This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/lru0bK1pFWTdlNh3tSeVRy2RxB4.roa File: lru0bK1pFWTdlNh3tSeVRy2RxB4.roa (raw, json) Hash identifier: D3uDWSg2oVhHneIgFjvyT24SUbp4OtxjQr0JkAH/IGY= Subject key identifier: 96:BB:B4:6C:AD:69:15:64:DD:94:D8:77:B5:27:95:47:2D:91:C4:1E Certificate issuer: /CN=ec6b42021886d8eedbae90d9e6ab1de533c50d20 Certificate serial: 019B7834F359053E5C24F7145C3B4A4A1F3F Authority key identifier: EC:6B:42:02:18:86:D8:EE:DB:AE:90:D9:E6:AB:1D:E5:33:C5:0D:20 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7GtCAhiG2O7brpDZ5qsd5TPFDSA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/lru0bK1pFWTdlNh3tSeVRy2RxB4.roa Signing time: Thu 01 Jan 2026 06:18:14 +0000 ROA not before: Thu 01 Jan 2026 06:18:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 1299 IP address blocks: 46.245.176.0/21 maxlen: 24 86.105.222.0/23 maxlen: 24 89.38.36.0/23 maxlen: 24 91.90.144.0/20 maxlen: 24 91.230.172.0/22 maxlen: 24 109.70.216.0/21 maxlen: 24 185.187.64.0/22 maxlen: 24 2a00:14e0::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/7GtCAhiG2O7brpDZ5qsd5TPFDSA.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/7GtCAhiG2O7brpDZ5qsd5TPFDSA.mft rsync://rpki.ripe.net/repository/DEFAULT/7GtCAhiG2O7brpDZ5qsd5TPFDSA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:f3:59:05:3e:5c:24:f7:14:5c:3b:4a:4a:1f:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ec6b42021886d8eedbae90d9e6ab1de533c50d20 Validity Not Before: Jan 1 06:18:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=96bbb46cad691564dd94d877b52795472d91c41e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:cb:0e:ba:46:7c:8a:89:b7:35:7b:ca:0f:be: bb:db:8c:60:3c:32:70:0f:93:b4:97:61:16:1b:c0: f1:1f:c3:00:3f:49:cf:9e:44:52:9c:f6:e3:e9:a9: 6f:e5:4a:cc:db:a7:57:93:3e:14:76:97:da:ab:20: 44:88:0f:73:b7:fa:78:a7:91:c1:3a:77:e6:c5:8f: 56:58:49:dc:4c:0e:e2:6c:26:ff:97:4f:24:9f:46: 1a:31:34:46:9f:d1:c8:f5:d9:c8:e5:62:f9:d6:3b: a8:88:d7:b2:0c:1a:01:7c:fd:68:46:83:20:bc:83: 26:7b:8c:a6:44:99:0a:4e:7b:d4:08:f6:64:ff:0b: d3:9f:67:ab:ff:af:0a:05:80:f0:d3:ce:2f:1c:61: 06:e2:bf:6f:52:1e:8e:87:91:47:50:a6:1c:5c:79: 71:7f:18:b2:f7:f1:1c:21:06:9e:ce:e7:b0:85:10: 70:36:b1:42:4c:b5:30:e1:60:e3:26:62:32:6d:76: 9e:34:59:e8:cb:3b:a5:d1:bd:b0:97:29:fd:3c:fe: c0:5f:b6:ff:18:b2:2b:a1:53:36:8e:e8:16:4e:41: 28:db:08:66:ca:f9:de:ae:02:46:95:5b:59:22:ca: 2f:54:63:46:35:02:7f:e1:7d:28:75:44:c2:ce:13: f4:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:BB:B4:6C:AD:69:15:64:DD:94:D8:77:B5:27:95:47:2D:91:C4:1E X509v3 Authority Key Identifier: keyid:EC:6B:42:02:18:86:D8:EE:DB:AE:90:D9:E6:AB:1D:E5:33:C5:0D:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7GtCAhiG2O7brpDZ5qsd5TPFDSA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/lru0bK1pFWTdlNh3tSeVRy2RxB4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/7GtCAhiG2O7brpDZ5qsd5TPFDSA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.245.176.0/21 86.105.222.0/23 89.38.36.0/23 91.90.144.0/20 91.230.172.0/22 109.70.216.0/21 185.187.64.0/22 IPv6: 2a00:14e0::/29 Signature Algorithm: sha256WithRSAEncryption 8d:a5:0b:80:61:76:99:93:d1:47:87:3f:c4:96:ae:20:c8:f3: 80:6c:3d:68:72:bc:41:3b:6d:bc:29:b0:81:9b:a3:ba:24:c2: e3:be:ca:7f:ac:a9:87:63:50:22:bc:ed:70:09:dd:22:66:2d: 4c:e8:df:93:91:52:c6:61:0b:20:ba:02:39:ae:e8:bd:c2:3c: 3e:8a:d4:bf:b9:0e:b0:ae:e6:02:9a:9e:f9:92:7b:21:41:a4: 45:bd:c8:59:c1:0d:3a:c0:76:bd:b5:58:52:df:9e:36:ba:b1: b5:f3:6f:1d:80:25:6d:60:ae:4f:26:72:11:16:c4:00:95:82: ba:d8:a3:17:1e:ac:38:91:03:47:6f:16:27:f8:7d:28:51:bb: 86:ed:b5:b8:dd:4e:b6:e2:42:1b:39:b3:76:19:c2:89:b1:0e: 6c:38:b3:84:22:d0:38:74:23:b4:9a:66:fe:2b:9c:bc:86:eb: f8:9c:2c:e6:ed:7b:93:60:f3:dd:af:6c:85:47:0a:fe:3e:1c: 2a:81:9b:11:8b:2c:73:e6:37:6e:93:8d:6a:be:c8:39:43:67: 64:c2:38:7f:98:01:de:29:f4:79:8f:e9:5e:65:00:c1:30:f8: a4:23:68:33:c7:8e:38:84:95:66:5f:12:3a:2d:29:12:e3:56: 03:38:33:1d -----BEGIN CERTIFICATE----- MIIFMDCCBBigAwIBAgISAZt4NPNZBT5cJPcUXDtKSh8/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVjNmI0MjAyMTg4NmQ4ZWVkYmFlOTBkOWU2YWIxZGU1MzNj NTBkMjAwHhcNMjYwMTAxMDYxODE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NmJiYjQ2Y2FkNjkxNTY0ZGQ5NGQ4NzdiNTI3OTU0NzJkOTFjNDFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj8sOukZ8iom3NXvKD76724xgPDJw D5O0l2EWG8DxH8MAP0nPnkRSnPbj6alv5UrM26dXkz4UdpfaqyBEiA9zt/p4p5HB OnfmxY9WWEncTA7ibCb/l08kn0YaMTRGn9HI9dnI5WL51juoiNeyDBoBfP1oRoMg vIMme4ymRJkKTnvUCPZk/wvTn2er/68KBYDw084vHGEG4r9vUh6Oh5FHUKYcXHlx fxiy9/EcIQaezuewhRBwNrFCTLUw4WDjJmIybXaeNFnoyzul0b2wlyn9PP7AX7b/ GLIroVM2jugWTkEo2whmyvnergJGlVtZIsovVGNGNQJ/4X0odUTCzhP00wIDAQAB o4ICPDCCAjgwHQYDVR0OBBYEFJa7tGytaRVk3ZTYd7UnlUctkcQeMB8GA1UdIwQY MBaAFOxrQgIYhtju266Q2earHeUzxQ0gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN0d0Q0FoaUcyTzdicnBEWjVxc2Q1VFBGRFNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8yNmMzZTEtNjQ4Ni00ZTA5LTk5YTQt YTY4NzNiMzc0ZTI2LzEvbHJ1MGJLMXBGV1RkbE5oM3RTZVZSeTJSeEI0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy8yNmMzZTEtNjQ4Ni00ZTA5LTk5YTQtYTY4NzNiMzc0ZTI2 LzEvN0d0Q0FoaUcyTzdicnBEWjVxc2Q1VFBGRFNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFIGCCsGAQUFBwEHAQH/BEMwQTAwBAIAATAqAwQDLvWwAwQB VmneAwQBWSYkAwQEW1qQAwQCW+asAwQDbUbYAwQCubtAMA0EAgACMAcDBQMqABTg MA0GCSqGSIb3DQEBCwUAA4IBAQCNpQuAYXaZk9FHhz/Elq4gyPOAbD1ocrxBO228 KbCBm6O6JMLjvsp/rKmHY1AivO1wCd0iZi1M6N+TkVLGYQsgugI5rui9wjw+itS/ uQ6wruYCmp75knshQaRFvchZwQ06wHa9tVhS3542urG1828dgCVtYK5PJnIRFsQA lYK62KMXHqw4kQNHbxYn+H0oUbuG7bW43U624kIbObN2GcKJsQ5sOLOEItA4dCO0 mmb+K5y8huv4nCzm7XuTYPPdr2yFRwr+PhwqgZsRiyxz5jduk41qvsg5Q2dkwjh/ mAHeKfR5j+leZQDBMPikI2gzx444hJVmXxI6LSkS41YDODMd -----END CERTIFICATE-----Generated at Wed Jan 21 07:23:23 2026 by rpki-client