This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/e9c8e9-b954-4d20-a426-8e0c31223db8/1/LBeoGkIZF4Og7iTS-_RmCYoVGwk.roa File: LBeoGkIZF4Og7iTS-_RmCYoVGwk.roa (raw, json) Hash identifier: irMuSGZzdRFYC+b4XhonFObLAyQ7xvt6juvoVtLNx80= Subject key identifier: 2C:17:A8:1A:42:19:17:83:A0:EE:24:D2:FB:F4:66:09:8A:15:1B:09 Certificate issuer: /CN=efa842e67147252505f41551f0f735b7f72e3e97 Certificate serial: 019B775884551CF7781DE3D95C2BF3A95B78 Authority key identifier: EF:A8:42:E6:71:47:25:25:05:F4:15:51:F0:F7:35:B7:F7:2E:3E:97 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/76hC5nFHJSUF9BVR8Pc1t_cuPpc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/e9c8e9-b954-4d20-a426-8e0c31223db8/1/LBeoGkIZF4Og7iTS-_RmCYoVGwk.roa Signing time: Thu 01 Jan 2026 02:17:28 +0000 ROA not before: Thu 01 Jan 2026 02:17:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 174 IP address blocks: 185.165.188.0/24 maxlen: 24 185.165.191.0/24 maxlen: 24 195.144.21.0/24 maxlen: 24 2a07:85c1::/48 maxlen: 48 2a07:85c6::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/e9c8e9-b954-4d20-a426-8e0c31223db8/1/76hC5nFHJSUF9BVR8Pc1t_cuPpc.crl rsync://rpki.ripe.net/repository/DEFAULT/72/e9c8e9-b954-4d20-a426-8e0c31223db8/1/76hC5nFHJSUF9BVR8Pc1t_cuPpc.mft rsync://rpki.ripe.net/repository/DEFAULT/76hC5nFHJSUF9BVR8Pc1t_cuPpc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 00:18:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:84:55:1c:f7:78:1d:e3:d9:5c:2b:f3:a9:5b:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=efa842e67147252505f41551f0f735b7f72e3e97 Validity Not Before: Jan 1 02:17:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2c17a81a42191783a0ee24d2fbf466098a151b09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:04:7d:06:95:7f:a6:29:7d:85:0e:c1:f1:05: c7:3a:ac:69:87:6b:d3:fb:fb:3d:19:73:e2:21:8d: 1f:e4:f2:35:19:1d:0f:5d:aa:a5:0e:ac:61:2b:e2: 6a:4b:26:31:bf:ff:58:59:6b:13:9d:4c:e8:6f:38: a9:f6:c8:13:8a:02:6b:4f:37:5c:94:1a:34:de:0e: 0b:a9:76:29:77:07:4f:10:f3:71:58:e8:6a:51:8a: b7:25:71:d0:b2:80:df:77:07:62:2d:ac:74:a3:8f: 7d:d2:f2:75:76:57:23:fa:38:e4:b6:9e:a5:8d:d5: 50:42:ad:d0:84:a6:d0:05:b4:27:39:ce:66:a0:67: 5c:45:67:a4:ef:41:b7:19:dc:c6:bd:0a:a3:dd:9b: 07:18:b1:34:86:05:dd:ef:1c:c8:f0:54:d1:7a:db: fe:84:c7:b5:db:46:14:0a:69:88:1d:2d:7d:4c:51: 28:2b:ee:37:11:46:93:80:56:96:00:c6:66:82:2f: 21:74:32:2b:5e:59:da:76:33:99:2f:75:50:53:51: 65:51:e0:93:34:2b:fc:55:9d:a6:56:f0:53:c6:c1: 45:0f:d4:cb:2c:13:ca:ff:13:c6:bb:36:52:e3:65: 65:ec:4b:b5:da:57:21:7f:79:9c:da:7c:31:6d:ef: a7:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:17:A8:1A:42:19:17:83:A0:EE:24:D2:FB:F4:66:09:8A:15:1B:09 X509v3 Authority Key Identifier: keyid:EF:A8:42:E6:71:47:25:25:05:F4:15:51:F0:F7:35:B7:F7:2E:3E:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/76hC5nFHJSUF9BVR8Pc1t_cuPpc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/e9c8e9-b954-4d20-a426-8e0c31223db8/1/LBeoGkIZF4Og7iTS-_RmCYoVGwk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/72/e9c8e9-b954-4d20-a426-8e0c31223db8/1/76hC5nFHJSUF9BVR8Pc1t_cuPpc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.165.188.0/24 185.165.191.0/24 195.144.21.0/24 IPv6: 2a07:85c1::/48 2a07:85c6::/48 Signature Algorithm: sha256WithRSAEncryption 6f:65:a4:1f:94:bd:d1:ce:e2:1e:a3:fe:6e:1c:05:3a:3f:53: db:cd:11:a7:c7:87:11:17:82:73:13:22:c2:26:42:00:43:c7: c2:13:78:4e:37:8e:eb:5e:54:88:f1:b9:d0:f6:96:ce:cf:e7: 7d:7a:3d:65:38:f4:e4:ad:9d:e8:42:e7:ac:48:78:60:ba:93: 7a:50:61:fe:8d:58:49:d4:fc:8e:39:7e:68:a8:4b:9d:07:a4: 48:f0:52:07:cb:b4:2f:f6:68:8c:97:d6:80:03:a5:a7:1c:3a: 42:34:a1:75:ed:01:ab:4c:a6:2e:72:29:76:a1:e7:e5:88:53: ea:13:2f:18:f8:fc:13:e1:7d:01:18:0f:66:a5:c7:43:c1:95: 72:f5:dd:45:09:bf:8c:e6:5e:cb:48:4a:5e:7b:c8:fc:59:b7: 7b:49:36:2c:8c:fa:a3:9e:ee:f5:a6:0f:72:a1:4e:f5:02:da: c4:c2:bd:d3:61:65:29:ac:12:dc:ae:e3:39:71:43:e5:67:77: bb:d0:9e:2c:5c:63:bb:07:d8:03:d5:2c:8b:35:5d:77:48:3b: 15:92:91:42:85:6f:c6:64:ed:8d:f1:21:03:bc:3b:bd:d6:1d: a6:a5:97:56:56:25:3f:89:e5:85:8d:ea:60:bb:c0:d5:0c:51: c5:78:4f:3f -----BEGIN CERTIFICATE----- MIIFIzCCBAugAwIBAgISAZt3WIRVHPd4HePZXCvzqVt4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmYTg0MmU2NzE0NzI1MjUwNWY0MTU1MWYwZjczNWI3Zjcy ZTNlOTcwHhcNMjYwMTAxMDIxNzI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYzE3YTgxYTQyMTkxNzgzYTBlZTI0ZDJmYmY0NjYwOThhMTUxYjA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApwR9BpV/pil9hQ7B8QXHOqxph2vT +/s9GXPiIY0f5PI1GR0PXaqlDqxhK+JqSyYxv/9YWWsTnUzobzip9sgTigJrTzdc lBo03g4LqXYpdwdPEPNxWOhqUYq3JXHQsoDfdwdiLax0o4990vJ1dlcj+jjktp6l jdVQQq3QhKbQBbQnOc5moGdcRWek70G3GdzGvQqj3ZsHGLE0hgXd7xzI8FTRetv+ hMe120YUCmmIHS19TFEoK+43EUaTgFaWAMZmgi8hdDIrXlnadjOZL3VQU1FlUeCT NCv8VZ2mVvBTxsFFD9TLLBPK/xPGuzZS42Vl7Eu12lchf3mc2nwxbe+nGQIDAQAB o4ICLzCCAiswHQYDVR0OBBYEFCwXqBpCGReDoO4k0vv0ZgmKFRsJMB8GA1UdIwQY MBaAFO+oQuZxRyUlBfQVUfD3Nbf3Lj6XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNzZoQzVuRkhKU1VGOUJWUjhQYzF0X2N1UHBjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi9lOWM4ZTktYjk1NC00ZDIwLWE0MjYt OGUwYzMxMjIzZGI4LzEvTEJlb0drSVpGNE9nN2lUUy1fUm1DWW9WR3drLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Mi9lOWM4ZTktYjk1NC00ZDIwLWE0MjYtOGUwYzMxMjIzZGI4 LzEvNzZoQzVuRkhKU1VGOUJWUjhQYzF0X2N1UHBjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEUGCCsGAQUFBwEHAQH/BDYwNDAYBAIAATASAwQAuaW8AwQA uaW/AwQAw5AVMBgEAgACMBIDBwAqB4XBAAADBwAqB4XGAAAwDQYJKoZIhvcNAQEL BQADggEBAG9lpB+UvdHO4h6j/m4cBTo/U9vNEafHhxEXgnMTIsImQgBDx8ITeE43 juteVIjxudD2ls7P5316PWU49OStnehC56xIeGC6k3pQYf6NWEnU/I45fmioS50H pEjwUgfLtC/2aIyX1oADpaccOkI0oXXtAatMpi5yKXah5+WIU+oTLxj4/BPhfQEY D2alx0PBlXL13UUJv4zmXstISl57yPxZt3tJNiyM+qOe7vWmD3KhTvUC2sTCvdNh ZSmsEtyu4zlxQ+Vnd7vQnixcY7sH2APVLIs1XXdIOxWSkUKFb8Zk7Y3xIQO8O73W Haall1ZWJT+J5YWN6mC7wNUMUcV4Tz8= -----END CERTIFICATE-----Generated at Thu Jan 1 07:05:47 2026 by rpki-client