This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/f90d83-02be-4e5f-bd0f-929f106630f1/1/lfBfpuueFf8CZSpriLw9-1MWh0c.roa File: lfBfpuueFf8CZSpriLw9-1MWh0c.roa (raw, json) Hash identifier: OX5r2aPlCVyVhqyEhlOJPVx5LfmFfhtFl33BQzrPhX0= Subject key identifier: 95:F0:5F:A6:EB:9E:15:FF:02:65:2A:6B:88:BC:3D:FB:53:16:87:47 Certificate issuer: /CN=2f3136ed10998580a517d9598abca33d9ba66599 Certificate serial: 019B7E38F9B7D1A1F740FE1CC5EB7FF62837 Authority key identifier: 2F:31:36:ED:10:99:85:80:A5:17:D9:59:8A:BC:A3:3D:9B:A6:65:99 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LzE27RCZhYClF9lZiryjPZumZZk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/f90d83-02be-4e5f-bd0f-929f106630f1/1/lfBfpuueFf8CZSpriLw9-1MWh0c.roa Signing time: Fri 02 Jan 2026 10:20:21 +0000 ROA not before: Fri 02 Jan 2026 10:20:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 145.224.128.0/20 maxlen: 24 145.224.144.0/20 maxlen: 24 145.224.160.0/20 maxlen: 24 145.224.176.0/20 maxlen: 24 145.224.192.0/19 maxlen: 24 145.224.192.0/24 maxlen: 24 163.76.128.0/20 maxlen: 24 163.76.144.0/20 maxlen: 24 163.76.160.0/20 maxlen: 24 163.76.176.0/20 maxlen: 24 163.76.192.0/20 maxlen: 24 2a03:5d67::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/f90d83-02be-4e5f-bd0f-929f106630f1/1/LzE27RCZhYClF9lZiryjPZumZZk.crl rsync://rpki.ripe.net/repository/DEFAULT/6d/f90d83-02be-4e5f-bd0f-929f106630f1/1/LzE27RCZhYClF9lZiryjPZumZZk.mft rsync://rpki.ripe.net/repository/DEFAULT/LzE27RCZhYClF9lZiryjPZumZZk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:f9:b7:d1:a1:f7:40:fe:1c:c5:eb:7f:f6:28:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f3136ed10998580a517d9598abca33d9ba66599 Validity Not Before: Jan 2 10:20:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=95f05fa6eb9e15ff02652a6b88bc3dfb53168747 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:0e:ca:c6:d1:fb:32:1f:11:36:82:2b:2d:f7: 26:cc:5c:75:fc:37:48:af:85:88:26:2b:13:0d:fe: 94:71:e3:d1:2e:65:14:72:00:5b:34:6b:6f:1d:9f: 3a:58:75:44:5b:27:30:01:7b:d6:2e:f7:45:ea:8b: a5:3e:3c:86:6e:94:6c:43:0f:1e:88:f0:da:59:d8: e0:fc:e7:d9:4c:7e:ae:07:4e:e7:32:d8:60:2b:94: 22:84:b4:68:ae:b0:d3:70:6b:92:ef:39:0f:d6:c7: ea:ac:ec:a2:f8:97:b3:41:ff:13:65:9d:96:26:a3: 0d:b5:f6:9a:b7:dc:47:a1:88:4d:68:e5:0e:b0:c4: 68:43:52:89:92:e2:90:7c:82:45:e1:81:40:45:71: 77:86:0f:28:86:14:8a:57:d1:87:0b:8a:43:90:b9: bc:0a:eb:ba:c3:c2:30:64:08:b4:86:12:b3:9c:be: f7:4c:f6:18:ec:53:32:ed:d9:47:84:1c:1b:79:07: c3:77:43:bc:14:f0:96:ee:c1:eb:b7:cc:c9:60:2e: dd:e0:f8:b6:46:e5:4a:c9:b1:63:e0:9b:ca:5f:01: 66:24:fe:01:63:6c:e5:21:f9:4d:f1:f4:d0:5e:31: e3:75:a2:f0:5c:ee:b2:51:84:82:84:52:9b:96:e2: 54:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:F0:5F:A6:EB:9E:15:FF:02:65:2A:6B:88:BC:3D:FB:53:16:87:47 X509v3 Authority Key Identifier: keyid:2F:31:36:ED:10:99:85:80:A5:17:D9:59:8A:BC:A3:3D:9B:A6:65:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LzE27RCZhYClF9lZiryjPZumZZk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f90d83-02be-4e5f-bd0f-929f106630f1/1/lfBfpuueFf8CZSpriLw9-1MWh0c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f90d83-02be-4e5f-bd0f-929f106630f1/1/LzE27RCZhYClF9lZiryjPZumZZk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 145.224.128.0-145.224.223.255 163.76.128.0-163.76.207.255 IPv6: 2a03:5d67::/32 Signature Algorithm: sha256WithRSAEncryption 73:e2:5a:01:e4:cd:2a:1c:3c:51:8d:54:69:d2:09:94:5e:79: c7:a2:5d:e1:dd:c2:67:6a:37:63:18:a1:50:36:9e:8f:a9:a4: 17:60:be:3c:65:c2:d7:94:18:78:ba:f4:1b:f5:a1:f5:b8:11: 29:b4:e3:eb:8c:9c:b1:5b:71:95:fb:b0:5d:b3:67:96:63:7a: 07:c3:17:e7:cf:36:1e:b1:6c:96:c6:3a:0c:03:6a:4f:cc:f9: cd:37:b7:b6:27:c7:66:07:61:a5:b2:cf:14:cf:3f:36:3e:d8: fb:13:06:5b:e4:51:f8:f6:ff:3b:d0:bf:28:ea:3b:6b:cb:de: 93:76:7d:69:03:b3:24:ff:29:6d:47:cd:ae:63:94:7c:58:11: 8b:17:66:90:75:41:0a:3f:b8:2c:8e:b2:c2:9d:e1:ae:67:20: a2:c2:88:9b:ab:9b:e9:67:3b:92:63:a4:a1:ae:cb:bd:55:9d: ba:15:77:28:a7:5e:eb:da:0a:54:ef:8b:e2:24:00:5d:da:a3: 1c:f1:b0:fb:ba:cb:81:de:bd:46:fe:35:78:6c:df:92:f6:86: 6a:78:d5:85:96:f5:b9:31:2f:2c:a7:14:01:e3:db:ef:48:6a: 08:36:c6:30:54:23:33:97:1c:0b:f1:81:4a:04:54:c1:45:8f: 86:40:e8:cf -----BEGIN CERTIFICATE----- MIIFIjCCBAqgAwIBAgISAZt+OPm30aH3QP4cxet/9ig3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmMzEzNmVkMTA5OTg1ODBhNTE3ZDk1OThhYmNhMzNkOWJh NjY1OTkwHhcNMjYwMTAyMTAyMDIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NWYwNWZhNmViOWUxNWZmMDI2NTJhNmI4OGJjM2RmYjUzMTY4NzQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsA7KxtH7Mh8RNoIrLfcmzFx1/DdI r4WIJisTDf6UcePRLmUUcgBbNGtvHZ86WHVEWycwAXvWLvdF6oulPjyGbpRsQw8e iPDaWdjg/OfZTH6uB07nMthgK5QihLRorrDTcGuS7zkP1sfqrOyi+JezQf8TZZ2W JqMNtfaat9xHoYhNaOUOsMRoQ1KJkuKQfIJF4YFARXF3hg8ohhSKV9GHC4pDkLm8 Cuu6w8IwZAi0hhKznL73TPYY7FMy7dlHhBwbeQfDd0O8FPCW7sHrt8zJYC7d4Pi2 RuVKybFj4JvKXwFmJP4BY2zlIflN8fTQXjHjdaLwXO6yUYSChFKbluJUkwIDAQAB o4ICLjCCAiowHQYDVR0OBBYEFJXwX6brnhX/AmUqa4i8PftTFodHMB8GA1UdIwQY MBaAFC8xNu0QmYWApRfZWYq8oz2bpmWZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTHpFMjdSQ1poWUNsRjlsWmlyeWpQWnVtWlprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC9mOTBkODMtMDJiZS00ZTVmLWJkMGYt OTI5ZjEwNjYzMGYxLzEvbGZCZnB1dWVGZjhDWlNwcmlMdzktMU1XaDBjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZC9mOTBkODMtMDJiZS00ZTVmLWJkMGYtOTI5ZjEwNjYzMGYx LzEvTHpFMjdSQ1poWUNsRjlsWmlyeWpQWnVtWlprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEQGCCsGAQUFBwEHAQH/BDUwMzAiBAIAATAcMAwDBAeR4IAD BAWR4MAwDAMEB6NMgAMEBKNMwDANBAIAAjAHAwUAKgNdZzANBgkqhkiG9w0BAQsF AAOCAQEAc+JaAeTNKhw8UY1UadIJlF55x6Jd4d3CZ2o3YxihUDaej6mkF2C+PGXC 15QYeLr0G/Wh9bgRKbTj64ycsVtxlfuwXbNnlmN6B8MX5882HrFslsY6DANqT8z5 zTe3tifHZgdhpbLPFM8/Nj7Y+xMGW+RR+Pb/O9C/KOo7a8vek3Z9aQOzJP8pbUfN rmOUfFgRixdmkHVBCj+4LI6ywp3hrmcgosKIm6ub6Wc7kmOkoa7LvVWduhV3KKde 69oKVO+L4iQAXdqjHPGw+7rLgd69Rv41eGzfkvaGanjVhZb1uTEvLKcUAePb70hq CDbGMFQjM5ccC/GBSgRUwUWPhkDozw== -----END CERTIFICATE-----Generated at Fri Jan 9 00:56:56 2026 by rpki-client