This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/a59b6d-0239-4211-9bbb-1a21219e9100/1/lJvVKRd6xYXkH3w4sqIr9ELeD6o.roa File: lJvVKRd6xYXkH3w4sqIr9ELeD6o.roa (raw, json) Hash identifier: misofyoI9rt+yQi6weZU/F8kwAPhAeP1MXdYFSxncAY= Subject key identifier: 94:9B:D5:29:17:7A:C5:85:E4:1F:7C:38:B2:A2:2B:F4:42:DE:0F:AA Certificate issuer: /CN=152fedb025a6cbd24868419a0cb5629d48635917 Certificate serial: 019B7B353CDC5E1B64BFA89C2BDF2CD2C6CE Authority key identifier: 15:2F:ED:B0:25:A6:CB:D2:48:68:41:9A:0C:B5:62:9D:48:63:59:17 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FS_tsCWmy9JIaEGaDLVinUhjWRc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/a59b6d-0239-4211-9bbb-1a21219e9100/1/lJvVKRd6xYXkH3w4sqIr9ELeD6o.roa Signing time: Thu 01 Jan 2026 20:17:25 +0000 ROA not before: Thu 01 Jan 2026 20:17:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57958 IP address blocks: 164.138.232.0/21 maxlen: 21 164.138.232.0/24 maxlen: 24 164.138.233.0/24 maxlen: 24 164.138.234.0/24 maxlen: 24 164.138.235.0/24 maxlen: 24 164.138.236.0/24 maxlen: 24 164.138.237.0/24 maxlen: 24 164.138.238.0/24 maxlen: 24 164.138.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/a59b6d-0239-4211-9bbb-1a21219e9100/1/FS_tsCWmy9JIaEGaDLVinUhjWRc.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/a59b6d-0239-4211-9bbb-1a21219e9100/1/FS_tsCWmy9JIaEGaDLVinUhjWRc.mft rsync://rpki.ripe.net/repository/DEFAULT/FS_tsCWmy9JIaEGaDLVinUhjWRc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:3c:dc:5e:1b:64:bf:a8:9c:2b:df:2c:d2:c6:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=152fedb025a6cbd24868419a0cb5629d48635917 Validity Not Before: Jan 1 20:17:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=949bd529177ac585e41f7c38b2a22bf442de0faa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:e1:03:35:84:8d:01:3c:7b:b2:2c:93:fd:29: 26:67:72:1c:db:bc:f5:f7:a6:5a:3e:d3:a8:1f:9a: 7f:8a:1a:ee:d4:25:df:4a:62:a1:23:10:e6:82:b1: ee:32:19:d4:7b:29:70:24:d0:fb:25:cc:45:84:f3: e1:ce:66:5f:e5:22:77:ef:a0:e6:c9:ae:6b:b7:49: e9:90:b6:97:d6:2f:63:cd:ca:9b:0e:84:ce:cb:fb: 21:5e:6c:b6:87:85:24:46:7c:30:b5:1b:4a:cf:e6: 89:b7:4c:5b:d5:39:c9:58:ee:74:00:61:fe:71:de: a5:75:22:fd:4f:60:fa:fb:9e:60:2b:b1:0e:25:28: 18:c9:ab:1d:b0:57:b9:ee:a5:d5:c6:ee:60:53:0b: c2:1d:a6:06:4d:ae:41:43:f4:7e:6e:ec:45:81:a9: 98:7c:35:4d:2b:a5:ca:e1:1a:3e:aa:80:e5:df:6d: b6:67:d4:a9:55:e0:02:02:f1:f6:c9:bb:42:95:c3: 12:6e:0a:e3:51:ee:dd:be:27:be:8a:f4:ca:02:93: d1:6f:7c:93:1e:e9:c5:12:90:79:25:45:11:20:de: e7:ac:46:55:e5:30:80:5b:bb:17:69:3b:8c:1e:59: b2:f9:11:e2:db:24:43:6b:e4:50:af:4f:d7:24:a0: a4:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:9B:D5:29:17:7A:C5:85:E4:1F:7C:38:B2:A2:2B:F4:42:DE:0F:AA X509v3 Authority Key Identifier: keyid:15:2F:ED:B0:25:A6:CB:D2:48:68:41:9A:0C:B5:62:9D:48:63:59:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FS_tsCWmy9JIaEGaDLVinUhjWRc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/a59b6d-0239-4211-9bbb-1a21219e9100/1/lJvVKRd6xYXkH3w4sqIr9ELeD6o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/a59b6d-0239-4211-9bbb-1a21219e9100/1/FS_tsCWmy9JIaEGaDLVinUhjWRc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 164.138.232.0/21 Signature Algorithm: sha256WithRSAEncryption 61:dd:7b:04:05:64:de:03:79:30:cb:1b:98:3f:a1:cb:8d:aa: 44:16:01:dc:df:27:0f:64:21:29:6c:36:3a:09:6d:95:97:6c: 69:f7:95:57:f9:55:93:7c:55:46:6d:c1:ee:59:c9:6f:65:ab: cb:0b:4d:18:06:03:96:1d:10:a3:79:23:40:2d:7e:0e:3d:e3: d2:d9:0d:95:f5:ac:da:c6:c5:c5:d6:9e:55:05:6d:c6:24:9d: 37:01:6b:c9:41:51:e4:42:fb:3a:78:2b:0a:28:e2:c5:76:fc: 00:b3:38:ae:e1:8a:c6:28:77:e1:45:59:e0:bd:ca:0a:69:d3: ca:82:eb:00:0f:51:27:88:7d:21:ad:79:f9:38:a2:d8:6e:85: 3c:a7:9e:21:e1:ec:35:ac:ee:c5:d5:f9:2f:40:a1:51:6d:e8: 4b:87:14:ee:ce:54:94:2c:f8:8a:1b:00:18:ad:0f:5c:7e:9e: e5:44:c5:d6:f6:36:0a:9e:b3:0c:01:ee:bb:4b:0e:c8:1c:b2: c1:69:c3:48:7c:74:5a:0f:f2:76:f0:04:7c:4e:46:d8:f6:cc: b6:80:d4:ed:b9:05:64:37:6a:65:55:8c:97:e7:7b:f4:7d:a5: 3c:ae:9a:57:44:4c:c0:2b:02:79:1c:fa:b0:99:69:c7:e6:97: ff:4a:01:c5 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NTzcXhtkv6icK98s0sbOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE1MmZlZGIwMjVhNmNiZDI0ODY4NDE5YTBjYjU2MjlkNDg2 MzU5MTcwHhcNMjYwMTAxMjAxNzI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NDliZDUyOTE3N2FjNTg1ZTQxZjdjMzhiMmEyMmJmNDQyZGUwZmFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4uEDNYSNATx7siyT/SkmZ3Ic27z1 96ZaPtOoH5p/ihru1CXfSmKhIxDmgrHuMhnUeylwJND7JcxFhPPhzmZf5SJ376Dm ya5rt0npkLaX1i9jzcqbDoTOy/shXmy2h4UkRnwwtRtKz+aJt0xb1TnJWO50AGH+ cd6ldSL9T2D6+55gK7EOJSgYyasdsFe57qXVxu5gUwvCHaYGTa5BQ/R+buxFgamY fDVNK6XK4Ro+qoDl3222Z9SpVeACAvH2ybtClcMSbgrjUe7dvie+ivTKApPRb3yT HunFEpB5JUURIN7nrEZV5TCAW7sXaTuMHlmy+RHi2yRDa+RQr0/XJKCk6QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJSb1SkXesWF5B98OLKiK/RC3g+qMB8GA1UdIwQY MBaAFBUv7bAlpsvSSGhBmgy1Yp1IY1kXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRlNfdHNDV215OUpJYUVHYURMVmluVWhqV1JjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9hNTliNmQtMDIzOS00MjExLTliYmIt MWEyMTIxOWU5MTAwLzEvbEp2VktSZDZ4WVhrSDN3NHNxSXI5RUxlRDZvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC9hNTliNmQtMDIzOS00MjExLTliYmItMWEyMTIxOWU5MTAw LzEvRlNfdHNDV215OUpJYUVHYURMVmluVWhqV1JjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDpIroMA0G CSqGSIb3DQEBCwUAA4IBAQBh3XsEBWTeA3kwyxuYP6HLjapEFgHc3ycPZCEpbDY6 CW2Vl2xp95VX+VWTfFVGbcHuWclvZavLC00YBgOWHRCjeSNALX4OPePS2Q2V9aza xsXF1p5VBW3GJJ03AWvJQVHkQvs6eCsKKOLFdvwAsziu4YrGKHfhRVngvcoKadPK gusAD1EniH0hrXn5OKLYboU8p54h4ew1rO7F1fkvQKFRbehLhxTuzlSULPiKGwAY rQ9cfp7lRMXW9jYKnrMMAe67Sw7IHLLBacNIfHRaD/J28AR8TkbY9sy2gNTtuQVk N2plVYyX53v0faU8rppXREzAKwJ5HPqwmWnH5pf/SgHF -----END CERTIFICATE-----Generated at Mon Feb 9 18:30:06 2026 by rpki-client