This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/3ed361-1310-490d-9335-72cb6bae4a3d/1/1-LKZq6XNPJkWbyIzGez7MxFQ8jE.roa File: 1-LKZq6XNPJkWbyIzGez7MxFQ8jE.roa (raw, json) Hash identifier: Y5nTzS0daALZPNuteXZIXM9RcMdrGEprlXo2RcFxCsA= Subject key identifier: F8:B2:99:AB:A5:CD:3C:99:16:6F:22:33:19:EC:FB:33:11:50:F2:31 Certificate issuer: /CN=cb400d48032d129d94bd08ed2717a9a1f4cf2f4b Certificate serial: 019B7DCB0823008E2D63A903E7DF5A0FBD12 Authority key identifier: CB:40:0D:48:03:2D:12:9D:94:BD:08:ED:27:17:A9:A1:F4:CF:2F:4B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y0ANSAMtEp2UvQjtJxepofTPL0s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/3ed361-1310-490d-9335-72cb6bae4a3d/1/1-LKZq6XNPJkWbyIzGez7MxFQ8jE.roa Signing time: Fri 02 Jan 2026 08:20:16 +0000 ROA not before: Fri 02 Jan 2026 08:20:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203421 IP address blocks: 185.135.104.0/22 maxlen: 22 193.160.188.0/22 maxlen: 22 2a06:f300::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/3ed361-1310-490d-9335-72cb6bae4a3d/1/y0ANSAMtEp2UvQjtJxepofTPL0s.crl rsync://rpki.ripe.net/repository/DEFAULT/7e/3ed361-1310-490d-9335-72cb6bae4a3d/1/y0ANSAMtEp2UvQjtJxepofTPL0s.mft rsync://rpki.ripe.net/repository/DEFAULT/y0ANSAMtEp2UvQjtJxepofTPL0s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:08:23:00:8e:2d:63:a9:03:e7:df:5a:0f:bd:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb400d48032d129d94bd08ed2717a9a1f4cf2f4b Validity Not Before: Jan 2 08:20:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f8b299aba5cd3c99166f223319ecfb331150f231 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:f7:92:13:00:78:66:cb:69:77:43:39:b4:af: 0c:f9:9c:74:27:fe:3d:da:47:fd:01:1b:cf:74:7d: a5:92:9d:83:69:27:82:f1:f9:c0:28:51:2e:b8:e6: 6d:47:7f:be:ca:e4:cd:5f:48:61:c3:2c:cd:29:1b: 64:de:b2:0b:7c:4f:96:47:cf:f4:05:8a:82:19:12: eb:b0:2b:6b:94:21:f5:d7:b3:2d:f9:77:52:49:2b: 82:17:8f:f7:03:06:15:7e:4d:dc:ed:b9:37:c5:e5: d7:9a:8c:98:94:9d:6f:a8:27:3f:6a:cd:cf:8b:ac: 45:f4:ab:7e:86:54:45:b7:6a:99:84:ea:d1:e0:8f: d0:43:d6:dd:ce:fc:fc:b2:a6:8a:8f:ff:20:97:20: a2:b3:0f:24:27:07:f5:0d:c6:af:14:2d:51:df:a6: 90:d2:ee:7f:6a:27:7c:cf:59:9e:ec:b0:94:c6:de: 23:87:d5:4e:37:00:2c:8e:3d:92:36:f8:70:30:f1: 8d:5f:56:e4:89:80:6c:70:fb:58:ab:90:da:51:2c: 78:1f:73:3e:0f:1b:8f:c6:35:ce:01:1f:c5:ee:76: ae:4a:7f:8d:2e:b7:a5:f0:28:a4:8c:22:2c:de:fe: 23:74:22:f2:23:61:ec:58:b2:76:ba:b5:00:0e:58: 60:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:B2:99:AB:A5:CD:3C:99:16:6F:22:33:19:EC:FB:33:11:50:F2:31 X509v3 Authority Key Identifier: keyid:CB:40:0D:48:03:2D:12:9D:94:BD:08:ED:27:17:A9:A1:F4:CF:2F:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y0ANSAMtEp2UvQjtJxepofTPL0s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/3ed361-1310-490d-9335-72cb6bae4a3d/1/1-LKZq6XNPJkWbyIzGez7MxFQ8jE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/3ed361-1310-490d-9335-72cb6bae4a3d/1/y0ANSAMtEp2UvQjtJxepofTPL0s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.135.104.0/22 193.160.188.0/22 IPv6: 2a06:f300::/29 Signature Algorithm: sha256WithRSAEncryption 96:ad:98:d1:07:e9:cc:dd:45:f8:00:c9:61:62:b0:55:e1:4f: ae:4b:86:32:20:27:b6:2d:fd:d8:89:01:9f:62:2e:ae:cc:72: 35:5f:e6:19:79:af:a4:de:3b:2f:ae:8d:c2:16:d1:9e:5b:72: a0:29:21:b9:47:7f:d1:c0:9c:3d:fc:85:61:a2:bd:86:24:b8: cb:03:42:e1:b0:36:67:d9:7d:d5:4a:b0:fe:a5:63:7d:04:26: 91:3f:5e:b1:67:b0:8c:9e:dc:ba:79:66:07:79:f9:39:0c:35: 40:3c:26:d1:0a:bc:20:5d:d4:2d:03:2d:53:29:6e:8a:c9:03: 94:3b:3f:48:e1:62:74:5e:56:77:27:01:b4:ee:8d:4b:4b:1d: 7c:06:3b:cd:6f:4b:03:de:b9:33:e5:a6:35:2d:ae:61:10:71: 42:9a:11:56:e5:d8:fa:4e:e0:67:93:9b:cc:45:8b:8f:0a:26: 07:22:0b:18:7b:3a:9c:45:26:c1:f9:56:7c:20:ae:2b:05:fb: 3b:2b:44:94:f3:80:9c:4e:77:b7:70:3f:da:b3:85:ca:71:59: e5:a4:b3:e0:4e:c4:cf:56:88:af:3e:1e:39:bc:f1:ba:c9:cf: c3:b3:69:7c:30:c6:db:9a:e7:45:9c:68:2d:97:35:db:aa:d9: 49:75:42:53 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgISAZt9ywgjAI4tY6kD599aD70SMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiNDAwZDQ4MDMyZDEyOWQ5NGJkMDhlZDI3MTdhOWExZjRj ZjJmNGIwHhcNMjYwMTAyMDgyMDE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOGIyOTlhYmE1Y2QzYzk5MTY2ZjIyMzMxOWVjZmIzMzExNTBmMjMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApfeSEwB4Zstpd0M5tK8M+Zx0J/49 2kf9ARvPdH2lkp2DaSeC8fnAKFEuuOZtR3++yuTNX0hhwyzNKRtk3rILfE+WR8/0 BYqCGRLrsCtrlCH117Mt+XdSSSuCF4/3AwYVfk3c7bk3xeXXmoyYlJ1vqCc/as3P i6xF9Kt+hlRFt2qZhOrR4I/QQ9bdzvz8sqaKj/8glyCisw8kJwf1DcavFC1R36aQ 0u5/aid8z1me7LCUxt4jh9VONwAsjj2SNvhwMPGNX1bkiYBscPtYq5DaUSx4H3M+ DxuPxjXOAR/F7nauSn+NLrel8CikjCIs3v4jdCLyI2HsWLJ2urUADlhgKQIDAQAB o4ICHzCCAhswHQYDVR0OBBYEFPiymaulzTyZFm8iMxns+zMRUPIxMB8GA1UdIwQY MBaAFMtADUgDLRKdlL0I7ScXqaH0zy9LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveTBBTlNBTXRFcDJVdlFqdEp4ZXBvZlRQTDBzLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS8zZWQzNjEtMTMxMC00OTBkLTkzMzUt NzJjYjZiYWU0YTNkLzEvMS1MS1pxNlhOUEprV2J5SXpHZXo3TXhGUThqRS5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvN2UvM2VkMzYxLTEzMTAtNDkwZC05MzM1LTcyY2I2YmFlNGEz ZC8xL3kwQU5TQU10RXAyVXZRanRKeGVwb2ZUUEwwcy5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjA0BggrBgEFBQcBBwEB/wQlMCMwEgQCAAEwDAMEArmHaAME AsGgvDANBAIAAjAHAwUDKgbzADANBgkqhkiG9w0BAQsFAAOCAQEAlq2Y0QfpzN1F +ADJYWKwVeFPrkuGMiAnti392IkBn2IursxyNV/mGXmvpN47L66NwhbRnltyoCkh uUd/0cCcPfyFYaK9hiS4ywNC4bA2Z9l91Uqw/qVjfQQmkT9esWewjJ7cunlmB3n5 OQw1QDwm0Qq8IF3ULQMtUyluiskDlDs/SOFidF5WdycBtO6NS0sdfAY7zW9LA965 M+WmNS2uYRBxQpoRVuXY+k7gZ5ObzEWLjwomByILGHs6nEUmwflWfCCuKwX7OytE lPOAnE53t3A/2rOFynFZ5aSz4E7Ez1aIrz4eObzxusnPw7NpfDDG25rnRZxoLZc1 26rZSXVCUw== -----END CERTIFICATE-----Generated at Tue Feb 10 01:15:26 2026 by rpki-client