This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/6714e9-3435-4e9e-a5ab-eb51949af446/1/lLaQc1ctDPh-cPE-9AA0s8dGscc.roa File: lLaQc1ctDPh-cPE-9AA0s8dGscc.roa (raw, json) Hash identifier: Ux5HLtFBatxMzdAGaYKiqbznlJjE71eRd4dpv4guF4U= Subject key identifier: 94:B6:90:73:57:2D:0C:F8:7E:70:F1:3E:F4:00:34:B3:C7:46:B1:C7 Certificate issuer: /CN=f2f7b9cbbb8952ac3f196e7cd0b8a4dba5de11c3 Certificate serial: 019B7CEDD51827F8D914A574E58FE724C8FB Authority key identifier: F2:F7:B9:CB:BB:89:52:AC:3F:19:6E:7C:D0:B8:A4:DB:A5:DE:11:C3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8ve5y7uJUqw_GW580Lik26XeEcM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/6714e9-3435-4e9e-a5ab-eb51949af446/1/lLaQc1ctDPh-cPE-9AA0s8dGscc.roa Signing time: Fri 02 Jan 2026 04:18:39 +0000 ROA not before: Fri 02 Jan 2026 04:18:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3257 IP address blocks: 185.76.30.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/6714e9-3435-4e9e-a5ab-eb51949af446/1/8ve5y7uJUqw_GW580Lik26XeEcM.crl rsync://rpki.ripe.net/repository/DEFAULT/73/6714e9-3435-4e9e-a5ab-eb51949af446/1/8ve5y7uJUqw_GW580Lik26XeEcM.mft rsync://rpki.ripe.net/repository/DEFAULT/8ve5y7uJUqw_GW580Lik26XeEcM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 12:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:d5:18:27:f8:d9:14:a5:74:e5:8f:e7:24:c8:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f2f7b9cbbb8952ac3f196e7cd0b8a4dba5de11c3 Validity Not Before: Jan 2 04:18:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=94b69073572d0cf87e70f13ef40034b3c746b1c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:7b:50:ca:08:ab:24:24:89:9d:fb:af:4e:ae: b5:9e:aa:37:2a:21:37:23:95:5e:94:2d:38:bc:11: a6:c2:5d:27:dc:a2:ab:5f:5e:9d:80:9b:72:85:5e: 4c:68:8d:11:68:87:88:d1:e6:97:dd:95:e8:ab:98: 70:99:7b:7d:4c:06:ae:fe:16:77:22:3e:fc:2c:38: 68:7b:c6:da:d2:3a:54:01:cd:f9:71:74:07:9c:1f: 3f:d4:5c:68:71:6b:0b:f4:d1:2b:37:c9:ed:56:c7: a1:ba:00:e2:43:81:29:20:32:af:2d:0e:0e:69:74: 44:ba:be:4c:54:21:06:e7:f8:b2:e6:e5:5d:bf:3e: 33:20:ba:97:35:f1:e1:37:e7:87:58:b8:b6:d4:92: 77:10:f6:56:2c:8c:6e:e8:af:4e:f4:6a:b6:9b:f5: e9:e3:63:06:96:05:49:34:6b:cb:65:98:ed:34:70: e2:83:48:ca:e9:dc:bb:a2:4e:ff:0e:87:a9:e5:9d: fe:8b:da:64:bb:65:ea:18:76:35:61:d6:9a:70:0e: 28:2d:11:f8:16:0b:8a:55:50:05:c2:b1:bf:14:5a: a4:7d:f0:71:90:72:94:76:9f:a6:e3:e7:9f:ff:7c: 0c:f1:e9:1f:a8:7a:d1:05:88:92:d4:16:3d:c4:75: 0d:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:B6:90:73:57:2D:0C:F8:7E:70:F1:3E:F4:00:34:B3:C7:46:B1:C7 X509v3 Authority Key Identifier: keyid:F2:F7:B9:CB:BB:89:52:AC:3F:19:6E:7C:D0:B8:A4:DB:A5:DE:11:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8ve5y7uJUqw_GW580Lik26XeEcM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/6714e9-3435-4e9e-a5ab-eb51949af446/1/lLaQc1ctDPh-cPE-9AA0s8dGscc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/73/6714e9-3435-4e9e-a5ab-eb51949af446/1/8ve5y7uJUqw_GW580Lik26XeEcM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.76.30.0/23 Signature Algorithm: sha256WithRSAEncryption 5e:b0:28:73:00:7d:90:1d:e4:a9:04:a4:03:d6:dd:24:4e:f7: 72:a1:3d:19:58:17:e5:a7:93:a0:c6:e3:14:79:0c:42:9b:21: 77:fe:f7:29:21:58:6d:a8:d3:6b:91:e4:43:1b:3f:d7:0b:02: 58:87:f1:f4:53:54:40:d5:77:be:a8:6a:dd:ab:71:cf:c7:bd: 76:da:05:1c:ab:c3:55:ee:64:bc:7e:1b:a0:bd:bd:db:2a:39: b4:0e:81:c2:8e:cc:6b:63:18:fb:31:27:f7:84:c0:b2:fa:e3: 2e:52:72:d2:98:14:88:98:45:e5:12:fd:77:6c:57:f3:7b:b5: f2:92:38:91:a3:13:26:bc:64:cf:df:d8:4f:94:03:a2:2c:98: 81:da:d7:bb:48:93:6f:48:0d:03:d3:18:22:0d:f1:34:d2:81: 3b:ab:46:8f:48:f4:1d:2b:c9:9f:87:5b:24:f9:7d:aa:f7:f1: 4a:3e:71:c6:14:ab:1e:79:11:fb:f4:52:8e:49:2d:80:78:94: 68:b4:90:a9:30:97:c5:56:f2:23:00:77:12:4c:92:68:8b:ff: bc:70:f0:7e:24:54:bb:f8:9f:b1:94:db:6c:3f:dc:24:bd:b9: ac:ee:a4:f3:1e:77:42:d8:01:35:85:cf:3d:70:a2:ce:39:67: 4d:9b:c2:70 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87dUYJ/jZFKV05Y/nJMj7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYyZjdiOWNiYmI4OTUyYWMzZjE5NmU3Y2QwYjhhNGRiYTVk ZTExYzMwHhcNMjYwMTAyMDQxODM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NGI2OTA3MzU3MmQwY2Y4N2U3MGYxM2VmNDAwMzRiM2M3NDZiMWM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuXtQygirJCSJnfuvTq61nqo3KiE3 I5VelC04vBGmwl0n3KKrX16dgJtyhV5MaI0RaIeI0eaX3ZXoq5hwmXt9TAau/hZ3 Ij78LDhoe8ba0jpUAc35cXQHnB8/1FxocWsL9NErN8ntVsehugDiQ4EpIDKvLQ4O aXREur5MVCEG5/iy5uVdvz4zILqXNfHhN+eHWLi21JJ3EPZWLIxu6K9O9Gq2m/Xp 42MGlgVJNGvLZZjtNHDig0jK6dy7ok7/Doep5Z3+i9pku2XqGHY1YdaacA4oLRH4 FguKVVAFwrG/FFqkffBxkHKUdp+m4+ef/3wM8ekfqHrRBYiS1BY9xHUNyQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJS2kHNXLQz4fnDxPvQANLPHRrHHMB8GA1UdIwQY MBaAFPL3ucu7iVKsPxlufNC4pNul3hHDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOHZlNXk3dUpVcXdfR1c1ODBMaWsyNlhlRWNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My82NzE0ZTktMzQzNS00ZTllLWE1YWIt ZWI1MTk0OWFmNDQ2LzEvbExhUWMxY3REUGgtY1BFLTlBQTBzOGRHc2NjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83My82NzE0ZTktMzQzNS00ZTllLWE1YWItZWI1MTk0OWFmNDQ2 LzEvOHZlNXk3dUpVcXdfR1c1ODBMaWsyNlhlRWNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuUweMA0G CSqGSIb3DQEBCwUAA4IBAQBesChzAH2QHeSpBKQD1t0kTvdyoT0ZWBflp5OgxuMU eQxCmyF3/vcpIVhtqNNrkeRDGz/XCwJYh/H0U1RA1Xe+qGrdq3HPx7122gUcq8NV 7mS8fhugvb3bKjm0DoHCjsxrYxj7MSf3hMCy+uMuUnLSmBSImEXlEv13bFfze7Xy kjiRoxMmvGTP39hPlAOiLJiB2te7SJNvSA0D0xgiDfE00oE7q0aPSPQdK8mfh1sk +X2q9/FKPnHGFKseeRH79FKOSS2AeJRotJCpMJfFVvIjAHcSTJJoi/+8cPB+JFS7 +J+xlNtsP9wkvbms7qTzHndC2AE1hc89cKLOOWdNm8Jw -----END CERTIFICATE-----Generated at Fri Jan 2 16:25:51 2026 by rpki-client