This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/22d20e-0bd6-49fb-b9c3-e20d707c00fb/1/lFXW11JmtXkBjm-uNTCzHeFzM7o.roa File: lFXW11JmtXkBjm-uNTCzHeFzM7o.roa (raw, json) Hash identifier: ehAd9mUsbggx1/mGegpTmvG9odTX8xtW0ahGr9D7dD0= Subject key identifier: 94:55:D6:D7:52:66:B5:79:01:8E:6F:AE:35:30:B3:1D:E1:73:33:BA Certificate issuer: /CN=d5a89094e12e54dd901e32d33ce5131e046ee70c Certificate serial: 019B7AC8B9A3E632DB8657C0588A8A075F61 Authority key identifier: D5:A8:90:94:E1:2E:54:DD:90:1E:32:D3:3C:E5:13:1E:04:6E:E7:0C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1aiQlOEuVN2QHjLTPOUTHgRu5ww.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/22d20e-0bd6-49fb-b9c3-e20d707c00fb/1/lFXW11JmtXkBjm-uNTCzHeFzM7o.roa Signing time: Thu 01 Jan 2026 18:18:53 +0000 ROA not before: Thu 01 Jan 2026 18:18:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61363 IP address blocks: 176.119.216.0/24 maxlen: 24 194.11.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/22d20e-0bd6-49fb-b9c3-e20d707c00fb/1/1aiQlOEuVN2QHjLTPOUTHgRu5ww.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/22d20e-0bd6-49fb-b9c3-e20d707c00fb/1/1aiQlOEuVN2QHjLTPOUTHgRu5ww.mft rsync://rpki.ripe.net/repository/DEFAULT/1aiQlOEuVN2QHjLTPOUTHgRu5ww.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 18:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:b9:a3:e6:32:db:86:57:c0:58:8a:8a:07:5f:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5a89094e12e54dd901e32d33ce5131e046ee70c Validity Not Before: Jan 1 18:18:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9455d6d75266b579018e6fae3530b31de17333ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:06:20:25:45:c0:63:c6:ae:57:fa:d4:ef:67: ec:32:4c:79:a1:df:c3:00:b1:12:9f:cf:ff:64:37: ea:6d:0f:f9:4c:3c:1d:fc:73:65:5d:16:95:e2:cc: c9:09:7a:3a:b8:a2:c6:99:e1:a0:3c:5b:95:29:38: 1d:38:83:57:47:71:1d:a2:65:57:cb:15:30:c0:d7: 52:d0:c7:21:a5:75:b7:4a:75:24:79:26:98:fc:f4: eb:51:1d:24:13:7a:fe:72:92:df:59:35:9a:9c:93: 56:48:81:df:7d:fb:dd:01:80:f7:e5:0b:bf:ec:4c: a0:72:70:7e:7b:2d:9d:1d:66:05:7c:53:d7:58:9b: a8:8b:49:a5:e9:73:fe:22:3b:1b:c8:76:ee:0d:f9: 3d:bf:b9:98:b7:4c:fd:82:31:c4:6c:ee:2a:30:3a: e4:79:87:69:71:ae:9b:50:2a:2c:31:de:11:a2:b4: e3:20:c0:43:86:73:cc:4a:b5:13:76:e9:91:3b:49: 7f:5c:b1:00:11:7c:8f:96:ad:7e:dd:48:50:4f:b8: 8a:ae:b4:5c:1d:b7:fb:ef:8f:7b:09:57:b3:bd:1d: 84:45:dd:a4:b8:ee:bb:22:21:ac:c1:07:83:df:f6: e5:4b:7a:14:0c:b6:7d:4d:97:86:dd:93:9b:6d:34: 05:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:55:D6:D7:52:66:B5:79:01:8E:6F:AE:35:30:B3:1D:E1:73:33:BA X509v3 Authority Key Identifier: keyid:D5:A8:90:94:E1:2E:54:DD:90:1E:32:D3:3C:E5:13:1E:04:6E:E7:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1aiQlOEuVN2QHjLTPOUTHgRu5ww.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/22d20e-0bd6-49fb-b9c3-e20d707c00fb/1/lFXW11JmtXkBjm-uNTCzHeFzM7o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/22d20e-0bd6-49fb-b9c3-e20d707c00fb/1/1aiQlOEuVN2QHjLTPOUTHgRu5ww.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.119.216.0/24 194.11.203.0/24 Signature Algorithm: sha256WithRSAEncryption 18:b7:bc:6f:eb:3d:e8:8a:91:8d:21:e8:64:d6:54:93:38:f3: 7d:4b:2f:e8:c6:9b:d4:76:fa:69:de:2f:56:fb:95:a6:41:6d: 74:53:ff:2c:1a:e0:d1:22:be:84:fe:a5:32:6b:90:2b:a7:42: 44:54:ce:c5:d8:89:9b:2f:b7:53:22:f3:96:3b:3e:aa:6f:29: b3:cc:7a:f6:ac:6e:df:45:58:4c:76:25:5c:70:67:b3:f3:5d: 11:23:ad:f0:b1:de:dd:f9:4c:60:66:c6:59:ef:71:f5:a8:35: c5:37:35:60:44:17:58:df:97:94:28:c6:e7:e2:9b:86:05:44: cd:3a:5f:d9:e1:95:7f:b8:4c:9c:d6:8d:68:78:20:a5:b9:e1: 2a:68:fe:4e:8e:60:8f:dd:15:5f:e5:20:89:de:c6:15:10:1a: 5e:e4:59:a7:33:14:ee:d1:e1:47:35:e0:de:d4:a0:aa:3c:62: 02:76:be:1a:7d:49:7d:8b:bd:64:e5:69:c6:78:6c:42:ee:f8: 40:b6:f5:43:01:a6:8c:b1:3c:6b:e9:a7:04:b4:71:c6:8f:d2: a4:4c:ad:2c:6f:25:aa:47:9b:ea:e9:f8:e0:e2:44:ba:19:73: dc:2d:3d:2b:42:f5:a3:17:3a:2d:9f:cf:d9:4c:d8:5a:aa:73: 2c:83:c1:43 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt6yLmj5jLbhlfAWIqKB19hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1YTg5MDk0ZTEyZTU0ZGQ5MDFlMzJkMzNjZTUxMzFlMDQ2 ZWU3MGMwHhcNMjYwMTAxMTgxODUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NDU1ZDZkNzUyNjZiNTc5MDE4ZTZmYWUzNTMwYjMxZGUxNzMzM2JhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuAYgJUXAY8auV/rU72fsMkx5od/D ALESn8//ZDfqbQ/5TDwd/HNlXRaV4szJCXo6uKLGmeGgPFuVKTgdOINXR3EdomVX yxUwwNdS0MchpXW3SnUkeSaY/PTrUR0kE3r+cpLfWTWanJNWSIHfffvdAYD35Qu/ 7EygcnB+ey2dHWYFfFPXWJuoi0ml6XP+IjsbyHbuDfk9v7mYt0z9gjHEbO4qMDrk eYdpca6bUCosMd4RorTjIMBDhnPMSrUTdumRO0l/XLEAEXyPlq1+3UhQT7iKrrRc Hbf77497CVezvR2ERd2kuO67IiGswQeD3/blS3oUDLZ9TZeG3ZObbTQFTQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFJRV1tdSZrV5AY5vrjUwsx3hczO6MB8GA1UdIwQY MBaAFNWokJThLlTdkB4y0zzlEx4EbucMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMWFpUWxPRXVWTjJRSGpMVFBPVVRIZ1J1NXd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS8yMmQyMGUtMGJkNi00OWZiLWI5YzMt ZTIwZDcwN2MwMGZiLzEvbEZYVzExSm10WGtCam0tdU5UQ3pIZUZ6TTdvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS8yMmQyMGUtMGJkNi00OWZiLWI5YzMtZTIwZDcwN2MwMGZi LzEvMWFpUWxPRXVWTjJRSGpMVFBPVVRIZ1J1NXd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAsHfYAwQA wgvLMA0GCSqGSIb3DQEBCwUAA4IBAQAYt7xv6z3oipGNIehk1lSTOPN9Sy/oxpvU dvpp3i9W+5WmQW10U/8sGuDRIr6E/qUya5Arp0JEVM7F2ImbL7dTIvOWOz6qbymz zHr2rG7fRVhMdiVccGez810RI63wsd7d+UxgZsZZ73H1qDXFNzVgRBdY35eUKMbn 4puGBUTNOl/Z4ZV/uEyc1o1oeCClueEqaP5OjmCP3RVf5SCJ3sYVEBpe5FmnMxTu 0eFHNeDe1KCqPGICdr4afUl9i71k5WnGeGxC7vhAtvVDAaaMsTxr6acEtHHGj9Kk TK0sbyWqR5vq6fjg4kS6GXPcLT0rQvWjFzotn8/ZTNhaqnMsg8FD -----END CERTIFICATE-----Generated at Tue Feb 10 03:09:34 2026 by rpki-client