This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/lpiAPcG-y0T3SU8uNdvS5kp8DZM.roa File: lpiAPcG-y0T3SU8uNdvS5kp8DZM.roa (raw, json) Hash identifier: Zn9ohDV7x7BReNvSf6ZPjELNU8R1XmIaR5qai19gH9A= Subject key identifier: 96:98:80:3D:C1:BE:CB:44:F7:49:4F:2E:35:DB:D2:E6:4A:7C:0D:93 Certificate issuer: /CN=641975583b250362c8150f63adb30a0f6a0c6fc3 Certificate serial: 019B7C80506B9FB91D89EAEF08C5BF0C6B6E Authority key identifier: 64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/lpiAPcG-y0T3SU8uNdvS5kp8DZM.roa Signing time: Fri 02 Jan 2026 02:19:02 +0000 ROA not before: Fri 02 Jan 2026 02:19:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 996 IP address blocks: 77.111.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.mft rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:50:6b:9f:b9:1d:89:ea:ef:08:c5:bf:0c:6b:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=641975583b250362c8150f63adb30a0f6a0c6fc3 Validity Not Before: Jan 2 02:19:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9698803dc1becb44f7494f2e35dbd2e64a7c0d93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:b0:0f:47:05:20:99:85:7b:b7:c2:68:f9:53: 83:71:74:d0:33:d2:06:77:1a:ae:9d:9c:34:2d:c2: 2e:bf:06:39:10:c0:14:9f:b7:3d:c1:db:d7:b8:44: 05:89:30:84:75:0d:e3:79:8c:55:d2:e1:44:1d:5a: 62:7a:02:48:97:e9:5e:61:9d:c2:36:f8:d9:02:ab: ec:c7:be:67:59:44:80:3e:54:5b:6d:1e:2e:23:29: fe:44:13:a9:d0:b2:68:bb:f9:a2:bc:95:f3:1a:ef: 5a:03:06:86:63:60:28:8c:b0:3d:60:9e:f4:13:fa: 41:ff:0e:be:81:24:28:8e:5f:2e:80:3c:33:e5:83: 01:4b:ea:de:06:a3:06:ed:c1:fc:23:9c:1b:cf:a5: df:58:55:94:52:80:fc:e6:ea:0c:04:b7:89:e9:19: 13:d0:fc:9f:2d:b8:4c:21:fc:e6:7b:19:12:d1:77: 42:b1:70:ef:fe:b8:0c:f9:07:04:a5:61:20:56:3a: 7e:a4:d6:a1:58:c5:27:06:6b:e5:23:43:ec:af:4a: 91:8b:38:92:56:df:7c:a5:c8:f5:0b:c7:06:8b:87: a3:bd:48:ca:ca:71:33:62:8c:01:7e:3e:d4:18:5b: bf:b1:fe:32:70:4a:7e:e4:f7:5f:98:ab:1f:0e:c3: 02:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:98:80:3D:C1:BE:CB:44:F7:49:4F:2E:35:DB:D2:E6:4A:7C:0D:93 X509v3 Authority Key Identifier: keyid:64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/lpiAPcG-y0T3SU8uNdvS5kp8DZM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.111.119.0/24 Signature Algorithm: sha256WithRSAEncryption 85:3e:99:eb:4a:81:fa:09:c7:e7:f6:38:0a:98:9e:22:d2:3b: 32:f5:a3:04:e8:3d:d3:ee:4c:a4:80:38:ab:df:d3:66:b5:ee: d1:24:57:bf:d6:92:c8:f3:d5:6a:2e:0a:9d:83:df:50:a5:a0: 06:13:6b:bc:18:13:f3:f9:42:f3:62:ff:67:c6:1a:a7:d7:a0: 4a:f4:a9:5e:b1:fb:7c:7b:a4:93:8c:74:30:8f:71:d6:c4:bf: 07:0d:3a:cb:24:96:a7:91:cc:4c:23:e7:ec:3f:46:5d:bc:d2: 82:88:40:b1:b2:52:bb:71:e5:84:38:0d:50:e0:4b:5a:1a:9b: a3:25:d6:ac:1f:07:ae:00:60:4c:95:5d:f3:bd:b0:1d:3a:97: 6f:1c:ef:59:72:45:7f:10:b5:92:0d:c6:1c:2c:d2:a5:3a:e5: 08:58:0d:dd:ec:e4:23:dd:6b:69:db:48:aa:c6:4b:a4:eb:98: 9d:4b:03:39:df:a4:f9:0e:84:1d:16:47:ac:f5:1c:6b:ff:c2: 5b:f0:cf:b5:a5:c2:b1:aa:ee:16:3d:53:52:5d:53:55:3e:97: 0f:7c:ce:97:3f:7e:72:70:4d:ff:22:10:80:05:c1:97:ed:5c: f6:d4:d2:2d:3b:a1:07:a2:86:09:24:ae:4b:17:78:7e:d4:eb: 16:e1:4f:ac -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gFBrn7kdiervCMW/DGtuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0MTk3NTU4M2IyNTAzNjJjODE1MGY2M2FkYjMwYTBmNmEw YzZmYzMwHhcNMjYwMTAyMDIxOTAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5Njk4ODAzZGMxYmVjYjQ0Zjc0OTRmMmUzNWRiZDJlNjRhN2MwZDkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs7APRwUgmYV7t8Jo+VODcXTQM9IG dxqunZw0LcIuvwY5EMAUn7c9wdvXuEQFiTCEdQ3jeYxV0uFEHVpiegJIl+leYZ3C NvjZAqvsx75nWUSAPlRbbR4uIyn+RBOp0LJou/mivJXzGu9aAwaGY2AojLA9YJ70 E/pB/w6+gSQojl8ugDwz5YMBS+reBqMG7cH8I5wbz6XfWFWUUoD85uoMBLeJ6RkT 0PyfLbhMIfzmexkS0XdCsXDv/rgM+QcEpWEgVjp+pNahWMUnBmvlI0Psr0qRiziS Vt98pcj1C8cGi4ejvUjKynEzYowBfj7UGFu/sf4ycEp+5PdfmKsfDsMCeQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJaYgD3BvstE90lPLjXb0uZKfA2TMB8GA1UdIwQY MBaAFGQZdVg7JQNiyBUPY62zCg9qDG/DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWkJsMVdEc2xBMkxJRlE5anJiTUtEMm9NYjhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC85OGE1ZWQtOTA1ZS00YmZhLTkxNTQt ZjFjMzNhYTJmZDUwLzEvbHBpQVBjRy15MFQzU1U4dU5kdlM1a3A4RFpNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC85OGE1ZWQtOTA1ZS00YmZhLTkxNTQtZjFjMzNhYTJmZDUw LzEvWkJsMVdEc2xBMkxJRlE5anJiTUtEMm9NYjhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATW93MA0G CSqGSIb3DQEBCwUAA4IBAQCFPpnrSoH6Ccfn9jgKmJ4i0jsy9aME6D3T7kykgDir 39Nmte7RJFe/1pLI89VqLgqdg99QpaAGE2u8GBPz+ULzYv9nxhqn16BK9Klesft8 e6STjHQwj3HWxL8HDTrLJJankcxMI+fsP0ZdvNKCiECxslK7ceWEOA1Q4EtaGpuj JdasHweuAGBMlV3zvbAdOpdvHO9ZckV/ELWSDcYcLNKlOuUIWA3d7OQj3Wtp20iq xkuk65idSwM536T5DoQdFkes9Rxr/8Jb8M+1pcKxqu4WPVNSXVNVPpcPfM6XP35y cE3/IhCABcGX7Vz21NItO6EHooYJJK5LF3h+1OsW4U+s -----END CERTIFICATE-----Generated at Wed Jan 21 08:19:56 2026 by rpki-client