This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/lBiWo-43mwj_yxHYimo4N0zdVIw.roa File: lBiWo-43mwj_yxHYimo4N0zdVIw.roa (raw, json) Hash identifier: nqzm75MgLp53m9l5C+5ps6y1H4zAgDuqmkNHM0R6PVw= Subject key identifier: 94:18:96:A3:EE:37:9B:08:FF:CB:11:D8:8A:6A:38:37:4C:DD:54:8C Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467 Certificate serial: 019B7C1335EFFE1154A09899364E62873010 Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/lBiWo-43mwj_yxHYimo4N0zdVIw.roa Signing time: Fri 02 Jan 2026 00:19:52 +0000 ROA not before: Fri 02 Jan 2026 00:19:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212097 IP address blocks: 178.19.36.0/22 maxlen: 22 178.19.36.0/24 maxlen: 24 178.19.37.0/24 maxlen: 24 178.19.38.0/24 maxlen: 24 178.19.39.0/24 maxlen: 24 185.28.49.0/24 maxlen: 24 185.28.50.0/24 maxlen: 24 185.227.102.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.mft rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 11:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:35:ef:fe:11:54:a0:98:99:36:4e:62:87:30:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467 Validity Not Before: Jan 2 00:19:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=941896a3ee379b08ffcb11d88a6a38374cdd548c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:da:ee:92:ff:3a:f8:17:0a:53:fc:99:f5:e5: d3:93:c1:c2:8b:1a:01:fd:16:d2:01:b7:8d:67:30: 54:7a:82:f9:71:40:61:a3:9d:9e:3a:fc:5f:e6:3c: 00:81:55:9f:ee:10:40:9a:f8:16:aa:cf:e7:ba:54: 4c:f5:c7:f9:8a:f8:68:5d:a8:46:d0:25:8b:a6:38: 9c:2e:51:50:c1:f3:73:09:4f:fa:61:69:86:3c:08: 20:5d:87:46:35:b2:2c:34:a5:76:87:c4:18:36:1e: 5b:25:e3:3c:b9:c6:14:cb:5e:34:8e:7f:3c:3c:37: 46:5e:a7:57:60:29:45:da:68:e4:2c:cb:f8:c7:21: 89:bb:ab:59:b2:54:0b:bd:e6:0c:8d:30:eb:6c:ce: df:8c:12:a0:ec:04:5d:90:72:97:34:ed:c4:1d:7b: 03:6f:ce:5b:b7:31:ba:6d:bf:92:6d:84:bd:4c:6b: fa:57:b1:e5:77:1f:54:c3:20:37:df:53:85:7b:53: 1e:e7:59:d8:ef:8a:0b:b8:94:d7:40:f4:40:d6:0d: 7d:ee:b1:39:1d:f1:37:16:fe:dd:9d:c7:38:d1:5e: 6e:15:87:95:b6:7e:ed:55:23:fd:f4:25:68:26:b8: c8:84:b3:54:f5:88:94:b0:70:c4:31:f8:56:3e:6d: f7:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:18:96:A3:EE:37:9B:08:FF:CB:11:D8:8A:6A:38:37:4C:DD:54:8C X509v3 Authority Key Identifier: keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/lBiWo-43mwj_yxHYimo4N0zdVIw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.19.36.0/22 185.28.49.0-185.28.50.255 185.227.102.0/24 Signature Algorithm: sha256WithRSAEncryption 78:d4:24:65:0c:34:0f:86:ce:98:d1:01:3a:e3:c7:66:d3:19: 23:8d:aa:b7:d3:77:3b:4b:ca:0f:10:ef:1c:14:56:32:a9:14: e5:66:da:a5:10:33:b6:5e:ac:ae:cf:d3:b3:51:2b:0c:b8:ef: 33:c8:b1:24:a7:f9:33:a4:1f:f3:7f:ec:04:68:17:c1:bf:01: 2c:d5:5b:a5:9c:55:3f:86:79:48:da:2b:77:33:f2:1e:ac:e6: 33:29:e1:c1:ad:50:fc:ab:8b:b3:a1:69:f4:58:84:50:b4:dd: 7e:36:7d:a5:a4:a6:51:8f:38:58:f1:1e:09:c7:4d:39:f7:b0: 3d:20:0f:9e:a1:ab:92:31:60:b7:1c:37:e3:71:2f:b9:5a:3e: 94:97:a3:3d:4e:5f:e8:34:32:ae:e9:09:05:81:5d:26:7a:40: b8:a7:ba:c8:a6:f4:20:fc:cc:90:1b:35:b9:83:53:32:54:d2: ee:c3:8e:e2:06:86:d0:12:bf:86:83:9b:2a:52:cd:06:21:2e: 23:a5:bb:11:d3:4b:e4:51:51:ba:d2:ed:5c:b9:89:81:1c:6f: cb:a1:ff:30:c5:d3:66:ab:b4:56:b3:44:bd:bf:cb:8b:9a:0d: f4:ff:58:b4:4e:5d:fc:16:f5:bb:fe:ee:fb:e4:d4:ac:76:7b: 43:84:5f:a0 -----BEGIN CERTIFICATE----- MIIFETCCA/mgAwIBAgISAZt8EzXv/hFUoJiZNk5ihzAQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1MzRjNDlmY2ZhOGE0NTA0MWQ5NWVkNGQ4ZDRmYzY5Yzcy N2E0NjcwHhcNMjYwMTAyMDAxOTUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NDE4OTZhM2VlMzc5YjA4ZmZjYjExZDg4YTZhMzgzNzRjZGQ1NDhjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxdrukv86+BcKU/yZ9eXTk8HCixoB /RbSAbeNZzBUeoL5cUBho52eOvxf5jwAgVWf7hBAmvgWqs/nulRM9cf5ivhoXahG 0CWLpjicLlFQwfNzCU/6YWmGPAggXYdGNbIsNKV2h8QYNh5bJeM8ucYUy140jn88 PDdGXqdXYClF2mjkLMv4xyGJu6tZslQLveYMjTDrbM7fjBKg7ARdkHKXNO3EHXsD b85btzG6bb+SbYS9TGv6V7Hldx9UwyA331OFe1Me51nY74oLuJTXQPRA1g197rE5 HfE3Fv7dncc40V5uFYeVtn7tVSP99CVoJrjIhLNU9YiUsHDEMfhWPm33BwIDAQAB o4ICHTCCAhkwHQYDVR0OBBYEFJQYlqPuN5sI/8sR2IpqODdM3VSMMB8GA1UdIwQY MBaAFAU0xJ/PqKRQQdle1NjU/GnHJ6RnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYt Y2Q3ZTA2Y2JiNTMxLzEvbEJpV28tNDNtd2pfeXhIWWltbzROMHpkVkl3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYtY2Q3ZTA2Y2JiNTMx LzEvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQCshMkMAwD BAC5HDEDBAC5HDIDBAC542YwDQYJKoZIhvcNAQELBQADggEBAHjUJGUMNA+GzpjR ATrjx2bTGSONqrfTdztLyg8Q7xwUVjKpFOVm2qUQM7ZerK7P07NRKwy47zPIsSSn +TOkH/N/7ARoF8G/ASzVW6WcVT+GeUjaK3cz8h6s5jMp4cGtUPyri7OhafRYhFC0 3X42faWkplGPOFjxHgnHTTn3sD0gD56hq5IxYLccN+NxL7laPpSXoz1OX+g0Mq7p CQWBXSZ6QLinusim9CD8zJAbNbmDUzJU0u7DjuIGhtASv4aDmypSzQYhLiOluxHT S+RRUbrS7Vy5iYEcb8uh/zDF02artFazRL2/y4uaDfT/WLROXfwW9bv+7vvk1Kx2 e0OEX6A= -----END CERTIFICATE-----Generated at Fri Jan 23 21:37:11 2026 by rpki-client