This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/Lf5FvUmpikFoYhH2ytdpP8ItWlM.roa File: Lf5FvUmpikFoYhH2ytdpP8ItWlM.roa (raw, json) Hash identifier: lxo8eRRdaXgJpksSvue5GrOKiD1mj5NmMU6shXOSuVQ= Subject key identifier: 2D:FE:45:BD:49:A9:8A:41:68:62:11:F6:CA:D7:69:3F:C2:2D:5A:53 Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10 Certificate serial: 019B7F84EE063F2D65BF742155EA9DBDDA7A Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/Lf5FvUmpikFoYhH2ytdpP8ItWlM.roa Signing time: Fri 02 Jan 2026 16:22:56 +0000 ROA not before: Fri 02 Jan 2026 16:22:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211619 IP address blocks: 45.9.168.0/24 maxlen: 24 77.242.152.0/24 maxlen: 24 77.242.153.0/24 maxlen: 24 77.242.155.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.mft rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 15:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:ee:06:3f:2d:65:bf:74:21:55:ea:9d:bd:da:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10 Validity Not Before: Jan 2 16:22:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2dfe45bd49a98a41686211f6cad7693fc22d5a53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:95:da:d8:d1:17:ae:ba:76:d1:f1:aa:48:2c: 65:5c:d6:1e:1b:8f:ca:02:f3:55:af:6d:f5:25:f6: 3e:ee:7b:f4:ca:29:bd:6c:2e:c3:9c:d1:9e:ad:21: 70:66:60:1d:34:8e:48:71:83:36:fa:b9:2c:b4:f9: 33:a8:a3:9a:42:47:e5:e9:b8:94:9e:32:e5:e4:03: 27:ee:c0:d4:c0:6e:60:c1:38:43:82:89:3a:cf:41: 41:78:1f:f9:21:a1:22:e8:da:fb:5e:dd:27:69:2e: 57:d3:1b:31:f1:69:d4:bb:5d:24:a1:6a:39:54:e2: 0a:0d:f5:01:64:73:40:aa:23:5f:fb:6c:16:d4:09: 85:5e:dc:a3:04:ed:49:b3:28:23:76:4c:a5:e0:7d: 73:44:98:71:0c:4f:2d:16:21:37:15:07:42:a0:e2: 8e:dd:3e:5c:7d:04:ca:1a:4e:51:7a:de:df:a9:e1: 2a:94:e1:40:78:f9:e9:68:74:fd:43:7f:f3:30:b8: 77:ee:30:9b:c4:74:39:71:21:c0:a8:9c:be:97:b7: 26:7b:66:a7:7e:72:e3:23:ae:78:f2:b0:0a:3b:bd: 55:45:7f:3d:e3:2d:9b:ce:7b:37:24:1a:dc:c5:e0: c4:47:26:05:64:ea:9d:19:52:f5:13:da:ca:71:3b: f1:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:FE:45:BD:49:A9:8A:41:68:62:11:F6:CA:D7:69:3F:C2:2D:5A:53 X509v3 Authority Key Identifier: keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/Lf5FvUmpikFoYhH2ytdpP8ItWlM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.9.168.0/24 77.242.152.0/23 77.242.155.0/24 Signature Algorithm: sha256WithRSAEncryption b5:5b:af:59:54:1a:07:45:18:c6:cf:6d:2a:5c:73:eb:57:c4: 5d:ca:f5:27:9e:e2:72:39:b7:3e:d9:b5:98:7d:9d:eb:4e:cc: 21:90:9e:51:7d:1c:f6:48:01:ae:53:d7:74:8b:18:d1:32:15: f7:a6:ca:ba:62:6e:9b:89:c6:22:92:5e:48:a7:fc:b6:4e:d2: e0:41:93:50:76:ef:ca:5d:b6:d7:aa:f1:3f:86:ba:b0:a1:ba: 60:36:9e:f7:8b:69:53:7b:62:8a:71:9b:da:8c:82:f6:93:9b: 9e:09:4b:21:35:e7:9e:0d:7f:0f:29:28:f2:d0:57:ff:b7:5b: db:48:7a:60:10:cd:00:80:d6:e1:a1:1a:a9:7a:6c:56:29:71: e4:96:a8:f6:db:bf:22:b4:8f:86:23:37:ab:d0:72:b7:b9:47: 79:f6:fd:fe:cd:c9:23:45:7c:4a:6e:da:82:df:d0:bc:b8:5e: db:06:cb:dd:0d:c2:2c:a3:4b:e3:c8:08:30:9c:bf:9b:2e:fb: 94:2d:7d:b7:7b:5e:8d:27:fb:ca:3e:4c:47:4e:57:c2:ad:33: 04:f1:08:a5:f0:b5:35:25:5c:72:f7:cb:58:b3:cb:19:3f:f1: bf:b0:80:92:7e:0f:38:86:60:a7:62:7e:e0:02:1f:e7:57:b3: a5:f3:7b:34 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt/hO4GPy1lv3QhVeqdvdp6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkYWFhMGUwODIzNjAzNjBhY2RhMzQ3NjY0ZWI4MzE0ZWIx MWRhMTAwHhcNMjYwMTAyMTYyMjU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZGZlNDViZDQ5YTk4YTQxNjg2MjExZjZjYWQ3NjkzZmMyMmQ1YTUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn5Xa2NEXrrp20fGqSCxlXNYeG4/K AvNVr231JfY+7nv0yim9bC7DnNGerSFwZmAdNI5IcYM2+rkstPkzqKOaQkfl6biU njLl5AMn7sDUwG5gwThDgok6z0FBeB/5IaEi6Nr7Xt0naS5X0xsx8WnUu10koWo5 VOIKDfUBZHNAqiNf+2wW1AmFXtyjBO1Jsygjdkyl4H1zRJhxDE8tFiE3FQdCoOKO 3T5cfQTKGk5Ret7fqeEqlOFAePnpaHT9Q3/zMLh37jCbxHQ5cSHAqJy+l7cme2an fnLjI6548rAKO71VRX894y2bzns3JBrcxeDERyYFZOqdGVL1E9rKcTvx0wIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFC3+Rb1JqYpBaGIR9srXaT/CLVpTMB8GA1UdIwQY MBaAFM2qoOCCNgNgrNo0dmTrgxTrEdoQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvemFxZzRJSTJBMkNzMmpSMlpPdURGT3NSMmhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC81ODkxMjctMTA5Ni00YzkxLTk2Y2Mt N2U0ZDZmNmY2ZTY2LzEvTGY1RnZVbXBpa0ZvWWhIMnl0ZHBQOEl0V2xNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC81ODkxMjctMTA5Ni00YzkxLTk2Y2MtN2U0ZDZmNmY2ZTY2 LzEvemFxZzRJSTJBMkNzMmpSMlpPdURGT3NSMmhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQALQmoAwQB TfKYAwQATfKbMA0GCSqGSIb3DQEBCwUAA4IBAQC1W69ZVBoHRRjGz20qXHPrV8Rd yvUnnuJyObc+2bWYfZ3rTswhkJ5RfRz2SAGuU9d0ixjRMhX3psq6Ym6bicYikl5I p/y2TtLgQZNQdu/KXbbXqvE/hrqwobpgNp73i2lTe2KKcZvajIL2k5ueCUshNeee DX8PKSjy0Ff/t1vbSHpgEM0AgNbhoRqpemxWKXHklqj2278itI+GIzer0HK3uUd5 9v3+zckjRXxKbtqC39C8uF7bBsvdDcIso0vjyAgwnL+bLvuULX23e16NJ/vKPkxH TlfCrTME8Qil8LU1JVxy98tYs8sZP/G/sICSfg84hmCnYn7gAh/nV7Ol83s0 -----END CERTIFICATE-----Generated at Mon Jan 19 19:59:14 2026 by rpki-client