This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/1ee7af-7f61-4dc9-bc3e-b4e5cad0dc52/1/lSUwP3_EWGch21k6yUaImrmuBW0.roa File: lSUwP3_EWGch21k6yUaImrmuBW0.roa (raw, json) Hash identifier: QPwNQqZV3gI+gWcTQ7NnhvPJkniW1BSxBM8ezGSQu+4= Subject key identifier: 95:25:30:3F:7F:C4:58:67:21:DB:59:3A:C9:46:88:9A:B9:AE:05:6D Certificate issuer: /CN=0babfb67a0975384efb8b7b7ca807f714f75f84a Certificate serial: 019B78A322FC95398BB475C5CE13BE5F366A Authority key identifier: 0B:AB:FB:67:A0:97:53:84:EF:B8:B7:B7:CA:80:7F:71:4F:75:F8:4A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C6v7Z6CXU4TvuLe3yoB_cU91-Eo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/1ee7af-7f61-4dc9-bc3e-b4e5cad0dc52/1/lSUwP3_EWGch21k6yUaImrmuBW0.roa Signing time: Thu 01 Jan 2026 08:18:35 +0000 ROA not before: Thu 01 Jan 2026 08:18:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57575 IP address blocks: 89.207.156.0/24 maxlen: 24 109.205.197.0/24 maxlen: 24 185.153.54.0/24 maxlen: 24 2a13:9a40::/32 maxlen: 32 2a13:9a41::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/1ee7af-7f61-4dc9-bc3e-b4e5cad0dc52/1/C6v7Z6CXU4TvuLe3yoB_cU91-Eo.crl rsync://rpki.ripe.net/repository/DEFAULT/6c/1ee7af-7f61-4dc9-bc3e-b4e5cad0dc52/1/C6v7Z6CXU4TvuLe3yoB_cU91-Eo.mft rsync://rpki.ripe.net/repository/DEFAULT/C6v7Z6CXU4TvuLe3yoB_cU91-Eo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:22:fc:95:39:8b:b4:75:c5:ce:13:be:5f:36:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0babfb67a0975384efb8b7b7ca807f714f75f84a Validity Not Before: Jan 1 08:18:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9525303f7fc4586721db593ac946889ab9ae056d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:3d:23:70:ce:de:66:ee:5f:05:06:c9:70:42: d3:2b:09:b8:a8:d0:c2:8b:6b:07:54:98:ca:40:6b: b9:c9:46:7b:7c:9e:36:5a:a2:29:2d:4c:75:47:e3: c2:ba:5b:f8:33:25:4f:a4:10:1d:a9:5a:ad:36:4e: 1a:b1:e5:f3:22:b5:49:e4:1a:66:2f:63:92:e4:f5: 40:9b:a5:64:7d:f6:d5:77:22:55:67:32:da:6c:1e: 89:8f:74:ac:12:d8:6a:5b:6a:e5:f2:5e:5b:90:ea: e5:8a:b6:55:24:e1:72:35:4f:e7:57:25:76:7b:e6: b4:7f:10:0e:e3:79:8d:f3:dd:51:4c:34:e9:71:5a: 11:91:bb:04:f8:b3:02:2c:bc:73:dc:9b:f8:c2:34: 21:73:a4:36:bc:68:5f:e2:ad:65:b9:4c:7d:a4:1f: 6e:cb:b9:74:d7:73:c3:bf:61:b3:21:d7:c6:1c:39: 83:92:da:7a:5c:26:27:0e:76:44:2b:ec:30:a2:4f: 4a:e4:94:42:a9:d7:e2:ed:a0:32:e5:17:27:62:9b: 3b:55:1b:01:75:c5:f5:01:98:23:2a:3f:b0:10:94: 83:2b:62:1b:3f:db:13:0e:47:71:9d:6f:38:68:95: 57:05:17:eb:8d:0d:50:53:71:b3:68:1f:11:43:9e: fe:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:25:30:3F:7F:C4:58:67:21:DB:59:3A:C9:46:88:9A:B9:AE:05:6D X509v3 Authority Key Identifier: keyid:0B:AB:FB:67:A0:97:53:84:EF:B8:B7:B7:CA:80:7F:71:4F:75:F8:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C6v7Z6CXU4TvuLe3yoB_cU91-Eo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/1ee7af-7f61-4dc9-bc3e-b4e5cad0dc52/1/lSUwP3_EWGch21k6yUaImrmuBW0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/1ee7af-7f61-4dc9-bc3e-b4e5cad0dc52/1/C6v7Z6CXU4TvuLe3yoB_cU91-Eo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.207.156.0/24 109.205.197.0/24 185.153.54.0/24 IPv6: 2a13:9a40::/31 Signature Algorithm: sha256WithRSAEncryption 7e:20:dc:2d:33:b9:8e:1b:ea:13:43:6b:5b:39:14:20:d9:0b: fa:95:97:19:0e:42:ef:be:84:35:b1:87:1d:50:e9:ba:65:21: d7:f1:3b:ae:86:1e:51:86:fe:4a:32:d6:a4:d2:a0:fa:50:cc: e0:c4:e1:84:42:f7:e4:a6:d9:23:8f:0e:f0:7b:f3:3f:d0:a0: be:be:c7:ba:0c:58:f3:de:59:b6:c2:5f:53:d9:bc:51:9c:86: 61:6b:ac:a2:fe:83:a4:2a:c9:23:c2:fc:25:02:50:8c:04:d9: d7:35:59:d1:de:67:fc:0b:a3:78:0e:36:eb:ae:a8:58:98:32: 08:f2:05:9f:64:0b:59:b4:f3:f2:54:17:ab:e4:e3:97:6b:b8: f0:28:fb:69:43:09:38:4c:8e:c4:69:d1:f1:08:5c:09:85:fa: 63:21:2e:15:c9:c9:0d:94:07:c8:b2:0f:45:b5:e4:7f:7f:be: 5c:bc:c5:0f:f9:62:3d:90:70:a4:c0:c2:80:61:e1:f8:7f:08: b4:8d:19:2c:30:0b:c7:3a:8b:3b:6a:ed:16:d1:59:a0:2f:bc: 4d:4d:45:46:ab:d2:40:c7:e2:e4:8a:f7:c2:4e:fc:15:83:db: 65:c4:e7:ba:e0:6d:85:5f:e1:88:c4:21:d3:20:96:eb:fb:9a: ea:94:c4:b9 -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt4oyL8lTmLtHXFzhO+XzZqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiYWJmYjY3YTA5NzUzODRlZmI4YjdiN2NhODA3ZjcxNGY3 NWY4NGEwHhcNMjYwMTAxMDgxODM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NTI1MzAzZjdmYzQ1ODY3MjFkYjU5M2FjOTQ2ODg5YWI5YWUwNTZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxD0jcM7eZu5fBQbJcELTKwm4qNDC i2sHVJjKQGu5yUZ7fJ42WqIpLUx1R+PCulv4MyVPpBAdqVqtNk4aseXzIrVJ5Bpm L2OS5PVAm6VkffbVdyJVZzLabB6Jj3SsEthqW2rl8l5bkOrlirZVJOFyNU/nVyV2 e+a0fxAO43mN891RTDTpcVoRkbsE+LMCLLxz3Jv4wjQhc6Q2vGhf4q1luUx9pB9u y7l013PDv2GzIdfGHDmDktp6XCYnDnZEK+wwok9K5JRCqdfi7aAy5RcnYps7VRsB dcX1AZgjKj+wEJSDK2IbP9sTDkdxnW84aJVXBRfrjQ1QU3GzaB8RQ57+aQIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFJUlMD9/xFhnIdtZOslGiJq5rgVtMB8GA1UdIwQY MBaAFAur+2egl1OE77i3t8qAf3FPdfhKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQzZ2N1o2Q1hVNFR2dUxlM3lvQl9jVTkxLUVvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy8xZWU3YWYtN2Y2MS00ZGM5LWJjM2Ut YjRlNWNhZDBkYzUyLzEvbFNVd1AzX0VXR2NoMjFrNnlVYUltcm11QlcwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yy8xZWU3YWYtN2Y2MS00ZGM5LWJjM2UtYjRlNWNhZDBkYzUy LzEvQzZ2N1o2Q1hVNFR2dUxlM3lvQl9jVTkxLUVvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQAWc+cAwQA bc3FAwQAuZk2MA0EAgACMAcDBQEqE5pAMA0GCSqGSIb3DQEBCwUAA4IBAQB+INwt M7mOG+oTQ2tbORQg2Qv6lZcZDkLvvoQ1sYcdUOm6ZSHX8Tuuhh5Rhv5KMtak0qD6 UMzgxOGEQvfkptkjjw7we/M/0KC+vse6DFjz3lm2wl9T2bxRnIZha6yi/oOkKskj wvwlAlCMBNnXNVnR3mf8C6N4DjbrrqhYmDII8gWfZAtZtPPyVBer5OOXa7jwKPtp Qwk4TI7EadHxCFwJhfpjIS4VyckNlAfIsg9FteR/f75cvMUP+WI9kHCkwMKAYeH4 fwi0jRksMAvHOos7au0W0VmgL7xNTUVGq9JAx+LkivfCTvwVg9tlxOe64G2FX+GI xCHTIJbr+5rqlMS5 -----END CERTIFICATE-----Generated at Mon Feb 9 23:41:48 2026 by rpki-client