This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/828652-addf-4fe8-9fe6-4b1f61653f3d/1/_LkpRRARlMX2HSdxwIO5dOZICSc.roa File: _LkpRRARlMX2HSdxwIO5dOZICSc.roa (raw, json) Hash identifier: J2+f3Tq3pA1xUwTt3sMx5nZNmV2E6UloLE/wFxA+mpU= Subject key identifier: FC:B9:29:45:10:11:94:C5:F6:1D:27:71:C0:83:B9:74:E6:48:09:27 Certificate issuer: /CN=13932782ee7758990404fa1ccfb09ec23a86123f Certificate serial: 019B7C8062042DF8E90D9736928CD9E2D862 Authority key identifier: 13:93:27:82:EE:77:58:99:04:04:FA:1C:CF:B0:9E:C2:3A:86:12:3F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E5Mngu53WJkEBPocz7CewjqGEj8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/828652-addf-4fe8-9fe6-4b1f61653f3d/1/_LkpRRARlMX2HSdxwIO5dOZICSc.roa Signing time: Fri 02 Jan 2026 02:19:07 +0000 ROA not before: Fri 02 Jan 2026 02:19:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3320 IP address blocks: 85.116.28.0/24 maxlen: 24 85.116.29.0/24 maxlen: 24 85.116.30.0/24 maxlen: 24 85.116.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/828652-addf-4fe8-9fe6-4b1f61653f3d/1/E5Mngu53WJkEBPocz7CewjqGEj8.crl rsync://rpki.ripe.net/repository/DEFAULT/65/828652-addf-4fe8-9fe6-4b1f61653f3d/1/E5Mngu53WJkEBPocz7CewjqGEj8.mft rsync://rpki.ripe.net/repository/DEFAULT/E5Mngu53WJkEBPocz7CewjqGEj8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 08:02:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:62:04:2d:f8:e9:0d:97:36:92:8c:d9:e2:d8:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=13932782ee7758990404fa1ccfb09ec23a86123f Validity Not Before: Jan 2 02:19:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fcb92945101194c5f61d2771c083b974e6480927 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:48:67:1d:f9:ee:69:a1:0e:c2:36:dd:d2:a4: f4:59:64:4b:c8:f4:0c:16:d3:04:e7:a9:14:7f:de: 96:50:7d:11:8a:98:b1:a9:27:d4:13:50:19:c2:6c: 6e:f7:79:a5:b4:7c:ea:2f:4e:67:07:a7:1b:76:e1: e3:4c:25:82:2e:28:cc:93:a6:11:99:43:c2:c6:1f: 59:71:76:7f:6e:3b:17:0d:7b:80:0b:d7:5c:fa:79: 18:f8:2d:1e:7d:09:f3:44:34:4c:ed:a2:27:79:3e: 86:e5:63:8f:34:5f:17:06:c1:db:03:bc:98:58:98: 03:f6:25:c3:48:92:f9:31:e0:7b:97:b5:81:18:3a: 16:9b:c1:70:ab:bd:2d:8c:da:e7:5d:1f:17:34:7c: f2:dc:29:53:55:d0:04:ad:c2:b3:28:fd:25:a4:95: 1c:3a:7f:66:b9:5d:f3:9a:90:d4:6b:36:d9:0e:20: 58:e2:cc:cc:db:58:81:77:70:b6:bf:93:05:a5:da: f3:82:84:69:57:27:d0:99:d8:7b:db:6e:40:1c:6a: 50:17:e7:77:fb:69:ad:8f:74:39:ac:8e:40:73:c8: 70:37:1c:e7:1c:82:b7:f0:93:37:cf:65:e0:92:4d: 2a:4c:4c:1c:2d:f9:0d:cd:47:52:92:a9:a0:bd:0e: 20:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:B9:29:45:10:11:94:C5:F6:1D:27:71:C0:83:B9:74:E6:48:09:27 X509v3 Authority Key Identifier: keyid:13:93:27:82:EE:77:58:99:04:04:FA:1C:CF:B0:9E:C2:3A:86:12:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E5Mngu53WJkEBPocz7CewjqGEj8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/828652-addf-4fe8-9fe6-4b1f61653f3d/1/_LkpRRARlMX2HSdxwIO5dOZICSc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/828652-addf-4fe8-9fe6-4b1f61653f3d/1/E5Mngu53WJkEBPocz7CewjqGEj8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.116.28.0/22 Signature Algorithm: sha256WithRSAEncryption 1f:54:aa:9d:a1:f8:d7:c0:04:16:b3:a6:97:d2:ac:11:0e:1c: 56:48:9c:d5:d4:0a:d9:43:19:08:0e:68:43:66:ba:50:86:b5: e3:bb:07:aa:b4:dd:c9:90:ab:27:04:49:53:e6:7c:09:37:37: 56:01:be:25:c1:fe:51:e9:34:be:d8:10:fd:f1:b2:c1:f7:ce: f5:97:a7:a3:a7:2b:58:15:30:d7:1b:0f:7d:76:d3:30:af:6a: 08:5e:c3:88:38:99:a0:71:8b:f0:00:b3:24:7c:5d:51:cd:18: c3:43:c5:87:a8:39:8c:5a:9e:19:8a:fd:4a:96:45:96:07:29: e0:12:a7:11:53:8f:8d:fd:cb:55:e5:4d:1e:07:26:d8:6a:77: 99:d0:cf:d8:cb:86:a0:51:95:65:c9:87:d4:92:84:e3:ad:b5: 8e:33:3e:47:b6:14:ec:69:07:0c:9f:09:43:0f:97:04:32:37: 9e:b7:4e:86:33:3a:f1:07:14:ed:4e:d3:35:21:d2:4e:a9:0b: 28:98:b6:b0:c5:d9:19:97:b6:11:58:15:f2:36:48:e0:e9:00: 65:5d:91:e6:eb:24:0c:16:6f:c9:82:c5:ad:d6:d7:22:1e:89: e2:27:62:de:bc:35:53:0c:f0:44:05:6d:f6:59:ed:38:63:93: b1:6b:9a:fe -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gGIELfjpDZc2kozZ4thiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEzOTMyNzgyZWU3NzU4OTkwNDA0ZmExY2NmYjA5ZWMyM2E4 NjEyM2YwHhcNMjYwMTAyMDIxOTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmY2I5Mjk0NTEwMTE5NGM1ZjYxZDI3NzFjMDgzYjk3NGU2NDgwOTI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmUhnHfnuaaEOwjbd0qT0WWRLyPQM FtME56kUf96WUH0RipixqSfUE1AZwmxu93mltHzqL05nB6cbduHjTCWCLijMk6YR mUPCxh9ZcXZ/bjsXDXuAC9dc+nkY+C0efQnzRDRM7aIneT6G5WOPNF8XBsHbA7yY WJgD9iXDSJL5MeB7l7WBGDoWm8Fwq70tjNrnXR8XNHzy3ClTVdAErcKzKP0lpJUc On9muV3zmpDUazbZDiBY4szM21iBd3C2v5MFpdrzgoRpVyfQmdh7225AHGpQF+d3 +2mtj3Q5rI5Ac8hwNxznHIK38JM3z2Xgkk0qTEwcLfkNzUdSkqmgvQ4gvwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPy5KUUQEZTF9h0nccCDuXTmSAknMB8GA1UdIwQY MBaAFBOTJ4Lud1iZBAT6HM+wnsI6hhI/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRTVNbmd1NTNXSmtFQlBvY3o3Q2V3anFHRWo4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS84Mjg2NTItYWRkZi00ZmU4LTlmZTYt NGIxZjYxNjUzZjNkLzEvX0xrcFJSQVJsTVgySFNkeHdJTzVkT1pJQ1NjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS84Mjg2NTItYWRkZi00ZmU4LTlmZTYtNGIxZjYxNjUzZjNk LzEvRTVNbmd1NTNXSmtFQlBvY3o3Q2V3anFHRWo4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCVXQcMA0G CSqGSIb3DQEBCwUAA4IBAQAfVKqdofjXwAQWs6aX0qwRDhxWSJzV1ArZQxkIDmhD ZrpQhrXjuweqtN3JkKsnBElT5nwJNzdWAb4lwf5R6TS+2BD98bLB9871l6ejpytY FTDXGw99dtMwr2oIXsOIOJmgcYvwALMkfF1RzRjDQ8WHqDmMWp4Ziv1KlkWWByng EqcRU4+N/ctV5U0eBybYaneZ0M/Yy4agUZVlyYfUkoTjrbWOMz5HthTsaQcMnwlD D5cEMjeet06GMzrxBxTtTtM1IdJOqQsomLawxdkZl7YRWBXyNkjg6QBlXZHm6yQM Fm/JgsWt1tciHoniJ2LevDVTDPBEBW32We04Y5Oxa5r+ -----END CERTIFICATE-----Generated at Mon Jan 19 11:47:19 2026 by rpki-client