This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/Lh4K36VgJ-aXt9Ieo8ltBypTfc0.roa File: Lh4K36VgJ-aXt9Ieo8ltBypTfc0.roa (raw, json) Hash identifier: V01uN1AjvyhlvkZLg1g1pMucFyjkP2xiHYnE3d3pTnM= Subject key identifier: 2E:1E:0A:DF:A5:60:27:E6:97:B7:D2:1E:A3:C9:6D:07:2A:53:7D:CD Certificate issuer: /CN=bdfad23e11cf0d24a477594eba09f99acc6f1fff Certificate serial: 019B76EB34C7C595F055A5FB2C8017A05B33 Authority key identifier: BD:FA:D2:3E:11:CF:0D:24:A4:77:59:4E:BA:09:F9:9A:CC:6F:1F:FF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vfrSPhHPDSSkd1lOugn5msxvH_8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/Lh4K36VgJ-aXt9Ieo8ltBypTfc0.roa Signing time: Thu 01 Jan 2026 00:18:04 +0000 ROA not before: Thu 01 Jan 2026 00:18:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48287 IP address blocks: 31.177.64.0/22 maxlen: 24 31.177.68.0/22 maxlen: 22 31.177.72.0/21 maxlen: 24 31.177.80.0/21 maxlen: 24 31.177.88.0/21 maxlen: 22 31.177.91.0/24 maxlen: 24 31.177.92.0/24 maxlen: 24 89.104.80.0/21 maxlen: 24 89.111.128.0/24 maxlen: 24 89.111.130.0/24 maxlen: 24 89.111.132.0/23 maxlen: 23 89.111.144.0/22 maxlen: 24 89.111.148.0/22 maxlen: 22 89.111.156.0/22 maxlen: 22 89.111.164.0/24 maxlen: 24 91.189.112.0/21 maxlen: 21 91.189.114.0/23 maxlen: 23 91.189.116.0/22 maxlen: 22 91.217.20.0/24 maxlen: 24 91.217.21.0/24 maxlen: 24 109.70.24.0/21 maxlen: 24 178.210.64.0/19 maxlen: 24 185.26.112.0/22 maxlen: 22 185.76.144.0/22 maxlen: 22 195.24.64.0/22 maxlen: 22 195.24.68.0/22 maxlen: 22 195.24.68.0/23 maxlen: 23 195.24.70.0/24 maxlen: 24 195.24.71.0/24 maxlen: 24 2a02:2090::/48 maxlen: 48 2a02:2090:1::/48 maxlen: 48 2a02:2090:e400::/48 maxlen: 48 2a02:2090:e800::/48 maxlen: 48 2a02:2090:ec00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.mft rsync://rpki.ripe.net/repository/DEFAULT/vfrSPhHPDSSkd1lOugn5msxvH_8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 15:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:34:c7:c5:95:f0:55:a5:fb:2c:80:17:a0:5b:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bdfad23e11cf0d24a477594eba09f99acc6f1fff Validity Not Before: Jan 1 00:18:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2e1e0adfa56027e697b7d21ea3c96d072a537dcd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:32:41:c2:88:99:0b:ed:b1:51:33:5a:9b:c4: e3:70:d4:7e:f1:a7:35:2f:60:7b:5d:58:7d:67:f9: 01:25:f1:03:f9:4d:c5:6d:67:ba:f2:ab:e8:3e:af: 35:77:68:13:13:b6:38:ff:01:1c:0c:af:5d:87:4b: b0:61:18:23:b2:f8:ab:e3:a5:74:73:3b:93:b0:c9: c2:c1:49:16:0c:b3:0c:05:2a:ff:e3:b3:70:f8:ea: e2:5d:ae:fa:9f:ad:a5:77:66:51:30:62:35:49:c1: c8:be:bb:38:74:73:1d:bf:4c:a9:05:a2:08:38:2d: 48:a2:02:9e:4d:6d:ff:d4:2e:d6:46:11:4a:4f:dd: 91:57:40:a8:9f:77:d9:d4:b9:62:dc:1b:f1:15:7a: 19:c2:87:6e:a2:d0:87:26:5a:27:88:88:27:ba:50: 6a:f4:35:2a:41:eb:d3:dc:6c:b9:5c:db:57:65:82: 06:ca:8a:b8:d0:96:48:cb:67:93:30:ce:f0:2f:27: f9:a4:d4:d3:46:f4:62:5d:f7:71:a1:8d:1d:d0:69: 9f:30:25:dc:07:b3:a6:03:61:df:81:97:0b:ff:bb: 69:70:49:d1:9d:be:de:33:15:4d:95:ee:b0:18:a7: b6:b2:a1:a0:3e:14:81:0e:4e:59:58:e7:d6:52:ea: 4d:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:1E:0A:DF:A5:60:27:E6:97:B7:D2:1E:A3:C9:6D:07:2A:53:7D:CD X509v3 Authority Key Identifier: keyid:BD:FA:D2:3E:11:CF:0D:24:A4:77:59:4E:BA:09:F9:9A:CC:6F:1F:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vfrSPhHPDSSkd1lOugn5msxvH_8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/Lh4K36VgJ-aXt9Ieo8ltBypTfc0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.177.64.0/19 89.104.80.0/21 89.111.128.0/24 89.111.130.0/24 89.111.132.0/23 89.111.144.0/21 89.111.156.0/22 89.111.164.0/24 91.189.112.0/21 91.217.20.0/23 109.70.24.0/21 178.210.64.0/19 185.26.112.0/22 185.76.144.0/22 195.24.64.0/21 IPv6: 2a02:2090::/47 2a02:2090:e400::/48 2a02:2090:e800::/48 2a02:2090:ec00::/48 Signature Algorithm: sha256WithRSAEncryption ae:0a:bb:22:b4:20:ad:15:6d:02:41:2a:bd:81:bc:b3:5f:65: 16:95:61:52:c7:06:76:66:b1:3e:ac:28:6d:23:28:36:8e:64: de:b4:15:60:0a:4e:3c:3b:1b:39:da:9f:b5:d5:bf:4a:70:db: b6:c7:b0:81:40:d5:c0:8b:3c:ea:e6:cc:d6:08:fd:c2:8c:62: 20:9d:d3:5a:ff:b7:6a:8f:6f:0e:9f:81:8a:1b:1c:5d:a3:d4: a6:30:8b:ea:af:f6:09:0e:30:ac:20:9d:0d:7f:38:5d:60:31: 62:e1:87:d6:7c:3b:0e:ec:2d:bd:b5:d8:00:80:00:24:1f:fb: 29:6a:9b:2b:b7:6d:68:cc:39:97:18:85:31:58:48:e6:3f:4d: a7:4e:1e:78:5a:86:8d:11:65:3f:23:cb:92:44:c6:5e:04:9d: ea:70:c4:e5:28:db:7c:59:3e:ab:ff:9f:f6:da:23:81:ad:25: 85:c3:eb:3b:13:8f:27:82:2d:46:6d:d1:71:11:72:89:20:35: 93:e0:08:86:a1:84:67:aa:2e:68:bb:49:fe:96:e8:9a:0f:6e: a1:5a:12:21:2e:48:58:44:41:22:75:d3:b4:0c:eb:e9:9a:44: fa:c8:93:4e:77:da:40:c0:da:92:ae:6b:dd:9b:b1:49:f6:a5: 66:3a:08:2b -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgISAZt26zTHxZXwVaX7LIAXoFszMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkZmFkMjNlMTFjZjBkMjRhNDc3NTk0ZWJhMDlmOTlhY2M2 ZjFmZmYwHhcNMjYwMTAxMDAxODA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZTFlMGFkZmE1NjAyN2U2OTdiN2QyMWVhM2M5NmQwNzJhNTM3ZGNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3DJBwoiZC+2xUTNam8TjcNR+8ac1 L2B7XVh9Z/kBJfED+U3FbWe68qvoPq81d2gTE7Y4/wEcDK9dh0uwYRgjsvir46V0 czuTsMnCwUkWDLMMBSr/47Nw+OriXa76n62ld2ZRMGI1ScHIvrs4dHMdv0ypBaII OC1IogKeTW3/1C7WRhFKT92RV0Con3fZ1Lli3BvxFXoZwoduotCHJloniIgnulBq 9DUqQevT3Gy5XNtXZYIGyoq40JZIy2eTMM7wLyf5pNTTRvRiXfdxoY0d0GmfMCXc B7OmA2HfgZcL/7tpcEnRnb7eMxVNle6wGKe2sqGgPhSBDk5ZWOfWUupN+wIDAQAB o4ICjDCCAogwHQYDVR0OBBYEFC4eCt+lYCfml7fSHqPJbQcqU33NMB8GA1UdIwQY MBaAFL360j4Rzw0kpHdZTroJ+ZrMbx//MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdmZyU1BoSFBEU1NrZDFsT3VnbjVtc3h2SF84LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9lMjUyMzktNmFiMC00OTE5LWE3NmEt NGY0ZTcxZTMyMDg0LzEvTGg0SzM2VmdKLWFYdDlJZW84bHRCeXBUZmMwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9lMjUyMzktNmFiMC00OTE5LWE3NmEtNGY0ZTcxZTMyMDg0 LzEvdmZyU1BoSFBEU1NrZDFsT3VnbjVtc3h2SF84LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGhBggrBgEFBQcBBwEB/wSBkTCBjjBgBAIAATBaAwQFH7FA AwQDWWhQAwQAWW+AAwQAWW+CAwQBWW+EAwQDWW+QAwQCWW+cAwQAWW+kAwQDW71w AwQBW9kUAwQDbUYYAwQFstJAAwQCuRpwAwQCuUyQAwQDwxhAMCoEAgACMCQDBwEq AiCQAAADBwAqAiCQ5AADBwAqAiCQ6AADBwAqAiCQ7AAwDQYJKoZIhvcNAQELBQAD ggEBAK4KuyK0IK0VbQJBKr2BvLNfZRaVYVLHBnZmsT6sKG0jKDaOZN60FWAKTjw7 Gznan7XVv0pw27bHsIFA1cCLPOrmzNYI/cKMYiCd01r/t2qPbw6fgYobHF2j1KYw i+qv9gkOMKwgnQ1/OF1gMWLhh9Z8Ow7sLb212ACAACQf+ylqmyu3bWjMOZcYhTFY SOY/TadOHnhaho0RZT8jy5JExl4EnepwxOUo23xZPqv/n/baI4GtJYXD6zsTjyeC LUZt0XERcokgNZPgCIahhGeqLmi7Sf6W6JoPbqFaEiEuSFhEQSJ107QM6+maRPrI k0532kDA2pKua92bsUn2pWY6CCs= -----END CERTIFICATE-----Generated at Tue Jan 27 19:16:15 2026 by rpki-client