This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/3ef921-29ed-40cf-b454-4c2acb78309e/1/LI8mfoguQg_wE6aQfHZYVjBGEwA.roa File: LI8mfoguQg_wE6aQfHZYVjBGEwA.roa (raw, json) Hash identifier: ZNCQmm2JmdPCyWjwNoC7wMjJStghkA3kdN5AbD7KwIA= Subject key identifier: 2C:8F:26:7E:88:2E:42:0F:F0:13:A6:90:7C:76:58:56:30:46:13:00 Certificate issuer: /CN=5e4f1a32a37e083900aba561708e52ab234e3a38 Certificate serial: 019B7F835ED6EA76D0AFA72079EF20EFC2F3 Authority key identifier: 5E:4F:1A:32:A3:7E:08:39:00:AB:A5:61:70:8E:52:AB:23:4E:3A:38 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xk8aMqN-CDkAq6VhcI5SqyNOOjg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/3ef921-29ed-40cf-b454-4c2acb78309e/1/LI8mfoguQg_wE6aQfHZYVjBGEwA.roa Signing time: Fri 02 Jan 2026 16:21:14 +0000 ROA not before: Fri 02 Jan 2026 16:21:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205032 IP address blocks: 185.100.164.0/22 maxlen: 22 2a0d:d0c6::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/3ef921-29ed-40cf-b454-4c2acb78309e/1/Xk8aMqN-CDkAq6VhcI5SqyNOOjg.crl rsync://rpki.ripe.net/repository/DEFAULT/50/3ef921-29ed-40cf-b454-4c2acb78309e/1/Xk8aMqN-CDkAq6VhcI5SqyNOOjg.mft rsync://rpki.ripe.net/repository/DEFAULT/Xk8aMqN-CDkAq6VhcI5SqyNOOjg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:5e:d6:ea:76:d0:af:a7:20:79:ef:20:ef:c2:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e4f1a32a37e083900aba561708e52ab234e3a38 Validity Not Before: Jan 2 16:21:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2c8f267e882e420ff013a6907c76585630461300 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:53:8a:1c:c4:e9:d5:be:29:13:05:26:9b:17: 94:4b:c0:62:c6:ff:54:a2:a9:a7:0d:6e:f7:89:7d: 2d:0e:ff:f5:7f:3d:43:25:b5:46:40:b7:1e:94:c9: 1b:7b:22:4c:51:1b:04:ad:74:88:65:59:41:23:d7: 76:5d:14:44:a4:61:e3:d1:0c:ef:a2:8f:e2:61:70: 94:11:f0:4f:7f:31:e9:7e:68:77:80:0c:13:75:44: e9:c4:8b:a2:39:b8:a9:a5:87:22:ab:a8:46:29:cb: 26:9b:8d:a1:0f:98:db:c8:67:2c:58:62:da:18:e2: 32:43:f4:e9:46:a5:be:ae:07:15:28:e5:2c:c3:0a: 3d:de:b6:45:2a:30:48:8a:dd:a1:f6:d7:a6:b9:ed: 9d:f2:f2:43:1b:21:bd:a1:fe:f2:50:69:6e:16:46: cc:8e:76:f8:80:20:05:b2:20:91:98:4b:89:f5:09: 32:89:d3:8a:d0:f8:a0:fc:17:cd:7e:f3:31:31:21: 7d:c8:5d:9d:d6:c1:f4:a2:96:d6:ac:bd:53:9c:65: a3:91:c6:63:a7:c9:8f:04:c5:00:83:e7:f3:d2:6b: b0:ba:92:3f:2d:a7:11:de:87:cc:92:37:40:05:a3: 5c:41:ee:7e:96:b7:21:04:08:2e:94:f3:82:5a:c8: 94:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:8F:26:7E:88:2E:42:0F:F0:13:A6:90:7C:76:58:56:30:46:13:00 X509v3 Authority Key Identifier: keyid:5E:4F:1A:32:A3:7E:08:39:00:AB:A5:61:70:8E:52:AB:23:4E:3A:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xk8aMqN-CDkAq6VhcI5SqyNOOjg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3ef921-29ed-40cf-b454-4c2acb78309e/1/LI8mfoguQg_wE6aQfHZYVjBGEwA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3ef921-29ed-40cf-b454-4c2acb78309e/1/Xk8aMqN-CDkAq6VhcI5SqyNOOjg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.100.164.0/22 IPv6: 2a0d:d0c6::/32 Signature Algorithm: sha256WithRSAEncryption 8f:15:df:9b:a7:8a:b9:cc:18:2e:c0:7c:2e:9f:53:f8:9b:dc: 15:38:70:bb:1e:4a:b0:93:39:a0:a1:cf:57:d8:30:74:d3:ff: 67:66:02:a8:fb:c0:02:72:a0:c8:0d:53:21:24:d9:bc:82:be: 62:b6:58:10:b7:1e:3c:7f:f0:18:37:d4:a7:4c:4b:70:96:d9: 76:1f:e7:92:99:b0:9e:d5:33:f8:03:3e:cf:b2:cf:d2:1b:7c: c6:87:80:61:e4:1e:cb:40:14:23:69:6a:41:a7:35:15:30:d2: bf:cc:9b:b8:83:59:82:e3:a9:51:67:0f:7d:f3:4a:7d:31:fd: 71:43:73:b6:55:38:9d:7f:9f:6c:ec:b3:97:9c:ad:1a:5d:0d: 5a:4a:43:35:8a:98:ec:20:25:f9:7e:0b:46:75:29:ba:d6:1e: 7a:92:40:db:05:f2:f5:8f:4f:cd:b5:ee:b4:7c:78:07:2d:ca: 10:8c:c1:d8:ce:6f:0a:0f:b9:16:1a:15:b3:41:4d:0e:47:3b: ee:ba:b3:4a:78:4f:7a:73:a6:d2:ec:6c:00:d6:41:18:f5:ea: 5d:db:98:ff:2c:94:7f:db:d9:d2:87:1b:b3:54:78:c4:26:86: ee:db:c4:b1:d2:5b:73:92:24:c7:0f:fb:e5:c5:85:53:61:e9: c4:32:c1:24 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt/g17W6nbQr6cgee8g78LzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlNGYxYTMyYTM3ZTA4MzkwMGFiYTU2MTcwOGU1MmFiMjM0 ZTNhMzgwHhcNMjYwMTAyMTYyMTE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYzhmMjY3ZTg4MmU0MjBmZjAxM2E2OTA3Yzc2NTg1NjMwNDYxMzAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtFOKHMTp1b4pEwUmmxeUS8Bixv9U oqmnDW73iX0tDv/1fz1DJbVGQLcelMkbeyJMURsErXSIZVlBI9d2XRREpGHj0Qzv oo/iYXCUEfBPfzHpfmh3gAwTdUTpxIuiObippYciq6hGKcsmm42hD5jbyGcsWGLa GOIyQ/TpRqW+rgcVKOUswwo93rZFKjBIit2h9temue2d8vJDGyG9of7yUGluFkbM jnb4gCAFsiCRmEuJ9QkyidOK0Pig/BfNfvMxMSF9yF2d1sH0opbWrL1TnGWjkcZj p8mPBMUAg+fz0muwupI/LacR3ofMkjdABaNcQe5+lrchBAgulPOCWsiU7QIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFCyPJn6ILkIP8BOmkHx2WFYwRhMAMB8GA1UdIwQY MBaAFF5PGjKjfgg5AKulYXCOUqsjTjo4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGs4YU1xTi1DRGtBcTZWaGNJNVNxeU5PT2pnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC8zZWY5MjEtMjllZC00MGNmLWI0NTQt NGMyYWNiNzgzMDllLzEvTEk4bWZvZ3VRZ193RTZhUWZIWllWakJHRXdBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MC8zZWY5MjEtMjllZC00MGNmLWI0NTQtNGMyYWNiNzgzMDll LzEvWGs4YU1xTi1DRGtBcTZWaGNJNVNxeU5PT2pnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuWSkMA0E AgACMAcDBQAqDdDGMA0GCSqGSIb3DQEBCwUAA4IBAQCPFd+bp4q5zBguwHwun1P4 m9wVOHC7Hkqwkzmgoc9X2DB00/9nZgKo+8ACcqDIDVMhJNm8gr5itlgQtx48f/AY N9SnTEtwltl2H+eSmbCe1TP4Az7Pss/SG3zGh4Bh5B7LQBQjaWpBpzUVMNK/zJu4 g1mC46lRZw9980p9Mf1xQ3O2VTidf59s7LOXnK0aXQ1aSkM1ipjsICX5fgtGdSm6 1h56kkDbBfL1j0/Nte60fHgHLcoQjMHYzm8KD7kWGhWzQU0ORzvuurNKeE96c6bS 7GwA1kEY9epd25j/LJR/29nShxuzVHjEJobu28Sx0ltzkiTHD/vlxYVTYenEMsEk -----END CERTIFICATE-----Generated at Tue Feb 10 00:14:26 2026 by rpki-client