This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/lNKDc2fg0C34Mhxk7CWIlrm7fVI.roa File: lNKDc2fg0C34Mhxk7CWIlrm7fVI.roa (raw, json) Hash identifier: BzASaUjpOcybVcOKs+iZ6k/nyd3nEWtq+m2I9vMUwuY= Subject key identifier: 94:D2:83:73:67:E0:D0:2D:F8:32:1C:64:EC:25:88:96:B9:BB:7D:52 Certificate issuer: /CN=465eba5c1a80f86a4589278edd9304b3f5169f83 Certificate serial: 019B7BA33ABF0131ADF49235C6A11A99D6C6 Authority key identifier: 46:5E:BA:5C:1A:80:F8:6A:45:89:27:8E:DD:93:04:B3:F5:16:9F:83 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/lNKDc2fg0C34Mhxk7CWIlrm7fVI.roa Signing time: Thu 01 Jan 2026 22:17:33 +0000 ROA not before: Thu 01 Jan 2026 22:17:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210976 IP address blocks: 45.82.15.0/24 maxlen: 24 185.142.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.crl rsync://rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.mft rsync://rpki.ripe.net/repository/DEFAULT/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 01:01:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:3a:bf:01:31:ad:f4:92:35:c6:a1:1a:99:d6:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=465eba5c1a80f86a4589278edd9304b3f5169f83 Validity Not Before: Jan 1 22:17:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=94d2837367e0d02df8321c64ec258896b9bb7d52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:94:7f:98:0a:61:3a:7a:3b:ad:44:7f:29:e7: 43:63:50:25:f2:c0:1a:eb:10:87:ea:30:0d:0e:db: f5:db:bb:35:a5:50:f6:d0:42:b5:18:a5:56:7c:dc: e4:ae:c3:b5:18:f1:ae:24:8d:fd:d6:ab:22:0e:89: 56:7f:1c:6b:80:f2:02:a5:90:b5:d7:e4:c4:f9:13: 30:e2:39:39:54:33:f4:88:68:f1:3e:59:b3:17:5b: 1a:f3:af:2f:90:9a:8a:27:7f:bf:e0:d6:9f:d5:a7: 43:75:22:47:8e:fd:3f:72:5d:f3:fd:af:6a:eb:59: 0d:c6:f0:2f:e2:30:2c:1f:d5:6d:6c:87:a7:1b:bd: 08:ae:f5:d6:fb:22:fe:16:de:a1:c2:94:97:ef:2b: 65:65:d6:fd:d7:26:f8:3c:5c:68:dc:2e:f9:92:a1: a0:39:7f:d8:99:85:4c:9d:15:b5:3d:46:d9:9d:b4: 08:83:cf:a5:13:31:e1:fd:fd:2f:cb:b2:51:02:ee: fc:a4:b2:6c:fc:30:fc:7f:3c:ef:91:d7:58:e6:85: 48:88:57:4f:b3:39:c7:d3:e5:22:7e:04:82:32:c7: 7e:14:43:f3:a4:37:37:4f:11:fc:ef:89:7e:4f:79: e7:d6:1f:97:8f:ef:c5:01:60:5d:1e:a0:5c:b9:b2: 60:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:D2:83:73:67:E0:D0:2D:F8:32:1C:64:EC:25:88:96:B9:BB:7D:52 X509v3 Authority Key Identifier: keyid:46:5E:BA:5C:1A:80:F8:6A:45:89:27:8E:DD:93:04:B3:F5:16:9F:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/lNKDc2fg0C34Mhxk7CWIlrm7fVI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.82.15.0/24 185.142.99.0/24 Signature Algorithm: sha256WithRSAEncryption 03:cd:3c:be:f6:cd:df:3d:18:14:53:ab:14:dc:b3:4b:cb:0a: 82:b0:a1:b3:fc:bd:33:3d:dd:e7:df:b3:48:98:9e:48:42:26: c9:be:37:f4:ae:8d:88:7d:d4:4c:51:72:81:3a:c3:5f:b8:15: dd:e4:db:bc:ad:70:27:ee:94:f5:26:06:53:c2:6b:a0:7b:6e: 57:35:91:a1:bf:f8:17:23:d4:33:68:51:14:52:12:13:95:d7: b8:22:93:9b:e5:6d:3f:8a:f3:25:ab:f2:3a:0c:d0:c4:bd:5b: 0b:94:a0:ea:e2:82:5c:88:fa:e8:6f:42:4d:5b:cf:3b:59:97: 41:7b:5b:5c:74:db:3f:e7:bf:85:d6:38:96:b5:96:6f:36:12: 61:bf:ab:09:54:04:6a:62:34:ee:58:9d:fa:ad:ab:24:f0:63: 5f:17:72:70:20:2f:63:8c:c3:f6:b6:cb:3a:d6:2c:c1:b8:47: fb:90:4d:2c:a2:13:c4:d9:8a:4e:03:00:cd:9c:45:ff:f3:8c: fc:fd:9d:88:3c:86:4e:72:e6:36:4f:8b:1d:57:61:de:2c:ea: 23:ee:2e:0d:45:37:bf:49:91:54:29:c5:02:a7:aa:27:9e:0b: 47:80:46:4b:fb:ee:46:e6:47:3b:14:a2:46:be:4a:cd:33:23: 66:67:74:a6 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt7ozq/ATGt9JI1xqEamdbGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2NWViYTVjMWE4MGY4NmE0NTg5Mjc4ZWRkOTMwNGIzZjUx NjlmODMwHhcNMjYwMTAxMjIxNzMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NGQyODM3MzY3ZTBkMDJkZjgzMjFjNjRlYzI1ODg5NmI5YmI3ZDUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ZR/mAphOno7rUR/KedDY1Al8sAa 6xCH6jANDtv127s1pVD20EK1GKVWfNzkrsO1GPGuJI391qsiDolWfxxrgPICpZC1 1+TE+RMw4jk5VDP0iGjxPlmzF1sa868vkJqKJ3+/4Naf1adDdSJHjv0/cl3z/a9q 61kNxvAv4jAsH9VtbIenG70IrvXW+yL+Ft6hwpSX7ytlZdb91yb4PFxo3C75kqGg OX/YmYVMnRW1PUbZnbQIg8+lEzHh/f0vy7JRAu78pLJs/DD8fzzvkddY5oVIiFdP sznH0+UifgSCMsd+FEPzpDc3TxH874l+T3nn1h+Xj+/FAWBdHqBcubJg8QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFJTSg3Nn4NAt+DIcZOwliJa5u31SMB8GA1UdIwQY MBaAFEZeulwagPhqRYknjt2TBLP1Fp+DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUmw2NlhCcUEtR3BGaVNlTzNaTUVzX1VXbjRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi9jMTJhN2ItNWNhZi00ZTdjLTk3MGQt NWM0NzZlMzMyNWY1LzEvbE5LRGMyZmcwQzM0TWh4azdDV0lscm03ZlZJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi9jMTJhN2ItNWNhZi00ZTdjLTk3MGQtNWM0NzZlMzMyNWY1 LzEvUmw2NlhCcUEtR3BGaVNlTzNaTUVzX1VXbjRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALVIPAwQA uY5jMA0GCSqGSIb3DQEBCwUAA4IBAQADzTy+9s3fPRgUU6sU3LNLywqCsKGz/L0z Pd3n37NImJ5IQibJvjf0ro2IfdRMUXKBOsNfuBXd5Nu8rXAn7pT1JgZTwmuge25X NZGhv/gXI9QzaFEUUhITlde4IpOb5W0/ivMlq/I6DNDEvVsLlKDq4oJciProb0JN W887WZdBe1tcdNs/57+F1jiWtZZvNhJhv6sJVARqYjTuWJ36rask8GNfF3JwIC9j jMP2tss61izBuEf7kE0sohPE2YpOAwDNnEX/84z8/Z2IPIZOcuY2T4sdV2HeLOoj 7i4NRTe/SZFUKcUCp6onngtHgEZL++5G5kc7FKJGvkrNMyNmZ3Sm -----END CERTIFICATE-----Generated at Wed Jan 21 11:13:31 2026 by rpki-client