This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/_LXzoXP-0gRXE5Ciz-obdGZQXi8.roa File: _LXzoXP-0gRXE5Ciz-obdGZQXi8.roa (raw, json) Hash identifier: Mr1ddYoxUqYSVNVomoM7yzaPVgUlQG4Fak/pkIn+dmA= Subject key identifier: FC:B5:F3:A1:73:FE:D2:04:57:13:90:A2:CF:EA:1B:74:66:50:5E:2F Certificate issuer: /CN=5a6f9295521df30a158f506ba7cb873ab9529dc3 Certificate serial: 019B7CECF87227541D4F490614BE9B4C600F Authority key identifier: 5A:6F:92:95:52:1D:F3:0A:15:8F:50:6B:A7:CB:87:3A:B9:52:9D:C3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wm-SlVId8woVj1Brp8uHOrlSncM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/_LXzoXP-0gRXE5Ciz-obdGZQXi8.roa Signing time: Fri 02 Jan 2026 04:17:43 +0000 ROA not before: Fri 02 Jan 2026 04:17:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8253 IP address blocks: 83.212.128.0/19 maxlen: 19 83.212.160.0/21 maxlen: 21 2001:648:2e80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/Wm-SlVId8woVj1Brp8uHOrlSncM.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/Wm-SlVId8woVj1Brp8uHOrlSncM.mft rsync://rpki.ripe.net/repository/DEFAULT/Wm-SlVId8woVj1Brp8uHOrlSncM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 06:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ec:f8:72:27:54:1d:4f:49:06:14:be:9b:4c:60:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a6f9295521df30a158f506ba7cb873ab9529dc3 Validity Not Before: Jan 2 04:17:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fcb5f3a173fed204571390a2cfea1b7466505e2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:47:23:25:65:ce:81:00:96:70:30:56:72:1e: 82:fd:2d:09:c4:fc:ea:56:d8:27:a4:c0:b8:fc:56: 3f:83:43:f3:9c:03:21:8e:aa:dd:9a:5c:90:33:64: 01:79:75:2b:28:26:dd:45:c7:57:22:af:29:2a:0d: 88:24:f9:07:95:71:c4:4e:0c:8a:47:37:b0:5e:5c: a2:a8:8e:73:4f:e5:d4:61:55:97:da:8a:45:89:49: 8f:9d:2f:d0:7d:d0:db:3f:d8:29:b2:68:d5:63:a8: ce:00:ec:fa:8d:fc:c0:d3:78:c8:6e:0b:e9:b5:72: 18:90:34:52:18:4b:86:cf:ca:e6:39:91:cc:29:a0: 00:98:10:34:12:4a:b0:52:91:a4:4e:95:4d:01:7a: 69:9b:a8:a7:7f:0c:ea:ce:dc:bf:be:c6:27:20:24: 74:ae:6c:30:47:81:da:07:cb:4e:b9:99:97:af:02: ca:4a:07:35:5c:db:e0:81:12:cd:b1:7e:0e:38:9d: 17:88:c4:6c:8b:63:b9:e1:b5:f6:5b:8a:e7:33:38: af:65:c6:c7:29:85:ce:c1:75:d6:d1:ea:f5:dc:5e: eb:5b:8c:fc:63:1f:a4:e6:bc:75:1b:f0:29:45:58: 19:b2:e0:ca:0c:ef:65:52:79:be:c2:ce:eb:69:62: ff:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:B5:F3:A1:73:FE:D2:04:57:13:90:A2:CF:EA:1B:74:66:50:5E:2F X509v3 Authority Key Identifier: keyid:5A:6F:92:95:52:1D:F3:0A:15:8F:50:6B:A7:CB:87:3A:B9:52:9D:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wm-SlVId8woVj1Brp8uHOrlSncM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/_LXzoXP-0gRXE5Ciz-obdGZQXi8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/Wm-SlVId8woVj1Brp8uHOrlSncM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 83.212.128.0-83.212.167.255 IPv6: 2001:648:2e80::/48 Signature Algorithm: sha256WithRSAEncryption 4c:52:1a:51:89:e0:ee:c4:19:58:01:e9:ca:a9:0c:72:db:f1: 7a:22:18:cf:74:06:f4:5c:68:ab:51:9d:d0:48:5a:4e:a0:f3: 5f:7f:3a:48:7a:46:ff:91:10:47:a2:75:71:b7:34:6f:a0:69: a5:dd:88:96:73:72:b1:10:4d:4f:41:b9:d7:c0:67:09:c9:7d: b9:a9:f1:d5:ff:5e:9c:aa:d4:63:32:b5:dd:1b:17:fc:c8:2a: 55:0a:44:22:25:1a:a0:c0:37:51:f0:43:17:a8:10:80:55:58: e2:f1:d9:a4:e8:7e:2e:55:ac:9e:73:c0:05:70:4b:c9:14:ac: 53:f7:b3:06:de:a3:23:19:7f:2c:74:1d:0e:79:2b:4b:09:96: 31:40:41:51:f7:18:fa:0b:d7:4c:3f:e4:f8:3b:af:79:b7:67: 2b:10:57:4c:3b:bc:6e:3c:08:5b:37:20:a1:f6:2c:41:27:4c: b0:ce:12:4f:73:84:ff:93:3e:4a:74:f6:d1:f2:3e:61:6d:a8: ae:82:65:06:9e:09:ce:85:b1:e9:31:20:eb:9e:a9:8e:3a:ef: 27:6d:0b:c3:8f:b0:fc:31:ed:94:3b:da:41:14:26:54:b0:e8: ee:c4:66:36:ab:10:52:91:c1:cf:af:bf:49:56:f9:a7:61:40: 5a:2c:ce:c8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt87PhyJ1QdT0kGFL6bTGAPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhNmY5Mjk1NTIxZGYzMGExNThmNTA2YmE3Y2I4NzNhYjk1 MjlkYzMwHhcNMjYwMTAyMDQxNzQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmY2I1ZjNhMTczZmVkMjA0NTcxMzkwYTJjZmVhMWI3NDY2NTA1ZTJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAikcjJWXOgQCWcDBWch6C/S0JxPzq VtgnpMC4/FY/g0PznAMhjqrdmlyQM2QBeXUrKCbdRcdXIq8pKg2IJPkHlXHETgyK RzewXlyiqI5zT+XUYVWX2opFiUmPnS/QfdDbP9gpsmjVY6jOAOz6jfzA03jIbgvp tXIYkDRSGEuGz8rmOZHMKaAAmBA0EkqwUpGkTpVNAXppm6infwzqzty/vsYnICR0 rmwwR4HaB8tOuZmXrwLKSgc1XNvggRLNsX4OOJ0XiMRsi2O54bX2W4rnMzivZcbH KYXOwXXW0er13F7rW4z8Yx+k5rx1G/ApRVgZsuDKDO9lUnm+ws7raWL/tQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPy186Fz/tIEVxOQos/qG3RmUF4vMB8GA1UdIwQY MBaAFFpvkpVSHfMKFY9Qa6fLhzq5Up3DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV20tU2xWSWQ4d29WajFCcnA4dUhPcmxTbmNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9hOWY5M2ItYmUzMS00NWNmLWFhN2Ut YWFhNDU1M2QyYWJkLzEvX0xYem9YUC0wZ1JYRTVDaXotb2JkR1pRWGk4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9hOWY5M2ItYmUzMS00NWNmLWFhN2UtYWFhNDU1M2QyYWJk LzEvV20tU2xWSWQ4d29WajFCcnA4dUhPcmxTbmNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDgGCCsGAQUFBwEHAQH/BCkwJzAUBAIAATAOMAwDBAdT1IAD BANT1KAwDwQCAAIwCQMHACABBkgugDANBgkqhkiG9w0BAQsFAAOCAQEATFIaUYng 7sQZWAHpyqkMctvxeiIYz3QG9Fxoq1Gd0EhaTqDzX386SHpG/5EQR6J1cbc0b6Bp pd2IlnNysRBNT0G518BnCcl9uanx1f9enKrUYzK13RsX/MgqVQpEIiUaoMA3UfBD F6gQgFVY4vHZpOh+LlWsnnPABXBLyRSsU/ezBt6jIxl/LHQdDnkrSwmWMUBBUfcY +gvXTD/k+DuvebdnKxBXTDu8bjwIWzcgofYsQSdMsM4ST3OE/5M+SnT20fI+YW2o roJlBp4JzoWx6TEg656pjjrvJ20Lw4+w/DHtlDvaQRQmVLDo7sRmNqsQUpHBz6+/ SVb5p2FAWizOyA== -----END CERTIFICATE-----Generated at Mon Feb 2 14:01:18 2026 by rpki-client