This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/lAC5I8g0Yzz6xyMxNSVgj8-xGpc.roa File: lAC5I8g0Yzz6xyMxNSVgj8-xGpc.roa (raw, json) Hash identifier: gQ5mVKmIVT8tvOxMlfEPa/QCG+H6Oiw4TfjGYz3TQG4= Subject key identifier: 94:00:B9:23:C8:34:63:3C:FA:C7:23:31:35:25:60:8F:CF:B1:1A:97 Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029 Certificate serial: 019B78A253CCF6322D6980EDF5E5D70ED6F5 Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/lAC5I8g0Yzz6xyMxNSVgj8-xGpc.roa Signing time: Thu 01 Jan 2026 08:17:42 +0000 ROA not before: Thu 01 Jan 2026 08:17:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 64267 IP address blocks: 212.134.26.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 00:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:53:cc:f6:32:2d:69:80:ed:f5:e5:d7:0e:d6:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e20b034e2c497b1884488def106972704765029 Validity Not Before: Jan 1 08:17:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9400b923c834633cfac723313525608fcfb11a97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:ec:56:fd:ae:bb:df:1c:60:8a:4b:62:35:2c: 6a:b3:55:e8:c2:6f:73:ce:4d:7b:b9:3d:07:80:b8: a3:24:71:c5:a3:43:b9:ac:3b:d5:9b:66:33:da:fc: 52:c4:88:fc:d4:1d:ab:d8:bd:d7:45:fe:cb:78:8d: ad:90:d5:30:a2:16:e9:1c:00:88:12:39:7a:7c:d2: 85:77:aa:ec:14:6e:3c:dd:94:5c:24:9d:e7:f1:f5: f6:3f:a0:66:cb:af:2b:ca:15:36:8a:72:6b:33:1c: 64:00:98:bf:6d:6e:6e:b0:aa:1a:37:7d:91:73:67: 64:c6:57:ff:b4:7f:0a:ff:93:58:ff:e7:7f:18:a0: 5e:d9:09:21:05:c3:18:8c:f4:b8:1b:ca:2a:63:2f: 68:11:9f:d7:f4:f4:c2:03:23:8b:2b:58:ba:b1:31: f7:d8:30:f2:db:bb:8c:ae:88:ed:4a:c9:5d:54:a2: 4b:d7:6a:d2:2d:27:cd:8a:ad:ac:a7:9f:84:82:86: 73:ca:d5:38:3c:0a:90:9a:a8:ca:0a:4b:8b:9c:6d: fd:58:d4:2c:2d:91:12:93:fa:fb:7c:02:19:2c:e0: 1f:59:e6:58:9e:56:47:7c:01:a6:52:a3:29:18:65: a4:1a:96:ea:28:1a:cc:d1:39:3e:31:2d:07:27:99: 7b:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:00:B9:23:C8:34:63:3C:FA:C7:23:31:35:25:60:8F:CF:B1:1A:97 X509v3 Authority Key Identifier: keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/lAC5I8g0Yzz6xyMxNSVgj8-xGpc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.134.26.0/24 Signature Algorithm: sha256WithRSAEncryption 56:f0:4f:cb:ae:b2:23:97:7c:53:03:dd:a6:fb:7a:31:87:91: af:eb:9d:c8:60:bf:55:54:a8:d5:8a:10:7d:29:45:7d:e0:6e: ef:88:f5:b1:42:24:b8:d6:2b:eb:9d:c6:a4:54:ee:b8:da:d2: 7c:1b:f7:f9:d1:9e:29:23:8e:0e:f0:b4:4c:ac:fd:0e:e5:7b: 60:c0:c3:8f:28:50:e8:1e:16:74:b1:1b:e7:4b:7c:e5:1b:8d: 7c:6e:73:16:3a:ae:b2:24:fc:46:b3:60:10:b1:6c:3d:bc:10: 37:a6:c9:b8:ee:0f:cb:f5:8f:8f:d5:4d:0d:e1:85:71:2a:9a: 22:e6:a4:de:8a:6c:32:6f:3a:21:e4:94:53:d5:c5:ec:34:41: 07:d1:12:ce:3c:c5:f5:92:59:90:b3:56:7b:bc:0c:cf:7c:b1: e8:c3:f9:56:72:a8:d9:16:72:90:17:36:42:d8:97:96:fd:3c: 90:32:f0:bf:05:76:6c:99:12:a5:d4:3f:1e:8b:60:14:7b:95: cc:35:31:3b:bf:5d:9e:25:c5:8f:9b:1a:27:24:fd:4c:a5:bf: 07:c6:00:80:55:e1:ec:0f:ff:73:7a:13:a5:ce:d7:b2:84:8a: 5e:dc:e1:24:11:4d:fb:ca:ca:37:1e:92:c7:13:c1:35:47:c4: a4:0d:25:9f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4olPM9jItaYDt9eXXDtb1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlMjBiMDM0ZTJjNDk3YjE4ODQ0ODhkZWYxMDY5NzI3MDQ3 NjUwMjkwHhcNMjYwMTAxMDgxNzQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NDAwYjkyM2M4MzQ2MzNjZmFjNzIzMzEzNTI1NjA4ZmNmYjExYTk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8uxW/a673xxgiktiNSxqs1Xowm9z zk17uT0HgLijJHHFo0O5rDvVm2Yz2vxSxIj81B2r2L3XRf7LeI2tkNUwohbpHACI Ejl6fNKFd6rsFG483ZRcJJ3n8fX2P6Bmy68ryhU2inJrMxxkAJi/bW5usKoaN32R c2dkxlf/tH8K/5NY/+d/GKBe2QkhBcMYjPS4G8oqYy9oEZ/X9PTCAyOLK1i6sTH3 2DDy27uMrojtSsldVKJL12rSLSfNiq2sp5+EgoZzytU4PAqQmqjKCkuLnG39WNQs LZESk/r7fAIZLOAfWeZYnlZHfAGmUqMpGGWkGpbqKBrM0Tk+MS0HJ5l7cwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJQAuSPINGM8+scjMTUlYI/PsRqXMB8GA1UdIwQY MBaAFH4gsDTixJexiESI3vEGlycEdlApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2Qt MDM1ZDk3N2Y0MjE2LzEvbEFDNUk4ZzBZeno2eHlNeE5TVmdqOC14R3BjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2QtMDM1ZDk3N2Y0MjE2 LzEvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1IYaMA0G CSqGSIb3DQEBCwUAA4IBAQBW8E/LrrIjl3xTA92m+3oxh5Gv653IYL9VVKjVihB9 KUV94G7viPWxQiS41ivrncakVO642tJ8G/f50Z4pI44O8LRMrP0O5XtgwMOPKFDo HhZ0sRvnS3zlG418bnMWOq6yJPxGs2AQsWw9vBA3psm47g/L9Y+P1U0N4YVxKpoi 5qTeimwybzoh5JRT1cXsNEEH0RLOPMX1klmQs1Z7vAzPfLHow/lWcqjZFnKQFzZC 2JeW/TyQMvC/BXZsmRKl1D8ei2AUe5XMNTE7v12eJcWPmxonJP1Mpb8HxgCAVeHs D/9zehOlzteyhIpe3OEkEU37yso3HpLHE8E1R8SkDSWf -----END CERTIFICATE-----Generated at Mon Jan 19 08:16:38 2026 by rpki-client