This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/39a5fc-d26e-4d53-91e3-493d774aa1ff/1/L1LuXNyLmddWoquATgiWDCkvIvc.roa File: L1LuXNyLmddWoquATgiWDCkvIvc.roa (raw, json) Hash identifier: 4bMlcyRakC1GsgwgHN92wea/CUU4Dqc8/FL+CIWH9ng= Subject key identifier: 2F:52:EE:5C:DC:8B:99:D7:56:A2:AB:80:4E:08:96:0C:29:2F:22:F7 Certificate issuer: /CN=3e24c7ecfa37d2487152fb9bbbab50be79de2619 Certificate serial: 019B7834EA093D316844DEA18DDC6D205809 Authority key identifier: 3E:24:C7:EC:FA:37:D2:48:71:52:FB:9B:BB:AB:50:BE:79:DE:26:19 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PiTH7Po30khxUvubu6tQvnneJhk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/39a5fc-d26e-4d53-91e3-493d774aa1ff/1/L1LuXNyLmddWoquATgiWDCkvIvc.roa Signing time: Thu 01 Jan 2026 06:18:12 +0000 ROA not before: Thu 01 Jan 2026 06:18:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 185.71.228.0/24 maxlen: 24 185.71.229.0/24 maxlen: 24 185.125.84.0/24 maxlen: 24 193.0.181.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/39a5fc-d26e-4d53-91e3-493d774aa1ff/1/PiTH7Po30khxUvubu6tQvnneJhk.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/39a5fc-d26e-4d53-91e3-493d774aa1ff/1/PiTH7Po30khxUvubu6tQvnneJhk.mft rsync://rpki.ripe.net/repository/DEFAULT/PiTH7Po30khxUvubu6tQvnneJhk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:ea:09:3d:31:68:44:de:a1:8d:dc:6d:20:58:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e24c7ecfa37d2487152fb9bbbab50be79de2619 Validity Not Before: Jan 1 06:18:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2f52ee5cdc8b99d756a2ab804e08960c292f22f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:db:5a:2f:c5:87:19:cb:7b:13:20:cc:8a:fe: 3f:56:67:e1:2b:6a:07:25:2e:f7:60:62:e9:4b:4e: e4:4f:a1:f6:38:46:d0:86:44:c1:da:eb:15:fe:88: dd:d5:83:20:e6:98:c3:62:f4:26:f2:9e:59:66:3f: 99:6b:d0:4c:f2:ec:9d:02:6e:cd:dd:ee:55:5a:12: 32:25:9b:1f:14:35:dd:4e:bf:2b:c4:d4:57:6c:69: 41:e0:8a:17:89:4d:11:31:04:02:c3:5f:04:67:32: c7:e4:a1:5b:e0:fd:e4:15:43:2b:68:94:90:27:a0: 81:7e:2f:db:16:17:21:cb:17:31:6e:e9:98:78:6e: 03:ad:d9:87:54:bd:e0:a9:ce:f4:be:7f:ee:f3:b4: 2d:d2:ce:79:00:09:7d:ae:e1:3f:ca:fe:69:c2:61: 63:95:89:37:1d:4a:3f:01:4a:c5:16:e4:5e:85:39: f0:04:9d:13:95:cd:82:74:7a:4d:13:1e:9a:e2:ca: 94:ff:50:5f:37:61:d3:c1:49:25:26:a4:71:f8:22: 09:ac:60:54:81:9f:02:ce:36:93:4c:1d:39:4c:27: e5:b9:11:7e:8a:1f:46:5d:cd:8c:29:2a:74:91:37: a5:90:2c:5f:35:f7:5c:98:d4:f5:51:46:b0:81:fa: 39:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:52:EE:5C:DC:8B:99:D7:56:A2:AB:80:4E:08:96:0C:29:2F:22:F7 X509v3 Authority Key Identifier: keyid:3E:24:C7:EC:FA:37:D2:48:71:52:FB:9B:BB:AB:50:BE:79:DE:26:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PiTH7Po30khxUvubu6tQvnneJhk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/39a5fc-d26e-4d53-91e3-493d774aa1ff/1/L1LuXNyLmddWoquATgiWDCkvIvc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/39a5fc-d26e-4d53-91e3-493d774aa1ff/1/PiTH7Po30khxUvubu6tQvnneJhk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.71.228.0/23 185.125.84.0/24 193.0.181.0/24 Signature Algorithm: sha256WithRSAEncryption 63:eb:bf:f0:e5:01:63:3b:56:7a:a8:87:6e:b7:2a:ec:9f:41: c2:40:31:01:b9:66:40:27:f2:db:b3:c6:ca:0c:1f:0b:c0:eb: d6:c9:2e:30:52:29:32:79:06:18:db:c7:7b:4e:f7:ca:2b:31: 67:66:c0:2a:04:ce:f3:93:f6:13:48:40:37:2e:ef:f2:6e:11: 0a:77:1e:f2:ce:c3:1b:32:74:0a:80:2b:7c:22:0b:09:9f:03: 1d:84:9e:31:5d:d1:77:54:5a:26:e0:8c:1c:93:49:3d:18:b7: 9b:94:c0:41:23:4f:8d:27:6c:d2:23:04:4d:7f:b3:ef:5b:99: 82:2a:73:77:b0:ea:83:88:9d:ae:98:3f:87:41:67:27:23:8b: 62:a7:fe:0e:21:03:f4:cd:1f:c9:79:32:80:e0:70:5d:dc:1e: b5:51:89:77:f2:7a:72:09:e2:26:06:6e:73:40:c3:06:25:90: 40:26:bb:95:92:11:8e:3a:41:37:cf:39:4e:17:c6:29:a1:a9: 18:b8:c9:15:c6:9f:99:86:4b:0f:bd:d3:66:8e:93:50:a8:3e: e7:5e:4c:b4:b1:f5:d3:a5:6a:6c:e4:1d:43:d5:e5:24:4b:bf: 64:fa:ea:69:b4:e6:4d:72:04:cb:1f:6c:5d:20:83:48:05:62: 8f:ac:da:08 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt4NOoJPTFoRN6hjdxtIFgJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlMjRjN2VjZmEzN2QyNDg3MTUyZmI5YmJiYWI1MGJlNzlk ZTI2MTkwHhcNMjYwMTAxMDYxODEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZjUyZWU1Y2RjOGI5OWQ3NTZhMmFiODA0ZTA4OTYwYzI5MmYyMmY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAudtaL8WHGct7EyDMiv4/VmfhK2oH JS73YGLpS07kT6H2OEbQhkTB2usV/ojd1YMg5pjDYvQm8p5ZZj+Za9BM8uydAm7N 3e5VWhIyJZsfFDXdTr8rxNRXbGlB4IoXiU0RMQQCw18EZzLH5KFb4P3kFUMraJSQ J6CBfi/bFhchyxcxbumYeG4DrdmHVL3gqc70vn/u87Qt0s55AAl9ruE/yv5pwmFj lYk3HUo/AUrFFuRehTnwBJ0Tlc2CdHpNEx6a4sqU/1BfN2HTwUklJqRx+CIJrGBU gZ8CzjaTTB05TCfluRF+ih9GXc2MKSp0kTelkCxfNfdcmNT1UUawgfo5cQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFC9S7lzci5nXVqKrgE4IlgwpLyL3MB8GA1UdIwQY MBaAFD4kx+z6N9JIcVL7m7urUL553iYZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUGlUSDdQbzMwa2h4VXZ1YnU2dFF2bm5lSmhrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS8zOWE1ZmMtZDI2ZS00ZDUzLTkxZTMt NDkzZDc3NGFhMWZmLzEvTDFMdVhOeUxtZGRXb3F1QVRnaVdEQ2t2SXZjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS8zOWE1ZmMtZDI2ZS00ZDUzLTkxZTMtNDkzZDc3NGFhMWZm LzEvUGlUSDdQbzMwa2h4VXZ1YnU2dFF2bm5lSmhrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBuUfkAwQA uX1UAwQAwQC1MA0GCSqGSIb3DQEBCwUAA4IBAQBj67/w5QFjO1Z6qIdutyrsn0HC QDEBuWZAJ/Lbs8bKDB8LwOvWyS4wUikyeQYY28d7TvfKKzFnZsAqBM7zk/YTSEA3 Lu/ybhEKdx7yzsMbMnQKgCt8IgsJnwMdhJ4xXdF3VFom4Iwck0k9GLeblMBBI0+N J2zSIwRNf7PvW5mCKnN3sOqDiJ2umD+HQWcnI4tip/4OIQP0zR/JeTKA4HBd3B61 UYl38npyCeImBm5zQMMGJZBAJruVkhGOOkE3zzlOF8YpoakYuMkVxp+ZhksPvdNm jpNQqD7nXky0sfXTpWps5B1D1eUkS79k+upptOZNcgTLH2xdIINIBWKPrNoI -----END CERTIFICATE-----Generated at Fri Jan 9 00:56:57 2026 by rpki-client