This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/0cb2f9-8ef9-4eeb-962a-d8b4e0d0d6d5/1/lPiI8Il9MUE2eIx_nJNHGSRs4eo.roa File: lPiI8Il9MUE2eIx_nJNHGSRs4eo.roa (raw, json) Hash identifier: iooSXQuSxeKlub/pq2sLmYBqCV/ohUIGPMBFr7DexKw= Subject key identifier: 94:F8:88:F0:89:7D:31:41:36:78:8C:7F:9C:93:47:19:24:6C:E1:EA Certificate issuer: /CN=dc3884021d1b02e8c16b555743dfeb9da8e48e31 Certificate serial: 019B7F855B5C676AA25F0A48FD729A4E18A1 Authority key identifier: DC:38:84:02:1D:1B:02:E8:C1:6B:55:57:43:DF:EB:9D:A8:E4:8E:31 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3DiEAh0bAujBa1VXQ9_rnajkjjE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/0cb2f9-8ef9-4eeb-962a-d8b4e0d0d6d5/1/lPiI8Il9MUE2eIx_nJNHGSRs4eo.roa Signing time: Fri 02 Jan 2026 16:23:24 +0000 ROA not before: Fri 02 Jan 2026 16:23:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20853 IP address blocks: 31.31.168.0/21 maxlen: 32 77.95.234.0/23 maxlen: 32 77.95.236.0/22 maxlen: 32 79.133.192.0/19 maxlen: 32 80.72.32.0/20 maxlen: 32 91.250.243.0/24 maxlen: 32 185.7.104.0/22 maxlen: 32 185.30.124.0/22 maxlen: 32 185.40.196.0/22 maxlen: 32 185.73.228.0/22 maxlen: 32 2a00:c90::/32 maxlen: 32 2a05:4480::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/0cb2f9-8ef9-4eeb-962a-d8b4e0d0d6d5/1/3DiEAh0bAujBa1VXQ9_rnajkjjE.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/0cb2f9-8ef9-4eeb-962a-d8b4e0d0d6d5/1/3DiEAh0bAujBa1VXQ9_rnajkjjE.mft rsync://rpki.ripe.net/repository/DEFAULT/3DiEAh0bAujBa1VXQ9_rnajkjjE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:5b:5c:67:6a:a2:5f:0a:48:fd:72:9a:4e:18:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc3884021d1b02e8c16b555743dfeb9da8e48e31 Validity Not Before: Jan 2 16:23:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=94f888f0897d314136788c7f9c934719246ce1ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:1b:29:d0:c1:0c:47:1c:8c:3f:a9:00:d5:19: ce:d1:a3:8b:40:29:30:ff:50:81:d2:f3:40:6d:1e: 19:e0:ce:f6:23:f0:8c:36:5d:cf:e3:f6:79:ca:78: e2:53:e0:0c:b7:3a:be:43:0e:2e:03:1f:79:b6:d3: 61:f7:0c:a3:a0:e4:af:24:67:fe:11:05:45:fc:c9: c4:64:f4:f9:17:56:7e:65:0a:4f:b3:6d:cb:ec:6e: 5c:b8:7d:21:60:d2:0d:54:6f:86:72:c7:3d:70:ee: 22:2e:00:4b:e0:45:e8:2b:28:da:4a:50:fa:39:b4: 40:c0:e7:93:23:0d:a5:71:f9:16:8c:6c:f7:7d:37: 63:8e:3d:d5:07:36:58:ad:c3:5b:5f:d4:e6:5c:85: 40:57:a3:41:a9:08:2f:35:88:24:c0:f8:f8:f9:a0: e5:cc:89:f1:b6:0b:83:1c:74:bd:6f:22:4d:04:42: b7:95:fa:e2:ec:a2:ef:c4:a9:95:22:12:0a:ac:38: 78:f4:dd:64:8a:6d:78:b1:1e:e2:6a:12:c0:08:5e: 4a:5c:30:6b:3d:1a:8a:ee:8a:7f:33:8c:57:bb:0e: 73:64:2e:49:22:89:a2:d7:0f:41:d3:13:4b:1a:40: e8:3d:08:93:3b:73:d7:13:3d:cd:47:40:b0:c6:0f: e8:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:F8:88:F0:89:7D:31:41:36:78:8C:7F:9C:93:47:19:24:6C:E1:EA X509v3 Authority Key Identifier: keyid:DC:38:84:02:1D:1B:02:E8:C1:6B:55:57:43:DF:EB:9D:A8:E4:8E:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3DiEAh0bAujBa1VXQ9_rnajkjjE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0cb2f9-8ef9-4eeb-962a-d8b4e0d0d6d5/1/lPiI8Il9MUE2eIx_nJNHGSRs4eo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0cb2f9-8ef9-4eeb-962a-d8b4e0d0d6d5/1/3DiEAh0bAujBa1VXQ9_rnajkjjE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.31.168.0/21 77.95.234.0-77.95.239.255 79.133.192.0/19 80.72.32.0/20 91.250.243.0/24 185.7.104.0/22 185.30.124.0/22 185.40.196.0/22 185.73.228.0/22 IPv6: 2a00:c90::/32 2a05:4480::/29 Signature Algorithm: sha256WithRSAEncryption 7e:c0:e1:0f:4c:5b:bd:61:60:9d:40:cf:7c:e3:4f:44:9a:5a: 7a:8e:d1:73:f3:64:8a:cd:c5:72:e1:28:91:46:80:c0:22:fc: 8e:ce:d4:da:c0:35:7b:3f:35:43:63:c1:8e:ec:9e:a2:66:8b: 6d:5a:f6:43:9c:fb:68:55:8e:c9:7f:ee:71:6a:bf:f5:12:5a: e6:2c:ab:f7:94:d3:dc:ab:34:1e:fd:57:53:58:52:50:48:ad: e0:2b:5e:db:4d:84:0a:7f:08:8d:ec:9f:14:a9:cc:9d:ad:e9: 84:ce:08:6e:b6:06:22:8c:0b:60:a1:dc:f2:53:46:b6:bd:f4: e7:ce:7a:6a:3a:fa:6a:b1:d4:83:13:05:97:c9:b7:bc:6a:b4: 51:d8:84:f8:98:1a:35:9b:f4:48:3d:02:b8:57:8d:9d:f0:32: fe:22:45:22:36:b3:99:b0:ea:7e:8a:1d:91:3a:cf:31:b1:e1: be:d8:67:e4:36:73:4c:f2:f7:66:51:38:b9:ea:ea:36:83:07: d2:78:d0:62:b8:6f:88:ac:b9:ae:9a:35:0a:15:cf:64:9a:0e: bb:2d:a0:25:a5:8d:2c:fd:5a:50:ab:60:9e:c7:93:68:d6:07: f0:7d:a6:4e:8f:fb:85:20:71:b4:d3:e9:ea:23:2a:c4:28:f6: 21:92:5b:ab -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgISAZt/hVtcZ2qiXwpI/XKaThihMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjMzg4NDAyMWQxYjAyZThjMTZiNTU1NzQzZGZlYjlkYThl NDhlMzEwHhcNMjYwMTAyMTYyMzI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NGY4ODhmMDg5N2QzMTQxMzY3ODhjN2Y5YzkzNDcxOTI0NmNlMWVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAshsp0MEMRxyMP6kA1RnO0aOLQCkw /1CB0vNAbR4Z4M72I/CMNl3P4/Z5ynjiU+AMtzq+Qw4uAx95ttNh9wyjoOSvJGf+ EQVF/MnEZPT5F1Z+ZQpPs23L7G5cuH0hYNINVG+Gcsc9cO4iLgBL4EXoKyjaSlD6 ObRAwOeTIw2lcfkWjGz3fTdjjj3VBzZYrcNbX9TmXIVAV6NBqQgvNYgkwPj4+aDl zInxtguDHHS9byJNBEK3lfri7KLvxKmVIhIKrDh49N1kim14sR7iahLACF5KXDBr PRqK7op/M4xXuw5zZC5JIomi1w9B0xNLGkDoPQiTO3PXEz3NR0Cwxg/oQwIDAQAB o4ICVzCCAlMwHQYDVR0OBBYEFJT4iPCJfTFBNniMf5yTRxkkbOHqMB8GA1UdIwQY MBaAFNw4hAIdGwLowWtVV0Pf652o5I4xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0RpRUFoMGJBdWpCYTFWWFE5X3JuYWprampFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS8wY2IyZjktOGVmOS00ZWViLTk2MmEt ZDhiNGUwZDBkNmQ1LzEvbFBpSThJbDlNVUUyZUl4X25KTkhHU1JzNGVvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS8wY2IyZjktOGVmOS00ZWViLTk2MmEtZDhiNGUwZDBkNmQ1 LzEvM0RpRUFoMGJBdWpCYTFWWFE5X3JuYWprampFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMG0GCCsGAQUFBwEHAQH/BF4wXDBEBAIAATA+AwQDHx+oMAwD BAFNX+oDBARNX+ADBAVPhcADBARQSCADBABb+vMDBAK5B2gDBAK5HnwDBAK5KMQD BAK5SeQwFAQCAAIwDgMFACoADJADBQMqBUSAMA0GCSqGSIb3DQEBCwUAA4IBAQB+ wOEPTFu9YWCdQM98409Emlp6jtFz82SKzcVy4SiRRoDAIvyOztTawDV7PzVDY8GO 7J6iZottWvZDnPtoVY7Jf+5xar/1ElrmLKv3lNPcqzQe/VdTWFJQSK3gK17bTYQK fwiN7J8UqcydremEzghutgYijAtgodzyU0a2vfTnznpqOvpqsdSDEwWXybe8arRR 2IT4mBo1m/RIPQK4V42d8DL+IkUiNrOZsOp+ih2ROs8xseG+2GfkNnNM8vdmUTi5 6uo2gwfSeNBiuG+IrLmumjUKFc9kmg67LaAlpY0s/VpQq2Cex5No1gfwfaZOj/uF IHG00+nqIyrEKPYhklur -----END CERTIFICATE-----Generated at Mon Jan 26 09:23:08 2026 by rpki-client