This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/045a38-e0ba-487f-b461-7266afc98dba/1/lBKb95x_7BAv49LYfrO19Hosuas.roa File: lBKb95x_7BAv49LYfrO19Hosuas.roa (raw, json) Hash identifier: u8R/9/gVEM8wPOouFpMqLvJteQ0bg4i6gAiI/GzejGU= Subject key identifier: 94:12:9B:F7:9C:7F:EC:10:2F:E3:D2:D8:7E:B3:B5:F4:7A:2C:B9:AB Certificate issuer: /CN=eddd61bacf654e665d912a76de8f63b5004c7e48 Certificate serial: 019B7A5B52CDDD86CBF1D69F89C7EFB1589E Authority key identifier: ED:DD:61:BA:CF:65:4E:66:5D:91:2A:76:DE:8F:63:B5:00:4C:7E:48 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7d1hus9lTmZdkSp23o9jtQBMfkg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/045a38-e0ba-487f-b461-7266afc98dba/1/lBKb95x_7BAv49LYfrO19Hosuas.roa Signing time: Thu 01 Jan 2026 16:19:23 +0000 ROA not before: Thu 01 Jan 2026 16:19:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202536 IP address blocks: 185.92.0.0/24 maxlen: 24 185.92.1.0/24 maxlen: 24 185.92.2.0/24 maxlen: 24 185.92.3.0/24 maxlen: 24 2a05:ef00::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/045a38-e0ba-487f-b461-7266afc98dba/1/7d1hus9lTmZdkSp23o9jtQBMfkg.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/045a38-e0ba-487f-b461-7266afc98dba/1/7d1hus9lTmZdkSp23o9jtQBMfkg.mft rsync://rpki.ripe.net/repository/DEFAULT/7d1hus9lTmZdkSp23o9jtQBMfkg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:52:cd:dd:86:cb:f1:d6:9f:89:c7:ef:b1:58:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eddd61bacf654e665d912a76de8f63b5004c7e48 Validity Not Before: Jan 1 16:19:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=94129bf79c7fec102fe3d2d87eb3b5f47a2cb9ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:0e:99:c8:13:9c:a2:3a:39:b9:ae:98:1e:b8: b9:89:bd:13:e4:b0:b0:ad:04:24:37:60:1e:ae:07: 16:7a:1b:ff:c3:36:53:3e:d5:aa:74:76:14:b6:d3: 05:87:d2:d2:80:41:f9:36:e1:38:d4:ec:7b:f3:83: db:29:f0:79:78:cd:5e:6c:92:54:29:70:98:8c:90: a8:0c:1b:f5:b8:78:40:ba:57:5b:4c:bd:43:91:5f: b5:e5:50:0f:7a:8a:86:43:f0:91:19:10:13:11:c7: d2:c6:d5:87:ee:66:e9:1d:c3:ef:03:4a:09:57:b8: c8:91:2b:f4:d9:52:bd:7e:7c:f3:a9:82:b9:c9:7e: 67:a2:4a:bb:eb:99:26:c1:4d:67:70:c2:b2:24:00: dd:5c:31:de:f8:ad:10:01:7e:af:0b:da:c0:25:e8: 31:1e:a3:2a:89:5c:27:bb:72:3f:73:16:5f:90:23: 69:08:08:b8:e5:df:1a:93:5a:b7:62:ba:4d:d7:a8: 7b:18:13:14:05:04:10:80:5f:50:af:1a:03:c1:5f: ea:ed:21:3d:ab:15:ab:10:40:1a:1f:3a:19:5f:e9: f3:d5:e5:83:43:86:74:a4:bd:5f:a0:83:44:52:a9: 23:92:32:18:9e:ca:c9:fe:98:0d:d2:13:1a:ee:a1: fb:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:12:9B:F7:9C:7F:EC:10:2F:E3:D2:D8:7E:B3:B5:F4:7A:2C:B9:AB X509v3 Authority Key Identifier: keyid:ED:DD:61:BA:CF:65:4E:66:5D:91:2A:76:DE:8F:63:B5:00:4C:7E:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d1hus9lTmZdkSp23o9jtQBMfkg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/045a38-e0ba-487f-b461-7266afc98dba/1/lBKb95x_7BAv49LYfrO19Hosuas.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/045a38-e0ba-487f-b461-7266afc98dba/1/7d1hus9lTmZdkSp23o9jtQBMfkg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.92.0.0/22 IPv6: 2a05:ef00::/29 Signature Algorithm: sha256WithRSAEncryption 8b:72:bb:a4:7c:c8:a2:77:5e:b9:cf:b7:6b:67:7b:35:30:47: 23:92:04:ff:1f:8d:73:2c:23:b7:28:fe:00:1a:a3:d6:13:c4: 76:b5:6e:45:47:d6:d2:a5:00:d3:da:38:ac:04:9f:e7:4e:7e: ea:f4:ba:3c:fb:1d:70:4f:85:ef:d0:7b:d7:26:44:b3:7e:eb: 77:2d:0a:20:16:09:b6:50:94:2d:f3:d8:77:05:5c:b7:98:69: 13:6d:05:5f:9e:ee:97:0e:24:a0:5f:d3:11:46:1e:48:76:39: 89:6c:69:a1:4c:a3:28:21:ed:97:aa:c7:1a:dd:dd:c4:aa:55: 42:ed:30:38:d3:56:18:c3:a2:86:ec:92:dc:e3:d4:5d:f0:b0: 77:17:2e:80:7a:6d:45:41:2c:f7:4a:12:69:93:9f:50:57:59: 96:92:ba:82:7c:f3:48:78:8a:87:17:97:8e:b8:59:2f:39:91: e3:32:52:35:46:42:4a:5f:e1:10:78:ae:5c:4e:18:e2:ba:3a: d7:b5:d3:8e:7d:99:64:f9:37:f5:3d:d7:82:ad:16:a3:d3:36: ce:4e:c8:e7:72:b9:79:bf:35:d2:e7:2a:06:1c:c4:fe:8d:55: 96:e2:76:78:e1:a2:44:c3:38:90:a5:5e:45:15:44:4a:3e:56: a2:38:9a:02 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt6W1LN3YbL8daficfvsVieMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkZGQ2MWJhY2Y2NTRlNjY1ZDkxMmE3NmRlOGY2M2I1MDA0 YzdlNDgwHhcNMjYwMTAxMTYxOTIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NDEyOWJmNzljN2ZlYzEwMmZlM2QyZDg3ZWIzYjVmNDdhMmNiOWFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjA6ZyBOcojo5ua6YHri5ib0T5LCw rQQkN2AergcWehv/wzZTPtWqdHYUttMFh9LSgEH5NuE41Ox784PbKfB5eM1ebJJU KXCYjJCoDBv1uHhAuldbTL1DkV+15VAPeoqGQ/CRGRATEcfSxtWH7mbpHcPvA0oJ V7jIkSv02VK9fnzzqYK5yX5nokq765kmwU1ncMKyJADdXDHe+K0QAX6vC9rAJegx HqMqiVwnu3I/cxZfkCNpCAi45d8ak1q3YrpN16h7GBMUBQQQgF9QrxoDwV/q7SE9 qxWrEEAaHzoZX+nz1eWDQ4Z0pL1foINEUqkjkjIYnsrJ/pgN0hMa7qH73wIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFJQSm/ecf+wQL+PS2H6ztfR6LLmrMB8GA1UdIwQY MBaAFO3dYbrPZU5mXZEqdt6PY7UATH5IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2QxaHVzOWxUbVpka1NwMjNvOWp0UUJNZmtnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi8wNDVhMzgtZTBiYS00ODdmLWI0NjEt NzI2NmFmYzk4ZGJhLzEvbEJLYjk1eF83QkF2NDlMWWZyTzE5SG9zdWFzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi8wNDVhMzgtZTBiYS00ODdmLWI0NjEtNzI2NmFmYzk4ZGJh LzEvN2QxaHVzOWxUbVpka1NwMjNvOWp0UUJNZmtnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuVwAMA0E AgACMAcDBQMqBe8AMA0GCSqGSIb3DQEBCwUAA4IBAQCLcrukfMiid165z7drZ3s1 MEcjkgT/H41zLCO3KP4AGqPWE8R2tW5FR9bSpQDT2jisBJ/nTn7q9Lo8+x1wT4Xv 0HvXJkSzfut3LQogFgm2UJQt89h3BVy3mGkTbQVfnu6XDiSgX9MRRh5IdjmJbGmh TKMoIe2Xqsca3d3EqlVC7TA401YYw6KG7JLc49Rd8LB3Fy6Aem1FQSz3ShJpk59Q V1mWkrqCfPNIeIqHF5eOuFkvOZHjMlI1RkJKX+EQeK5cThjiujrXtdOOfZlk+Tf1 PdeCrRaj0zbOTsjncrl5vzXS5yoGHMT+jVWW4nZ44aJEwziQpV5FFURKPlaiOJoC -----END CERTIFICATE-----Generated at Mon Feb 9 18:37:55 2026 by rpki-client