This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/4fef00-908e-443c-9ff2-016d6dcfad81/1/lLFp57ELRFwcVwgQgnxoPRuM_jc.roa File: lLFp57ELRFwcVwgQgnxoPRuM_jc.roa (raw, json) Hash identifier: su+kmJqCkSrBt5ZKQNGTlCO76FI+aak3+r1BBZTULGU= Subject key identifier: 94:B1:69:E7:B1:0B:44:5C:1C:57:08:10:82:7C:68:3D:1B:8C:FE:37 Certificate issuer: /CN=25ea9747bd01a457fa2bb02fcc0ac823140b518f Certificate serial: 019B7758DCC8D8519D314AC3563582457379 Authority key identifier: 25:EA:97:47:BD:01:A4:57:FA:2B:B0:2F:CC:0A:C8:23:14:0B:51:8F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JeqXR70BpFf6K7AvzArIIxQLUY8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/4fef00-908e-443c-9ff2-016d6dcfad81/1/lLFp57ELRFwcVwgQgnxoPRuM_jc.roa Signing time: Thu 01 Jan 2026 02:17:50 +0000 ROA not before: Thu 01 Jan 2026 02:17:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60781 IP address blocks: 193.142.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/4fef00-908e-443c-9ff2-016d6dcfad81/1/JeqXR70BpFf6K7AvzArIIxQLUY8.crl rsync://rpki.ripe.net/repository/DEFAULT/96/4fef00-908e-443c-9ff2-016d6dcfad81/1/JeqXR70BpFf6K7AvzArIIxQLUY8.mft rsync://rpki.ripe.net/repository/DEFAULT/JeqXR70BpFf6K7AvzArIIxQLUY8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:dc:c8:d8:51:9d:31:4a:c3:56:35:82:45:73:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25ea9747bd01a457fa2bb02fcc0ac823140b518f Validity Not Before: Jan 1 02:17:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=94b169e7b10b445c1c570810827c683d1b8cfe37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:a7:11:a5:c4:69:7a:fd:6e:c7:e3:28:37:0c: b2:1b:e6:c0:21:9c:cf:3a:eb:26:f2:7a:4a:1b:d7: b1:2c:33:6b:2b:33:44:e4:95:65:7c:44:b1:22:af: 7a:f7:a8:92:ab:80:f8:d4:4b:b2:cc:79:e1:3a:af: 6d:3a:73:96:31:c8:a0:35:b5:39:86:72:e1:2a:29: d3:80:f2:4b:ac:9b:12:9e:b7:76:d2:02:30:7e:b8: b1:43:15:e9:f8:b5:1a:e3:63:9d:80:ed:df:04:3e: 99:5e:37:06:ef:e4:3d:ba:4a:ea:6d:c1:4a:b4:c6: bb:7b:64:7c:90:41:78:75:52:10:5a:0e:b1:c1:7f: cf:60:18:6b:fd:b4:f4:f9:04:df:bd:73:f7:cf:d8: 5e:97:63:4a:16:89:83:86:79:d3:b3:6a:c6:78:35: f1:0a:58:b4:55:d7:c0:63:11:c2:0a:37:14:b1:4c: 32:94:3d:7a:29:89:66:f8:e3:6a:87:5d:b9:28:32: 3a:ed:e8:4f:f6:12:55:d0:e8:af:76:1c:cf:08:cc: 38:74:4d:07:51:56:b4:6c:45:59:39:76:e7:50:64: 68:8a:00:a1:9c:41:be:e7:02:91:71:7e:d7:30:e6: 15:35:b3:93:43:80:a7:e6:7f:10:84:db:57:3e:c4: ad:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:B1:69:E7:B1:0B:44:5C:1C:57:08:10:82:7C:68:3D:1B:8C:FE:37 X509v3 Authority Key Identifier: keyid:25:EA:97:47:BD:01:A4:57:FA:2B:B0:2F:CC:0A:C8:23:14:0B:51:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JeqXR70BpFf6K7AvzArIIxQLUY8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/4fef00-908e-443c-9ff2-016d6dcfad81/1/lLFp57ELRFwcVwgQgnxoPRuM_jc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/96/4fef00-908e-443c-9ff2-016d6dcfad81/1/JeqXR70BpFf6K7AvzArIIxQLUY8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.142.245.0/24 Signature Algorithm: sha256WithRSAEncryption 35:f9:77:6e:14:69:b8:c2:a0:23:e3:00:4d:f7:60:7c:04:e4: 43:19:35:49:0f:d3:bb:85:52:57:b7:4f:72:41:2a:01:92:f6: e9:7d:00:0c:42:70:eb:26:07:49:4a:92:22:91:14:c3:42:f4: 08:9f:76:05:b2:cc:8b:67:56:74:02:ef:ab:3c:1e:8a:e3:41: 01:ee:de:59:26:f9:6f:9f:5f:92:01:dd:e4:da:84:3e:c4:37: b4:9f:69:30:0f:b0:66:7a:54:90:0d:e2:8b:c1:49:a1:9a:02: ad:86:d4:80:83:b4:7e:2f:de:4f:a6:94:db:db:ce:a5:20:2c: aa:c6:ea:f6:8c:a3:d1:59:4d:6b:cf:db:75:c1:0a:c7:80:26: ed:71:9a:5c:85:2d:d3:6a:dc:59:98:92:ab:3d:1e:6a:b7:3b: fa:85:fe:59:7b:e8:af:31:15:f9:39:96:91:99:22:5c:18:aa: 79:57:cd:ea:2c:eb:c1:c6:66:93:2f:49:c2:a8:4e:80:b1:20: d9:fb:bf:1b:6e:01:a7:95:87:01:25:64:e4:7a:76:31:b3:29: bf:7f:f0:7b:13:1a:02:0c:29:2f:5b:df:0b:60:08:77:85:5b: e5:17:63:a0:3f:58:0c:ef:fa:2a:e1:2a:f7:d6:85:0b:82:19: 1f:23:f5:32 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WNzI2FGdMUrDVjWCRXN5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1ZWE5NzQ3YmQwMWE0NTdmYTJiYjAyZmNjMGFjODIzMTQw YjUxOGYwHhcNMjYwMTAxMDIxNzUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NGIxNjllN2IxMGI0NDVjMWM1NzA4MTA4MjdjNjgzZDFiOGNmZTM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu6cRpcRpev1ux+MoNwyyG+bAIZzP Ousm8npKG9exLDNrKzNE5JVlfESxIq9696iSq4D41EuyzHnhOq9tOnOWMcigNbU5 hnLhKinTgPJLrJsSnrd20gIwfrixQxXp+LUa42OdgO3fBD6ZXjcG7+Q9ukrqbcFK tMa7e2R8kEF4dVIQWg6xwX/PYBhr/bT0+QTfvXP3z9hel2NKFomDhnnTs2rGeDXx Cli0VdfAYxHCCjcUsUwylD16KYlm+ONqh125KDI67ehP9hJV0OivdhzPCMw4dE0H UVa0bEVZOXbnUGRoigChnEG+5wKRcX7XMOYVNbOTQ4Cn5n8QhNtXPsStlwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJSxaeexC0RcHFcIEIJ8aD0bjP43MB8GA1UdIwQY MBaAFCXql0e9AaRX+iuwL8wKyCMUC1GPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSmVxWFI3MEJwRmY2SzdBdnpBcklJeFFMVVk4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni80ZmVmMDAtOTA4ZS00NDNjLTlmZjIt MDE2ZDZkY2ZhZDgxLzEvbExGcDU3RUxSRndjVndnUWdueG9QUnVNX2pjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ni80ZmVmMDAtOTA4ZS00NDNjLTlmZjItMDE2ZDZkY2ZhZDgx LzEvSmVxWFI3MEJwRmY2SzdBdnpBcklJeFFMVVk4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwY71MA0G CSqGSIb3DQEBCwUAA4IBAQA1+XduFGm4wqAj4wBN92B8BORDGTVJD9O7hVJXt09y QSoBkvbpfQAMQnDrJgdJSpIikRTDQvQIn3YFssyLZ1Z0Au+rPB6K40EB7t5ZJvlv n1+SAd3k2oQ+xDe0n2kwD7BmelSQDeKLwUmhmgKthtSAg7R+L95PppTb286lICyq xur2jKPRWU1rz9t1wQrHgCbtcZpchS3TatxZmJKrPR5qtzv6hf5Ze+ivMRX5OZaR mSJcGKp5V83qLOvBxmaTL0nCqE6AsSDZ+78bbgGnlYcBJWTkenYxsym/f/B7ExoC DCkvW98LYAh3hVvlF2OgP1gM7/oq4Sr31oULghkfI/Uy -----END CERTIFICATE-----Generated at Mon Jan 19 16:51:59 2026 by rpki-client