This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/LxR6ymO2jTw3ogIuaUShbQlGTdk.roa File: LxR6ymO2jTw3ogIuaUShbQlGTdk.roa (raw, json) Hash identifier: 8fZ9LesjpoPrv1NgIcb6YI3BUredk/uWtux2rOwhc5k= Subject key identifier: 2F:14:7A:CA:63:B6:8D:3C:37:A2:02:2E:69:44:A1:6D:09:46:4D:D9 Certificate issuer: /CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4 Certificate serial: 019C44AC5EFF9632C835C82B1B8B21A178EE Authority key identifier: D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/LxR6ymO2jTw3ogIuaUShbQlGTdk.roa Signing time: Mon 09 Feb 2026 23:11:13 +0000 ROA not before: Mon 09 Feb 2026 23:11:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16589 IP address blocks: 77.223.192.0/21 maxlen: 21 77.223.200.0/23 maxlen: 24 79.139.64.0/23 maxlen: 24 83.142.200.0/21 maxlen: 24 94.26.110.0/23 maxlen: 24 94.101.103.0/24 maxlen: 24 95.215.144.0/22 maxlen: 24 141.193.108.0/22 maxlen: 24 162.250.216.0/22 maxlen: 24 176.222.48.0/22 maxlen: 24 178.216.184.0/21 maxlen: 24 188.215.12.0/22 maxlen: 24 198.14.16.0/20 maxlen: 24 198.145.112.0/22 maxlen: 24 205.134.244.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.mft rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 11 Feb 2026 08:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:44:ac:5e:ff:96:32:c8:35:c8:2b:1b:8b:21:a1:78:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4 Validity Not Before: Feb 9 23:11:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2f147aca63b68d3c37a2022e6944a16d09464dd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:07:9c:a9:03:ce:8a:b0:d3:65:d8:81:57:89: e4:05:42:6b:d5:6e:21:d1:ad:82:1e:ab:c9:8a:15: b2:f7:6e:c8:7d:7f:d3:b6:77:ad:d2:f5:69:2b:88: 1c:ef:ea:0b:c4:dc:7b:04:4b:74:68:44:4b:50:0e: 34:0d:0b:d8:38:74:4e:ff:7e:57:56:74:f3:ec:71: 1f:03:fa:dd:ac:8b:c4:60:a1:3f:58:8f:c8:6e:bf: a6:b8:d3:a4:a2:1a:dc:79:af:86:a2:47:4d:c4:77: 66:db:d6:b2:9e:bb:7f:bb:ad:01:38:7a:1c:50:8d: a2:30:71:41:2c:b6:88:85:07:7a:7f:54:f5:d2:f9: 76:f6:54:b1:1f:ed:f5:f5:8b:34:ea:d3:e2:ae:30: 9e:3f:67:18:03:6b:f1:05:7e:61:00:c5:3d:2d:51: 74:56:e3:9e:27:8e:0a:f8:c5:7a:58:63:49:59:75: cc:7f:4f:75:43:76:53:91:6f:59:1d:f9:2e:f7:f3: 8a:39:8d:87:61:39:f9:eb:71:35:9e:81:8d:69:e8: 90:d1:af:c9:27:79:4f:5d:8c:50:26:f7:82:6c:8f: 89:59:8f:10:a7:e5:50:bf:a1:de:b1:73:89:07:36: 9e:f4:5f:99:a2:df:2c:3a:0c:e4:8e:6f:81:cf:90: 25:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:14:7A:CA:63:B6:8D:3C:37:A2:02:2E:69:44:A1:6D:09:46:4D:D9 X509v3 Authority Key Identifier: keyid:D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/LxR6ymO2jTw3ogIuaUShbQlGTdk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.223.192.0-77.223.201.255 79.139.64.0/23 83.142.200.0/21 94.26.110.0/23 94.101.103.0/24 95.215.144.0/22 141.193.108.0/22 162.250.216.0/22 176.222.48.0/22 178.216.184.0/21 188.215.12.0/22 198.14.16.0/20 198.145.112.0/22 205.134.244.0/22 Signature Algorithm: sha256WithRSAEncryption 7e:e9:3a:e8:38:f6:e7:03:f9:79:84:3f:90:99:29:d8:ca:5f: 02:ba:7d:26:9f:d9:3d:f5:76:47:68:c6:35:82:ab:1b:cd:9d: b0:0f:ad:da:87:9c:4a:1b:68:91:d6:d2:ca:f2:92:51:19:08: 47:53:5d:0d:30:72:ff:2e:9e:b6:a8:c0:60:c6:04:a1:7d:e2: 80:7b:51:ee:90:8e:a7:70:75:dd:44:9d:f6:5b:2a:c1:4a:72: 98:e7:5e:56:82:b0:a1:6e:8c:d0:4e:26:6c:a5:bf:bf:bb:c4: 6e:91:69:1c:81:3b:2e:7f:54:33:20:03:d5:61:2a:5a:58:21: b6:7a:02:55:d9:c8:33:3b:49:a7:c9:85:bf:d4:2c:bf:6a:f2: 71:e6:cb:46:8d:4c:28:52:13:2d:87:a8:e1:e8:9b:69:09:c1: 54:7a:54:cf:cd:23:b9:7c:f5:8e:78:c7:d5:cd:28:cc:e4:76: 70:3a:eb:64:f8:ed:af:9c:58:ae:a3:db:99:7e:c2:0b:99:24: 65:b0:8a:eb:f3:36:64:1a:36:b2:5f:fd:ae:6e:30:63:bf:2a: 20:7d:5a:6d:33:60:97:14:d0:2c:1a:e4:1b:49:e7:18:80:81: 1d:36:bc:c1:6f:2f:2d:1b:2c:4e:1b:ff:46:12:c8:40:00:50: db:7b:b9:00 -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgISAZxErF7/ljLINcgrG4shoXjuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0OGEyN2Y0NGIxMDQwNGM1MmY2ZmZjNGUwOGRjODJiZjhi NWRlZTQwHhcNMjYwMjA5MjMxMTEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZjE0N2FjYTYzYjY4ZDNjMzdhMjAyMmU2OTQ0YTE2ZDA5NDY0ZGQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxgecqQPOirDTZdiBV4nkBUJr1W4h 0a2CHqvJihWy927IfX/Ttnet0vVpK4gc7+oLxNx7BEt0aERLUA40DQvYOHRO/35X VnTz7HEfA/rdrIvEYKE/WI/Ibr+muNOkohrcea+GokdNxHdm29aynrt/u60BOHoc UI2iMHFBLLaIhQd6f1T10vl29lSxH+319Ys06tPirjCeP2cYA2vxBX5hAMU9LVF0 VuOeJ44K+MV6WGNJWXXMf091Q3ZTkW9ZHfku9/OKOY2HYTn563E1noGNaeiQ0a/J J3lPXYxQJveCbI+JWY8Qp+VQv6HesXOJBzae9F+Zot8sOgzkjm+Bz5Al8wIDAQAB o4ICXzCCAlswHQYDVR0OBBYEFC8Uespjto08N6ICLmlEoW0JRk3ZMB8GA1UdIwQY MBaAFNSKJ/RLEEBMUvb/xOCNyCv4td7kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUlvbjlFc1FRRXhTOXZfRTRJM0lLX2kxM3VRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS80YmI1YTctMzQ2Yy00MTk1LTlkMGYt NTlmNTk4NGI2NGVhLzEvTHhSNnltTzJqVHczb2dJdWFVU2hiUWxHVGRrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS80YmI1YTctMzQ2Yy00MTk1LTlkMGYtNTlmNTk4NGI2NGVh LzEvMUlvbjlFc1FRRXhTOXZfRTRJM0lLX2kxM3VRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMHUGCCsGAQUFBwEHAQH/BGYwZDBiBAIAATBcMAwDBAZN38AD BAFN38gDBAFPi0ADBANTjsgDBAFeGm4DBABeZWcDBAJf15ADBAKNwWwDBAKi+tgD BAKw3jADBAOy2LgDBAK81wwDBATGDhADBALGkXADBALNhvQwDQYJKoZIhvcNAQEL BQADggEBAH7pOug49ucD+XmEP5CZKdjKXwK6fSaf2T31dkdoxjWCqxvNnbAPrdqH nEobaJHW0sryklEZCEdTXQ0wcv8unraowGDGBKF94oB7Ue6Qjqdwdd1EnfZbKsFK cpjnXlaCsKFujNBOJmylv7+7xG6RaRyBOy5/VDMgA9VhKlpYIbZ6AlXZyDM7SafJ hb/ULL9q8nHmy0aNTChSEy2HqOHom2kJwVR6VM/NI7l89Y54x9XNKMzkdnA662T4 7a+cWK6j25l+wguZJGWwiuvzNmQaNrJf/a5uMGO/KiB9Wm0zYJcU0Cwa5BtJ5xiA gR02vMFvLy0bLE4b/0YSyEAAUNt7uQA= -----END CERTIFICATE-----Generated at Tue Feb 10 14:12:17 2026 by rpki-client