This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/e37d1d-d4fb-496c-af49-3420684c7e41/1/LfBxCi_T6d0bglwaFaNfqmxOUo8.roa File: LfBxCi_T6d0bglwaFaNfqmxOUo8.roa (raw, json) Hash identifier: nCJqjZS1Ks0JHWJEQU7QcXEZQwSVxL2fqIOkUlaTeGg= Subject key identifier: 2D:F0:71:0A:2F:D3:E9:DD:1B:82:5C:1A:15:A3:5F:AA:6C:4E:52:8F Certificate issuer: /CN=0a41a925f8d6684c86107d2756b4aa93881f02ae Certificate serial: 019B7834388D63E2E6D5E79D9ED571F2097E Authority key identifier: 0A:41:A9:25:F8:D6:68:4C:86:10:7D:27:56:B4:AA:93:88:1F:02:AE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CkGpJfjWaEyGEH0nVrSqk4gfAq4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/e37d1d-d4fb-496c-af49-3420684c7e41/1/LfBxCi_T6d0bglwaFaNfqmxOUo8.roa Signing time: Thu 01 Jan 2026 06:17:26 +0000 ROA not before: Thu 01 Jan 2026 06:17:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12601 IP address blocks: 64.126.192.0/23 maxlen: 23 64.126.194.0/23 maxlen: 23 64.126.200.0/22 maxlen: 22 64.126.208.0/24 maxlen: 24 64.126.209.0/24 maxlen: 24 64.126.212.0/22 maxlen: 22 64.126.212.0/24 maxlen: 24 80.94.176.0/22 maxlen: 22 80.94.182.0/23 maxlen: 23 80.94.184.0/24 maxlen: 24 80.94.185.0/24 maxlen: 24 80.94.188.0/23 maxlen: 23 185.113.40.0/22 maxlen: 22 185.194.80.0/22 maxlen: 22 185.211.140.0/22 maxlen: 22 194.5.134.0/24 maxlen: 24 194.126.236.0/24 maxlen: 24 213.159.9.0/24 maxlen: 24 2a00:1220:4000::/34 maxlen: 34 2a00:1220:8000::/34 maxlen: 34 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/e37d1d-d4fb-496c-af49-3420684c7e41/1/CkGpJfjWaEyGEH0nVrSqk4gfAq4.crl rsync://rpki.ripe.net/repository/DEFAULT/82/e37d1d-d4fb-496c-af49-3420684c7e41/1/CkGpJfjWaEyGEH0nVrSqk4gfAq4.mft rsync://rpki.ripe.net/repository/DEFAULT/CkGpJfjWaEyGEH0nVrSqk4gfAq4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 12:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:38:8d:63:e2:e6:d5:e7:9d:9e:d5:71:f2:09:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a41a925f8d6684c86107d2756b4aa93881f02ae Validity Not Before: Jan 1 06:17:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2df0710a2fd3e9dd1b825c1a15a35faa6c4e528f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:f0:96:59:e3:c8:cd:7d:57:a5:d6:b2:52:c7: 0c:3e:d9:26:1f:01:56:08:4a:43:6e:02:70:df:dc: 92:69:a5:76:52:42:a2:e1:2c:16:26:c5:bd:f5:f3: d6:c3:66:a0:8b:25:af:fa:34:cb:c6:b4:81:e2:cd: 46:8d:2a:5a:90:a5:d0:c6:af:1b:0a:f6:23:22:38: 87:ed:2f:df:88:94:c4:e8:ac:c2:60:65:fc:49:fd: cc:33:5a:4b:f2:e9:57:b9:60:44:05:ce:a5:15:d4: 70:00:c0:42:7c:85:be:31:af:8b:ca:a0:43:6b:12: ca:28:67:6d:6a:41:7a:a9:3d:33:18:6a:ac:e6:ee: 55:9d:57:ee:4e:f7:81:f7:f1:bf:04:0f:2b:e8:73: 5b:80:19:99:67:52:85:c8:f1:e7:85:86:5e:3c:64: ff:97:18:18:76:07:d1:de:41:be:3f:6d:d6:83:3e: c6:d5:ac:38:5c:94:d1:b0:eb:4b:7f:a0:e8:60:69: ef:9e:65:62:52:64:3d:38:cb:f7:b3:e5:35:dc:59: 59:61:7b:0d:bf:ba:4e:72:73:5e:66:71:d3:9c:06: 6a:31:7e:ba:aa:82:89:12:d9:e8:b9:c8:1f:fc:43: 14:3a:3c:b4:11:44:e1:ef:42:e9:63:88:d2:d9:60: a6:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:F0:71:0A:2F:D3:E9:DD:1B:82:5C:1A:15:A3:5F:AA:6C:4E:52:8F X509v3 Authority Key Identifier: keyid:0A:41:A9:25:F8:D6:68:4C:86:10:7D:27:56:B4:AA:93:88:1F:02:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CkGpJfjWaEyGEH0nVrSqk4gfAq4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/e37d1d-d4fb-496c-af49-3420684c7e41/1/LfBxCi_T6d0bglwaFaNfqmxOUo8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/82/e37d1d-d4fb-496c-af49-3420684c7e41/1/CkGpJfjWaEyGEH0nVrSqk4gfAq4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 64.126.192.0/22 64.126.200.0/22 64.126.208.0/23 64.126.212.0/22 80.94.176.0/22 80.94.182.0-80.94.185.255 80.94.188.0/23 185.113.40.0/22 185.194.80.0/22 185.211.140.0/22 194.5.134.0/24 194.126.236.0/24 213.159.9.0/24 IPv6: 2a00:1220:4000::-2a00:1220:bfff:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 92:42:c3:d3:de:cf:a3:84:65:c9:b0:54:4b:f0:93:85:67:9e: 2c:96:0a:4f:76:9a:0e:1b:e2:a1:14:02:3b:e3:de:27:b3:ff: da:e0:c8:75:7f:c0:0c:7a:0d:66:21:72:51:7c:3a:c8:41:82: da:45:5a:fa:bf:ac:58:20:7d:43:71:43:b2:d8:47:06:bb:59: e4:53:84:94:a6:a9:2d:b3:ba:8c:df:97:ad:e8:18:b6:d0:d8: e1:6a:99:7c:90:04:b2:57:79:e1:6a:00:28:23:cb:bb:a4:8e: 39:80:7d:28:97:aa:ac:5a:8d:02:44:64:cd:17:4a:03:af:d2: f5:2a:28:ec:78:bf:07:52:11:3a:2b:97:64:3d:5a:1f:ba:ed: 5f:29:59:92:07:83:97:2a:f6:74:c8:9d:68:1c:0a:4c:60:0e: cc:4f:ef:94:61:21:7d:4e:0f:dd:7d:5e:ac:f7:52:c8:50:79: ff:49:ae:cf:09:52:67:16:68:4c:c9:74:ea:d8:2d:d9:a4:e8: 3a:37:71:6e:3c:6b:54:91:b9:ab:0f:39:50:86:fc:e2:b1:ea: be:64:a2:85:f3:ac:57:a8:d7:aa:9e:8b:24:77:9c:d5:1d:05: cb:e1:74:82:a5:07:af:0d:ca:24:b8:a4:1c:ca:4c:4e:54:ae: 82:2c:93:85 -----BEGIN CERTIFICATE----- MIIFaDCCBFCgAwIBAgISAZt4NDiNY+Lm1eedntVx8gl+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhNDFhOTI1ZjhkNjY4NGM4NjEwN2QyNzU2YjRhYTkzODgx ZjAyYWUwHhcNMjYwMTAxMDYxNzI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZGYwNzEwYTJmZDNlOWRkMWI4MjVjMWExNWEzNWZhYTZjNGU1MjhmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo/CWWePIzX1XpdayUscMPtkmHwFW CEpDbgJw39ySaaV2UkKi4SwWJsW99fPWw2agiyWv+jTLxrSB4s1GjSpakKXQxq8b CvYjIjiH7S/fiJTE6KzCYGX8Sf3MM1pL8ulXuWBEBc6lFdRwAMBCfIW+Ma+LyqBD axLKKGdtakF6qT0zGGqs5u5VnVfuTveB9/G/BA8r6HNbgBmZZ1KFyPHnhYZePGT/ lxgYdgfR3kG+P23Wgz7G1aw4XJTRsOtLf6DoYGnvnmViUmQ9OMv3s+U13FlZYXsN v7pOcnNeZnHTnAZqMX66qoKJEtnoucgf/EMUOjy0EUTh70LpY4jS2WCmlwIDAQAB o4ICdDCCAnAwHQYDVR0OBBYEFC3wcQov0+ndG4JcGhWjX6psTlKPMB8GA1UdIwQY MBaAFApBqSX41mhMhhB9J1a0qpOIHwKuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2tHcEpmaldhRXlHRUgwblZyU3FrNGdmQXE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi9lMzdkMWQtZDRmYi00OTZjLWFmNDkt MzQyMDY4NGM3ZTQxLzEvTGZCeENpX1Q2ZDBiZ2x3YUZhTmZxbXhPVW84LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Mi9lMzdkMWQtZDRmYi00OTZjLWFmNDktMzQyMDY4NGM3ZTQx LzEvQ2tHcEpmaldhRXlHRUgwblZyU3FrNGdmQXE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGJBggrBgEFBQcBBwEB/wR6MHgwXAQCAAEwVgMEAkB+wAME AkB+yAMEAUB+0AMEAkB+1AMEAlBesDAMAwQBUF62AwQBUF64AwQBUF68AwQCuXEo AwQCucJQAwQCudOMAwQAwgWGAwQAwn7sAwQA1Z8JMBgEAgACMBIwEAMGBioAEiBA AwYGKgASIIAwDQYJKoZIhvcNAQELBQADggEBAJJCw9Pez6OEZcmwVEvwk4VnniyW Ck92mg4b4qEUAjvj3iez/9rgyHV/wAx6DWYhclF8OshBgtpFWvq/rFggfUNxQ7LY Rwa7WeRThJSmqS2zuozfl63oGLbQ2OFqmXyQBLJXeeFqACgjy7ukjjmAfSiXqqxa jQJEZM0XSgOv0vUqKOx4vwdSETorl2Q9Wh+67V8pWZIHg5cq9nTInWgcCkxgDsxP 75RhIX1OD919Xqz3UshQef9Jrs8JUmcWaEzJdOrYLdmk6Do3cW48a1SRuasPOVCG /OKx6r5kooXzrFeo16qeiyR3nNUdBcvhdIKlB68NyiS4pBzKTE5UroIsk4U= -----END CERTIFICATE-----Generated at Wed Jan 21 20:42:26 2026 by rpki-client