This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/4fbe10-9487-4115-9856-beb70fd415ca/1/lKVJdRF0hE9bPtqV3XlzvhT3Iqs.roa File: lKVJdRF0hE9bPtqV3XlzvhT3Iqs.roa (raw, json) Hash identifier: GeIEq9ieMXhGCkHBVtks0M5q4Jm8CcNNhR3YdczhVxM= Subject key identifier: 94:A5:49:75:11:74:84:4F:5B:3E:DA:95:DD:79:73:BE:14:F7:22:AB Certificate issuer: /CN=f57a4812a159ef6a9e92972e7572ad662d72215a Certificate serial: 019B7C133FE41915CE9D109B7D015074BB97 Authority key identifier: F5:7A:48:12:A1:59:EF:6A:9E:92:97:2E:75:72:AD:66:2D:72:21:5A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9XpIEqFZ72qekpcudXKtZi1yIVo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/4fbe10-9487-4115-9856-beb70fd415ca/1/lKVJdRF0hE9bPtqV3XlzvhT3Iqs.roa Signing time: Fri 02 Jan 2026 00:19:54 +0000 ROA not before: Fri 02 Jan 2026 00:19:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49029 IP address blocks: 185.154.128.0/24 maxlen: 24 185.154.129.0/24 maxlen: 24 185.154.130.0/24 maxlen: 24 185.154.131.0/24 maxlen: 24 212.23.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/4fbe10-9487-4115-9856-beb70fd415ca/1/9XpIEqFZ72qekpcudXKtZi1yIVo.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/4fbe10-9487-4115-9856-beb70fd415ca/1/9XpIEqFZ72qekpcudXKtZi1yIVo.mft rsync://rpki.ripe.net/repository/DEFAULT/9XpIEqFZ72qekpcudXKtZi1yIVo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:3f:e4:19:15:ce:9d:10:9b:7d:01:50:74:bb:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f57a4812a159ef6a9e92972e7572ad662d72215a Validity Not Before: Jan 2 00:19:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=94a549751174844f5b3eda95dd7973be14f722ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:82:71:6e:6d:f6:32:28:a3:a7:47:10:5b:c2: c6:bc:38:a6:8d:65:77:73:da:bc:c7:f4:15:43:34: 17:73:e0:87:09:cf:ba:af:cd:c7:01:02:71:36:9f: f3:81:62:c8:6e:48:07:ee:52:35:a4:32:9b:5b:48: d6:a8:e0:6f:b8:30:f8:ba:0f:83:7e:d7:e5:53:ec: 25:cd:3e:c4:b8:24:07:12:a1:31:14:46:c9:b1:4c: 33:f7:d5:f1:b7:c3:20:51:bd:81:52:64:eb:54:75: 3c:20:7e:71:17:54:f1:92:0d:eb:db:6a:d3:2f:b8: a2:4b:2f:e6:b0:f4:11:6b:a1:0f:8a:31:1c:18:1f: 36:c7:02:de:80:ae:ea:86:00:c2:9e:7d:98:5a:36: 3a:3f:e1:35:ba:37:ea:08:e1:6c:94:d1:e7:99:32: a3:93:66:3a:c4:6e:aa:e7:d2:02:ab:a3:88:4e:57: a9:f3:1e:5c:a6:aa:e7:d1:c9:d5:da:90:72:57:c1: 2e:85:f4:76:df:67:67:78:4c:91:11:ce:fd:ba:6b: a0:f1:1a:8d:b1:2c:19:92:26:66:99:6f:90:80:de: 3b:ce:3b:63:94:b8:c7:a9:6e:56:e8:94:c8:96:a3: c8:68:9b:8a:32:d0:35:0f:5c:f3:6b:d7:74:aa:37: b3:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:A5:49:75:11:74:84:4F:5B:3E:DA:95:DD:79:73:BE:14:F7:22:AB X509v3 Authority Key Identifier: keyid:F5:7A:48:12:A1:59:EF:6A:9E:92:97:2E:75:72:AD:66:2D:72:21:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9XpIEqFZ72qekpcudXKtZi1yIVo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/4fbe10-9487-4115-9856-beb70fd415ca/1/lKVJdRF0hE9bPtqV3XlzvhT3Iqs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/4fbe10-9487-4115-9856-beb70fd415ca/1/9XpIEqFZ72qekpcudXKtZi1yIVo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.154.128.0/22 212.23.209.0/24 Signature Algorithm: sha256WithRSAEncryption 71:2e:53:b6:0d:16:5e:de:65:b1:be:54:d7:63:4e:c7:1b:a4: 67:c5:da:49:d4:4b:f5:43:3c:45:54:8e:22:fd:02:ae:d4:6b: 53:27:67:aa:67:9d:25:b1:09:9e:87:10:52:88:6d:e4:a9:0b: 94:84:5d:b6:ed:dd:ce:46:c5:75:81:fc:7f:9a:5b:5a:b6:67: 55:72:72:7a:b8:de:28:8c:82:97:ee:7d:9d:d5:94:7a:7b:ce: e4:00:69:07:9f:26:b1:78:aa:b8:e7:4f:67:02:3d:fb:de:f8: 7d:8f:93:63:c9:64:60:15:4b:c9:71:5d:02:72:5c:24:c0:83: b4:0a:b8:63:f3:a4:2a:69:c5:6a:01:e7:e0:5f:55:52:88:37: 6f:a4:e5:9f:6c:1f:1c:68:5e:d7:13:61:b3:39:b2:f9:61:50: 17:cc:4e:fd:92:40:21:3a:53:37:fc:11:39:c4:00:0b:4c:cb: a5:de:de:ff:ce:53:df:1e:f3:19:36:ce:75:7c:2b:ac:f7:1b: 1f:dd:b6:e8:0e:73:90:84:b2:2f:75:6e:f5:56:4c:1e:71:3f: 9a:8b:8e:0f:77:50:8b:ce:6a:b6:45:04:e6:80:b4:3b:9b:02: e9:d6:a8:2d:c7:72:a9:72:4a:65:55:dd:ac:d0:19:ac:6a:9b: 37:90:49:93 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt8Ez/kGRXOnRCbfQFQdLuXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1N2E0ODEyYTE1OWVmNmE5ZTkyOTcyZTc1NzJhZDY2MmQ3 MjIxNWEwHhcNMjYwMTAyMDAxOTU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NGE1NDk3NTExNzQ4NDRmNWIzZWRhOTVkZDc5NzNiZTE0ZjcyMmFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA24Jxbm32Miijp0cQW8LGvDimjWV3 c9q8x/QVQzQXc+CHCc+6r83HAQJxNp/zgWLIbkgH7lI1pDKbW0jWqOBvuDD4ug+D ftflU+wlzT7EuCQHEqExFEbJsUwz99Xxt8MgUb2BUmTrVHU8IH5xF1Txkg3r22rT L7iiSy/msPQRa6EPijEcGB82xwLegK7qhgDCnn2YWjY6P+E1ujfqCOFslNHnmTKj k2Y6xG6q59ICq6OITlep8x5cpqrn0cnV2pByV8EuhfR232dneEyREc79umug8RqN sSwZkiZmmW+QgN47zjtjlLjHqW5W6JTIlqPIaJuKMtA1D1zza9d0qjezNQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFJSlSXURdIRPWz7ald15c74U9yKrMB8GA1UdIwQY MBaAFPV6SBKhWe9qnpKXLnVyrWYtciFaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOVhwSUVxRlo3MnFla3BjdWRYS3RaaTF5SVZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy80ZmJlMTAtOTQ4Ny00MTE1LTk4NTYt YmViNzBmZDQxNWNhLzEvbEtWSmRSRjBoRTliUHRxVjNYbHp2aFQzSXFzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy80ZmJlMTAtOTQ4Ny00MTE1LTk4NTYtYmViNzBmZDQxNWNh LzEvOVhwSUVxRlo3MnFla3BjdWRYS3RaaTF5SVZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCuZqAAwQA 1BfRMA0GCSqGSIb3DQEBCwUAA4IBAQBxLlO2DRZe3mWxvlTXY07HG6RnxdpJ1Ev1 QzxFVI4i/QKu1GtTJ2eqZ50lsQmehxBSiG3kqQuUhF227d3ORsV1gfx/mltatmdV cnJ6uN4ojIKX7n2d1ZR6e87kAGkHnyaxeKq4509nAj373vh9j5NjyWRgFUvJcV0C clwkwIO0Crhj86QqacVqAefgX1VSiDdvpOWfbB8caF7XE2GzObL5YVAXzE79kkAh OlM3/BE5xAALTMul3t7/zlPfHvMZNs51fCus9xsf3bboDnOQhLIvdW71VkwecT+a i44Pd1CLzmq2RQTmgLQ7mwLp1qgtx3KpckplVd2s0Bmsaps3kEmT -----END CERTIFICATE-----Generated at Mon Feb 9 20:05:23 2026 by rpki-client