This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/ce96f4-d85c-4fc5-9e98-500b8834289e/1/lJ1PR8O3Xc-1RUBjbzMCbjEey70.roa File: lJ1PR8O3Xc-1RUBjbzMCbjEey70.roa (raw, json) Hash identifier: ND2UsW0Ml1x7tPRxGB8XCDz5Q1jLKGp5jR1NgcOXORc= Subject key identifier: 94:9D:4F:47:C3:B7:5D:CF:B5:45:40:63:6F:33:02:6E:31:1E:CB:BD Certificate issuer: /CN=fef329360c1b6fcafbf5253a657e3e9d7f224f7e Certificate serial: 019B7C7FECDB1102DD1D2075FDC14059920D Authority key identifier: FE:F3:29:36:0C:1B:6F:CA:FB:F5:25:3A:65:7E:3E:9D:7F:22:4F:7E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_vMpNgwbb8r79SU6ZX4-nX8iT34.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/ce96f4-d85c-4fc5-9e98-500b8834289e/1/lJ1PR8O3Xc-1RUBjbzMCbjEey70.roa Signing time: Fri 02 Jan 2026 02:18:37 +0000 ROA not before: Fri 02 Jan 2026 02:18:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9137 IP address blocks: 185.82.56.0/22 maxlen: 22 204.14.244.0/22 maxlen: 22 213.204.0.0/19 maxlen: 19 2a02:5640::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/ce96f4-d85c-4fc5-9e98-500b8834289e/1/_vMpNgwbb8r79SU6ZX4-nX8iT34.crl rsync://rpki.ripe.net/repository/DEFAULT/86/ce96f4-d85c-4fc5-9e98-500b8834289e/1/_vMpNgwbb8r79SU6ZX4-nX8iT34.mft rsync://rpki.ripe.net/repository/DEFAULT/_vMpNgwbb8r79SU6ZX4-nX8iT34.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:ec:db:11:02:dd:1d:20:75:fd:c1:40:59:92:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fef329360c1b6fcafbf5253a657e3e9d7f224f7e Validity Not Before: Jan 2 02:18:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=949d4f47c3b75dcfb54540636f33026e311ecbbd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:42:a0:14:75:2f:d6:d1:1c:d0:88:ee:87:67: df:b8:d5:a2:69:cd:45:03:cb:4a:b7:d1:05:b5:53: a7:96:c1:47:ef:5f:37:ea:3b:78:99:26:2e:c4:58: 47:16:6b:64:54:52:f1:d3:cf:8b:92:89:f5:2f:86: 53:3c:24:79:3e:e2:25:64:dd:6a:78:b0:9d:57:5d: b4:8d:93:d2:0a:96:eb:ef:66:00:5e:79:e0:06:6e: 04:9d:0c:5b:fe:2e:3b:f0:d0:66:e9:2b:d7:0a:cf: d7:e6:44:f6:aa:0c:c7:10:b8:82:ee:af:d7:04:c7: 12:bb:f6:af:4c:a4:55:37:e1:21:a6:80:44:ba:cc: c5:89:3d:be:bc:30:fe:e3:de:12:a6:b3:22:68:bc: 50:5f:1b:6d:ca:84:0c:c4:3a:1f:9f:47:82:07:3b: 0b:5a:a4:86:c6:11:59:18:f8:92:2e:c6:51:1c:e3: bc:a2:c8:86:35:97:f4:ba:51:2e:5d:78:e5:a8:aa: 91:a3:f5:79:0b:8f:06:96:ab:22:92:6c:a9:c1:fa: 12:31:b4:e3:ee:ee:b2:4a:9c:eb:0c:22:e3:5a:b0: 84:b6:ba:cd:ba:55:49:15:95:f0:08:ac:9a:9f:17: d4:74:03:89:2f:92:d8:9c:80:a0:51:d0:f2:2f:63: a9:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:9D:4F:47:C3:B7:5D:CF:B5:45:40:63:6F:33:02:6E:31:1E:CB:BD X509v3 Authority Key Identifier: keyid:FE:F3:29:36:0C:1B:6F:CA:FB:F5:25:3A:65:7E:3E:9D:7F:22:4F:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_vMpNgwbb8r79SU6ZX4-nX8iT34.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/ce96f4-d85c-4fc5-9e98-500b8834289e/1/lJ1PR8O3Xc-1RUBjbzMCbjEey70.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/86/ce96f4-d85c-4fc5-9e98-500b8834289e/1/_vMpNgwbb8r79SU6ZX4-nX8iT34.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.82.56.0/22 204.14.244.0/22 213.204.0.0/19 IPv6: 2a02:5640::/29 Signature Algorithm: sha256WithRSAEncryption 1e:b3:59:4f:8c:d2:10:05:e5:75:f7:7a:5a:2f:28:8a:0e:54: d3:c2:d9:f6:a3:c2:65:91:d2:f5:d8:e5:f2:50:4c:8e:88:94: 9e:52:fd:22:06:d9:f0:14:0a:19:72:2e:bd:3a:78:42:13:54: 15:16:c9:f4:da:15:da:ed:cf:39:05:0c:56:68:88:a5:c8:a2: 2f:fa:d4:74:f8:61:45:fa:a7:c0:d9:29:f1:be:63:01:ff:49: cc:0e:9a:92:9f:43:b7:55:19:f0:02:ab:34:c5:10:24:f4:d0: 33:b1:42:13:44:75:50:e6:fd:a3:c7:8a:2b:d2:6b:86:7b:6d: 4a:3b:0d:50:21:de:6e:12:1f:17:4b:51:6f:31:50:f4:8f:73: d0:a1:af:13:ad:85:e5:44:3b:dd:94:2d:91:c7:c0:94:b2:5a: 8e:e1:67:d8:64:92:89:b3:de:a1:99:bf:fb:5c:0e:c1:0a:12: b4:0a:47:ee:ca:67:ef:ba:34:4d:fa:6a:52:f7:d7:cc:ea:ff: f6:9c:22:5a:88:a7:af:61:5d:28:72:b2:76:ca:59:90:7f:e1: ad:79:16:32:80:0c:6e:cf:5c:07:4e:b0:b7:d5:c0:48:ab:0f: 05:96:22:1d:4f:00:a8:57:63:ad:fc:5c:c6:50:50:66:ac:08: 86:c7:75:0d -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt8f+zbEQLdHSB1/cFAWZINMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZlZjMyOTM2MGMxYjZmY2FmYmY1MjUzYTY1N2UzZTlkN2Yy MjRmN2UwHhcNMjYwMTAyMDIxODM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NDlkNGY0N2MzYjc1ZGNmYjU0NTQwNjM2ZjMzMDI2ZTMxMWVjYmJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtEKgFHUv1tEc0Ijuh2ffuNWiac1F A8tKt9EFtVOnlsFH71836jt4mSYuxFhHFmtkVFLx08+Lkon1L4ZTPCR5PuIlZN1q eLCdV120jZPSCpbr72YAXnngBm4EnQxb/i478NBm6SvXCs/X5kT2qgzHELiC7q/X BMcSu/avTKRVN+EhpoBEuszFiT2+vDD+494SprMiaLxQXxttyoQMxDofn0eCBzsL WqSGxhFZGPiSLsZRHOO8osiGNZf0ulEuXXjlqKqRo/V5C48GlqsikmypwfoSMbTj 7u6ySpzrDCLjWrCEtrrNulVJFZXwCKyanxfUdAOJL5LYnICgUdDyL2Op/QIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFJSdT0fDt13PtUVAY28zAm4xHsu9MB8GA1UdIwQY MBaAFP7zKTYMG2/K+/UlOmV+Pp1/Ik9+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX3ZNcE5nd2JiOHI3OVNVNlpYNC1uWDhpVDM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni9jZTk2ZjQtZDg1Yy00ZmM1LTllOTgt NTAwYjg4MzQyODllLzEvbEoxUFI4TzNYYy0xUlVCamJ6TUNiakVleTcwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ni9jZTk2ZjQtZDg1Yy00ZmM1LTllOTgtNTAwYjg4MzQyODll LzEvX3ZNcE5nd2JiOHI3OVNVNlpYNC1uWDhpVDM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQCuVI4AwQC zA70AwQF1cwAMA0EAgACMAcDBQMqAlZAMA0GCSqGSIb3DQEBCwUAA4IBAQAes1lP jNIQBeV193paLyiKDlTTwtn2o8JlkdL12OXyUEyOiJSeUv0iBtnwFAoZci69OnhC E1QVFsn02hXa7c85BQxWaIilyKIv+tR0+GFF+qfA2SnxvmMB/0nMDpqSn0O3VRnw Aqs0xRAk9NAzsUITRHVQ5v2jx4or0muGe21KOw1QId5uEh8XS1FvMVD0j3PQoa8T rYXlRDvdlC2Rx8CUslqO4WfYZJKJs96hmb/7XA7BChK0CkfuymfvujRN+mpS99fM 6v/2nCJaiKevYV0ocrJ2ylmQf+GteRYygAxuz1wHTrC31cBIqw8FliIdTwCoV2Ot /FzGUFBmrAiGx3UN -----END CERTIFICATE-----Generated at Mon Feb 9 21:00:33 2026 by rpki-client