This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/lOvCmWKKzNkRZPbynx3RzAmhlp8.roa File: lOvCmWKKzNkRZPbynx3RzAmhlp8.roa (raw, json) Hash identifier: z0WQgx3al1SGe8qQHQAuPRWkDernD//Jfra2Y4FhlBg= Subject key identifier: 94:EB:C2:99:62:8A:CC:D9:11:64:F6:F2:9F:1D:D1:CC:09:A1:96:9F Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497 Certificate serial: 019B7CEE55BE284E1FB4CDD5D4FCE086BB64 Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/lOvCmWKKzNkRZPbynx3RzAmhlp8.roa Signing time: Fri 02 Jan 2026 04:19:12 +0000 ROA not before: Fri 02 Jan 2026 04:19:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42831 IP address blocks: 79.172.254.0/24 maxlen: 24 87.229.10.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.mft rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:55:be:28:4e:1f:b4:cd:d5:d4:fc:e0:86:bb:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497 Validity Not Before: Jan 2 04:19:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=94ebc299628accd91164f6f29f1dd1cc09a1969f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:ec:f9:e2:2e:0a:e5:28:cc:bd:74:6b:84:07: 95:f4:9d:6f:bb:19:ac:a4:ae:c5:52:a8:bc:02:99: 27:d4:2c:9e:dc:35:ef:ae:8c:b8:9d:f4:bf:6e:cc: 8c:b1:77:b7:6a:2a:93:c9:8f:3a:a3:05:a9:80:aa: e5:03:83:65:95:ce:62:5d:e4:1c:fd:8c:b4:37:0e: 13:03:7e:c1:62:53:c6:d9:b3:a2:0f:4c:7e:ae:36: f7:16:d9:3b:d2:e0:57:d5:82:29:ba:f2:96:5e:0c: fc:d9:d8:31:4e:35:9d:72:6c:58:cb:e1:4b:52:27: 5a:fe:83:c8:e9:78:62:6b:ec:16:5f:68:0c:82:73: ab:2d:f7:24:95:fb:10:2e:13:4d:ae:d6:4e:d1:a5: 22:64:d5:ef:d6:38:c7:9b:5f:ec:9b:78:63:67:55: 13:27:22:d5:d9:f2:04:d3:f8:29:d0:11:77:69:2f: 8d:3c:08:a2:a9:81:bc:be:21:ec:b1:df:d0:f1:14: 94:bb:46:1d:f1:e1:51:13:dc:cd:21:97:f1:55:69: db:3b:c0:2f:aa:c0:d7:8a:87:19:dd:0e:a3:a7:c0: 1d:fe:e6:ee:67:6b:c4:96:d3:40:cf:80:57:41:cf: 95:cf:26:93:9c:bf:72:cf:74:24:60:56:ec:8e:31: e4:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:EB:C2:99:62:8A:CC:D9:11:64:F6:F2:9F:1D:D1:CC:09:A1:96:9F X509v3 Authority Key Identifier: keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/lOvCmWKKzNkRZPbynx3RzAmhlp8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.172.254.0/24 87.229.10.0/24 Signature Algorithm: sha256WithRSAEncryption 69:60:13:28:d1:ba:8d:13:74:c3:79:7f:c8:6d:fc:5a:7e:4a: ae:a6:18:a7:51:f2:80:9b:2a:a2:b3:21:a8:f6:c0:5b:0f:3a: 06:96:65:be:8b:5f:e6:7c:15:2d:06:1c:67:7b:d7:2a:4d:ae: 40:d4:7a:bc:4c:a4:28:d6:55:24:23:33:3f:9f:11:68:9d:2d: 86:cb:cd:ed:38:5d:6f:7a:38:76:3f:b9:4d:4c:ef:3f:2c:bf: eb:4f:b7:7a:03:a4:09:45:d5:d5:f5:75:4c:2f:db:d3:46:58: 22:c4:0c:49:ed:fa:c7:6f:27:9a:27:4e:36:e6:92:5a:20:de: 02:76:62:ed:78:60:eb:7c:fc:a6:93:0b:9c:ed:8a:dc:db:2f: a7:3c:02:93:c5:22:92:bd:f3:ba:51:5a:91:6b:69:68:b2:6c: 8c:d1:6d:53:a6:8b:1d:37:78:7e:b5:19:c8:c7:06:dc:78:93: 0b:22:f5:5b:b3:f3:20:f5:ca:82:09:47:59:dc:7f:62:b9:f2: d9:bf:46:80:56:9b:9e:02:da:92:86:b8:da:31:02:04:e6:9e: 4b:cd:a0:ef:8e:42:26:10:49:f7:5e:57:bc:36:d1:bb:93:56: af:b2:49:80:69:af:ba:e1:1f:df:af:89:c5:ad:d9:fe:71:0b: e8:9a:e3:c4 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt87lW+KE4ftM3V1PzghrtkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiNWUzN2Y2ZTNiOWJkMWNmMzY4NGI5YzAzYzAzYWQxY2E2 NDI0OTcwHhcNMjYwMTAyMDQxOTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NGViYzI5OTYyOGFjY2Q5MTE2NGY2ZjI5ZjFkZDFjYzA5YTE5NjlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj+z54i4K5SjMvXRrhAeV9J1vuxms pK7FUqi8Apkn1Cye3DXvroy4nfS/bsyMsXe3aiqTyY86owWpgKrlA4Nllc5iXeQc /Yy0Nw4TA37BYlPG2bOiD0x+rjb3Ftk70uBX1YIpuvKWXgz82dgxTjWdcmxYy+FL Uida/oPI6Xhia+wWX2gMgnOrLfcklfsQLhNNrtZO0aUiZNXv1jjHm1/sm3hjZ1UT JyLV2fIE0/gp0BF3aS+NPAiiqYG8viHssd/Q8RSUu0Yd8eFRE9zNIZfxVWnbO8Av qsDXiocZ3Q6jp8Ad/ubuZ2vEltNAz4BXQc+VzyaTnL9yz3QkYFbsjjHkfQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFJTrwpliiszZEWT28p8d0cwJoZafMB8GA1UdIwQY MBaAFHteN/bjub0c82hLnAPAOtHKZCSXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUt OTU5M2E0ODhhZmNjLzEvbE92Q21XS0t6TmtSWlBieW54M1J6QW1obHA4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUtOTU5M2E0ODhhZmNj LzEvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAT6z+AwQA V+UKMA0GCSqGSIb3DQEBCwUAA4IBAQBpYBMo0bqNE3TDeX/IbfxafkquphinUfKA myqisyGo9sBbDzoGlmW+i1/mfBUtBhxne9cqTa5A1Hq8TKQo1lUkIzM/nxFonS2G y83tOF1vejh2P7lNTO8/LL/rT7d6A6QJRdXV9XVML9vTRlgixAxJ7frHbyeaJ042 5pJaIN4CdmLteGDrfPymkwuc7Yrc2y+nPAKTxSKSvfO6UVqRa2losmyM0W1Tposd N3h+tRnIxwbceJMLIvVbs/Mg9cqCCUdZ3H9iufLZv0aAVpueAtqShrjaMQIE5p5L zaDvjkImEEn3Xle8NtG7k1avskmAaa+64R/fr4nFrdn+cQvomuPE -----END CERTIFICATE-----Generated at Mon Jan 19 23:22:02 2026 by rpki-client