This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/lNSjT7SmFpg57UfmlGETcFqFRDw.roa File: lNSjT7SmFpg57UfmlGETcFqFRDw.roa (raw, json) Hash identifier: FwK0XW/qauYIXsUpG2PyL8F3ziwaQBgnO0UPNAtcmA8= Subject key identifier: 94:D4:A3:4F:B4:A6:16:98:39:ED:47:E6:94:61:13:70:5A:85:44:3C Certificate issuer: /CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4 Certificate serial: 019B7BA5343CCC44CE13C3462204C6C1A090 Authority key identifier: 84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/lNSjT7SmFpg57UfmlGETcFqFRDw.roa Signing time: Thu 01 Jan 2026 22:19:43 +0000 ROA not before: Thu 01 Jan 2026 22:19:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39163 IP address blocks: 62.176.120.0/24 maxlen: 24 95.43.201.0/24 maxlen: 24 95.43.251.0/24 maxlen: 24 213.91.197.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.mft rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:34:3c:cc:44:ce:13:c3:46:22:04:c6:c1:a0:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4 Validity Not Before: Jan 1 22:19:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=94d4a34fb4a6169839ed47e6946113705a85443c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:99:11:3e:a3:c5:cd:c8:63:c8:03:08:85:f4: cc:32:22:e5:a8:70:24:2d:d1:be:34:cb:d7:f1:85: c3:ae:e5:a0:a8:ba:5a:ba:1f:fd:b0:77:26:73:6f: 54:f1:e5:a4:70:4e:57:6d:39:2e:0b:cc:9e:cb:f1: 95:a3:c1:fd:c2:b9:f9:2c:f5:f6:7d:09:89:77:fc: 5a:d0:2b:ef:d7:9c:d8:ff:03:da:30:e6:85:25:12: 4b:e0:ec:09:df:e3:06:06:94:ab:c6:04:29:43:fd: c5:f3:b9:f2:bb:b2:41:e1:75:d6:90:86:48:ac:46: 66:b9:87:22:bc:1b:81:c5:49:9d:9f:a0:31:3a:7c: 6b:84:11:d4:a5:30:4b:55:64:50:c4:61:46:8e:04: 8a:2c:44:c3:05:b6:01:ca:5f:40:04:13:81:7e:c1: cc:ff:30:a2:f4:4d:43:37:09:a9:f7:f6:7e:aa:07: 15:ca:f1:3f:6d:04:c3:de:bf:eb:35:8b:4e:2a:71: 89:18:98:7b:2c:bc:bc:d0:3e:f6:a5:4f:2b:12:75: 6b:ec:5a:47:6f:ab:78:19:46:7c:f1:10:bd:0f:3a: 95:97:0b:4c:48:50:38:39:2d:45:b5:32:29:97:87: 6e:48:c2:af:ca:93:ef:97:1d:aa:fd:69:01:29:58: ea:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:D4:A3:4F:B4:A6:16:98:39:ED:47:E6:94:61:13:70:5A:85:44:3C X509v3 Authority Key Identifier: keyid:84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/lNSjT7SmFpg57UfmlGETcFqFRDw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.176.120.0/24 95.43.201.0/24 95.43.251.0/24 213.91.197.0/24 Signature Algorithm: sha256WithRSAEncryption a1:b2:58:8b:e3:55:4d:8b:ee:00:57:34:37:cd:0c:9c:47:7b: 95:3d:d7:fd:6a:f0:87:10:50:12:b2:a0:b0:79:31:e3:ff:4b: 22:e1:1f:5b:b9:d5:1d:34:c4:a5:3c:af:94:d9:2b:b7:fa:5c: ca:53:fb:fb:05:9e:f6:1c:57:24:65:72:6f:53:9a:68:59:21: b5:63:62:1c:29:f6:21:6e:8d:42:ec:d0:42:c5:50:dd:e8:8f: 24:58:bc:25:36:30:62:5a:7d:19:63:97:f6:93:19:9a:35:ec: 0a:1b:ac:67:38:1d:7f:ab:af:2f:d4:a5:0c:60:4e:d6:b6:44: 34:3d:28:3a:e3:38:3a:95:89:24:38:ec:5a:2f:d3:13:00:75: 97:43:63:9f:3b:69:b0:b1:8c:be:1e:e5:b0:05:22:89:ec:68: 95:dd:ac:d1:c7:74:0b:a7:3c:d4:aa:22:80:03:d9:e3:6c:7d: 93:63:7e:94:0e:db:50:7e:b5:54:50:36:c1:66:56:65:c2:84: 62:fc:61:0e:a4:08:25:7f:97:bc:75:14:c8:70:2a:b1:17:a2: 66:5b:16:12:5c:1d:a3:4a:9f:25:1a:2d:f2:67:b2:a5:23:5b: 8b:88:82:04:bd:dd:9c:dc:6f:13:13:05:50:01:95:a5:81:5d: ec:90:f3:ae -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt7pTQ8zETOE8NGIgTGwaCQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0YjJmNGZhNTE2M2FmOTYxNjhlODhmYmY5Y2I0ZWQxZWQ4 ZmI0YzQwHhcNMjYwMTAxMjIxOTQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NGQ0YTM0ZmI0YTYxNjk4MzllZDQ3ZTY5NDYxMTM3MDVhODU0NDNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvJkRPqPFzchjyAMIhfTMMiLlqHAk LdG+NMvX8YXDruWgqLpauh/9sHcmc29U8eWkcE5XbTkuC8yey/GVo8H9wrn5LPX2 fQmJd/xa0Cvv15zY/wPaMOaFJRJL4OwJ3+MGBpSrxgQpQ/3F87nyu7JB4XXWkIZI rEZmuYcivBuBxUmdn6AxOnxrhBHUpTBLVWRQxGFGjgSKLETDBbYByl9ABBOBfsHM /zCi9E1DNwmp9/Z+qgcVyvE/bQTD3r/rNYtOKnGJGJh7LLy80D72pU8rEnVr7FpH b6t4GUZ88RC9DzqVlwtMSFA4OS1FtTIpl4duSMKvypPvlx2q/WkBKVjqxwIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFJTUo0+0phaYOe1H5pRhE3BahUQ8MB8GA1UdIwQY MBaAFISy9PpRY6+WFo6I+/nLTtHtj7TEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaExMMC1sRmpyNVlXam9qNy1jdE8wZTJQdE1RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC80YWE3ODktODc4Yi00NzJiLWI4NDct ODcyYmEyZDlmNDRjLzEvbE5TalQ3U21GcGc1N1VmbWxHRVRjRnFGUkR3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC80YWE3ODktODc4Yi00NzJiLWI4NDctODcyYmEyZDlmNDRj LzEvaExMMC1sRmpyNVlXam9qNy1jdE8wZTJQdE1RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAPrB4AwQA XyvJAwQAXyv7AwQA1VvFMA0GCSqGSIb3DQEBCwUAA4IBAQChsliL41VNi+4AVzQ3 zQycR3uVPdf9avCHEFASsqCweTHj/0si4R9budUdNMSlPK+U2Su3+lzKU/v7BZ72 HFckZXJvU5poWSG1Y2IcKfYhbo1C7NBCxVDd6I8kWLwlNjBiWn0ZY5f2kxmaNewK G6xnOB1/q68v1KUMYE7WtkQ0PSg64zg6lYkkOOxaL9MTAHWXQ2OfO2mwsYy+HuWw BSKJ7GiV3azRx3QLpzzUqiKAA9njbH2TY36UDttQfrVUUDbBZlZlwoRi/GEOpAgl f5e8dRTIcCqxF6JmWxYSXB2jSp8lGi3yZ7KlI1uLiIIEvd2c3G8TEwVQAZWlgV3s kPOu -----END CERTIFICATE-----Generated at Mon Jan 26 11:43:42 2026 by rpki-client