This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/lQQ81t7c12q_l0N1sDr5XcB-XMA.roa File: lQQ81t7c12q_l0N1sDr5XcB-XMA.roa (raw, json) Hash identifier: R7IXtyVSGex093Z8HDO/Q29LhwLyboyg77DRd+Tq1rE= Subject key identifier: 95:04:3C:D6:DE:DC:D7:6A:BF:97:43:75:B0:3A:F9:5D:C0:7E:5C:C0 Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915 Certificate serial: 019B797EDB3EB1306A11CB70D12DAF329B7D Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/lQQ81t7c12q_l0N1sDr5XcB-XMA.roa Signing time: Thu 01 Jan 2026 12:18:35 +0000 ROA not before: Thu 01 Jan 2026 12:18:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214584 IP address blocks: 178.253.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 08:17:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:db:3e:b1:30:6a:11:cb:70:d1:2d:af:32:9b:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915 Validity Not Before: Jan 1 12:18:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=95043cd6dedcd76abf974375b03af95dc07e5cc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:90:ad:dd:5f:9d:49:9f:9c:2b:b5:f7:85:b2: b6:75:b9:1f:0e:f0:33:2f:a2:b5:6c:13:da:70:b1: 8e:28:ec:6b:83:a8:9c:1e:41:06:b3:f0:c6:bf:3c: 5b:f5:b8:23:03:40:88:d4:e4:eb:9a:5f:39:75:12: ed:bf:40:1d:bf:59:86:07:e2:75:77:5d:4c:6c:57: d3:c4:21:2f:6b:33:75:b0:77:78:be:67:4d:73:f2: ad:a9:5a:6e:a2:e8:a1:31:01:43:95:4b:6f:9a:bc: bd:e9:86:d8:b6:87:54:38:62:e9:44:9f:31:7d:e1: c6:e6:09:e3:fc:e4:d0:2f:19:72:ee:ce:ba:3f:56: 94:7f:d7:f3:bb:66:4b:ce:cc:ca:7a:33:f1:c7:1b: 26:da:63:be:bc:00:eb:15:d4:5f:ac:63:6e:41:a9: ee:5e:3b:8e:49:e0:38:64:25:32:a2:cf:36:ce:cb: 46:7b:dd:97:80:ca:08:89:60:20:46:e1:db:19:03: 92:36:52:2d:5c:78:54:eb:0f:42:92:1a:3b:4a:bb: 5e:9b:b7:ec:7e:d9:16:07:96:f7:de:cf:0b:5a:60: a6:ed:8c:4c:70:26:35:c3:2e:d2:38:62:cd:bb:80: af:a5:1c:19:0a:b1:13:ca:84:8d:1b:c8:27:45:4c: db:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:04:3C:D6:DE:DC:D7:6A:BF:97:43:75:B0:3A:F9:5D:C0:7E:5C:C0 X509v3 Authority Key Identifier: keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/lQQ81t7c12q_l0N1sDr5XcB-XMA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.253.225.0/24 Signature Algorithm: sha256WithRSAEncryption 94:b0:7e:56:2c:24:aa:7e:3b:94:2f:8e:6f:c2:2a:35:f1:1c: cb:49:2d:cb:fa:85:5b:5b:ee:ad:12:71:83:3f:ef:01:23:f1: 91:5f:7c:63:77:53:c4:f0:fa:8c:ca:e8:b0:b9:5a:03:90:7d: 94:d8:b1:9a:e1:36:8f:e1:97:77:e6:75:2e:2d:0b:24:0e:46: 88:fa:be:3d:e9:56:fd:62:f1:2a:c1:7d:39:15:91:5b:de:a7: dc:ba:5a:da:00:d5:7f:fd:64:02:11:f4:d2:81:06:e3:9d:3d: cc:87:28:72:b6:75:d4:98:75:39:f0:29:94:f1:f7:b4:81:1b: 40:03:8e:e7:7e:b0:83:7c:18:1d:15:b5:1e:ec:3b:07:6b:4f: 49:00:91:ea:82:3b:59:57:e4:50:a4:2e:05:aa:20:d4:e7:f6: d3:3d:4b:f9:d9:d8:09:20:eb:f3:ae:27:33:b3:f6:4e:6c:ea: d5:c1:08:9f:f3:23:7b:da:60:f5:ca:ea:fa:55:fd:07:5d:d6: 29:30:05:6a:ff:e5:8d:90:ce:f7:66:ef:d2:e4:34:2d:c1:72: b5:d4:8e:5f:9b:1f:03:de:88:d4:16:26:d6:b8:29:07:2a:48: 82:5b:af:26:35:cc:04:5f:ee:dc:85:42:18:3b:e7:c4:96:12: e0:53:02:9d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fts+sTBqEctw0S2vMpt9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmODRlNDczOGE3MGVhMzljMDhjZWYyMTA0MzJhZTM5OWVj N2U5MTUwHhcNMjYwMTAxMTIxODM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NTA0M2NkNmRlZGNkNzZhYmY5NzQzNzViMDNhZjk1ZGMwN2U1Y2MwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvpCt3V+dSZ+cK7X3hbK2dbkfDvAz L6K1bBPacLGOKOxrg6icHkEGs/DGvzxb9bgjA0CI1OTrml85dRLtv0Adv1mGB+J1 d11MbFfTxCEvazN1sHd4vmdNc/KtqVpuouihMQFDlUtvmry96YbYtodUOGLpRJ8x feHG5gnj/OTQLxly7s66P1aUf9fzu2ZLzszKejPxxxsm2mO+vADrFdRfrGNuQanu XjuOSeA4ZCUyos82zstGe92XgMoIiWAgRuHbGQOSNlItXHhU6w9Ckho7Srtem7fs ftkWB5b33s8LWmCm7YxMcCY1wy7SOGLNu4CvpRwZCrETyoSNG8gnRUzb+wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJUEPNbe3Ndqv5dDdbA6+V3AflzAMB8GA1UdIwQY MBaAFG+E5HOKcOo5wIzvIQQyrjmex+kVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYt ZmFlNWRiZWQzYjFiLzEvbFFRODF0N2MxMnFfbDBOMXNEcjVYY0ItWE1BLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYtZmFlNWRiZWQzYjFi LzEvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsv3hMA0G CSqGSIb3DQEBCwUAA4IBAQCUsH5WLCSqfjuUL45vwio18RzLSS3L+oVbW+6tEnGD P+8BI/GRX3xjd1PE8PqMyuiwuVoDkH2U2LGa4TaP4Zd35nUuLQskDkaI+r496Vb9 YvEqwX05FZFb3qfculraANV//WQCEfTSgQbjnT3MhyhytnXUmHU58CmU8fe0gRtA A47nfrCDfBgdFbUe7DsHa09JAJHqgjtZV+RQpC4FqiDU5/bTPUv52dgJIOvzricz s/ZObOrVwQif8yN72mD1yur6Vf0HXdYpMAVq/+WNkM73Zu/S5DQtwXK11I5fmx8D 3ojUFibWuCkHKkiCW68mNcwEX+7chUIYO+fElhLgUwKd -----END CERTIFICATE-----Generated at Mon Jan 19 13:54:14 2026 by rpki-client