This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/0b9cbf-25ae-4327-98aa-a7dd9aea1d7a/1/lWFmjWS1SbQSeACbvDZD9f1EmEg.roa File: lWFmjWS1SbQSeACbvDZD9f1EmEg.roa (raw, json) Hash identifier: TjMg92xbLY6yeaH0PpcE4pe0qFscpI9c3d7VL5l9Rzw= Subject key identifier: 95:61:66:8D:64:B5:49:B4:12:78:00:9B:BC:36:43:F5:FD:44:98:48 Certificate issuer: /CN=afc193ee11e54716169f94c8f931eae1fc854921 Certificate serial: 019B7FF26815B204C0AD696EFF6ABEF26C19 Authority key identifier: AF:C1:93:EE:11:E5:47:16:16:9F:94:C8:F9:31:EA:E1:FC:85:49:21 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r8GT7hHlRxYWn5TI-THq4fyFSSE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/0b9cbf-25ae-4327-98aa-a7dd9aea1d7a/1/lWFmjWS1SbQSeACbvDZD9f1EmEg.roa Signing time: Fri 02 Jan 2026 18:22:31 +0000 ROA not before: Fri 02 Jan 2026 18:22:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208367 IP address blocks: 45.142.100.0/24 maxlen: 24 2a10:46c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/0b9cbf-25ae-4327-98aa-a7dd9aea1d7a/1/r8GT7hHlRxYWn5TI-THq4fyFSSE.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/0b9cbf-25ae-4327-98aa-a7dd9aea1d7a/1/r8GT7hHlRxYWn5TI-THq4fyFSSE.mft rsync://rpki.ripe.net/repository/DEFAULT/r8GT7hHlRxYWn5TI-THq4fyFSSE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:68:15:b2:04:c0:ad:69:6e:ff:6a:be:f2:6c:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=afc193ee11e54716169f94c8f931eae1fc854921 Validity Not Before: Jan 2 18:22:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9561668d64b549b41278009bbc3643f5fd449848 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:91:fb:31:9a:7b:d1:ac:35:ea:cd:7f:cb:36: b3:36:90:e8:b7:54:75:35:25:fd:98:8c:08:58:b5: f1:46:88:a7:a9:32:5e:51:54:e0:76:cc:a9:e4:96: 7e:10:88:d8:b7:3d:c0:0b:a3:98:d4:02:e9:31:59: ca:25:94:f8:cc:f8:77:7f:ca:17:90:14:5f:3c:5b: 50:93:5b:0e:ed:ce:8d:4f:0e:d5:63:a2:b1:4a:38: f2:56:a9:47:db:85:b9:23:10:73:4b:1d:aa:16:7c: b1:2e:1a:f2:51:0a:d5:6e:1e:e1:79:b9:eb:44:d2: cb:bc:a2:79:8d:18:2e:bd:96:d3:15:b7:d0:e5:da: a8:ef:cd:69:0b:ef:1e:aa:0e:0d:c3:80:fc:a1:00: 12:d9:e5:83:7d:f5:4a:dd:af:7c:ad:9f:fa:13:88: 04:97:2c:4c:2c:98:64:d2:d6:f5:0e:b9:2e:d5:6c: f7:3d:9d:b9:60:c8:b9:5e:7c:30:32:c7:93:ec:f3: 19:e1:95:8e:61:a3:f9:48:22:9f:91:90:66:91:8d: 84:70:48:ad:4b:55:59:09:51:91:3f:90:a1:20:8f: c8:b8:31:eb:df:c3:1f:3e:26:71:6a:d7:9b:dc:9d: 5d:4c:42:4d:38:89:49:2b:6c:90:8b:4d:eb:66:65: 69:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:61:66:8D:64:B5:49:B4:12:78:00:9B:BC:36:43:F5:FD:44:98:48 X509v3 Authority Key Identifier: keyid:AF:C1:93:EE:11:E5:47:16:16:9F:94:C8:F9:31:EA:E1:FC:85:49:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r8GT7hHlRxYWn5TI-THq4fyFSSE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/0b9cbf-25ae-4327-98aa-a7dd9aea1d7a/1/lWFmjWS1SbQSeACbvDZD9f1EmEg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/0b9cbf-25ae-4327-98aa-a7dd9aea1d7a/1/r8GT7hHlRxYWn5TI-THq4fyFSSE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.142.100.0/24 IPv6: 2a10:46c0::/32 Signature Algorithm: sha256WithRSAEncryption 31:9f:c0:72:f7:f8:bd:dc:3e:28:90:0e:bb:c1:23:22:9d:9e: 2e:a3:aa:34:f3:44:bd:96:64:c2:f4:96:22:bb:b7:e6:b1:6f: 6a:6e:d2:4a:db:b9:81:fe:0d:0d:88:d9:73:12:d3:e4:fe:32: 41:05:b0:8c:8c:39:8a:82:07:ca:e2:dd:39:93:85:2b:3e:ad: f1:16:8e:5d:18:94:8a:04:f1:2e:2f:ec:c4:e1:46:d1:e2:db: e9:e8:db:58:9f:57:9c:64:6b:1b:36:f1:a6:bc:43:65:95:ff: bd:84:1f:f7:b2:2f:68:67:f1:04:a5:32:8c:79:d3:6e:7c:1a: 20:fc:d9:b5:b3:6e:b9:2d:92:f5:37:cb:71:f9:0b:15:87:3c: 1f:f9:27:f5:27:56:b1:41:89:52:20:d5:28:99:c5:d1:74:a7: 5d:3b:c8:ff:0a:5b:8b:6a:87:2b:80:97:01:c3:02:55:da:94: d9:0f:be:a2:83:e2:46:2b:79:6f:37:62:fa:04:73:d3:e5:f2: ca:94:c5:bb:9e:d8:ee:be:e9:32:96:39:d4:84:e6:8e:cc:39: ad:0f:79:76:39:85:23:df:5f:fc:3e:5c:f2:1e:7b:9c:5f:f5: 16:2c:e7:13:c1:56:a6:f0:c2:ff:0c:93:69:57:27:fa:80:ed: 85:fa:6d:ec -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt/8mgVsgTArWlu/2q+8mwZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmYzE5M2VlMTFlNTQ3MTYxNjlmOTRjOGY5MzFlYWUxZmM4 NTQ5MjEwHhcNMjYwMTAyMTgyMjMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NTYxNjY4ZDY0YjU0OWI0MTI3ODAwOWJiYzM2NDNmNWZkNDQ5ODQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwZH7MZp70aw16s1/yzazNpDot1R1 NSX9mIwIWLXxRoinqTJeUVTgdsyp5JZ+EIjYtz3AC6OY1ALpMVnKJZT4zPh3f8oX kBRfPFtQk1sO7c6NTw7VY6KxSjjyVqlH24W5IxBzSx2qFnyxLhryUQrVbh7hebnr RNLLvKJ5jRguvZbTFbfQ5dqo781pC+8eqg4Nw4D8oQAS2eWDffVK3a98rZ/6E4gE lyxMLJhk0tb1Drku1Wz3PZ25YMi5XnwwMseT7PMZ4ZWOYaP5SCKfkZBmkY2EcEit S1VZCVGRP5ChII/IuDHr38MfPiZxateb3J1dTEJNOIlJK2yQi03rZmVpgQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFJVhZo1ktUm0EngAm7w2Q/X9RJhIMB8GA1UdIwQY MBaAFK/Bk+4R5UcWFp+UyPkx6uH8hUkhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcjhHVDdoSGxSeFlXbjVUSS1USHE0ZnlGU1NFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy8wYjljYmYtMjVhZS00MzI3LTk4YWEt YTdkZDlhZWExZDdhLzEvbFdGbWpXUzFTYlFTZUFDYnZEWkQ5ZjFFbUVnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy8wYjljYmYtMjVhZS00MzI3LTk4YWEtYTdkZDlhZWExZDdh LzEvcjhHVDdoSGxSeFlXbjVUSS1USHE0ZnlGU1NFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQALY5kMA0E AgACMAcDBQAqEEbAMA0GCSqGSIb3DQEBCwUAA4IBAQAxn8By9/i93D4okA67wSMi nZ4uo6o080S9lmTC9JYiu7fmsW9qbtJK27mB/g0NiNlzEtPk/jJBBbCMjDmKggfK 4t05k4UrPq3xFo5dGJSKBPEuL+zE4UbR4tvp6NtYn1ecZGsbNvGmvENllf+9hB/3 si9oZ/EEpTKMedNufBog/Nm1s265LZL1N8tx+QsVhzwf+Sf1J1axQYlSINUomcXR dKddO8j/CluLaocrgJcBwwJV2pTZD76ig+JGK3lvN2L6BHPT5fLKlMW7ntjuvuky ljnUhOaOzDmtD3l2OYUj31/8PlzyHnucX/UWLOcTwVam8ML/DJNpVyf6gO2F+m3s -----END CERTIFICATE-----Generated at Mon Feb 9 20:08:54 2026 by rpki-client