This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/cd3f48-f7b2-4405-a159-ac1bf80544ca/1/l3l8yxUr9omdcAUQmmd6AOhV5wc.roa File: l3l8yxUr9omdcAUQmmd6AOhV5wc.roa (raw, json) Hash identifier: QwmCoU6dspwPSObVe7zaLFVkXzPFM4im8S89hkRVGe4= Subject key identifier: 97:79:7C:CB:15:2B:F6:89:9D:70:05:10:9A:67:7A:00:E8:55:E7:07 Certificate issuer: /CN=efcfc7cf5709588a7087e6c9e10ecaaa8aba59f5 Certificate serial: 019B7FF2111EB1B2FBC178273B9A3BADCF72 Authority key identifier: EF:CF:C7:CF:57:09:58:8A:70:87:E6:C9:E1:0E:CA:AA:8A:BA:59:F5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/78_Hz1cJWIpwh-bJ4Q7Kqoq6WfU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/cd3f48-f7b2-4405-a159-ac1bf80544ca/1/l3l8yxUr9omdcAUQmmd6AOhV5wc.roa Signing time: Fri 02 Jan 2026 18:22:09 +0000 ROA not before: Fri 02 Jan 2026 18:22:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50115 IP address blocks: 185.236.46.0/24 maxlen: 24 194.54.160.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/cd3f48-f7b2-4405-a159-ac1bf80544ca/1/78_Hz1cJWIpwh-bJ4Q7Kqoq6WfU.crl rsync://rpki.ripe.net/repository/DEFAULT/b5/cd3f48-f7b2-4405-a159-ac1bf80544ca/1/78_Hz1cJWIpwh-bJ4Q7Kqoq6WfU.mft rsync://rpki.ripe.net/repository/DEFAULT/78_Hz1cJWIpwh-bJ4Q7Kqoq6WfU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:11:1e:b1:b2:fb:c1:78:27:3b:9a:3b:ad:cf:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=efcfc7cf5709588a7087e6c9e10ecaaa8aba59f5 Validity Not Before: Jan 2 18:22:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=97797ccb152bf6899d7005109a677a00e855e707 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:f4:4c:cd:4a:ce:df:f9:97:ac:00:14:0f:d9: 2f:3c:ac:d2:62:29:01:0d:bd:5f:8e:41:ee:69:5b: b3:d1:0a:65:0b:bb:ba:2b:1c:02:10:cc:03:ff:e1: a3:9c:6e:8f:7f:95:ef:36:45:d6:5d:05:eb:3b:96: 33:1a:c0:4d:a4:50:7f:e6:55:ea:a2:f1:ac:95:dd: e0:48:4e:65:2e:15:1d:29:1f:68:b2:4e:2a:7f:80: df:fd:29:26:f5:6b:d5:02:a0:47:93:d7:cf:ca:26: 1f:f4:27:61:d6:e2:e7:fa:aa:56:79:5f:cc:33:7f: 92:3d:78:ba:a3:85:87:c3:20:97:30:e4:5d:0b:79: 54:4b:6f:67:81:9d:59:4b:44:71:47:85:0b:32:6e: a9:a3:f6:a1:01:ba:38:ad:ba:62:67:48:9c:bd:49: 30:43:97:aa:2d:8f:38:e3:d0:d4:d3:ca:9e:b2:e0: 38:e1:ab:33:9f:76:fe:e5:4c:3f:f3:75:af:42:4e: 4b:47:0e:37:53:f9:3c:b9:a1:6e:82:4f:4c:38:ec: 49:4e:26:e1:49:95:44:a5:cf:18:cc:9e:d5:24:4e: 1a:a0:ef:38:ba:a6:eb:23:ec:86:e6:fd:36:8e:db: 8e:c7:53:95:89:9b:12:4e:10:00:66:be:7b:6c:16: 96:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:79:7C:CB:15:2B:F6:89:9D:70:05:10:9A:67:7A:00:E8:55:E7:07 X509v3 Authority Key Identifier: keyid:EF:CF:C7:CF:57:09:58:8A:70:87:E6:C9:E1:0E:CA:AA:8A:BA:59:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/78_Hz1cJWIpwh-bJ4Q7Kqoq6WfU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/cd3f48-f7b2-4405-a159-ac1bf80544ca/1/l3l8yxUr9omdcAUQmmd6AOhV5wc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/cd3f48-f7b2-4405-a159-ac1bf80544ca/1/78_Hz1cJWIpwh-bJ4Q7Kqoq6WfU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.236.46.0/24 194.54.160.0/22 Signature Algorithm: sha256WithRSAEncryption 13:1e:47:7a:11:80:df:8d:52:8e:d7:00:a5:ad:4d:53:3c:b4: cc:c0:90:4a:fe:91:32:18:fe:dd:a5:1f:e0:37:79:36:18:fd: ea:a3:d9:a6:c6:8c:b3:dd:2c:ce:4e:1a:d1:c6:55:0d:79:1d: 37:3a:7d:0b:79:42:a4:7f:45:b3:db:45:d4:0a:b6:95:6b:69: b7:8d:42:55:2a:b6:bb:ab:f5:5d:6b:2f:a4:84:59:47:8b:8c: 53:1c:c9:3b:32:db:c5:f8:a7:2c:c7:79:50:bb:68:9a:a7:5b: 99:b9:47:56:1a:60:22:0a:51:6b:b7:e0:94:47:ef:1c:dc:b7: 1c:07:99:4a:4a:c8:f6:e1:c6:f0:61:43:fb:2a:79:05:67:47: 21:fb:aa:11:a7:7e:d0:fe:65:e0:48:85:c7:2e:25:88:6d:09: 24:fc:c1:81:ff:64:ef:70:63:83:9f:c0:56:ce:19:de:7f:be: bc:c7:1a:5b:4d:92:7d:0f:3b:6e:69:46:f6:aa:12:72:ab:78: a9:76:28:64:7d:9f:a5:33:3b:8c:1f:d5:ad:ed:cc:fa:86:9f: 3b:ea:c5:77:6d:bf:36:47:dc:a0:95:bc:fc:d1:fe:e5:85:ed: 1c:03:f9:59:59:de:6a:ea:15:b4:e0:b9:2d:1e:b1:1b:09:1e: 9f:d1:9d:03 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/8hEesbL7wXgnO5o7rc9yMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmY2ZjN2NmNTcwOTU4OGE3MDg3ZTZjOWUxMGVjYWFhOGFi YTU5ZjUwHhcNMjYwMTAyMTgyMjA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5Nzc5N2NjYjE1MmJmNjg5OWQ3MDA1MTA5YTY3N2EwMGU4NTVlNzA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0/RMzUrO3/mXrAAUD9kvPKzSYikB Db1fjkHuaVuz0QplC7u6KxwCEMwD/+GjnG6Pf5XvNkXWXQXrO5YzGsBNpFB/5lXq ovGsld3gSE5lLhUdKR9osk4qf4Df/Skm9WvVAqBHk9fPyiYf9Cdh1uLn+qpWeV/M M3+SPXi6o4WHwyCXMORdC3lUS29ngZ1ZS0RxR4ULMm6po/ahAbo4rbpiZ0icvUkw Q5eqLY8449DU08qesuA44aszn3b+5Uw/83WvQk5LRw43U/k8uaFugk9MOOxJTibh SZVEpc8YzJ7VJE4aoO84uqbrI+yG5v02jtuOx1OViZsSThAAZr57bBaWjwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFJd5fMsVK/aJnXAFEJpnegDoVecHMB8GA1UdIwQY MBaAFO/Px89XCViKcIfmyeEOyqqKuln1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNzhfSHoxY0pXSXB3aC1iSjRRN0txb3E2V2ZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS9jZDNmNDgtZjdiMi00NDA1LWExNTkt YWMxYmY4MDU0NGNhLzEvbDNsOHl4VXI5b21kY0FVUW1tZDZBT2hWNXdjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNS9jZDNmNDgtZjdiMi00NDA1LWExNTktYWMxYmY4MDU0NGNh LzEvNzhfSHoxY0pXSXB3aC1iSjRRN0txb3E2V2ZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAuewuAwQC wjagMA0GCSqGSIb3DQEBCwUAA4IBAQATHkd6EYDfjVKO1wClrU1TPLTMwJBK/pEy GP7dpR/gN3k2GP3qo9mmxoyz3SzOThrRxlUNeR03On0LeUKkf0Wz20XUCraVa2m3 jUJVKra7q/Vday+khFlHi4xTHMk7MtvF+Kcsx3lQu2iap1uZuUdWGmAiClFrt+CU R+8c3LccB5lKSsj24cbwYUP7KnkFZ0ch+6oRp37Q/mXgSIXHLiWIbQkk/MGB/2Tv cGODn8BWzhnef768xxpbTZJ9DztuaUb2qhJyq3ipdihkfZ+lMzuMH9Wt7cz6hp87 6sV3bb82R9yglbz80f7lhe0cA/lZWd5q6hW04LktHrEbCR6f0Z0D -----END CERTIFICATE-----Generated at Tue Feb 10 00:03:21 2026 by rpki-client