This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/2b729f-08a7-4c93-8bc9-815c5f2765d0/1/lBNCxSrIMwGF7q55Faffo34PzIE.roa File: lBNCxSrIMwGF7q55Faffo34PzIE.roa (raw, json) Hash identifier: n9g3kmorGo6N42lTsebPz6v4VTR7WxY6co0/3tPw7b4= Subject key identifier: 94:13:42:C5:2A:C8:33:01:85:EE:AE:79:15:A7:DF:A3:7E:0F:CC:81 Certificate issuer: /CN=ea880bcc302a5dba2c351a6fd39e0a8b3922a535 Certificate serial: 019B79ED302C38CBD8A5CE5602F0603BA3A3 Authority key identifier: EA:88:0B:CC:30:2A:5D:BA:2C:35:1A:6F:D3:9E:0A:8B:39:22:A5:35 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6ogLzDAqXbosNRpv054KizkipTU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/2b729f-08a7-4c93-8bc9-815c5f2765d0/1/lBNCxSrIMwGF7q55Faffo34PzIE.roa Signing time: Thu 01 Jan 2026 14:19:06 +0000 ROA not before: Thu 01 Jan 2026 14:19:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 32787 IP address blocks: 193.35.248.0/24 maxlen: 24 193.35.249.0/24 maxlen: 24 193.35.250.0/24 maxlen: 24 193.35.252.0/24 maxlen: 24 193.35.253.0/24 maxlen: 24 193.35.254.0/24 maxlen: 24 193.35.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/2b729f-08a7-4c93-8bc9-815c5f2765d0/1/6ogLzDAqXbosNRpv054KizkipTU.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/2b729f-08a7-4c93-8bc9-815c5f2765d0/1/6ogLzDAqXbosNRpv054KizkipTU.mft rsync://rpki.ripe.net/repository/DEFAULT/6ogLzDAqXbosNRpv054KizkipTU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 23:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:30:2c:38:cb:d8:a5:ce:56:02:f0:60:3b:a3:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ea880bcc302a5dba2c351a6fd39e0a8b3922a535 Validity Not Before: Jan 1 14:19:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=941342c52ac8330185eeae7915a7dfa37e0fcc81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:0a:85:d0:1f:7a:5d:6d:1b:19:fd:3b:96:75: a1:da:ed:41:11:f7:71:de:88:04:e9:e8:62:2e:23: 13:f9:3f:5a:12:4d:19:6b:21:9b:25:3a:c7:89:bb: b0:7c:43:d0:77:b5:48:ed:06:79:17:f8:6e:77:2c: 4b:11:87:32:4d:d5:b3:d2:fb:02:e7:a1:fb:c9:0b: 41:e3:56:f8:04:41:ea:ee:27:3b:2e:84:2f:e8:3a: 3d:23:e5:bb:c7:f2:87:d5:77:3e:3f:a9:ce:d9:16: 79:d9:c3:53:41:95:56:63:ff:2e:c0:95:51:aa:2c: f1:99:07:e9:de:ad:7d:6d:be:78:d4:44:8a:bf:ee: 16:b8:06:a0:fe:35:82:2d:09:21:77:3c:68:82:e1: 1a:75:19:73:30:6f:e8:2c:7f:cb:41:12:68:07:56: 12:c1:ff:ab:1b:f6:aa:29:b1:a6:70:f0:30:15:5b: 95:a2:79:61:92:56:ab:b7:2e:f0:e6:be:dd:9d:71: 95:20:f4:6a:03:a6:ae:22:a2:b4:ca:91:8c:46:99: ab:ff:98:2d:a9:7f:48:e7:cc:95:7a:35:75:48:e8: f0:a8:44:2a:fa:50:0e:a2:a4:bf:c7:b8:c3:51:6e: 90:80:41:2d:36:5d:dd:86:fe:9e:01:9f:61:28:14: 6f:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:13:42:C5:2A:C8:33:01:85:EE:AE:79:15:A7:DF:A3:7E:0F:CC:81 X509v3 Authority Key Identifier: keyid:EA:88:0B:CC:30:2A:5D:BA:2C:35:1A:6F:D3:9E:0A:8B:39:22:A5:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6ogLzDAqXbosNRpv054KizkipTU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/2b729f-08a7-4c93-8bc9-815c5f2765d0/1/lBNCxSrIMwGF7q55Faffo34PzIE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/2b729f-08a7-4c93-8bc9-815c5f2765d0/1/6ogLzDAqXbosNRpv054KizkipTU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.35.248.0-193.35.250.255 193.35.252.0/22 Signature Algorithm: sha256WithRSAEncryption 5c:52:fd:55:db:be:10:35:ad:60:6d:c3:de:0a:f6:80:6d:3f: 1c:22:df:5a:77:b4:94:95:df:b8:e8:8e:a1:f1:82:14:af:b7: 89:95:3b:37:2f:3f:e6:ee:76:53:9d:45:d5:1b:29:7b:fa:5c: 29:f1:a1:0b:16:2e:2a:5f:48:08:45:1a:6f:85:8a:cd:65:6a: 4c:f0:98:2b:8d:0e:20:aa:4e:ac:8a:07:4f:08:2a:b1:1d:37: 92:13:6c:83:50:8e:20:fb:40:c0:31:62:0b:04:4f:ea:2c:7c: 01:73:27:6d:0d:6c:59:f2:25:38:c5:04:6d:9b:d6:ee:ae:d7: c8:5a:fc:f8:4f:3e:09:b8:e6:97:c0:db:c5:e7:71:c8:9a:67: 78:32:7f:73:e2:40:35:c9:74:ae:28:19:4a:b5:1d:73:34:55: 62:29:de:d5:19:91:2a:e0:9e:09:43:ec:83:7f:aa:e3:4c:85: e5:89:34:ae:ff:fc:19:f6:4c:c7:eb:92:46:e7:ef:a5:0a:b2: 62:5b:95:c8:cf:8c:24:3a:2c:1a:ea:ca:48:6d:7c:95:6f:13: a1:e3:a3:13:da:58:51:b8:50:4b:0b:ca:f6:16:63:f1:e3:3b: 9e:dd:85:52:7b:2e:a2:c6:04:49:dc:38:76:87:e7:33:5c:86: a3:a4:8c:57 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt57TAsOMvYpc5WAvBgO6OjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhODgwYmNjMzAyYTVkYmEyYzM1MWE2ZmQzOWUwYThiMzky MmE1MzUwHhcNMjYwMTAxMTQxOTA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NDEzNDJjNTJhYzgzMzAxODVlZWFlNzkxNWE3ZGZhMzdlMGZjYzgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApwqF0B96XW0bGf07lnWh2u1BEfdx 3ogE6ehiLiMT+T9aEk0ZayGbJTrHibuwfEPQd7VI7QZ5F/hudyxLEYcyTdWz0vsC 56H7yQtB41b4BEHq7ic7LoQv6Do9I+W7x/KH1Xc+P6nO2RZ52cNTQZVWY/8uwJVR qizxmQfp3q19bb541ESKv+4WuAag/jWCLQkhdzxoguEadRlzMG/oLH/LQRJoB1YS wf+rG/aqKbGmcPAwFVuVonlhklarty7w5r7dnXGVIPRqA6auIqK0ypGMRpmr/5gt qX9I58yVejV1SOjwqEQq+lAOoqS/x7jDUW6QgEEtNl3dhv6eAZ9hKBRv6QIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFJQTQsUqyDMBhe6ueRWn36N+D8yBMB8GA1UdIwQY MBaAFOqIC8wwKl26LDUab9OeCos5IqU1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNm9nTHpEQXFYYm9zTlJwdjA1NEtpemtpcFRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC8yYjcyOWYtMDhhNy00YzkzLThiYzkt ODE1YzVmMjc2NWQwLzEvbEJOQ3hTcklNd0dGN3E1NUZhZmZvMzRQeklFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC8yYjcyOWYtMDhhNy00YzkzLThiYzktODE1YzVmMjc2NWQw LzEvNm9nTHpEQXFYYm9zTlJwdjA1NEtpemtpcFRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBAPBI/gD BADBI/oDBALBI/wwDQYJKoZIhvcNAQELBQADggEBAFxS/VXbvhA1rWBtw94K9oBt Pxwi31p3tJSV37jojqHxghSvt4mVOzcvP+budlOdRdUbKXv6XCnxoQsWLipfSAhF Gm+Fis1lakzwmCuNDiCqTqyKB08IKrEdN5ITbINQjiD7QMAxYgsET+osfAFzJ20N bFnyJTjFBG2b1u6u18ha/PhPPgm45pfA28XncciaZ3gyf3PiQDXJdK4oGUq1HXM0 VWIp3tUZkSrgnglD7IN/quNMheWJNK7//Bn2TMfrkkbn76UKsmJblcjPjCQ6LBrq ykhtfJVvE6HjoxPaWFG4UEsLyvYWY/HjO57dhVJ7LqLGBEncOHaH5zNchqOkjFc= -----END CERTIFICATE-----Generated at Tue Jan 20 07:56:31 2026 by rpki-client