This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/975c5e-6b05-4a47-9e91-13699365c3c7/1/lRIjNj0BHQE6hiLGxFavKUdyoeg.roa File: lRIjNj0BHQE6hiLGxFavKUdyoeg.roa (raw, json) Hash identifier: PocADE6/FL6eoSgXxu0JdSE+M73YHwsz3KQP93yGopU= Subject key identifier: 95:12:23:36:3D:01:1D:01:3A:86:22:C6:C4:56:AF:29:47:72:A1:E8 Certificate issuer: /CN=4ecf617af35f3724e7da860ebfbe4ec138ae1800 Certificate serial: 019B7BA370A6AB9E1DDA2325BC5579B1C07E Authority key identifier: 4E:CF:61:7A:F3:5F:37:24:E7:DA:86:0E:BF:BE:4E:C1:38:AE:18:00 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ts9hevNfNyTn2oYOv75OwTiuGAA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/975c5e-6b05-4a47-9e91-13699365c3c7/1/lRIjNj0BHQE6hiLGxFavKUdyoeg.roa Signing time: Thu 01 Jan 2026 22:17:47 +0000 ROA not before: Thu 01 Jan 2026 22:17:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35401 IP address blocks: 87.244.0.0/21 maxlen: 24 87.244.6.0/24 maxlen: 24 87.244.16.0/21 maxlen: 24 87.244.32.0/21 maxlen: 24 87.244.40.0/21 maxlen: 24 87.244.48.0/21 maxlen: 24 87.244.52.0/24 maxlen: 24 87.244.53.0/24 maxlen: 24 87.244.54.0/24 maxlen: 24 87.244.55.0/24 maxlen: 24 87.244.56.0/22 maxlen: 24 87.244.60.0/23 maxlen: 24 87.244.62.0/24 maxlen: 24 87.244.63.0/24 maxlen: 24 185.138.160.0/23 maxlen: 24 185.138.161.0/24 maxlen: 24 217.170.112.0/20 maxlen: 24 217.170.112.0/21 maxlen: 21 217.170.120.0/21 maxlen: 21 2a02:26e0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/975c5e-6b05-4a47-9e91-13699365c3c7/1/Ts9hevNfNyTn2oYOv75OwTiuGAA.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/975c5e-6b05-4a47-9e91-13699365c3c7/1/Ts9hevNfNyTn2oYOv75OwTiuGAA.mft rsync://rpki.ripe.net/repository/DEFAULT/Ts9hevNfNyTn2oYOv75OwTiuGAA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:70:a6:ab:9e:1d:da:23:25:bc:55:79:b1:c0:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ecf617af35f3724e7da860ebfbe4ec138ae1800 Validity Not Before: Jan 1 22:17:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=951223363d011d013a8622c6c456af294772a1e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:69:08:9d:c3:68:83:b1:26:22:b1:d6:61:13: f5:9d:32:5c:9c:2d:63:ba:a2:a9:97:f4:24:c1:bc: 92:52:49:b9:ae:69:b3:c1:43:97:19:da:0a:73:4b: 27:06:07:ac:25:b5:e4:d3:cb:15:60:96:76:67:b4: 60:7d:e8:70:e6:0d:59:25:56:95:da:6b:34:cb:f0: 8a:14:fc:f6:f2:c8:06:cc:6c:de:8c:78:20:07:fc: 47:1e:78:ae:26:58:c3:e8:91:ac:e0:26:6e:63:9e: 2a:b8:f7:30:a0:37:5b:b6:76:e6:fa:4b:04:bc:bd: 25:9e:06:75:0d:ea:d2:7c:bf:55:31:1a:d1:d9:15: 11:31:af:43:1f:0a:3f:2c:dd:56:c9:55:b5:f4:42: 73:c9:71:85:2d:9e:1d:bc:4e:0c:7f:80:e2:a2:67: 00:b3:c0:16:ca:dc:a8:9e:2b:ed:b0:ea:35:09:e8: 3e:e4:ea:ff:ad:84:12:6f:e5:c1:78:3c:61:fa:6b: 8a:50:07:e3:a1:52:96:ce:3f:c8:3f:0f:bb:b3:26: 30:ba:58:3e:d8:43:51:ca:0a:25:f4:78:98:99:82: d5:f9:58:ca:34:4f:8b:c1:3c:a1:57:95:38:6d:11: a5:d6:15:13:93:f6:00:e8:ff:a6:d3:99:5f:ac:81: 1e:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:12:23:36:3D:01:1D:01:3A:86:22:C6:C4:56:AF:29:47:72:A1:E8 X509v3 Authority Key Identifier: keyid:4E:CF:61:7A:F3:5F:37:24:E7:DA:86:0E:BF:BE:4E:C1:38:AE:18:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ts9hevNfNyTn2oYOv75OwTiuGAA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/975c5e-6b05-4a47-9e91-13699365c3c7/1/lRIjNj0BHQE6hiLGxFavKUdyoeg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/975c5e-6b05-4a47-9e91-13699365c3c7/1/Ts9hevNfNyTn2oYOv75OwTiuGAA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.244.0.0/21 87.244.16.0/21 87.244.32.0/19 185.138.160.0/23 217.170.112.0/20 IPv6: 2a02:26e0::/32 Signature Algorithm: sha256WithRSAEncryption 58:f3:3f:ad:00:a4:64:b9:b9:ae:69:57:88:7e:8c:ab:6d:e6: 6f:19:24:bc:12:7b:d0:66:47:0e:70:3f:3e:7a:0f:5c:0e:2b: 1b:4c:54:45:54:ae:60:36:8d:b4:80:5f:c3:8d:bc:ff:80:a7: ee:aa:b0:3c:e7:3c:e9:c7:6b:bb:1a:90:e5:e6:28:03:73:76: 83:1b:19:e1:5e:2b:39:cb:bc:af:d2:b7:9d:7a:61:0f:f3:d8: 49:26:bf:ec:09:f9:9d:cd:0c:45:83:8a:0f:98:79:41:9c:33: 19:78:ed:78:1e:11:e9:20:d4:11:fc:44:3b:85:e9:5e:25:a8: fb:71:2b:cc:76:7c:63:44:11:af:f3:31:ad:ec:32:ee:ea:27: a5:c0:0d:1e:25:6b:85:27:b1:86:6b:c4:45:69:bc:ca:08:5f: fc:2d:0c:11:cc:d2:e8:4e:3e:62:34:2a:c6:c0:b5:9a:fb:6d: 0d:4b:96:ae:a2:5d:d2:33:0b:7e:9f:bf:ea:1d:d9:6b:bd:30: 2e:07:8a:d7:fa:e0:af:b5:d7:1a:03:b4:b3:85:26:1e:bd:26: 3b:6f:73:15:d5:76:f8:ab:58:3b:b4:65:91:50:3a:f1:d9:58: dd:d3:8f:e2:58:15:54:95:b6:09:aa:fa:6c:db:c0:9f:1c:09: a2:96:44:b4 -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgISAZt7o3Cmq54d2iMlvFV5scB+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlY2Y2MTdhZjM1ZjM3MjRlN2RhODYwZWJmYmU0ZWMxMzhh ZTE4MDAwHhcNMjYwMTAxMjIxNzQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NTEyMjMzNjNkMDExZDAxM2E4NjIyYzZjNDU2YWYyOTQ3NzJhMWU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4mkIncNog7EmIrHWYRP1nTJcnC1j uqKpl/QkwbySUkm5rmmzwUOXGdoKc0snBgesJbXk08sVYJZ2Z7Rgfehw5g1ZJVaV 2ms0y/CKFPz28sgGzGzejHggB/xHHniuJljD6JGs4CZuY54quPcwoDdbtnbm+ksE vL0lngZ1DerSfL9VMRrR2RURMa9DHwo/LN1WyVW19EJzyXGFLZ4dvE4Mf4DiomcA s8AWytyonivtsOo1Ceg+5Or/rYQSb+XBeDxh+muKUAfjoVKWzj/IPw+7syYwulg+ 2ENRygol9HiYmYLV+VjKNE+LwTyhV5U4bRGl1hUTk/YA6P+m05lfrIEegQIDAQAB o4ICMDCCAiwwHQYDVR0OBBYEFJUSIzY9AR0BOoYixsRWrylHcqHoMB8GA1UdIwQY MBaAFE7PYXrzXzck59qGDr++TsE4rhgAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHM5aGV2TmZOeVRuMm9ZT3Y3NU93VGl1R0FBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi85NzVjNWUtNmIwNS00YTQ3LTllOTEt MTM2OTkzNjVjM2M3LzEvbFJJak5qMEJIUUU2aGlMR3hGYXZLVWR5b2VnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi85NzVjNWUtNmIwNS00YTQ3LTllOTEtMTM2OTkzNjVjM2M3 LzEvVHM5aGV2TmZOeVRuMm9ZT3Y3NU93VGl1R0FBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEHAQH/BDcwNTAkBAIAATAeAwQDV/QAAwQD V/QQAwQFV/QgAwQBuYqgAwQE2apwMA0EAgACMAcDBQAqAibgMA0GCSqGSIb3DQEB CwUAA4IBAQBY8z+tAKRkubmuaVeIfoyrbeZvGSS8EnvQZkcOcD8+eg9cDisbTFRF VK5gNo20gF/Djbz/gKfuqrA85zzpx2u7GpDl5igDc3aDGxnhXis5y7yv0redemEP 89hJJr/sCfmdzQxFg4oPmHlBnDMZeO14HhHpINQR/EQ7heleJaj7cSvMdnxjRBGv 8zGt7DLu6ielwA0eJWuFJ7GGa8RFabzKCF/8LQwRzNLoTj5iNCrGwLWa+20NS5au ol3SMwt+n7/qHdlrvTAuB4rX+uCvtdcaA7SzhSYevSY7b3MV1Xb4q1g7tGWRUDrx 2Vjd04/iWBVUlbYJqvps28CfHAmilkS0 -----END CERTIFICATE-----Generated at Tue Feb 10 03:12:19 2026 by rpki-client