This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/70e678-8495-46ae-96d7-29c5176902c6/1/lf_obYLkdv0nF0_npBLfEGEUr5g.roa File: lf_obYLkdv0nF0_npBLfEGEUr5g.roa (raw, json) Hash identifier: SJ8whxb+V86Y+QBEXZUDuhEOcL67d4x2EIlsWGzE0Ds= Subject key identifier: 95:FF:E8:6D:82:E4:76:FD:27:17:4F:E7:A4:12:DF:10:61:14:AF:98 Certificate issuer: /CN=8ae4b93feb71dde2823b70c7dbb79e0f99b56c1b Certificate serial: 019B7AC79C38940484BEEC960A9E8BD0EE23 Authority key identifier: 8A:E4:B9:3F:EB:71:DD:E2:82:3B:70:C7:DB:B7:9E:0F:99:B5:6C:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iuS5P-tx3eKCO3DH27eeD5m1bBs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/70e678-8495-46ae-96d7-29c5176902c6/1/lf_obYLkdv0nF0_npBLfEGEUr5g.roa Signing time: Thu 01 Jan 2026 18:17:40 +0000 ROA not before: Thu 01 Jan 2026 18:17:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199162 IP address blocks: 194.180.6.0/23 maxlen: 23 194.180.6.0/24 maxlen: 24 194.180.7.0/24 maxlen: 24 2a13:da80::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/70e678-8495-46ae-96d7-29c5176902c6/1/iuS5P-tx3eKCO3DH27eeD5m1bBs.crl rsync://rpki.ripe.net/repository/DEFAULT/84/70e678-8495-46ae-96d7-29c5176902c6/1/iuS5P-tx3eKCO3DH27eeD5m1bBs.mft rsync://rpki.ripe.net/repository/DEFAULT/iuS5P-tx3eKCO3DH27eeD5m1bBs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 18:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:9c:38:94:04:84:be:ec:96:0a:9e:8b:d0:ee:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ae4b93feb71dde2823b70c7dbb79e0f99b56c1b Validity Not Before: Jan 1 18:17:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=95ffe86d82e476fd27174fe7a412df106114af98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:13:bc:6e:f6:20:1d:2f:0c:b6:0b:2c:5d:ed: e5:f5:73:e5:6d:d7:7b:eb:8f:c6:b6:aa:47:6f:a0: 0e:64:ae:36:d0:89:1f:d3:02:b1:b9:06:93:2d:18: 6d:1f:90:cc:e8:97:91:f7:7a:ec:2b:1c:7b:f7:35: 78:ae:99:ea:ca:96:c9:73:41:5d:52:3d:3b:fd:51: 7d:4d:71:b4:c8:8d:9f:c2:cf:ae:03:66:01:ec:20: e5:93:c4:1d:3d:3b:97:20:46:6c:00:5b:6e:07:e0: b3:74:95:02:d1:20:65:00:bb:62:08:c2:6c:65:0e: d4:77:18:4e:f6:23:f4:73:02:37:c6:59:b3:54:54: 6d:9b:a8:16:00:47:86:8c:25:52:fd:d5:3a:2f:0d: 28:7f:d2:32:dc:23:ec:d9:c3:41:20:40:a4:ee:60: 81:8d:1e:c6:be:eb:60:c1:b5:96:78:a6:71:9f:09: 30:7b:76:0c:db:f4:e3:89:fe:15:37:01:54:35:cc: cd:ee:29:38:b6:f9:ec:65:2e:e9:07:31:c1:0b:0d: bc:7d:de:56:74:e8:f8:3a:1b:16:bc:0e:34:2c:09: 59:b0:a9:93:48:f2:bf:96:ad:4b:cf:57:e2:9d:3d: 52:51:82:ce:49:6a:ca:b4:d0:42:43:df:e9:64:34: 96:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:FF:E8:6D:82:E4:76:FD:27:17:4F:E7:A4:12:DF:10:61:14:AF:98 X509v3 Authority Key Identifier: keyid:8A:E4:B9:3F:EB:71:DD:E2:82:3B:70:C7:DB:B7:9E:0F:99:B5:6C:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iuS5P-tx3eKCO3DH27eeD5m1bBs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/70e678-8495-46ae-96d7-29c5176902c6/1/lf_obYLkdv0nF0_npBLfEGEUr5g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/70e678-8495-46ae-96d7-29c5176902c6/1/iuS5P-tx3eKCO3DH27eeD5m1bBs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.180.6.0/23 IPv6: 2a13:da80::/29 Signature Algorithm: sha256WithRSAEncryption 51:61:20:43:ed:2a:b4:80:cc:ed:dc:01:f6:f1:4c:ab:d1:8c: 04:b2:1f:3f:bb:13:91:58:2d:6f:f4:c0:8a:b1:9c:13:ee:54: 25:0a:8a:b0:3a:40:c4:52:fd:4f:d3:d2:96:d3:96:94:a1:54: a2:4b:1a:69:a6:1d:a6:33:6a:64:9a:e0:a7:f9:55:d0:d3:ee: 92:7a:7d:45:e0:e9:86:39:43:5b:29:e9:ed:77:db:0d:71:ff: 51:2e:fc:ed:a6:6a:76:5a:be:2d:c3:ac:dd:e0:dc:0e:e7:e5: 3d:18:e8:ee:3c:0e:22:84:0d:ca:a6:cf:59:01:83:50:77:fe: 63:6a:ec:c8:b0:71:d5:99:69:f7:fd:dd:c6:ff:e7:c9:90:52: c8:8d:85:1e:a0:68:2d:36:3a:b3:63:00:3e:50:61:89:6b:93: 24:51:8e:4a:45:9c:69:aa:50:2c:59:81:40:0c:51:2a:e7:de: 33:4a:74:22:03:0a:8a:db:74:25:9b:8a:bd:2f:5a:1f:99:f5: 88:02:80:53:ff:a7:e7:d3:96:35:9f:ee:5c:1e:b1:b9:99:ac: 33:b3:c0:7d:9f:ac:15:54:9c:52:41:03:c8:65:45:96:a7:c1: b3:a6:ad:4e:85:01:66:09:cb:af:18:af:d1:93:42:c7:4b:ad: e5:8d:34:27 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt6x5w4lASEvuyWCp6L0O4jMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhZTRiOTNmZWI3MWRkZTI4MjNiNzBjN2RiYjc5ZTBmOTli NTZjMWIwHhcNMjYwMTAxMTgxNzQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NWZmZTg2ZDgyZTQ3NmZkMjcxNzRmZTdhNDEyZGYxMDYxMTRhZjk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkBO8bvYgHS8MtgssXe3l9XPlbdd7 64/GtqpHb6AOZK420Ikf0wKxuQaTLRhtH5DM6JeR93rsKxx79zV4rpnqypbJc0Fd Uj07/VF9TXG0yI2fws+uA2YB7CDlk8QdPTuXIEZsAFtuB+CzdJUC0SBlALtiCMJs ZQ7UdxhO9iP0cwI3xlmzVFRtm6gWAEeGjCVS/dU6Lw0of9Iy3CPs2cNBIECk7mCB jR7GvutgwbWWeKZxnwkwe3YM2/Tjif4VNwFUNczN7ik4tvnsZS7pBzHBCw28fd5W dOj4OhsWvA40LAlZsKmTSPK/lq1Lz1finT1SUYLOSWrKtNBCQ9/pZDSWEQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFJX/6G2C5Hb9JxdP56QS3xBhFK+YMB8GA1UdIwQY MBaAFIrkuT/rcd3igjtwx9u3ng+ZtWwbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaXVTNVAtdHgzZUtDTzNESDI3ZWVENW0xYkJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC83MGU2NzgtODQ5NS00NmFlLTk2ZDct MjljNTE3NjkwMmM2LzEvbGZfb2JZTGtkdjBuRjBfbnBCTGZFR0VVcjVnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC83MGU2NzgtODQ5NS00NmFlLTk2ZDctMjljNTE3NjkwMmM2 LzEvaXVTNVAtdHgzZUtDTzNESDI3ZWVENW0xYkJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBwrQGMA0E AgACMAcDBQMqE9qAMA0GCSqGSIb3DQEBCwUAA4IBAQBRYSBD7Sq0gMzt3AH28Uyr 0YwEsh8/uxORWC1v9MCKsZwT7lQlCoqwOkDEUv1P09KW05aUoVSiSxppph2mM2pk muCn+VXQ0+6Sen1F4OmGOUNbKentd9sNcf9RLvztpmp2Wr4tw6zd4NwO5+U9GOju PA4ihA3Kps9ZAYNQd/5jauzIsHHVmWn3/d3G/+fJkFLIjYUeoGgtNjqzYwA+UGGJ a5MkUY5KRZxpqlAsWYFADFEq594zSnQiAwqK23Qlm4q9L1ofmfWIAoBT/6fn05Y1 n+5cHrG5mawzs8B9n6wVVJxSQQPIZUWWp8Gzpq1OhQFmCcuvGK/Rk0LHS63ljTQn -----END CERTIFICATE-----Generated at Tue Feb 10 02:48:04 2026 by rpki-client