This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/746767-ef5f-436c-bd5d-8e8b79926aa3/1/LjyKQnoqZ5RymbjzsonMI_FvadE.roa File: LjyKQnoqZ5RymbjzsonMI_FvadE.roa (raw, json) Hash identifier: fUfxxZQ9bErMyThXgB9Vm8HXoJC9cjybZ/MiJy6eLxY= Subject key identifier: 2E:3C:8A:42:7A:2A:67:94:72:99:B8:F3:B2:89:CC:23:F1:6F:69:D1 Certificate issuer: /CN=f8456292d85a0b86c4e2534b27d26b47bfe04317 Certificate serial: 019B7F844459C1E842BEA69237761EFCB9EF Authority key identifier: F8:45:62:92:D8:5A:0B:86:C4:E2:53:4B:27:D2:6B:47:BF:E0:43:17 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-EVikthaC4bE4lNLJ9JrR7_gQxc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/746767-ef5f-436c-bd5d-8e8b79926aa3/1/LjyKQnoqZ5RymbjzsonMI_FvadE.roa Signing time: Fri 02 Jan 2026 16:22:13 +0000 ROA not before: Fri 02 Jan 2026 16:22:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203932 IP address blocks: 185.198.241.0/24 maxlen: 24 2a13:4700::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/746767-ef5f-436c-bd5d-8e8b79926aa3/1/1-EVikthaC4bE4lNLJ9JrR7_gQxc.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/746767-ef5f-436c-bd5d-8e8b79926aa3/1/1-EVikthaC4bE4lNLJ9JrR7_gQxc.mft rsync://rpki.ripe.net/repository/DEFAULT/1-EVikthaC4bE4lNLJ9JrR7_gQxc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:44:59:c1:e8:42:be:a6:92:37:76:1e:fc:b9:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8456292d85a0b86c4e2534b27d26b47bfe04317 Validity Not Before: Jan 2 16:22:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2e3c8a427a2a67947299b8f3b289cc23f16f69d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:ca:7f:d2:1f:05:fa:14:1a:17:d7:bf:b9:22: f3:e0:aa:bc:93:ee:25:7c:42:e7:c6:45:cb:21:21: 24:4b:32:4b:07:f7:22:6d:fe:3e:26:5b:0c:a3:46: f2:3e:0c:50:05:01:1c:e5:ce:a3:88:71:3f:3e:64: 60:90:e6:60:c6:e2:f5:20:66:97:a3:4b:4c:de:03: 66:fb:fc:0e:a2:6c:64:1e:d6:d1:a6:48:b9:aa:38: 7c:6e:8e:a0:ff:22:53:e3:04:5b:72:22:12:b6:09: b8:7d:39:2b:05:62:a2:8a:57:5b:36:81:2c:c2:b1: 4b:55:06:6f:2d:0a:fd:b8:c1:35:f2:8e:11:b8:e0: d4:e1:30:e3:f5:7e:1a:84:a0:f8:0b:3d:46:6b:9c: bb:b4:4f:12:09:4e:d7:eb:e3:5c:b5:de:9f:75:47: 96:f4:38:39:a2:42:80:c8:0f:4c:d9:04:3e:26:89: d3:be:2c:70:53:68:51:53:0f:76:5a:1b:6c:ef:15: bb:18:28:36:ab:93:f0:da:81:59:4d:d5:d6:17:83: 8b:c6:dc:76:7b:88:a2:77:89:b1:66:dd:2b:27:de: e8:e4:46:68:9d:c6:17:58:12:b7:2f:80:33:ae:ad: 54:2a:5f:64:73:0f:7a:cb:29:82:5a:b4:64:7f:e9: 80:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:3C:8A:42:7A:2A:67:94:72:99:B8:F3:B2:89:CC:23:F1:6F:69:D1 X509v3 Authority Key Identifier: keyid:F8:45:62:92:D8:5A:0B:86:C4:E2:53:4B:27:D2:6B:47:BF:E0:43:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-EVikthaC4bE4lNLJ9JrR7_gQxc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/746767-ef5f-436c-bd5d-8e8b79926aa3/1/LjyKQnoqZ5RymbjzsonMI_FvadE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/746767-ef5f-436c-bd5d-8e8b79926aa3/1/1-EVikthaC4bE4lNLJ9JrR7_gQxc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.198.241.0/24 IPv6: 2a13:4700::/29 Signature Algorithm: sha256WithRSAEncryption 8f:b3:54:3e:dc:4c:ed:b4:ad:27:bb:d7:b7:09:9e:96:17:02: dc:fc:87:b2:c3:44:4e:83:ba:b5:ff:71:9d:3f:21:b0:e4:7e: 54:b7:7e:27:9b:65:dd:01:e2:e6:e1:a6:a2:cc:bd:70:fd:14: 81:7d:22:62:97:fe:a8:43:8f:eb:94:2f:86:eb:28:ad:5c:59: 80:f8:05:5f:6f:9d:53:6a:4a:be:9c:cc:b0:1e:cd:96:f0:67: 62:14:22:e9:ea:3a:cc:e0:e5:a6:09:2b:fe:16:ea:ae:b4:36: 93:46:35:29:e6:3f:44:85:4e:96:4a:18:e6:a5:8a:9a:9c:5e: 1a:5f:64:51:3b:9a:b4:b7:49:a3:1e:a5:43:3b:c9:3b:06:78: cd:f6:db:af:1f:36:dc:66:2a:d4:e0:df:e6:26:ab:c1:e1:e2: 75:c3:ca:42:7f:4b:52:21:89:bb:01:38:4f:ad:3a:ab:d4:94: f0:1a:f0:a5:79:55:86:b6:2e:ef:8b:0d:7a:03:8a:f8:32:e8: 2b:e0:c3:a4:e7:32:4f:11:38:45:8f:50:be:60:3e:ce:7b:36: b3:4a:c0:42:48:9a:08:38:a2:9d:71:8f:29:0d:f6:9b:2b:f2: c7:2e:20:a8:fb:c2:e7:a7:40:ad:5e:a5:80:50:c3:93:ba:21: 5a:dd:ef:0d -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt/hERZwehCvqaSN3Ye/LnvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4NDU2MjkyZDg1YTBiODZjNGUyNTM0YjI3ZDI2YjQ3YmZl MDQzMTcwHhcNMjYwMTAyMTYyMjEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZTNjOGE0MjdhMmE2Nzk0NzI5OWI4ZjNiMjg5Y2MyM2YxNmY2OWQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvcp/0h8F+hQaF9e/uSLz4Kq8k+4l fELnxkXLISEkSzJLB/cibf4+JlsMo0byPgxQBQEc5c6jiHE/PmRgkOZgxuL1IGaX o0tM3gNm+/wOomxkHtbRpki5qjh8bo6g/yJT4wRbciIStgm4fTkrBWKiildbNoEs wrFLVQZvLQr9uME18o4RuODU4TDj9X4ahKD4Cz1Ga5y7tE8SCU7X6+Nctd6fdUeW 9Dg5okKAyA9M2QQ+JonTvixwU2hRUw92Whts7xW7GCg2q5Pw2oFZTdXWF4OLxtx2 e4iid4mxZt0rJ97o5EZoncYXWBK3L4Azrq1UKl9kcw96yymCWrRkf+mA7QIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFC48ikJ6KmeUcpm487KJzCPxb2nRMB8GA1UdIwQY MBaAFPhFYpLYWguGxOJTSyfSa0e/4EMXMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1FVmlrdGhhQzRiRTRsTkxKOUpyUjdfZ1F4Yy5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzUvNzQ2NzY3LWVmNWYtNDM2Yy1iZDVk LThlOGI3OTkyNmFhMy8xL0xqeUtRbm9xWjVSeW1ianpzb25NSV9GdmFkRS5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvYzUvNzQ2NzY3LWVmNWYtNDM2Yy1iZDVkLThlOGI3OTkyNmFh My8xLzEtRVZpa3RoYUM0YkU0bE5MSjlKclI3X2dReGMuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAC5xvEw DQQCAAIwBwMFAyoTRwAwDQYJKoZIhvcNAQELBQADggEBAI+zVD7cTO20rSe717cJ npYXAtz8h7LDRE6DurX/cZ0/IbDkflS3fiebZd0B4ubhpqLMvXD9FIF9ImKX/qhD j+uUL4brKK1cWYD4BV9vnVNqSr6czLAezZbwZ2IUIunqOszg5aYJK/4W6q60NpNG NSnmP0SFTpZKGOalipqcXhpfZFE7mrS3SaMepUM7yTsGeM32268fNtxmKtTg3+Ym q8Hh4nXDykJ/S1IhibsBOE+tOqvUlPAa8KV5VYa2Lu+LDXoDivgy6Cvgw6TnMk8R OEWPUL5gPs57NrNKwEJImgg4op1xjykN9psr8scuIKj7wuenQK1epYBQw5O6IVrd 7w0= -----END CERTIFICATE-----Generated at Mon Feb 9 22:36:25 2026 by rpki-client