This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/lcM9VBsMX8XlCXtWIYOwxsgyfcs.roa File: lcM9VBsMX8XlCXtWIYOwxsgyfcs.roa (raw, json) Hash identifier: 5oIPhkO6h+85iz0pQDQy9IOXsl5pzQuFQs9T8Q+5gKM= Subject key identifier: 95:C3:3D:54:1B:0C:5F:C5:E5:09:7B:56:21:83:B0:C6:C8:32:7D:CB Certificate issuer: /CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1 Certificate serial: 019B7E3807ED6CD9C82A407FC593EABEEDD0 Authority key identifier: 44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/lcM9VBsMX8XlCXtWIYOwxsgyfcs.roa Signing time: Fri 02 Jan 2026 10:19:19 +0000 ROA not before: Fri 02 Jan 2026 10:19:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49755 IP address blocks: 185.177.112.0/24 maxlen: 24 2a0a:c3c5:f000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.mft rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 13:01:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:07:ed:6c:d9:c8:2a:40:7f:c5:93:ea:be:ed:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1 Validity Not Before: Jan 2 10:19:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=95c33d541b0c5fc5e5097b562183b0c6c8327dcb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:62:a0:7a:df:16:1b:9b:76:46:20:dd:57:2d: 5a:d3:a9:48:0c:ac:f2:2b:47:d5:87:49:a6:67:a2: d4:17:fe:5f:4b:7a:5a:5b:d8:b9:f5:24:51:7b:99: 86:fd:a9:5c:aa:aa:cb:7c:85:07:9f:18:bd:69:be: 4b:cb:e7:e7:74:5a:65:b7:e0:25:69:85:51:7c:3f: ea:4e:70:e9:04:72:3f:dc:e1:c7:01:64:60:16:66: c9:da:5e:38:83:b7:36:e2:d4:16:f2:69:0f:94:9d: 67:f1:43:ed:f8:42:b3:d1:50:3a:4a:b2:36:5a:dd: 2e:c3:08:0d:dd:b5:93:88:c7:38:3b:10:aa:6a:f8: 51:bd:77:7a:a3:68:c2:15:bd:a1:53:62:cf:15:a8: 4c:ca:e1:6b:d9:cb:2e:0c:49:fa:db:99:4a:ab:36: 43:1c:15:95:7a:82:7a:20:25:d6:09:d7:fc:fd:a1: 20:8d:65:26:5c:6c:08:f0:54:ba:88:d0:5a:6f:92: 24:46:b6:34:55:4d:42:52:70:c3:b6:b4:36:ee:6d: 72:8b:4a:70:af:4b:f6:ba:ac:ff:eb:1a:0b:af:23: e9:ee:a3:94:a4:d7:93:e1:3c:67:13:1b:96:1f:6f: 69:56:8c:b7:27:0d:c8:5f:bf:86:61:95:8d:04:86: ad:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:C3:3D:54:1B:0C:5F:C5:E5:09:7B:56:21:83:B0:C6:C8:32:7D:CB X509v3 Authority Key Identifier: keyid:44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/lcM9VBsMX8XlCXtWIYOwxsgyfcs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.177.112.0/24 IPv6: 2a0a:c3c5:f000::/36 Signature Algorithm: sha256WithRSAEncryption 61:b3:a6:6c:c0:a9:5e:c3:d9:19:f9:0e:0b:dd:80:fa:e0:cb: 6e:ed:59:2a:1a:a1:21:6d:b0:8e:b5:ca:6e:28:84:97:32:40: ed:59:41:34:f4:30:19:7b:84:98:b7:b9:75:66:4b:3f:ad:a7: cd:a5:e2:e0:b5:44:76:23:a9:2d:87:d0:ca:d1:bb:33:38:a9: d5:d3:85:80:4f:67:b1:c2:3c:76:63:7a:fe:38:4f:41:e8:33: 95:b0:2a:a1:95:7c:b1:45:40:50:b7:56:72:fe:9e:e4:fa:67: 6f:45:16:40:07:ac:d0:d5:2f:1f:4c:05:dc:57:58:0c:e8:02: 5e:64:c5:99:26:35:91:34:a2:45:5b:14:d6:e1:a4:58:25:62: fe:20:32:7a:8b:63:a7:f9:55:4f:36:b9:43:26:b1:b0:07:2b: fb:02:4c:36:ad:8e:fa:8b:26:f4:e1:32:67:ec:8f:d9:37:d9: f6:1a:1c:cb:9f:a1:e2:6e:c4:7f:3b:b9:09:86:8c:60:af:b4: 3d:d1:8a:8f:3d:21:74:e6:e8:ba:78:35:c9:88:45:f0:fa:6f: 6e:51:cb:f0:17:41:02:8a:2a:ba:53:d2:b4:4a:b9:0f:3d:2d: 95:94:a7:86:56:54:86:3f:52:9c:63:7e:d8:59:ce:d8:50:17: 58:08:08:9e -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgISAZt+OAftbNnIKkB/xZPqvu3QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0NTllYzJhNWZkNTM5MDljNTIzOWY0Y2M4ZDZkMzI5YTI3 NzliYjEwHhcNMjYwMTAyMTAxOTE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NWMzM2Q1NDFiMGM1ZmM1ZTUwOTdiNTYyMTgzYjBjNmM4MzI3ZGNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz2Kget8WG5t2RiDdVy1a06lIDKzy K0fVh0mmZ6LUF/5fS3paW9i59SRRe5mG/alcqqrLfIUHnxi9ab5Ly+fndFplt+Al aYVRfD/qTnDpBHI/3OHHAWRgFmbJ2l44g7c24tQW8mkPlJ1n8UPt+EKz0VA6SrI2 Wt0uwwgN3bWTiMc4OxCqavhRvXd6o2jCFb2hU2LPFahMyuFr2csuDEn625lKqzZD HBWVeoJ6ICXWCdf8/aEgjWUmXGwI8FS6iNBab5IkRrY0VU1CUnDDtrQ27m1yi0pw r0v2uqz/6xoLryPp7qOUpNeT4TxnExuWH29pVoy3Jw3IX7+GYZWNBIatnQIDAQAB o4ICGTCCAhUwHQYDVR0OBBYEFJXDPVQbDF/F5Ql7ViGDsMbIMn3LMB8GA1UdIwQY MBaAFERZ7Cpf1TkJxSOfTMjW0ymid5uxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUkZuc0tsX1ZPUW5GSTU5TXlOYlRLYUozbTdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny9mMGFlNjItYzEwNy00M2NlLWE4YTkt NmI0MzcyNjAyMDk2LzEvbGNNOVZCc01YOFhsQ1h0V0lZT3d4c2d5ZmNzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ny9mMGFlNjItYzEwNy00M2NlLWE4YTktNmI0MzcyNjAyMDk2 LzEvUkZuc0tsX1ZPUW5GSTU5TXlOYlRLYUozbTdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAubFwMA4E AgACMAgDBgQqCsPF8DANBgkqhkiG9w0BAQsFAAOCAQEAYbOmbMCpXsPZGfkOC92A +uDLbu1ZKhqhIW2wjrXKbiiElzJA7VlBNPQwGXuEmLe5dWZLP62nzaXi4LVEdiOp LYfQytG7Mzip1dOFgE9nscI8dmN6/jhPQegzlbAqoZV8sUVAULdWcv6e5Ppnb0UW QAes0NUvH0wF3FdYDOgCXmTFmSY1kTSiRVsU1uGkWCVi/iAyeotjp/lVTza5Qyax sAcr+wJMNq2O+osm9OEyZ+yP2TfZ9hocy5+h4m7Efzu5CYaMYK+0PdGKjz0hdObo ung1yYhF8PpvblHL8BdBAooqulPStEq5Dz0tlZSnhlZUhj9SnGN+2FnO2FAXWAgI ng== -----END CERTIFICATE-----Generated at Tue Jan 20 17:19:12 2026 by rpki-client