This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/LLtX3Bw8gzc5rIoJ6gGIoEGZhvk.roa File: LLtX3Bw8gzc5rIoJ6gGIoEGZhvk.roa (raw, json) Hash identifier: 8ZMUJCkeXZDA3JqlPtb/Z7fXVQiFb14roMzYlX1mZ98= Subject key identifier: 2C:BB:57:DC:1C:3C:83:37:39:AC:8A:09:EA:01:88:A0:41:99:86:F9 Certificate issuer: /CN=5336a106cecdeba92e0b80e5e9a5c789ba74c62b Certificate serial: 019B79EC8BCC1CFC2BD2E3196447D79EA677 Authority key identifier: 53:36:A1:06:CE:CD:EB:A9:2E:0B:80:E5:E9:A5:C7:89:BA:74:C6:2B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UzahBs7N66kuC4Dl6aXHibp0xis.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/LLtX3Bw8gzc5rIoJ6gGIoEGZhvk.roa Signing time: Thu 01 Jan 2026 14:18:23 +0000 ROA not before: Thu 01 Jan 2026 14:18:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50020 IP address blocks: 46.16.192.0/21 maxlen: 21 185.201.36.0/22 maxlen: 22 193.104.79.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/UzahBs7N66kuC4Dl6aXHibp0xis.crl rsync://rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/UzahBs7N66kuC4Dl6aXHibp0xis.mft rsync://rpki.ripe.net/repository/DEFAULT/UzahBs7N66kuC4Dl6aXHibp0xis.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:8b:cc:1c:fc:2b:d2:e3:19:64:47:d7:9e:a6:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5336a106cecdeba92e0b80e5e9a5c789ba74c62b Validity Not Before: Jan 1 14:18:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2cbb57dc1c3c833739ac8a09ea0188a0419986f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:82:7c:d9:f5:d3:96:be:be:47:40:e8:18:49: 11:53:3e:fe:a9:32:59:0b:c9:dc:8c:da:fb:7d:2c: a9:88:42:81:d9:e5:d6:d5:c4:7c:5c:35:55:08:e3: 47:65:1b:cb:96:3a:6e:70:ea:c3:76:f9:8d:bf:61: 99:b5:2a:de:95:55:31:70:1c:11:76:f4:9c:ee:3f: 61:09:4f:1d:99:53:28:df:64:7c:ee:e2:70:62:ba: 8b:6c:07:f1:9d:c1:8d:6c:69:18:9a:62:60:09:e6: 26:48:ca:23:99:69:6c:3a:97:01:d5:34:84:26:c8: 02:a4:57:a3:3e:9b:69:8e:5f:9f:c4:4d:dc:22:75: 1d:52:eb:97:b4:46:f2:3f:ba:60:4b:19:94:97:29: a5:c0:3c:4b:ac:93:f4:bc:9e:71:97:8e:d4:53:12: 8e:d8:ed:dc:47:ca:20:be:95:51:b8:4b:d4:91:e2: 70:c0:4f:05:d4:d7:6e:e4:d8:9e:63:77:bd:86:c7: 54:c7:c5:01:af:c5:08:38:a4:36:82:98:37:c3:d7: e8:77:42:ea:8c:03:32:d6:2d:ed:6e:4b:d1:78:7d: e1:10:d6:9c:21:1b:d2:bc:26:17:76:87:17:c6:98: f3:a0:1b:14:49:a3:e8:ae:50:57:96:c1:30:bd:03: 8c:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:BB:57:DC:1C:3C:83:37:39:AC:8A:09:EA:01:88:A0:41:99:86:F9 X509v3 Authority Key Identifier: keyid:53:36:A1:06:CE:CD:EB:A9:2E:0B:80:E5:E9:A5:C7:89:BA:74:C6:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UzahBs7N66kuC4Dl6aXHibp0xis.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/LLtX3Bw8gzc5rIoJ6gGIoEGZhvk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/UzahBs7N66kuC4Dl6aXHibp0xis.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.16.192.0/21 185.201.36.0/22 193.104.79.0/24 Signature Algorithm: sha256WithRSAEncryption 00:a9:32:30:e3:02:a7:6d:8b:d9:a7:7a:73:04:13:3a:59:9d: 11:35:92:0f:2a:f0:7f:bb:a0:2d:92:66:d0:be:d0:1c:d0:13: 00:f1:18:74:38:71:c5:95:27:c5:4d:07:7a:ae:bf:df:db:d6: 57:a7:91:f5:c4:13:ec:d6:08:95:47:38:9e:0d:0e:54:4b:0e: b1:2d:83:2a:3d:ab:7c:55:03:4e:d5:41:fc:95:4a:cf:bd:ee: 1d:a1:73:c3:79:3b:83:7a:69:45:b5:ee:18:54:a8:c4:40:4c: 23:ce:77:90:85:bd:ea:51:1b:bf:85:ad:35:78:fe:b1:a2:c5: b4:52:fa:9e:90:9c:ed:ac:9f:ff:0d:82:c3:b4:f9:b3:b9:ec: a4:76:97:ee:90:ea:c9:d3:cb:01:d9:ed:2f:af:66:5d:45:0c: 4f:3c:da:81:4e:99:56:20:19:84:38:e1:10:7f:20:66:ff:ce: 97:d4:be:49:9b:f4:f8:03:10:f0:a2:15:40:85:76:23:a9:63: 03:74:13:52:43:9d:d1:5a:1d:26:b8:40:a3:68:e4:43:4d:55: d2:c3:e4:4c:ac:1a:8d:26:96:76:9e:44:37:5e:18:1a:61:cc: ac:b0:b2:c0:af:e9:28:ae:fc:68:85:44:4a:a3:1c:9a:e4:0b: c1:5a:60:3a -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt57IvMHPwr0uMZZEfXnqZ3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzMzZhMTA2Y2VjZGViYTkyZTBiODBlNWU5YTVjNzg5YmE3 NGM2MmIwHhcNMjYwMTAxMTQxODIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyY2JiNTdkYzFjM2M4MzM3MzlhYzhhMDllYTAxODhhMDQxOTk4NmY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwoJ82fXTlr6+R0DoGEkRUz7+qTJZ C8ncjNr7fSypiEKB2eXW1cR8XDVVCONHZRvLljpucOrDdvmNv2GZtSrelVUxcBwR dvSc7j9hCU8dmVMo32R87uJwYrqLbAfxncGNbGkYmmJgCeYmSMojmWlsOpcB1TSE JsgCpFejPptpjl+fxE3cInUdUuuXtEbyP7pgSxmUlymlwDxLrJP0vJ5xl47UUxKO 2O3cR8ogvpVRuEvUkeJwwE8F1Ndu5NieY3e9hsdUx8UBr8UIOKQ2gpg3w9fod0Lq jAMy1i3tbkvReH3hENacIRvSvCYXdocXxpjzoBsUSaPorlBXlsEwvQOMjwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFCy7V9wcPIM3OayKCeoBiKBBmYb5MB8GA1UdIwQY MBaAFFM2oQbOzeupLguA5emlx4m6dMYrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVXphaEJzN042Nmt1QzREbDZhWEhpYnAweGlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC8yNjY5ZWUtNGJhNy00MTEwLTgzNzAt ZGQ4MDNjNWI4NWRiLzEvTEx0WDNCdzhnemM1cklvSjZnR0lvRUdaaHZrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MC8yNjY5ZWUtNGJhNy00MTEwLTgzNzAtZGQ4MDNjNWI4NWRi LzEvVXphaEJzN042Nmt1QzREbDZhWEhpYnAweGlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQDLhDAAwQC uckkAwQAwWhPMA0GCSqGSIb3DQEBCwUAA4IBAQAAqTIw4wKnbYvZp3pzBBM6WZ0R NZIPKvB/u6AtkmbQvtAc0BMA8Rh0OHHFlSfFTQd6rr/f29ZXp5H1xBPs1giVRzie DQ5USw6xLYMqPat8VQNO1UH8lUrPve4doXPDeTuDemlFte4YVKjEQEwjzneQhb3q URu/ha01eP6xosW0UvqekJztrJ//DYLDtPmzueykdpfukOrJ08sB2e0vr2ZdRQxP PNqBTplWIBmEOOEQfyBm/86X1L5Jm/T4AxDwohVAhXYjqWMDdBNSQ53RWh0muECj aORDTVXSw+RMrBqNJpZ2nkQ3XhgaYcyssLLAr+korvxohURKoxya5AvBWmA6 -----END CERTIFICATE-----Generated at Wed Jan 21 10:30:01 2026 by rpki-client