This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/67080d-cae0-48c1-a338-38f5d963222c/1/lTILXF_5UJEPBougJpxtW4AUOSc.roa File: lTILXF_5UJEPBougJpxtW4AUOSc.roa (raw, json) Hash identifier: rxyPJTpQ/gl87k+22vSPyFPaWDffDg7c8Gqk+kLh1/Y= Subject key identifier: 95:32:0B:5C:5F:F9:50:91:0F:06:8B:A0:26:9C:6D:5B:80:14:39:27 Certificate issuer: /CN=135155cebf9de0cb73e40a0fa0a1ab4dcf1d09ca Certificate serial: 019B7C7FF7D4CC1E394775DD4753A11F60A1 Authority key identifier: 13:51:55:CE:BF:9D:E0:CB:73:E4:0A:0F:A0:A1:AB:4D:CF:1D:09:CA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E1FVzr-d4Mtz5AoPoKGrTc8dCco.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/67080d-cae0-48c1-a338-38f5d963222c/1/lTILXF_5UJEPBougJpxtW4AUOSc.roa Signing time: Fri 02 Jan 2026 02:18:39 +0000 ROA not before: Fri 02 Jan 2026 02:18:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 137 IP address blocks: 130.251.0.0/16 maxlen: 16 192.148.193.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/67080d-cae0-48c1-a338-38f5d963222c/1/E1FVzr-d4Mtz5AoPoKGrTc8dCco.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/67080d-cae0-48c1-a338-38f5d963222c/1/E1FVzr-d4Mtz5AoPoKGrTc8dCco.mft rsync://rpki.ripe.net/repository/DEFAULT/E1FVzr-d4Mtz5AoPoKGrTc8dCco.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:f7:d4:cc:1e:39:47:75:dd:47:53:a1:1f:60:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=135155cebf9de0cb73e40a0fa0a1ab4dcf1d09ca Validity Not Before: Jan 2 02:18:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=95320b5c5ff950910f068ba0269c6d5b80143927 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:f8:5f:50:97:88:ab:30:5b:bb:03:6e:24:97: c0:1a:2c:35:87:87:01:6c:37:46:0c:2e:39:fc:58: 11:4c:80:76:85:2f:a3:bb:40:2d:d1:8f:c4:68:4e: a2:9f:3a:32:44:01:5d:13:00:17:02:f8:ea:22:0b: 54:f5:d3:01:28:26:dd:5d:10:ff:98:56:99:4e:5b: 59:28:ce:e5:41:72:d7:17:89:28:07:a0:f7:ec:44: 92:5f:93:6c:f5:31:e9:1b:68:6d:cb:62:dd:71:50: ac:e8:63:00:02:41:8a:11:92:17:ee:3f:11:2c:06: 35:2a:82:07:1f:c7:44:72:4a:9a:01:a2:d3:ca:08: 6e:84:91:41:14:f3:f5:27:a3:d6:da:03:ba:5a:8b: 5f:6d:ff:dc:6a:f1:17:53:6d:65:ac:64:91:79:6f: 7d:c9:ff:0d:63:5c:4e:4f:89:30:42:b4:5b:a8:17: 05:88:58:09:65:9f:37:5f:71:05:ea:9a:cc:1c:2e: b3:fd:96:c9:26:01:25:fd:04:a2:82:7f:b6:67:87: d6:35:ae:61:77:7f:61:cc:5d:b6:bd:b4:a1:5c:0b: 93:e8:1d:d5:25:99:a6:b6:34:f6:91:86:b7:de:6f: 64:83:50:f5:b2:0c:ff:d9:db:1a:2c:1a:7f:97:d5: 4c:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:32:0B:5C:5F:F9:50:91:0F:06:8B:A0:26:9C:6D:5B:80:14:39:27 X509v3 Authority Key Identifier: keyid:13:51:55:CE:BF:9D:E0:CB:73:E4:0A:0F:A0:A1:AB:4D:CF:1D:09:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E1FVzr-d4Mtz5AoPoKGrTc8dCco.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/67080d-cae0-48c1-a338-38f5d963222c/1/lTILXF_5UJEPBougJpxtW4AUOSc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/67080d-cae0-48c1-a338-38f5d963222c/1/E1FVzr-d4Mtz5AoPoKGrTc8dCco.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 130.251.0.0/16 192.148.193.0/24 Signature Algorithm: sha256WithRSAEncryption 3a:63:d5:9b:29:19:e3:19:d4:5e:58:98:bc:ac:98:ff:94:56: db:db:9b:c8:2e:c3:88:b0:f3:aa:4e:22:45:e3:bf:e7:3a:0b: d1:8f:d9:49:12:a7:88:e8:bd:d7:5f:d1:44:a5:21:e0:55:55: 1a:05:86:55:e9:ad:f3:cc:22:48:c9:de:ae:b6:b2:86:b2:52: d2:20:05:ea:6c:f2:2d:5d:fa:6b:5b:1c:5c:cf:7c:7e:75:69: 77:68:a8:5d:7e:57:29:a0:e5:1f:39:e3:fa:25:72:55:e6:f8: 42:87:56:c1:af:13:45:79:25:98:c3:b2:83:13:d0:25:39:73: 8a:29:ee:bd:3e:6a:61:9e:31:93:8b:7a:d8:1e:05:89:70:93: b7:54:13:29:8a:97:f9:61:2b:27:bc:e1:b0:f6:81:f5:da:23: ce:d3:06:c4:5a:df:a9:2f:8d:45:68:4b:ef:4c:4c:bf:4b:b2: b7:1d:51:a8:f4:0b:d8:80:11:b6:21:aa:53:14:55:5d:57:56: 8f:9a:b6:d7:f4:98:e5:1c:1b:59:e7:cf:0b:85:55:d5:7a:e8: b3:8a:8d:0b:3f:92:09:3e:4d:70:0d:4a:c7:5c:ea:40:8f:f4: 22:e3:87:d2:97:1b:e8:17:4c:6a:dc:4d:16:f8:bb:e0:7c:68: b6:26:df:70 -----BEGIN CERTIFICATE----- MIIFAjCCA+qgAwIBAgISAZt8f/fUzB45R3XdR1OhH2ChMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEzNTE1NWNlYmY5ZGUwY2I3M2U0MGEwZmEwYTFhYjRkY2Yx ZDA5Y2EwHhcNMjYwMTAyMDIxODM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NTMyMGI1YzVmZjk1MDkxMGYwNjhiYTAyNjljNmQ1YjgwMTQzOTI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtvhfUJeIqzBbuwNuJJfAGiw1h4cB bDdGDC45/FgRTIB2hS+ju0At0Y/EaE6inzoyRAFdEwAXAvjqIgtU9dMBKCbdXRD/ mFaZTltZKM7lQXLXF4koB6D37ESSX5Ns9THpG2hty2LdcVCs6GMAAkGKEZIX7j8R LAY1KoIHH8dEckqaAaLTyghuhJFBFPP1J6PW2gO6Wotfbf/cavEXU21lrGSReW99 yf8NY1xOT4kwQrRbqBcFiFgJZZ83X3EF6prMHC6z/ZbJJgEl/QSign+2Z4fWNa5h d39hzF22vbShXAuT6B3VJZmmtjT2kYa33m9kg1D1sgz/2dsaLBp/l9VMfwIDAQAB o4ICDjCCAgowHQYDVR0OBBYEFJUyC1xf+VCRDwaLoCacbVuAFDknMB8GA1UdIwQY MBaAFBNRVc6/neDLc+QKD6Chq03PHQnKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRTFGVnpyLWQ0TXR6NUFvUG9LR3JUYzhkQ2NvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy82NzA4MGQtY2FlMC00OGMxLWEzMzgt MzhmNWQ5NjMyMjJjLzEvbFRJTFhGXzVVSkVQQm91Z0pweHRXNEFVT1NjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy82NzA4MGQtY2FlMC00OGMxLWEzMzgtMzhmNWQ5NjMyMjJj LzEvRTFGVnpyLWQ0TXR6NUFvUG9LR3JUYzhkQ2NvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAATALAwMAgvsDBADA lMEwDQYJKoZIhvcNAQELBQADggEBADpj1ZspGeMZ1F5YmLysmP+UVtvbm8guw4iw 86pOIkXjv+c6C9GP2UkSp4jovddf0USlIeBVVRoFhlXprfPMIkjJ3q62soayUtIg Beps8i1d+mtbHFzPfH51aXdoqF1+Vymg5R854/olclXm+EKHVsGvE0V5JZjDsoMT 0CU5c4op7r0+amGeMZOLetgeBYlwk7dUEymKl/lhKye84bD2gfXaI87TBsRa36kv jUVoS+9MTL9LsrcdUaj0C9iAEbYhqlMUVV1XVo+attf0mOUcG1nnzwuFVdV66LOK jQs/kgk+TXANSsdc6kCP9CLjh9KXG+gXTGrcTRb4u+B8aLYm33A= -----END CERTIFICATE-----Generated at Mon Feb 9 22:16:03 2026 by rpki-client