This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/0f2eb8-9800-4621-b674-3b4d02a61ec2/1/luvzxOrHEfm-oTNUE5I96OhB6uA.roa File: luvzxOrHEfm-oTNUE5I96OhB6uA.roa (raw, json) Hash identifier: v1k8+jSnmhy9x9cDTWQEao/543k2k6aoV/oRZ1O120I= Subject key identifier: 96:EB:F3:C4:EA:C7:11:F9:BE:A1:33:54:13:92:3D:E8:E8:41:EA:E0 Certificate issuer: /CN=ae8355299374297933d281f51eb74ba5c2c91cc1 Certificate serial: 019B77C758D973000C52CB625CA8BACA0E93 Authority key identifier: AE:83:55:29:93:74:29:79:33:D2:81:F5:1E:B7:4B:A5:C2:C9:1C:C1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/roNVKZN0KXkz0oH1HrdLpcLJHME.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/0f2eb8-9800-4621-b674-3b4d02a61ec2/1/luvzxOrHEfm-oTNUE5I96OhB6uA.roa Signing time: Thu 01 Jan 2026 04:18:31 +0000 ROA not before: Thu 01 Jan 2026 04:18:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209118 IP address blocks: 185.81.116.0/22 maxlen: 24 2a05:8840::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/0f2eb8-9800-4621-b674-3b4d02a61ec2/1/roNVKZN0KXkz0oH1HrdLpcLJHME.crl rsync://rpki.ripe.net/repository/DEFAULT/8b/0f2eb8-9800-4621-b674-3b4d02a61ec2/1/roNVKZN0KXkz0oH1HrdLpcLJHME.mft rsync://rpki.ripe.net/repository/DEFAULT/roNVKZN0KXkz0oH1HrdLpcLJHME.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:58:d9:73:00:0c:52:cb:62:5c:a8:ba:ca:0e:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ae8355299374297933d281f51eb74ba5c2c91cc1 Validity Not Before: Jan 1 04:18:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=96ebf3c4eac711f9bea1335413923de8e841eae0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:ba:74:39:6e:a7:9e:29:22:87:51:3c:5e:39: 21:79:47:43:64:81:c4:db:d7:1e:7b:d6:d7:93:e7: 5b:6b:da:66:8a:ee:c8:ed:e6:28:e6:86:5a:d6:ae: 59:60:55:32:f4:e0:c3:28:8a:02:e4:a3:62:94:02: 42:c1:56:32:92:b1:88:b0:fb:70:e6:7b:2b:ce:d9: d1:27:33:17:9b:93:20:0d:a1:6a:80:2c:ad:ab:2a: ad:3d:71:11:a0:f0:eb:de:09:c5:3f:16:dc:de:cf: 76:b6:b7:cd:5f:f2:5c:d0:91:b2:eb:fa:72:23:31: 34:d2:d9:cc:51:2c:99:56:9e:97:4f:00:ac:76:7c: 98:2d:33:16:f3:92:ea:e2:b0:8d:71:d8:4f:fc:48: 0e:60:30:1f:f1:79:03:86:da:2c:f0:a1:e5:39:c7: dd:7a:d2:8c:d7:a7:8d:d1:33:04:77:d1:40:e4:b6: 69:37:3e:30:d3:54:a7:ef:9b:13:4a:90:bb:89:bb: c3:86:3a:d3:6c:e7:0c:d8:9d:58:bf:bb:46:bb:6e: de:2a:e2:81:5a:20:94:72:79:7e:f2:16:be:f5:02: 40:49:07:49:58:04:b7:d6:05:34:4f:fb:c5:cc:35: 59:cd:b8:33:bf:1c:89:e1:b8:2d:db:66:d3:09:b2: 37:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:EB:F3:C4:EA:C7:11:F9:BE:A1:33:54:13:92:3D:E8:E8:41:EA:E0 X509v3 Authority Key Identifier: keyid:AE:83:55:29:93:74:29:79:33:D2:81:F5:1E:B7:4B:A5:C2:C9:1C:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/roNVKZN0KXkz0oH1HrdLpcLJHME.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/0f2eb8-9800-4621-b674-3b4d02a61ec2/1/luvzxOrHEfm-oTNUE5I96OhB6uA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/0f2eb8-9800-4621-b674-3b4d02a61ec2/1/roNVKZN0KXkz0oH1HrdLpcLJHME.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.81.116.0/22 IPv6: 2a05:8840::/29 Signature Algorithm: sha256WithRSAEncryption 50:5f:d9:88:2b:a3:0b:36:47:5c:4a:fe:16:88:1c:19:31:ca: 83:fa:33:c5:68:40:6b:28:70:e3:00:3b:ce:44:7d:4b:ff:cb: 7f:0b:cf:fe:97:6d:3e:48:2c:6c:4b:49:ad:49:8e:30:49:59: 17:14:8c:d4:e8:bb:f1:e8:6b:1d:ae:53:0b:3c:d9:cd:90:c2: 0d:ad:09:58:15:85:b9:15:97:cf:1c:4f:a4:e4:82:07:d9:a0: 32:c2:1d:82:2b:b7:bf:0e:e2:e6:84:ec:a4:61:e5:e0:2a:84: 06:de:f6:dc:a7:e4:89:14:a0:17:ef:a8:a8:c6:d4:ea:1d:ec: 88:22:86:28:ab:15:b4:72:43:76:4f:67:be:ce:41:f8:7f:b3: aa:bd:51:53:a2:60:d0:60:90:73:5c:3f:b4:03:31:e9:43:97: 05:11:22:8a:65:9f:4a:23:de:d2:c9:b0:35:ef:b8:90:28:54: 97:e2:49:97:cf:3d:69:e1:fd:e0:b7:73:60:77:bd:35:82:fd: 32:83:a8:3d:aa:b9:97:cb:86:73:0b:da:c9:6a:79:38:e0:ee: 67:87:78:04:ed:03:be:1d:75:f4:3b:21:93:8c:4c:e3:88:0d: 00:ee:8d:7a:17:66:a6:89:6d:9d:83:e2:46:51:72:9c:21:ea: e1:90:69:26 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt3x1jZcwAMUstiXKi6yg6TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlODM1NTI5OTM3NDI5NzkzM2QyODFmNTFlYjc0YmE1YzJj OTFjYzEwHhcNMjYwMTAxMDQxODMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NmViZjNjNGVhYzcxMWY5YmVhMTMzNTQxMzkyM2RlOGU4NDFlYWUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhrp0OW6nnikih1E8XjkheUdDZIHE 29cee9bXk+dba9pmiu7I7eYo5oZa1q5ZYFUy9ODDKIoC5KNilAJCwVYykrGIsPtw 5nsrztnRJzMXm5MgDaFqgCytqyqtPXERoPDr3gnFPxbc3s92trfNX/Jc0JGy6/py IzE00tnMUSyZVp6XTwCsdnyYLTMW85Lq4rCNcdhP/EgOYDAf8XkDhtos8KHlOcfd etKM16eN0TMEd9FA5LZpNz4w01Sn75sTSpC7ibvDhjrTbOcM2J1Yv7tGu27eKuKB WiCUcnl+8ha+9QJASQdJWAS31gU0T/vFzDVZzbgzvxyJ4bgt22bTCbI3DQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFJbr88TqxxH5vqEzVBOSPejoQergMB8GA1UdIwQY MBaAFK6DVSmTdCl5M9KB9R63S6XCyRzBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcm9OVktaTjBLWGt6MG9IMUhyZExwY0xKSE1FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi8wZjJlYjgtOTgwMC00NjIxLWI2NzQt M2I0ZDAyYTYxZWMyLzEvbHV2enhPckhFZm0tb1ROVUU1STk2T2hCNnVBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yi8wZjJlYjgtOTgwMC00NjIxLWI2NzQtM2I0ZDAyYTYxZWMy LzEvcm9OVktaTjBLWGt6MG9IMUhyZExwY0xKSE1FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuVF0MA0E AgACMAcDBQMqBYhAMA0GCSqGSIb3DQEBCwUAA4IBAQBQX9mIK6MLNkdcSv4WiBwZ McqD+jPFaEBrKHDjADvORH1L/8t/C8/+l20+SCxsS0mtSY4wSVkXFIzU6Lvx6Gsd rlMLPNnNkMINrQlYFYW5FZfPHE+k5IIH2aAywh2CK7e/DuLmhOykYeXgKoQG3vbc p+SJFKAX76ioxtTqHeyIIoYoqxW0ckN2T2e+zkH4f7OqvVFTomDQYJBzXD+0AzHp Q5cFESKKZZ9KI97SybA177iQKFSX4kmXzz1p4f3gt3Ngd701gv0yg6g9qrmXy4Zz C9rJank44O5nh3gE7QO+HXX0OyGTjEzjiA0A7o16F2amiW2dg+JGUXKcIerhkGkm -----END CERTIFICATE-----Generated at Tue Feb 10 02:47:42 2026 by rpki-client