This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/7ffcb3-357f-436d-8ae3-009477e84a86/1/LT7GFR0jf0xcBNNPyycF_GViPzE.roa File: LT7GFR0jf0xcBNNPyycF_GViPzE.roa (raw, json) Hash identifier: oFSEPnzKQMXkquMCR19L9olzLlP6zAcGwbhD6Y2o3Lc= Subject key identifier: 2D:3E:C6:15:1D:23:7F:4C:5C:04:D3:4F:CB:27:05:FC:65:62:3F:31 Certificate issuer: /CN=78024d480b37705fa0091b5774174e80fdd8add8 Certificate serial: 019B7834DBBF5F39F378A615F445A92572ED Authority key identifier: 78:02:4D:48:0B:37:70:5F:A0:09:1B:57:74:17:4E:80:FD:D8:AD:D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eAJNSAs3cF-gCRtXdBdOgP3Yrdg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/7ffcb3-357f-436d-8ae3-009477e84a86/1/LT7GFR0jf0xcBNNPyycF_GViPzE.roa Signing time: Thu 01 Jan 2026 06:18:08 +0000 ROA not before: Thu 01 Jan 2026 06:18:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62252 IP address blocks: 185.41.156.0/22 maxlen: 22 185.41.156.0/24 maxlen: 24 185.41.157.0/24 maxlen: 24 185.41.158.0/24 maxlen: 24 185.41.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/7ffcb3-357f-436d-8ae3-009477e84a86/1/eAJNSAs3cF-gCRtXdBdOgP3Yrdg.crl rsync://rpki.ripe.net/repository/DEFAULT/3b/7ffcb3-357f-436d-8ae3-009477e84a86/1/eAJNSAs3cF-gCRtXdBdOgP3Yrdg.mft rsync://rpki.ripe.net/repository/DEFAULT/eAJNSAs3cF-gCRtXdBdOgP3Yrdg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:db:bf:5f:39:f3:78:a6:15:f4:45:a9:25:72:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78024d480b37705fa0091b5774174e80fdd8add8 Validity Not Before: Jan 1 06:18:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2d3ec6151d237f4c5c04d34fcb2705fc65623f31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:1f:e4:b4:6b:df:91:35:57:f8:17:bf:58:c9: c5:f4:ab:eb:30:84:c4:2a:05:93:9c:eb:3a:11:53: 65:78:c7:cf:e6:2b:67:e5:c6:3e:49:17:50:0f:03: 85:67:a1:63:fe:0e:73:b1:b1:03:cf:41:6f:99:51: 74:f1:8c:c2:96:2d:88:1c:85:d4:7b:d9:58:dc:41: 59:20:c7:e5:a0:18:7b:ed:43:d1:1a:f6:71:11:ef: 01:8b:5d:26:b2:8f:cf:a4:b3:c5:ec:ff:67:31:90: b8:91:90:6c:d2:a0:1a:e4:22:ef:95:30:5c:61:d2: fc:c4:bf:a7:dd:07:4d:63:92:56:54:f2:90:81:61: a4:6e:b7:02:11:3e:60:f2:e2:8b:f3:23:e7:19:45: ba:92:27:f0:26:70:52:83:e3:f2:6f:e6:ac:9d:1e: 88:c5:4c:51:ce:5b:6a:c7:b5:41:5c:31:d7:a2:6e: 14:da:2e:fc:58:dc:08:fb:99:36:44:7f:7e:92:4e: ab:e0:da:4b:9a:82:16:4d:0b:4f:af:93:1f:da:8b: d6:fd:91:bb:7b:46:c2:15:74:25:7d:be:26:84:8b: ca:e5:0a:cf:56:be:06:53:73:e2:6a:7d:00:15:68: 10:f0:80:5e:ae:15:25:01:cf:0b:93:98:56:f3:47: 4f:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:3E:C6:15:1D:23:7F:4C:5C:04:D3:4F:CB:27:05:FC:65:62:3F:31 X509v3 Authority Key Identifier: keyid:78:02:4D:48:0B:37:70:5F:A0:09:1B:57:74:17:4E:80:FD:D8:AD:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eAJNSAs3cF-gCRtXdBdOgP3Yrdg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/7ffcb3-357f-436d-8ae3-009477e84a86/1/LT7GFR0jf0xcBNNPyycF_GViPzE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/7ffcb3-357f-436d-8ae3-009477e84a86/1/eAJNSAs3cF-gCRtXdBdOgP3Yrdg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.41.156.0/22 Signature Algorithm: sha256WithRSAEncryption ad:69:b5:73:9a:9d:5a:52:94:1e:b0:db:61:c7:48:e0:1a:88: 2d:04:e6:9a:d0:8d:1b:19:6e:27:45:48:d6:32:e4:88:78:de: b4:85:d9:c0:37:d5:06:c8:93:bb:ef:70:70:c2:b5:97:0f:95: aa:73:23:35:a5:c1:e6:bb:c8:03:cc:b1:95:dc:2a:ba:1c:56: cc:41:70:aa:67:7e:12:8e:d5:6b:60:b3:48:23:c2:dd:af:b0: a1:42:d5:cf:82:cb:0d:b4:2b:95:d4:f7:c2:c1:ea:93:e5:21: 2f:f3:8a:98:13:96:86:8d:1f:18:97:b5:c6:d1:e0:51:33:13: c0:9f:d3:52:08:31:77:df:8f:ca:c6:fa:90:e3:2b:dc:ac:c8: 94:37:59:dc:bf:d1:ae:97:ce:74:5e:f0:5d:e7:83:60:76:eb: 67:e5:7e:e0:61:1e:53:1c:0e:a8:41:bf:c8:14:7b:f4:f5:55: 55:fc:dd:f8:c6:e4:a9:26:18:4c:03:a1:33:f6:e3:a8:03:7b: 83:b1:20:ef:04:27:be:f5:af:ee:13:d8:cb:b2:e4:72:eb:b0: 88:ca:16:b6:bc:e3:de:78:4b:a4:66:72:26:e3:06:e5:d9:ab: cd:e4:ec:58:65:bc:bd:0a:78:f0:a0:d4:13:9c:fb:c7:ec:26: d2:41:db:5a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NNu/XznzeKYV9EWpJXLtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc4MDI0ZDQ4MGIzNzcwNWZhMDA5MWI1Nzc0MTc0ZTgwZmRk OGFkZDgwHhcNMjYwMTAxMDYxODA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZDNlYzYxNTFkMjM3ZjRjNWMwNGQzNGZjYjI3MDVmYzY1NjIzZjMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4x/ktGvfkTVX+Be/WMnF9KvrMITE KgWTnOs6EVNleMfP5itn5cY+SRdQDwOFZ6Fj/g5zsbEDz0FvmVF08YzCli2IHIXU e9lY3EFZIMfloBh77UPRGvZxEe8Bi10mso/PpLPF7P9nMZC4kZBs0qAa5CLvlTBc YdL8xL+n3QdNY5JWVPKQgWGkbrcCET5g8uKL8yPnGUW6kifwJnBSg+Pyb+asnR6I xUxRzltqx7VBXDHXom4U2i78WNwI+5k2RH9+kk6r4NpLmoIWTQtPr5Mf2ovW/ZG7 e0bCFXQlfb4mhIvK5QrPVr4GU3Pian0AFWgQ8IBerhUlAc8Lk5hW80dPvQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFC0+xhUdI39MXATTT8snBfxlYj8xMB8GA1UdIwQY MBaAFHgCTUgLN3BfoAkbV3QXToD92K3YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZUFKTlNBczNjRi1nQ1J0WGRCZE9nUDNZcmRnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi83ZmZjYjMtMzU3Zi00MzZkLThhZTMt MDA5NDc3ZTg0YTg2LzEvTFQ3R0ZSMGpmMHhjQk5OUHl5Y0ZfR1ZpUHpFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYi83ZmZjYjMtMzU3Zi00MzZkLThhZTMtMDA5NDc3ZTg0YTg2 LzEvZUFKTlNBczNjRi1nQ1J0WGRCZE9nUDNZcmRnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuSmcMA0G CSqGSIb3DQEBCwUAA4IBAQCtabVzmp1aUpQesNthx0jgGogtBOaa0I0bGW4nRUjW MuSIeN60hdnAN9UGyJO773BwwrWXD5WqcyM1pcHmu8gDzLGV3Cq6HFbMQXCqZ34S jtVrYLNII8Ldr7ChQtXPgssNtCuV1PfCweqT5SEv84qYE5aGjR8Yl7XG0eBRMxPA n9NSCDF334/KxvqQ4yvcrMiUN1ncv9Gul850XvBd54Ngdutn5X7gYR5THA6oQb/I FHv09VVV/N34xuSpJhhMA6Ez9uOoA3uDsSDvBCe+9a/uE9jLsuRy67CIyha2vOPe eEukZnIm4wbl2avN5OxYZby9CnjwoNQTnPvH7CbSQdta -----END CERTIFICATE-----Generated at Tue Feb 10 04:32:10 2026 by rpki-client