This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/8cdbc5-9365-4a0c-b9a3-ae7746f09630/1/LnQ-zPzgqVgXUijx46r1d0YDiYg.roa File: LnQ-zPzgqVgXUijx46r1d0YDiYg.roa (raw, json) Hash identifier: KK6oyN4swqYMOPL8Gp/QIITc1me7ju9UH/GTlCJypo0= Subject key identifier: 2E:74:3E:CC:FC:E0:A9:58:17:52:28:F1:E3:AA:F5:77:46:03:89:88 Certificate issuer: /CN=bdfa3af839aa1dce758f489e2d31ae22092fc99a Certificate serial: 019B77C6E54FA8F7CAE33EB08B069AC1A937 Authority key identifier: BD:FA:3A:F8:39:AA:1D:CE:75:8F:48:9E:2D:31:AE:22:09:2F:C9:9A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vfo6-DmqHc51j0ieLTGuIgkvyZo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/8cdbc5-9365-4a0c-b9a3-ae7746f09630/1/LnQ-zPzgqVgXUijx46r1d0YDiYg.roa Signing time: Thu 01 Jan 2026 04:18:02 +0000 ROA not before: Thu 01 Jan 2026 04:18:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 28704 IP address blocks: 91.190.208.0/24 maxlen: 24 193.243.136.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/8cdbc5-9365-4a0c-b9a3-ae7746f09630/1/vfo6-DmqHc51j0ieLTGuIgkvyZo.crl rsync://rpki.ripe.net/repository/DEFAULT/8d/8cdbc5-9365-4a0c-b9a3-ae7746f09630/1/vfo6-DmqHc51j0ieLTGuIgkvyZo.mft rsync://rpki.ripe.net/repository/DEFAULT/vfo6-DmqHc51j0ieLTGuIgkvyZo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:e5:4f:a8:f7:ca:e3:3e:b0:8b:06:9a:c1:a9:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bdfa3af839aa1dce758f489e2d31ae22092fc99a Validity Not Before: Jan 1 04:18:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2e743eccfce0a958175228f1e3aaf57746038988 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:28:b5:6f:c0:c1:50:31:8b:a0:23:ea:fc:43: 2a:57:ba:37:fa:ec:55:9f:87:7c:0d:5f:2c:3c:4e: 1b:b6:3e:cd:69:6b:73:81:5d:38:b6:51:c6:e2:cb: 4d:07:e2:4f:20:c0:f8:81:5b:44:47:b7:b0:ac:36: ae:91:7a:59:3f:d9:a8:51:0d:ce:17:75:55:e5:d1: 7a:84:95:8e:c0:ef:6c:8c:74:ea:bb:bf:e8:92:9b: e8:b4:68:4d:08:3c:9a:42:0a:3e:ca:c2:e9:27:43: 62:3d:80:f9:f9:99:e3:07:73:ae:9b:f2:cf:67:be: 9b:03:04:80:86:f2:3d:ff:ae:ba:99:68:ef:51:64: 22:90:08:91:5f:56:d2:d1:69:8b:80:fd:38:b4:c3: b1:ec:52:b2:5c:f8:0b:40:6f:e0:9b:25:a6:1b:10: 46:6d:d4:21:2b:99:91:0f:19:45:99:d6:f6:cf:4b: 7c:b1:cb:ed:9f:aa:53:a1:59:57:14:30:1e:83:55: 13:5b:87:2c:9e:30:1d:e4:9e:36:08:07:fb:25:cf: 56:52:7c:16:f6:b9:bb:9f:39:64:f9:99:68:04:54: ca:8a:b2:60:91:d2:82:8d:b5:56:21:dd:80:a9:6f: 16:d0:60:17:d4:65:68:af:e5:f4:cf:0a:23:2f:12: c7:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:74:3E:CC:FC:E0:A9:58:17:52:28:F1:E3:AA:F5:77:46:03:89:88 X509v3 Authority Key Identifier: keyid:BD:FA:3A:F8:39:AA:1D:CE:75:8F:48:9E:2D:31:AE:22:09:2F:C9:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vfo6-DmqHc51j0ieLTGuIgkvyZo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/8cdbc5-9365-4a0c-b9a3-ae7746f09630/1/LnQ-zPzgqVgXUijx46r1d0YDiYg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/8cdbc5-9365-4a0c-b9a3-ae7746f09630/1/vfo6-DmqHc51j0ieLTGuIgkvyZo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.190.208.0/24 193.243.136.0/23 Signature Algorithm: sha256WithRSAEncryption a1:a9:1c:d4:60:4d:ac:2a:03:6c:ce:5c:ce:4e:29:b9:fa:48: b7:32:c5:ac:84:b1:df:b7:22:0d:31:36:f9:79:98:d6:4c:0a: ff:19:15:40:e9:46:55:16:bf:91:fb:fe:a5:9b:19:13:fd:48: ac:71:77:08:f1:23:ed:4e:f2:93:02:88:6f:66:65:29:1e:da: e3:63:00:7c:35:c4:f9:c0:1a:f6:68:15:0e:0e:fb:f5:ef:9c: ce:49:94:b9:69:64:00:24:de:c4:cd:84:1f:8d:75:47:31:95: 14:a6:bc:4e:2f:f8:74:c0:bc:2a:b9:d3:b6:e8:8f:57:ce:88: 28:2c:9f:c0:a2:8c:97:61:27:cc:96:7a:69:69:98:20:88:ac: c0:ae:44:63:fe:b2:fd:02:7f:01:c5:0b:8a:72:64:74:19:8d: d0:ca:b2:12:80:1e:59:21:23:89:17:47:bc:76:70:37:68:30: 31:cc:b5:aa:cb:b4:12:6c:30:63:e9:f1:d1:52:b4:1d:d5:8c: 20:e1:e3:b6:51:28:06:6a:34:71:66:03:b4:33:af:b1:74:fe: 67:e6:d1:38:19:5f:f4:5f:64:c1:85:80:96:61:18:7d:2a:78: 7e:e2:e1:74:a3:fc:fa:37:b2:60:08:25:94:1b:80:04:3c:f1: 09:e4:55:b4 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt3xuVPqPfK4z6wiwaawak3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkZmEzYWY4MzlhYTFkY2U3NThmNDg5ZTJkMzFhZTIyMDky ZmM5OWEwHhcNMjYwMTAxMDQxODAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZTc0M2VjY2ZjZTBhOTU4MTc1MjI4ZjFlM2FhZjU3NzQ2MDM4OTg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuCi1b8DBUDGLoCPq/EMqV7o3+uxV n4d8DV8sPE4btj7NaWtzgV04tlHG4stNB+JPIMD4gVtER7ewrDaukXpZP9moUQ3O F3VV5dF6hJWOwO9sjHTqu7/okpvotGhNCDyaQgo+ysLpJ0NiPYD5+ZnjB3Oum/LP Z76bAwSAhvI9/666mWjvUWQikAiRX1bS0WmLgP04tMOx7FKyXPgLQG/gmyWmGxBG bdQhK5mRDxlFmdb2z0t8scvtn6pToVlXFDAeg1UTW4csnjAd5J42CAf7Jc9WUnwW 9rm7nzlk+ZloBFTKirJgkdKCjbVWId2AqW8W0GAX1GVor+X0zwojLxLHMQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFC50Psz84KlYF1Io8eOq9XdGA4mIMB8GA1UdIwQY MBaAFL36Ovg5qh3OdY9Ini0xriIJL8maMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdmZvNi1EbXFIYzUxajBpZUxUR3VJZ2t2eVpvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC84Y2RiYzUtOTM2NS00YTBjLWI5YTMt YWU3NzQ2ZjA5NjMwLzEvTG5RLXpQemdxVmdYVWlqeDQ2cjFkMFlEaVlnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZC84Y2RiYzUtOTM2NS00YTBjLWI5YTMtYWU3NzQ2ZjA5NjMw LzEvdmZvNi1EbXFIYzUxajBpZUxUR3VJZ2t2eVpvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAW77QAwQB wfOIMA0GCSqGSIb3DQEBCwUAA4IBAQChqRzUYE2sKgNszlzOTim5+ki3MsWshLHf tyINMTb5eZjWTAr/GRVA6UZVFr+R+/6lmxkT/UiscXcI8SPtTvKTAohvZmUpHtrj YwB8NcT5wBr2aBUODvv175zOSZS5aWQAJN7EzYQfjXVHMZUUprxOL/h0wLwqudO2 6I9XzogoLJ/AooyXYSfMlnppaZggiKzArkRj/rL9An8BxQuKcmR0GY3QyrISgB5Z ISOJF0e8dnA3aDAxzLWqy7QSbDBj6fHRUrQd1Ywg4eO2USgGajRxZgO0M6+xdP5n 5tE4GV/0X2TBhYCWYRh9Knh+4uF0o/z6N7JgCCWUG4AEPPEJ5FW0 -----END CERTIFICATE-----Generated at Mon Feb 9 21:27:01 2026 by rpki-client