This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/e31d68-cb63-4bd1-99b9-35ee7a739fd9/1/lXeVvSBTU7kT9plGVLjP1SeM5e8.roa File: lXeVvSBTU7kT9plGVLjP1SeM5e8.roa (raw, json) Hash identifier: d6HLCVnG+FtyHmH62hlZHwElrQ46SkYz4wdJECCi/g0= Subject key identifier: 95:77:95:BD:20:53:53:B9:13:F6:99:46:54:B8:CF:D5:27:8C:E5:EF Certificate issuer: /CN=40bb76aa96df8eb7d6777b357252e11155238785 Certificate serial: 019B7910DBE5F8D666D5F5416C94ECD9825B Authority key identifier: 40:BB:76:AA:96:DF:8E:B7:D6:77:7B:35:72:52:E1:11:55:23:87:85 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QLt2qpbfjrfWd3s1clLhEVUjh4U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/e31d68-cb63-4bd1-99b9-35ee7a739fd9/1/lXeVvSBTU7kT9plGVLjP1SeM5e8.roa Signing time: Thu 01 Jan 2026 10:18:26 +0000 ROA not before: Thu 01 Jan 2026 10:18:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208560 IP address blocks: 83.150.192.0/23 maxlen: 23 83.150.192.0/24 maxlen: 24 83.150.193.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/e31d68-cb63-4bd1-99b9-35ee7a739fd9/1/QLt2qpbfjrfWd3s1clLhEVUjh4U.crl rsync://rpki.ripe.net/repository/DEFAULT/94/e31d68-cb63-4bd1-99b9-35ee7a739fd9/1/QLt2qpbfjrfWd3s1clLhEVUjh4U.mft rsync://rpki.ripe.net/repository/DEFAULT/QLt2qpbfjrfWd3s1clLhEVUjh4U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:db:e5:f8:d6:66:d5:f5:41:6c:94:ec:d9:82:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40bb76aa96df8eb7d6777b357252e11155238785 Validity Not Before: Jan 1 10:18:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=957795bd205353b913f6994654b8cfd5278ce5ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:88:02:e8:14:55:da:bc:b6:37:80:d4:65:29: 67:4e:00:8a:7f:f3:71:81:f8:9b:03:6e:14:9b:c7: db:33:0d:00:9a:af:f7:b8:a1:ea:a5:29:32:4a:21: 9a:b0:9b:9b:9a:70:81:0b:46:03:2d:3c:af:88:ed: 20:f5:da:60:05:28:1e:e2:9a:28:d3:49:db:91:5c: d9:26:42:0d:e0:b3:76:a3:e9:35:25:ba:ea:0f:12: f2:41:f3:6c:a3:71:12:c4:df:46:87:b8:5a:20:f4: b6:a4:05:0a:97:0d:5e:53:40:a4:87:77:2a:5c:22: a4:e4:97:70:6a:50:ad:61:2e:b1:60:51:1a:e8:68: aa:65:b3:17:a3:9e:56:77:d1:99:78:73:b8:6e:b1: fa:c5:8d:41:4a:6b:9e:1a:bc:e7:ab:e7:d9:12:25: 13:e8:15:1b:71:44:9a:b7:c4:b0:4e:44:5b:cf:91: 98:72:d9:c3:ef:eb:88:60:9f:b7:19:ec:58:29:09: 9e:47:cf:5f:39:1e:26:e2:9f:7a:d3:ac:ce:a1:6a: 8e:35:3f:ff:9e:61:0b:42:ec:3d:09:fd:70:83:e6: 77:f7:27:7d:63:39:d5:b8:5c:2e:b2:d7:91:60:80: 00:44:71:32:73:63:ef:f1:95:d3:9d:f5:7c:d4:0e: bb:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:77:95:BD:20:53:53:B9:13:F6:99:46:54:B8:CF:D5:27:8C:E5:EF X509v3 Authority Key Identifier: keyid:40:BB:76:AA:96:DF:8E:B7:D6:77:7B:35:72:52:E1:11:55:23:87:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QLt2qpbfjrfWd3s1clLhEVUjh4U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/e31d68-cb63-4bd1-99b9-35ee7a739fd9/1/lXeVvSBTU7kT9plGVLjP1SeM5e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/94/e31d68-cb63-4bd1-99b9-35ee7a739fd9/1/QLt2qpbfjrfWd3s1clLhEVUjh4U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 83.150.192.0/23 Signature Algorithm: sha256WithRSAEncryption 30:b1:af:12:9f:37:8b:22:0f:b1:0e:99:17:4e:a3:e6:43:da: f0:35:99:a4:46:cc:20:46:f7:98:f2:f6:04:94:d7:ac:2a:41: 2f:1c:6f:a5:63:0f:be:07:15:b2:0b:33:d1:00:bc:53:d7:49: 75:67:2b:44:48:0e:f7:40:2c:6f:6e:97:1a:19:0a:6d:4a:f0: 6f:48:0f:65:ed:bb:15:ec:88:ca:0f:38:25:20:0f:94:c2:19: 5c:aa:44:83:27:e0:0d:22:54:11:09:f9:82:71:12:d0:2e:1c: af:2a:07:23:1b:52:41:b2:fa:40:36:e0:32:2c:58:54:99:a4: 53:64:35:b8:9b:6e:7e:04:d1:84:6f:a5:ef:07:2e:3d:d3:dc: a4:a9:da:bf:44:90:89:76:e9:e1:5c:cc:7d:b2:d4:11:a4:56: e8:29:79:a4:a7:a5:38:f0:98:98:e7:78:01:69:12:fa:f0:d5: cc:da:f3:c3:82:9f:c8:e6:f8:ae:f9:72:5b:7c:43:47:e6:3f: d1:f5:02:a3:0a:27:83:0d:5c:f9:39:26:a1:db:d6:90:2f:8d: d1:20:06:eb:cc:04:bc:46:0c:97:b9:df:4e:12:98:05:f8:3e: 58:9c:08:bf:12:0d:23:12:9a:70:62:dd:1b:24:72:f8:d2:80: b9:a6:0a:41 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5ENvl+NZm1fVBbJTs2YJbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwYmI3NmFhOTZkZjhlYjdkNjc3N2IzNTcyNTJlMTExNTUy Mzg3ODUwHhcNMjYwMTAxMTAxODI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NTc3OTViZDIwNTM1M2I5MTNmNjk5NDY1NGI4Y2ZkNTI3OGNlNWVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhYgC6BRV2ry2N4DUZSlnTgCKf/Nx gfibA24Um8fbMw0Amq/3uKHqpSkySiGasJubmnCBC0YDLTyviO0g9dpgBSge4poo 00nbkVzZJkIN4LN2o+k1JbrqDxLyQfNso3ESxN9Gh7haIPS2pAUKlw1eU0Ckh3cq XCKk5JdwalCtYS6xYFEa6GiqZbMXo55Wd9GZeHO4brH6xY1BSmueGrznq+fZEiUT 6BUbcUSat8SwTkRbz5GYctnD7+uIYJ+3GexYKQmeR89fOR4m4p9606zOoWqONT// nmELQuw9Cf1wg+Z39yd9YznVuFwusteRYIAARHEyc2Pv8ZXTnfV81A67fQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJV3lb0gU1O5E/aZRlS4z9UnjOXvMB8GA1UdIwQY MBaAFEC7dqqW34631nd7NXJS4RFVI4eFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUUx0MnFwYmZqcmZXZDNzMWNsTGhFVlVqaDRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9lMzFkNjgtY2I2My00YmQxLTk5Yjkt MzVlZTdhNzM5ZmQ5LzEvbFhlVnZTQlRVN2tUOXBsR1ZMalAxU2VNNWU4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NC9lMzFkNjgtY2I2My00YmQxLTk5YjktMzVlZTdhNzM5ZmQ5 LzEvUUx0MnFwYmZqcmZXZDNzMWNsTGhFVlVqaDRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBU5bAMA0G CSqGSIb3DQEBCwUAA4IBAQAwsa8SnzeLIg+xDpkXTqPmQ9rwNZmkRswgRveY8vYE lNesKkEvHG+lYw++BxWyCzPRALxT10l1ZytESA73QCxvbpcaGQptSvBvSA9l7bsV 7IjKDzglIA+UwhlcqkSDJ+ANIlQRCfmCcRLQLhyvKgcjG1JBsvpANuAyLFhUmaRT ZDW4m25+BNGEb6XvBy4909ykqdq/RJCJdunhXMx9stQRpFboKXmkp6U48JiY53gB aRL68NXM2vPDgp/I5viu+XJbfENH5j/R9QKjCieDDVz5OSah29aQL43RIAbrzAS8 RgyXud9OEpgF+D5YnAi/Eg0jEppwYt0bJHL40oC5pgpB -----END CERTIFICATE-----Generated at Mon Feb 9 19:40:27 2026 by rpki-client