This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/b6c991-1fd4-487f-8778-d15e516dc45c/1/lSj7G66n_Zbfp5QixdzpYlLB0i4.roa File: lSj7G66n_Zbfp5QixdzpYlLB0i4.roa (raw, json) Hash identifier: flGRTyUdnWXMFICIWjCtri2/GPHC/mh1hngklA/vSAw= Subject key identifier: 95:28:FB:1B:AE:A7:FD:96:DF:A7:94:22:C5:DC:E9:62:52:C1:D2:2E Certificate issuer: /CN=111e0cbbe5d1c0a09465095e444fbc1c7932c683 Certificate serial: 019B7AC8AA526E802E640CCB731FC3F1B864 Authority key identifier: 11:1E:0C:BB:E5:D1:C0:A0:94:65:09:5E:44:4F:BC:1C:79:32:C6:83 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ER4Mu-XRwKCUZQleRE-8HHkyxoM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/b6c991-1fd4-487f-8778-d15e516dc45c/1/lSj7G66n_Zbfp5QixdzpYlLB0i4.roa Signing time: Thu 01 Jan 2026 18:18:49 +0000 ROA not before: Thu 01 Jan 2026 18:18:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31898 IP address blocks: 185.125.42.0/24 maxlen: 24 2a06:b7c2::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/b6c991-1fd4-487f-8778-d15e516dc45c/1/ER4Mu-XRwKCUZQleRE-8HHkyxoM.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/b6c991-1fd4-487f-8778-d15e516dc45c/1/ER4Mu-XRwKCUZQleRE-8HHkyxoM.mft rsync://rpki.ripe.net/repository/DEFAULT/ER4Mu-XRwKCUZQleRE-8HHkyxoM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 Jan 2026 13:16:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:aa:52:6e:80:2e:64:0c:cb:73:1f:c3:f1:b8:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=111e0cbbe5d1c0a09465095e444fbc1c7932c683 Validity Not Before: Jan 1 18:18:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9528fb1baea7fd96dfa79422c5dce96252c1d22e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:76:41:31:cc:d2:7e:e9:2e:3e:f5:a0:b7:84: 39:66:5c:6f:5a:1e:02:3c:47:df:6c:cb:9d:76:ad: 12:49:95:ef:a3:b8:70:c4:9e:71:59:da:2f:2f:64: 30:e2:24:4b:cf:cc:f4:1e:bc:40:aa:a5:15:5b:87: 68:15:a8:92:3e:50:eb:24:dc:cb:9f:be:b3:ad:f0: 59:7d:3a:0b:c8:24:5a:f4:08:f0:33:21:86:09:49: fe:2d:5e:cf:0f:1d:3d:45:a3:a3:79:c8:40:ed:ce: 92:1c:74:26:a0:d2:d5:3f:6f:b7:07:dc:b9:b5:d4: 14:33:42:9f:b3:6b:14:2e:52:c6:8a:c1:af:df:e7: e0:a2:d1:a3:f1:1e:ce:c8:bb:04:6e:10:a9:d3:32: bb:17:51:6b:6d:4b:01:0e:1b:98:71:3b:73:82:9b: 13:94:43:69:bc:c9:16:59:1b:e1:a8:61:dc:26:50: 5e:43:53:1c:14:f3:b2:4a:2e:5b:6e:c7:b3:2f:c9: 93:0b:38:a7:91:a6:9f:ab:46:3d:cc:d6:97:e8:b0: 4f:84:e6:54:07:b0:39:72:2f:b5:c7:b9:31:3d:c8: 04:ce:8e:ee:2e:0e:fa:e2:ab:3e:63:59:58:28:8f: 4f:24:f2:1a:b4:7d:ea:00:35:5f:2b:dd:67:4e:76: 7f:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:28:FB:1B:AE:A7:FD:96:DF:A7:94:22:C5:DC:E9:62:52:C1:D2:2E X509v3 Authority Key Identifier: keyid:11:1E:0C:BB:E5:D1:C0:A0:94:65:09:5E:44:4F:BC:1C:79:32:C6:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ER4Mu-XRwKCUZQleRE-8HHkyxoM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/b6c991-1fd4-487f-8778-d15e516dc45c/1/lSj7G66n_Zbfp5QixdzpYlLB0i4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/b6c991-1fd4-487f-8778-d15e516dc45c/1/ER4Mu-XRwKCUZQleRE-8HHkyxoM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.125.42.0/24 IPv6: 2a06:b7c2::/32 Signature Algorithm: sha256WithRSAEncryption 85:a8:dc:2f:9e:68:2b:59:10:0e:8a:17:51:27:64:12:08:9a: 6b:cd:ce:bf:fc:64:e7:7b:7d:25:26:71:a8:49:ad:35:94:12: 8b:1b:d6:62:28:91:78:0a:78:05:ff:0e:bb:1f:5e:99:60:a5: 0f:4a:90:d6:1a:9e:7a:c6:be:be:ec:a1:36:05:3c:e7:53:4c: 76:4a:ac:f4:37:54:c8:39:ef:0a:6c:90:34:7f:d5:14:01:16: 45:c0:46:7b:52:3d:47:29:7b:2f:d3:13:20:61:72:0e:92:b7: 70:8c:54:c5:3a:f6:c7:df:e4:ed:dd:7e:9f:34:28:d9:31:3b: 3d:df:53:12:33:97:f2:09:f5:b8:7a:3a:f9:be:db:b1:13:d1: 17:c2:55:3d:db:95:48:24:e3:2e:67:e7:e6:21:e8:12:39:4d: d5:ea:9a:da:c3:46:09:0c:cd:ed:9c:0d:d7:93:fa:2a:68:41: 80:dd:19:57:ac:34:1a:8c:17:1f:b7:71:be:f6:3c:3e:d2:37: ed:ef:70:ac:19:c9:90:e5:9e:52:1c:12:f0:06:fa:bd:84:d3: b7:a3:7f:fc:a9:2f:87:4a:0c:79:f0:10:e6:36:b9:6e:01:57: f7:04:23:15:cf:cf:de:ad:51:1e:ff:5a:8e:18:d4:59:c1:f9: 8d:2c:21:1d -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt6yKpSboAuZAzLcx/D8bhkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExMWUwY2JiZTVkMWMwYTA5NDY1MDk1ZTQ0NGZiYzFjNzkz MmM2ODMwHhcNMjYwMTAxMTgxODQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NTI4ZmIxYmFlYTdmZDk2ZGZhNzk0MjJjNWRjZTk2MjUyYzFkMjJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA13ZBMczSfukuPvWgt4Q5ZlxvWh4C PEffbMuddq0SSZXvo7hwxJ5xWdovL2Qw4iRLz8z0HrxAqqUVW4doFaiSPlDrJNzL n76zrfBZfToLyCRa9AjwMyGGCUn+LV7PDx09RaOjechA7c6SHHQmoNLVP2+3B9y5 tdQUM0Kfs2sULlLGisGv3+fgotGj8R7OyLsEbhCp0zK7F1FrbUsBDhuYcTtzgpsT lENpvMkWWRvhqGHcJlBeQ1McFPOySi5bbsezL8mTCzinkaafq0Y9zNaX6LBPhOZU B7A5ci+1x7kxPcgEzo7uLg764qs+Y1lYKI9PJPIatH3qADVfK91nTnZ/qQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFJUo+xuup/2W36eUIsXc6WJSwdIuMB8GA1UdIwQY MBaAFBEeDLvl0cCglGUJXkRPvBx5MsaDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRVI0TXUtWFJ3S0NVWlFsZVJFLThISGt5eG9NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9iNmM5OTEtMWZkNC00ODdmLTg3Nzgt ZDE1ZTUxNmRjNDVjLzEvbFNqN0c2Nm5fWmJmcDVRaXhkenBZbExCMGk0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi9iNmM5OTEtMWZkNC00ODdmLTg3NzgtZDE1ZTUxNmRjNDVj LzEvRVI0TXUtWFJ3S0NVWlFsZVJFLThISGt5eG9NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAuX0qMA0E AgACMAcDBQAqBrfCMA0GCSqGSIb3DQEBCwUAA4IBAQCFqNwvnmgrWRAOihdRJ2QS CJprzc6//GTne30lJnGoSa01lBKLG9ZiKJF4CngF/w67H16ZYKUPSpDWGp56xr6+ 7KE2BTznU0x2Sqz0N1TIOe8KbJA0f9UUARZFwEZ7Uj1HKXsv0xMgYXIOkrdwjFTF OvbH3+Tt3X6fNCjZMTs931MSM5fyCfW4ejr5vtuxE9EXwlU925VIJOMuZ+fmIegS OU3V6praw0YJDM3tnA3Xk/oqaEGA3RlXrDQajBcft3G+9jw+0jft73CsGcmQ5Z5S HBLwBvq9hNO3o3/8qS+HSgx58BDmNrluAVf3BCMVz8/erVEe/1qOGNRZwfmNLCEd -----END CERTIFICATE-----Generated at Sat Jan 10 20:49:48 2026 by rpki-client