This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/3630cb-ebec-4d86-b12b-bffb757c3134/1/3lueYa4cGAq4U9ivFZ8-mTJKeUs.roa File: 3lueYa4cGAq4U9ivFZ8-mTJKeUs.roa (raw, json) Hash identifier: yo8hQ3SuLYgiKWGisWTt5R1HgigntwJ6UO6bodCaAnE= Subject key identifier: DE:5B:9E:61:AE:1C:18:0A:B8:53:D8:AF:15:9F:3E:99:32:4A:79:4B Certificate issuer: /CN=96bfc5a172654dd6009db1d82d92ffaf71234120 Certificate serial: 019B7DCACEE62249DBE46228863B7A086049 Authority key identifier: 96:BF:C5:A1:72:65:4D:D6:00:9D:B1:D8:2D:92:FF:AF:71:23:41:20 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lr_FoXJlTdYAnbHYLZL_r3EjQSA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/3630cb-ebec-4d86-b12b-bffb757c3134/1/3lueYa4cGAq4U9ivFZ8-mTJKeUs.roa Signing time: Fri 02 Jan 2026 08:20:01 +0000 ROA not before: Fri 02 Jan 2026 08:20:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207996 IP address blocks: 91.194.139.0/24 maxlen: 24 147.78.194.0/23 maxlen: 24 2a09:2940::/29 maxlen: 48 2a0a:e5c0::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/3630cb-ebec-4d86-b12b-bffb757c3134/1/lr_FoXJlTdYAnbHYLZL_r3EjQSA.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/3630cb-ebec-4d86-b12b-bffb757c3134/1/lr_FoXJlTdYAnbHYLZL_r3EjQSA.mft rsync://rpki.ripe.net/repository/DEFAULT/lr_FoXJlTdYAnbHYLZL_r3EjQSA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:ce:e6:22:49:db:e4:62:28:86:3b:7a:08:60:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96bfc5a172654dd6009db1d82d92ffaf71234120 Validity Not Before: Jan 2 08:20:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=de5b9e61ae1c180ab853d8af159f3e99324a794b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:53:b2:02:b3:e4:5e:fd:db:4c:1e:63:ad:ac: d0:31:0a:bf:85:4d:b6:1c:fd:11:62:d4:d3:b9:61: d8:cc:73:c2:62:05:fd:a0:3b:27:fa:25:f4:1f:ca: 7e:78:9c:fa:ed:5c:81:93:b3:1d:68:41:ca:20:3a: e8:5a:be:d3:d6:13:74:38:78:5d:60:af:97:b8:7d: 57:86:90:c2:ac:a8:eb:70:d8:1d:64:cc:4c:e0:d0: 74:9d:ca:ee:ec:9f:fd:63:4a:d7:70:ad:13:40:cc: ca:27:17:79:2a:24:a2:01:51:ae:28:9b:35:27:8b: 24:59:de:aa:f6:52:07:86:b7:36:4c:a8:c8:b9:68: e4:4a:7e:b3:e4:aa:67:58:80:24:6a:34:60:68:ba: fe:d8:ad:17:9e:6c:18:60:28:71:15:f3:ac:df:39: 71:23:15:91:73:be:f4:fd:19:8a:df:f1:1b:a0:dc: 59:26:15:c1:ce:0b:f5:d1:e8:33:a3:37:61:62:61: 24:40:8f:bd:37:34:c4:c4:13:c6:95:13:ba:0d:41: 72:8a:76:40:1d:0b:e8:74:c1:b4:ba:1a:05:8c:11: a4:0f:b2:4f:f4:6d:da:b9:90:a7:5c:76:a7:27:6c: 9f:ec:2f:13:b7:14:3d:33:70:7a:b6:89:cb:da:79: 91:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:5B:9E:61:AE:1C:18:0A:B8:53:D8:AF:15:9F:3E:99:32:4A:79:4B X509v3 Authority Key Identifier: keyid:96:BF:C5:A1:72:65:4D:D6:00:9D:B1:D8:2D:92:FF:AF:71:23:41:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lr_FoXJlTdYAnbHYLZL_r3EjQSA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/3630cb-ebec-4d86-b12b-bffb757c3134/1/3lueYa4cGAq4U9ivFZ8-mTJKeUs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/3630cb-ebec-4d86-b12b-bffb757c3134/1/lr_FoXJlTdYAnbHYLZL_r3EjQSA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.194.139.0/24 147.78.194.0/23 IPv6: 2a09:2940::/29 2a0a:e5c0::/29 Signature Algorithm: sha256WithRSAEncryption 72:51:98:03:e8:8c:d2:d1:70:d6:ef:f7:6c:03:75:a7:72:0b: 1d:dd:79:1b:64:eb:13:04:7d:02:a3:ed:c5:dd:c2:ba:a5:2f: a3:18:51:4e:d1:9b:9a:6a:63:6a:dd:fb:6a:dc:66:b9:04:9b: b0:fb:81:a1:5c:cd:61:92:52:25:8b:27:50:a1:f6:d1:e7:93: f4:32:37:ea:8c:14:da:8b:b5:56:24:f6:05:0f:56:a8:6b:10: 6d:14:dc:2f:18:f4:66:4d:87:4b:84:25:d1:ef:0b:64:36:e5: 9e:a5:02:72:4e:a9:7e:e2:ec:96:60:78:3d:c9:27:14:ce:27: a5:46:bf:a3:cf:49:d6:60:02:83:d1:92:bf:81:2d:c2:23:a0: 9d:49:54:f8:28:c5:b6:b5:3b:69:7d:2c:f6:d6:14:ef:c2:b5: 98:9d:4d:fa:15:7b:08:8f:8c:ae:29:0c:4d:ff:7a:59:fe:60: f3:a9:50:5f:e4:d7:a0:58:1a:df:69:ab:79:34:94:83:94:06: ea:72:8a:a7:1c:8a:0e:7d:17:7b:9c:53:4c:a8:3a:dd:8e:3f: 76:4a:df:c5:11:da:db:f9:51:a7:eb:ec:dd:83:32:b9:ce:4a: 6d:e7:ba:3f:ea:9d:d6:61:8c:0f:5e:68:96:f6:cb:bb:82:18: 76:1a:78:ad -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZt9ys7mIknb5GIohjt6CGBJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2YmZjNWExNzI2NTRkZDYwMDlkYjFkODJkOTJmZmFmNzEy MzQxMjAwHhcNMjYwMTAyMDgyMDAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZTViOWU2MWFlMWMxODBhYjg1M2Q4YWYxNTlmM2U5OTMyNGE3OTRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAulOyArPkXv3bTB5jrazQMQq/hU22 HP0RYtTTuWHYzHPCYgX9oDsn+iX0H8p+eJz67VyBk7MdaEHKIDroWr7T1hN0OHhd YK+XuH1XhpDCrKjrcNgdZMxM4NB0ncru7J/9Y0rXcK0TQMzKJxd5KiSiAVGuKJs1 J4skWd6q9lIHhrc2TKjIuWjkSn6z5KpnWIAkajRgaLr+2K0XnmwYYChxFfOs3zlx IxWRc770/RmK3/EboNxZJhXBzgv10egzozdhYmEkQI+9NzTExBPGlRO6DUFyinZA HQvodMG0uhoFjBGkD7JP9G3auZCnXHanJ2yf7C8TtxQ9M3B6tonL2nmRrwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFN5bnmGuHBgKuFPYrxWfPpkySnlLMB8GA1UdIwQY MBaAFJa/xaFyZU3WAJ2x2C2S/69xI0EgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbHJfRm9YSmxUZFlBbmJIWUxaTF9yM0VqUVNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy8zNjMwY2ItZWJlYy00ZDg2LWIxMmIt YmZmYjc1N2MzMTM0LzEvM2x1ZVlhNGNHQXE0VTlpdkZaOC1tVEpLZVVzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy8zNjMwY2ItZWJlYy00ZDg2LWIxMmItYmZmYjc1N2MzMTM0 LzEvbHJfRm9YSmxUZFlBbmJIWUxaTF9yM0VqUVNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDsGCCsGAQUFBwEHAQH/BCwwKjASBAIAATAMAwQAW8KLAwQB k07CMBQEAgACMA4DBQMqCSlAAwUDKgrlwDANBgkqhkiG9w0BAQsFAAOCAQEAclGY A+iM0tFw1u/3bAN1p3ILHd15G2TrEwR9AqPtxd3CuqUvoxhRTtGbmmpjat37atxm uQSbsPuBoVzNYZJSJYsnUKH20eeT9DI36owU2ou1ViT2BQ9WqGsQbRTcLxj0Zk2H S4Ql0e8LZDblnqUCck6pfuLslmB4PcknFM4npUa/o89J1mACg9GSv4EtwiOgnUlU +CjFtrU7aX0s9tYU78K1mJ1N+hV7CI+MrikMTf96Wf5g86lQX+TXoFga32mreTSU g5QG6nKKpxyKDn0Xe5xTTKg63Y4/dkrfxRHa2/lRp+vs3YMyuc5Kbee6P+qd1mGM D15olvbLu4IYdhp4rQ== -----END CERTIFICATE-----Generated at Tue Feb 10 00:13:18 2026 by rpki-client