This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/749346-b08f-4931-8d4a-0538a3a14dfd/1/lo1A7pYq1tLNUztFqwS_GAzqH1I.roa File: lo1A7pYq1tLNUztFqwS_GAzqH1I.roa (raw, json) Hash identifier: 7Dv6Q1axncu2GBqJKqrxuiYDDZvukjLzUniOctEKoGE= Subject key identifier: 96:8D:40:EE:96:2A:D6:D2:CD:53:3B:45:AB:04:BF:18:0C:EA:1F:52 Certificate issuer: /CN=71f5e9ea88305f7d316a12a1d49db0e9fb896ce1 Certificate serial: 019B76EAD7919AFDB497506518B8B3B1A7E9 Authority key identifier: 71:F5:E9:EA:88:30:5F:7D:31:6A:12:A1:D4:9D:B0:E9:FB:89:6C:E1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cfXp6ogwX30xahKh1J2w6fuJbOE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/749346-b08f-4931-8d4a-0538a3a14dfd/1/lo1A7pYq1tLNUztFqwS_GAzqH1I.roa Signing time: Thu 01 Jan 2026 00:17:40 +0000 ROA not before: Thu 01 Jan 2026 00:17:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201647 IP address blocks: 91.198.191.0/24 maxlen: 24 193.57.66.0/24 maxlen: 24 193.57.67.0/24 maxlen: 24 193.57.68.0/24 maxlen: 24 193.57.69.0/24 maxlen: 24 193.57.70.0/24 maxlen: 24 193.57.71.0/24 maxlen: 24 193.57.156.0/24 maxlen: 24 193.57.157.0/24 maxlen: 24 193.57.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/749346-b08f-4931-8d4a-0538a3a14dfd/1/cfXp6ogwX30xahKh1J2w6fuJbOE.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/749346-b08f-4931-8d4a-0538a3a14dfd/1/cfXp6ogwX30xahKh1J2w6fuJbOE.mft rsync://rpki.ripe.net/repository/DEFAULT/cfXp6ogwX30xahKh1J2w6fuJbOE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:d7:91:9a:fd:b4:97:50:65:18:b8:b3:b1:a7:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71f5e9ea88305f7d316a12a1d49db0e9fb896ce1 Validity Not Before: Jan 1 00:17:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=968d40ee962ad6d2cd533b45ab04bf180cea1f52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:38:bc:94:10:55:b6:91:5b:50:ae:2a:fd:b0: 4e:89:00:46:ea:e5:79:30:77:77:31:44:79:39:4d: 34:51:22:58:6e:c1:78:d0:1a:af:d8:6b:65:b3:75: 68:bc:53:2f:76:7a:45:ac:10:19:1c:05:d5:d5:d6: df:99:f2:e1:e8:d0:9a:76:ad:53:09:4d:44:d0:ee: 9f:cb:f9:e0:74:e9:2b:18:a6:d6:da:37:53:b1:56: 54:b9:fd:10:eb:81:b1:46:13:53:de:57:35:fd:c8: 89:ee:b6:e5:2c:fc:e1:8e:71:6b:6b:29:94:89:2f: 6a:de:a3:44:fa:0d:fa:5e:a4:be:55:bf:8a:fc:8e: bf:dd:e8:4b:f3:05:db:af:62:bc:7b:00:c7:0d:e4: b5:44:41:1a:2d:03:a5:26:b1:bc:c1:5f:a3:db:59: d7:fc:1e:e5:00:00:0a:9d:58:d2:e6:ba:41:4d:f5: 4b:55:91:ac:36:dd:40:fc:ef:f0:0b:84:b6:6e:43: 70:d2:63:71:5b:74:e4:fc:f9:2a:68:70:c7:0d:f0: e5:9b:90:88:ae:e1:0b:63:8f:4b:82:86:8b:2c:70: f2:a5:f3:d9:f0:79:a8:76:c6:f2:3e:99:1a:30:74: a3:43:bf:3c:6f:ec:2a:e8:3a:b9:0c:8e:ef:dc:73: ff:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:8D:40:EE:96:2A:D6:D2:CD:53:3B:45:AB:04:BF:18:0C:EA:1F:52 X509v3 Authority Key Identifier: keyid:71:F5:E9:EA:88:30:5F:7D:31:6A:12:A1:D4:9D:B0:E9:FB:89:6C:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cfXp6ogwX30xahKh1J2w6fuJbOE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/749346-b08f-4931-8d4a-0538a3a14dfd/1/lo1A7pYq1tLNUztFqwS_GAzqH1I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/749346-b08f-4931-8d4a-0538a3a14dfd/1/cfXp6ogwX30xahKh1J2w6fuJbOE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.198.191.0/24 193.57.66.0-193.57.71.255 193.57.156.0-193.57.158.255 Signature Algorithm: sha256WithRSAEncryption 30:19:ba:67:70:c8:25:9c:2b:9b:fa:fe:24:5a:a2:38:fa:a5: 43:0b:04:a5:3a:49:72:db:da:d3:a4:25:45:ce:07:04:66:20: 5a:42:0b:9e:98:09:24:ab:4e:01:1b:4e:03:b9:14:88:7b:92: a4:72:0c:76:07:68:da:01:3a:dc:5d:d1:6b:3b:1f:88:8c:f0: 74:ae:85:b0:0d:47:5a:5f:f6:ac:5d:9d:8d:f7:0d:3e:14:fd: 91:30:97:78:58:2a:e3:20:c9:40:30:b0:e4:40:96:5d:08:24: 6b:91:ce:f1:5f:b5:39:e2:ce:e2:fc:65:09:6c:e1:8f:40:f2: 4a:a5:f6:db:84:cb:61:ce:4c:e6:0f:80:6d:c5:3a:e2:e1:13: 55:cd:79:c2:cb:39:f8:ef:c3:b4:61:ff:dd:61:ef:60:a8:84: 82:8d:16:24:43:34:f1:a5:35:16:44:b5:6f:67:75:a8:29:39: f6:86:3d:2f:d1:45:dc:bb:0b:f0:1a:13:a9:e2:86:c0:ba:86: 62:15:e1:68:3d:ba:fb:4d:16:dc:6e:2d:29:37:43:62:a6:76: 0f:c7:7b:bf:d4:c7:84:a1:93:16:78:f2:ee:48:ae:ba:61:56: ae:51:da:c8:64:bb:e5:a4:08:31:27:59:38:74:05:64:5e:d0: ef:3e:ef:df -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZt26teRmv20l1BlGLizsafpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcxZjVlOWVhODgzMDVmN2QzMTZhMTJhMWQ0OWRiMGU5ZmI4 OTZjZTEwHhcNMjYwMTAxMDAxNzQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NjhkNDBlZTk2MmFkNmQyY2Q1MzNiNDVhYjA0YmYxODBjZWExZjUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAszi8lBBVtpFbUK4q/bBOiQBG6uV5 MHd3MUR5OU00USJYbsF40Bqv2Gtls3VovFMvdnpFrBAZHAXV1dbfmfLh6NCadq1T CU1E0O6fy/ngdOkrGKbW2jdTsVZUuf0Q64GxRhNT3lc1/ciJ7rblLPzhjnFraymU iS9q3qNE+g36XqS+Vb+K/I6/3ehL8wXbr2K8ewDHDeS1REEaLQOlJrG8wV+j21nX /B7lAAAKnVjS5rpBTfVLVZGsNt1A/O/wC4S2bkNw0mNxW3Tk/PkqaHDHDfDlm5CI ruELY49LgoaLLHDypfPZ8HmodsbyPpkaMHSjQ788b+wq6Dq5DI7v3HP/4wIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFJaNQO6WKtbSzVM7RasEvxgM6h9SMB8GA1UdIwQY MBaAFHH16eqIMF99MWoSodSdsOn7iWzhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2ZYcDZvZ3dYMzB4YWhLaDFKMnc2ZnVKYk9FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi83NDkzNDYtYjA4Zi00OTMxLThkNGEt MDUzOGEzYTE0ZGZkLzEvbG8xQTdwWXExdExOVXp0RnF3U19HQXpxSDFJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi83NDkzNDYtYjA4Zi00OTMxLThkNGEtMDUzOGEzYTE0ZGZk LzEvY2ZYcDZvZ3dYMzB4YWhLaDFKMnc2ZnVKYk9FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDsGCCsGAQUFBwEHAQH/BCwwKjAoBAIAATAiAwQAW8a/MAwD BAHBOUIDBAPBOUAwDAMEAsE5nAMEAME5njANBgkqhkiG9w0BAQsFAAOCAQEAMBm6 Z3DIJZwrm/r+JFqiOPqlQwsEpTpJctva06QlRc4HBGYgWkILnpgJJKtOARtOA7kU iHuSpHIMdgdo2gE63F3RazsfiIzwdK6FsA1HWl/2rF2djfcNPhT9kTCXeFgq4yDJ QDCw5ECWXQgka5HO8V+1OeLO4vxlCWzhj0DySqX224TLYc5M5g+AbcU64uETVc15 wss5+O/DtGH/3WHvYKiEgo0WJEM08aU1FkS1b2d1qCk59oY9L9FF3LsL8BoTqeKG wLqGYhXhaD26+00W3G4tKTdDYqZ2D8d7v9THhKGTFnjy7kiuumFWrlHayGS75aQI MSdZOHQFZF7Q7z7v3w== -----END CERTIFICATE-----Generated at Tue Feb 10 06:26:04 2026 by rpki-client