This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/c60980-a1de-4390-a0a3-32c20caf08ed/1/lRB94ldr7rgqeGjPRMI9ABoba14.roa File: lRB94ldr7rgqeGjPRMI9ABoba14.roa (raw, json) Hash identifier: SLe56IHD80WuKPH4ey2PGtoGoV+VHvwhtrqQxiN+bUg= Subject key identifier: 95:10:7D:E2:57:6B:EE:B8:2A:78:68:CF:44:C2:3D:00:1A:1B:6B:5E Certificate issuer: /CN=94942e9b35d91906d11245d73bd58cdd8eca49d1 Certificate serial: 019B7DCB4752CFB4CC1217CB2396ACE67180 Authority key identifier: 94:94:2E:9B:35:D9:19:06:D1:12:45:D7:3B:D5:8C:DD:8E:CA:49:D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lJQumzXZGQbREkXXO9WM3Y7KSdE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/c60980-a1de-4390-a0a3-32c20caf08ed/1/lRB94ldr7rgqeGjPRMI9ABoba14.roa Signing time: Fri 02 Jan 2026 08:20:32 +0000 ROA not before: Fri 02 Jan 2026 08:20:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47469 IP address blocks: 194.50.45.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/c60980-a1de-4390-a0a3-32c20caf08ed/1/lJQumzXZGQbREkXXO9WM3Y7KSdE.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/c60980-a1de-4390-a0a3-32c20caf08ed/1/lJQumzXZGQbREkXXO9WM3Y7KSdE.mft rsync://rpki.ripe.net/repository/DEFAULT/lJQumzXZGQbREkXXO9WM3Y7KSdE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:47:52:cf:b4:cc:12:17:cb:23:96:ac:e6:71:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94942e9b35d91906d11245d73bd58cdd8eca49d1 Validity Not Before: Jan 2 08:20:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=95107de2576beeb82a7868cf44c23d001a1b6b5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:b6:22:d6:65:0f:af:b7:35:5a:c9:53:ce:59: c1:a8:a9:a5:63:a6:ac:67:ab:a4:3d:5f:3c:84:08: 13:0c:bf:c8:61:46:2f:8a:6f:48:bb:5c:29:77:e3: 3c:ab:d3:9c:40:52:34:52:03:ac:49:82:11:45:e7: 2a:e8:8f:39:8a:f2:15:12:9c:5b:28:3a:05:cd:11: f5:0f:d3:46:8a:10:06:a4:f7:ad:d9:8d:9f:73:04: b1:34:9f:72:bf:84:ae:ac:fc:e0:e7:09:7e:9a:c8: bd:77:e9:51:bf:f6:52:79:63:5a:25:da:c5:11:ac: c0:b1:ce:67:13:4c:fc:85:44:1c:ac:4b:da:7d:e7: b4:bc:f1:f5:87:77:4f:1d:f6:e9:78:9c:c2:9f:f0: 27:5c:8a:29:8e:1b:cf:7c:8a:88:9f:4d:04:6a:a0: 81:37:03:6c:50:ff:27:95:2e:2a:d2:4f:76:47:07: e3:10:49:f0:c2:77:8d:11:ed:ff:fe:75:f9:2a:15: 5a:f8:5d:1f:fb:f6:b2:3a:7b:ae:07:91:7d:f8:dd: 6b:f7:33:66:e5:c6:01:02:b2:a2:69:c6:5a:97:09: 95:81:ce:f4:3f:25:67:80:06:4a:64:28:b5:0d:25: 25:33:84:94:74:67:b0:14:d8:d4:d3:2f:50:f7:0b: 46:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:10:7D:E2:57:6B:EE:B8:2A:78:68:CF:44:C2:3D:00:1A:1B:6B:5E X509v3 Authority Key Identifier: keyid:94:94:2E:9B:35:D9:19:06:D1:12:45:D7:3B:D5:8C:DD:8E:CA:49:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lJQumzXZGQbREkXXO9WM3Y7KSdE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c60980-a1de-4390-a0a3-32c20caf08ed/1/lRB94ldr7rgqeGjPRMI9ABoba14.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c60980-a1de-4390-a0a3-32c20caf08ed/1/lJQumzXZGQbREkXXO9WM3Y7KSdE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.50.45.0/24 Signature Algorithm: sha256WithRSAEncryption 40:ee:31:53:5e:74:9d:84:a2:8b:cf:92:5a:49:ed:84:9a:a9: 98:cc:06:c3:fc:1d:8f:60:4f:b6:8a:d4:c8:fc:9d:ca:9c:73: 7c:c1:a3:4b:ed:4b:3d:88:d9:d0:ea:96:6a:19:bf:e3:85:ba: 96:58:57:db:4d:30:8f:fc:4c:96:84:6d:ea:2f:ca:b2:fc:a2: 29:1f:c3:8b:e2:6b:a4:27:cf:0e:b7:f6:18:7f:78:0f:90:71: bd:50:45:66:71:f5:bc:df:49:43:66:b0:11:ba:b0:cc:bc:1e: f3:78:7b:d1:a2:d3:60:49:ab:d6:ee:e5:d0:4f:78:ec:b7:2a: fc:fa:0d:df:7d:a5:07:19:20:30:b4:a8:a1:e8:b6:76:a1:ed: 9b:a5:c9:a3:55:3c:b3:ed:56:42:9d:fb:55:62:47:36:a7:22: d1:f1:75:91:5e:03:42:20:c8:bb:cc:a4:5f:94:2e:53:ec:05: 24:f2:dc:7d:8f:73:2e:62:07:92:b4:78:3c:06:32:8c:ba:4d: 3a:e8:a3:cb:d0:23:95:fe:c8:d0:4c:f7:57:f4:1f:ab:a1:11: 12:52:22:29:34:f5:45:3d:1b:56:8d:05:91:40:f7:4a:8e:42: 92:23:0a:25:f9:f7:ca:21:28:69:32:ce:af:82:ec:e4:ca:41: da:00:c3:a0 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9y0dSz7TMEhfLI5as5nGAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk0OTQyZTliMzVkOTE5MDZkMTEyNDVkNzNiZDU4Y2RkOGVj YTQ5ZDEwHhcNMjYwMTAyMDgyMDMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NTEwN2RlMjU3NmJlZWI4MmE3ODY4Y2Y0NGMyM2QwMDFhMWI2YjVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqbYi1mUPr7c1WslTzlnBqKmlY6as Z6ukPV88hAgTDL/IYUYvim9Iu1wpd+M8q9OcQFI0UgOsSYIRRecq6I85ivIVEpxb KDoFzRH1D9NGihAGpPet2Y2fcwSxNJ9yv4SurPzg5wl+msi9d+lRv/ZSeWNaJdrF EazAsc5nE0z8hUQcrEvafee0vPH1h3dPHfbpeJzCn/AnXIopjhvPfIqIn00EaqCB NwNsUP8nlS4q0k92RwfjEEnwwneNEe3//nX5KhVa+F0f+/ayOnuuB5F9+N1r9zNm 5cYBArKiacZalwmVgc70PyVngAZKZCi1DSUlM4SUdGewFNjU0y9Q9wtGawIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJUQfeJXa+64Knhoz0TCPQAaG2teMB8GA1UdIwQY MBaAFJSULps12RkG0RJF1zvVjN2OyknRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbEpRdW16WFpHUWJSRWtYWE85V00zWTdLU2RFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS9jNjA5ODAtYTFkZS00MzkwLWEwYTMt MzJjMjBjYWYwOGVkLzEvbFJCOTRsZHI3cmdxZUdqUFJNSTlBQm9iYTE0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS9jNjA5ODAtYTFkZS00MzkwLWEwYTMtMzJjMjBjYWYwOGVk LzEvbEpRdW16WFpHUWJSRWtYWE85V00zWTdLU2RFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwjItMA0G CSqGSIb3DQEBCwUAA4IBAQBA7jFTXnSdhKKLz5JaSe2EmqmYzAbD/B2PYE+2itTI /J3KnHN8waNL7Us9iNnQ6pZqGb/jhbqWWFfbTTCP/EyWhG3qL8qy/KIpH8OL4muk J88Ot/YYf3gPkHG9UEVmcfW830lDZrARurDMvB7zeHvRotNgSavW7uXQT3jstyr8 +g3ffaUHGSAwtKih6LZ2oe2bpcmjVTyz7VZCnftVYkc2pyLR8XWRXgNCIMi7zKRf lC5T7AUk8tx9j3MuYgeStHg8BjKMuk066KPL0COV/sjQTPdX9B+roRESUiIpNPVF PRtWjQWRQPdKjkKSIwol+ffKIShpMs6vguzkykHaAMOg -----END CERTIFICATE-----Generated at Tue Feb 10 03:11:24 2026 by rpki-client