVoZYTms.roa (raw, json) Hash identifier: d0roMsqX9vnomDLuPDxCBkqVZxb8IXHny4aGCS66Mnk= Subject key identifier: 96:43:86:43:C1:BB:BF:B2:90:D9:8D:2A:58:EA:CA:56:86:58:4E:6B Certificate issuer: /CN=95fd03b5f35b317b4d32ff1a4b2c17bb376c21e1 Certificate serial: 019B78346834FBCF36B1CFD0A732FEC2E501 Authority key identifier: 95:FD:03:B5:F3:5B:31:7B:4D:32:FF:1A:4B:2C:17:BB:37:6C:21:E1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lf0DtfNbMXtNMv8aSywXuzdsIeE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/f9d0e9-bda4-42b2-8e7a-d60f44a934b1/1/lkOGQ8G7v7KQ2Y0qWOrKVoZYTms.roa Signing time: Thu 01 Jan 2026 06:17:38 +0000 ROA not before: Thu 01 Jan 2026 06:17:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34154 IP address blocks: 185.121.196.0/22 maxlen: 24 193.17.230.0/24 maxlen: 24 195.160.196.0/22 maxlen: 24 217.71.216.0/21 maxlen: 24 2a00:1fe8::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/f9d0e9-bda4-42b2-8e7a-d60f44a934b1/1/lf0DtfNbMXtNMv8aSywXuzdsIeE.crl rsync://rpki.ripe.net/repository/DEFAULT/34/f9d0e9-bda4-42b2-8e7a-d60f44a934b1/1/lf0DtfNbMXtNMv8aSywXuzdsIeE.mft rsync://rpki.ripe.net/repository/DEFAULT/lf0DtfNbMXtNMv8aSywXuzdsIeE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:68:34:fb:cf:36:b1:cf:d0:a7:32:fe:c2:e5:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95fd03b5f35b317b4d32ff1a4b2c17bb376c21e1 Validity Not Before: Jan 1 06:17:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=96438643c1bbbfb290d98d2a58eaca5686584e6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:ce:db:f4:ab:9f:74:1e:44:b6:ab:49:c9:cf: 96:71:aa:54:aa:f8:74:9b:d1:2a:7b:be:62:fe:c8: 4a:f0:5b:3f:4b:98:b6:72:48:e4:8c:f4:04:3b:e2: 47:3f:7d:68:f1:29:a0:25:a3:5b:44:83:16:d5:f9: 27:a9:72:c1:b2:d0:96:e9:1f:3d:4c:1c:11:2b:ea: 7a:9a:cb:69:28:62:a6:f3:3c:ad:91:af:10:1e:88: 6d:66:e1:1e:57:8c:a9:0f:fa:a1:45:cd:ac:16:8f: 9c:c4:9b:8f:db:5a:fc:e0:79:34:04:c8:04:b5:82: fb:39:69:48:af:b9:f5:01:39:6f:67:62:33:e2:22: 63:d0:e3:c1:b4:46:d3:12:3b:73:7e:b2:80:aa:e0: af:f4:ee:df:fa:a0:37:75:63:67:99:9f:42:2e:91: a6:0d:ac:d7:eb:81:d3:91:0a:06:33:8d:f6:be:65: 54:56:b5:cb:f7:a7:e0:da:45:2e:56:d7:bd:55:07: 46:34:14:93:c5:9c:72:d7:fe:bb:21:a7:b3:8a:2c: 37:94:45:47:0d:80:a5:91:cf:40:9c:76:8c:93:57: 26:9a:d4:52:10:96:39:d7:6b:94:f9:73:1a:11:f8: b4:a3:df:bc:8b:30:bc:d9:41:23:75:5f:8f:62:60: 17:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:43:86:43:C1:BB:BF:B2:90:D9:8D:2A:58:EA:CA:56:86:58:4E:6B X509v3 Authority Key Identifier: keyid:95:FD:03:B5:F3:5B:31:7B:4D:32:FF:1A:4B:2C:17:BB:37:6C:21:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lf0DtfNbMXtNMv8aSywXuzdsIeE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/f9d0e9-bda4-42b2-8e7a-d60f44a934b1/1/lkOGQ8G7v7KQ2Y0qWOrKVoZYTms.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/f9d0e9-bda4-42b2-8e7a-d60f44a934b1/1/lf0DtfNbMXtNMv8aSywXuzdsIeE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.121.196.0/22 193.17.230.0/24 195.160.196.0/22 217.71.216.0/21 IPv6: 2a00:1fe8::/32 Signature Algorithm: sha256WithRSAEncryption 3e:72:36:b1:fe:d3:75:ce:92:4a:dc:4d:b0:09:f7:de:0f:03: b6:54:6b:16:b3:bf:ef:a5:a4:6c:ff:4a:2e:c7:06:08:a3:46: 7a:96:0d:6a:6c:78:fa:fd:af:17:16:76:49:41:4f:2c:f0:23: a3:dd:39:ae:fb:b7:bb:9f:bf:c0:6a:df:36:68:2b:a7:1f:f2: a7:c0:c7:d5:95:36:4c:92:fa:1c:03:52:52:37:cf:33:35:2a: ef:69:14:b1:94:a4:cd:a2:ae:dd:88:dd:9c:39:2e:54:42:c1: f3:da:8f:7a:9a:f9:4c:30:c3:69:19:38:cd:19:97:d0:54:c3: 6c:f7:4a:23:99:12:2a:dd:78:d4:d2:99:92:57:4d:b2:05:54: 69:57:c5:c8:0a:73:74:f8:54:3c:06:31:46:e1:c6:9b:1f:aa: 4b:49:51:90:fa:1e:ee:1b:d0:46:47:c1:11:a4:4c:fa:a8:38: 60:6d:d5:92:58:2f:3d:35:4c:5f:cb:de:05:88:e1:32:ea:bf: f1:53:53:b1:93:3a:f1:43:1c:68:83:7c:5b:41:d1:8e:ae:63: 56:89:61:f4:23:bf:d7:78:cb:c3:8e:11:82:14:4e:30:ee:35: 74:a5:d1:5c:c3:c8:08:13:ef:3f:a1:98:b6:6e:6b:41:52:a3: 5a:95:b9:8d -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgISAZt4NGg0+882sc/QpzL+wuUBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1ZmQwM2I1ZjM1YjMxN2I0ZDMyZmYxYTRiMmMxN2JiMzc2 YzIxZTEwHhcNMjYwMTAxMDYxNzM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NjQzODY0M2MxYmJiZmIyOTBkOThkMmE1OGVhY2E1Njg2NTg0ZTZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoM7b9KufdB5EtqtJyc+WcapUqvh0 m9Eqe75i/shK8Fs/S5i2ckjkjPQEO+JHP31o8SmgJaNbRIMW1fknqXLBstCW6R89 TBwRK+p6mstpKGKm8zytka8QHohtZuEeV4ypD/qhRc2sFo+cxJuP21r84Hk0BMgE tYL7OWlIr7n1ATlvZ2Iz4iJj0OPBtEbTEjtzfrKAquCv9O7f+qA3dWNnmZ9CLpGm DazX64HTkQoGM432vmVUVrXL96fg2kUuVte9VQdGNBSTxZxy1/67Iaeziiw3lEVH DYClkc9AnHaMk1cmmtRSEJY512uU+XMaEfi0o9+8izC82UEjdV+PYmAX+QIDAQAB o4ICKjCCAiYwHQYDVR0OBBYEFJZDhkPBu7+ykNmNKljqylaGWE5rMB8GA1UdIwQY MBaAFJX9A7XzWzF7TTL/GkssF7s3bCHhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbGYwRHRmTmJNWHROTXY4YVN5d1h1emRzSWVFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9mOWQwZTktYmRhNC00MmIyLThlN2Et ZDYwZjQ0YTkzNGIxLzEvbGtPR1E4Rzd2N0tRMlkwcVdPcktWb1pZVG1zLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC9mOWQwZTktYmRhNC00MmIyLThlN2EtZDYwZjQ0YTkzNGIx LzEvbGYwRHRmTmJNWHROTXY4YVN5d1h1emRzSWVFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQCuXnEAwQA wRHmAwQCw6DEAwQD2UfYMA0EAgACMAcDBQAqAB/oMA0GCSqGSIb3DQEBCwUAA4IB AQA+cjax/tN1zpJK3E2wCffeDwO2VGsWs7/vpaRs/0ouxwYIo0Z6lg1qbHj6/a8X FnZJQU8s8COj3Tmu+7e7n7/Aat82aCunH/KnwMfVlTZMkvocA1JSN88zNSrvaRSx lKTNoq7diN2cOS5UQsHz2o96mvlMMMNpGTjNGZfQVMNs90ojmRIq3XjU0pmSV02y BVRpV8XICnN0+FQ8BjFG4cabH6pLSVGQ+h7uG9BGR8ERpEz6qDhgbdWSWC89NUxf y94FiOEy6r/xU1OxkzrxQxxog3xbQdGOrmNWiWH0I7/XeMvDjhGCFE4w7jV0pdFc w8gIE+8/oZi2bmtBUqNalbmN -----END CERTIFICATE-----Generated at Mon Feb 9 23:56:21 2026 by rpki-client