This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/lEm3CZA8GzHEJ1XIR7EtwzyDTh0.roa File: lEm3CZA8GzHEJ1XIR7EtwzyDTh0.roa (raw, json) Hash identifier: q+vH0LhfNaMkXkobnsFG/tv2APuqm3jMk9eI1hYHDkQ= Subject key identifier: 94:49:B7:09:90:3C:1B:31:C4:27:55:C8:47:B1:2D:C3:3C:83:4E:1D Certificate issuer: /CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e Certificate serial: 019BD70C3DA7B655E3F0B13E1D35A199FDA2 Authority key identifier: 06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/lEm3CZA8GzHEJ1XIR7EtwzyDTh0.roa Signing time: Mon 19 Jan 2026 16:17:41 +0000 ROA not before: Mon 19 Jan 2026 16:17:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 834 IP address blocks: 45.155.241.0/24 maxlen: 24 45.155.242.0/24 maxlen: 24 194.143.206.0/23 maxlen: 24 194.143.207.0/24 maxlen: 24 194.143.217.0/24 maxlen: 24 194.143.218.0/24 maxlen: 24 194.143.221.0/24 maxlen: 24 194.143.222.0/24 maxlen: 24 194.143.223.0/24 maxlen: 24 195.114.196.0/24 maxlen: 24 195.114.197.0/24 maxlen: 24 195.114.198.0/24 maxlen: 24 195.114.203.0/24 maxlen: 24 195.114.205.0/24 maxlen: 24 213.220.0.0/24 maxlen: 24 213.220.2.0/24 maxlen: 24 213.220.4.0/24 maxlen: 24 213.220.6.0/24 maxlen: 24 213.220.7.0/24 maxlen: 24 213.220.11.0/24 maxlen: 24 213.220.13.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.mft rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:d7:0c:3d:a7:b6:55:e3:f0:b1:3e:1d:35:a1:99:fd:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e Validity Not Before: Jan 19 16:17:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9449b709903c1b31c42755c847b12dc33c834e1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:a4:e3:89:38:df:7b:5a:85:9b:b2:a6:b4:b7: 43:48:6d:0f:ef:78:63:e8:8a:b3:be:f7:55:21:14: a8:2b:8d:9f:33:f1:f5:6b:66:69:a8:e8:c9:2c:0f: 95:97:0f:65:16:91:3c:ba:54:ef:30:9a:65:a8:7a: ca:15:ef:0d:80:78:19:17:71:a4:45:a4:16:77:18: c0:9e:71:91:60:cc:61:8e:78:be:25:90:d7:dd:b9: 22:7f:bd:87:36:fc:da:e6:e2:f8:f3:b2:d4:69:54: 66:eb:e7:9a:44:16:c5:89:da:29:ff:b7:c9:70:1b: 0e:39:bb:65:ca:5f:b5:9e:ec:fd:f3:6d:80:5e:b1: e7:9a:6b:df:02:10:d4:17:33:7c:a7:42:c1:3e:19: 17:ca:9f:89:d1:27:da:19:4b:0b:95:20:da:9f:83: 4b:42:32:d9:05:b7:bc:55:b8:2f:10:e4:65:fd:61: a1:20:e7:c4:bd:a1:3c:65:ba:3d:1d:9c:86:2c:85: cc:17:a9:44:58:71:de:22:2a:f3:36:c6:0d:1f:f7: 0e:d3:47:d0:e4:4c:01:f0:8b:d0:76:87:37:8d:32: 5a:9f:6d:f0:8a:80:9f:9c:c8:9f:40:f4:ec:43:3c: 59:ba:a2:d1:f0:d9:65:d5:3c:1d:5a:31:8c:6d:7f: a1:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:49:B7:09:90:3C:1B:31:C4:27:55:C8:47:B1:2D:C3:3C:83:4E:1D X509v3 Authority Key Identifier: keyid:06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/lEm3CZA8GzHEJ1XIR7EtwzyDTh0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.155.241.0-45.155.242.255 194.143.206.0/23 194.143.217.0-194.143.218.255 194.143.221.0-194.143.223.255 195.114.196.0-195.114.198.255 195.114.203.0/24 195.114.205.0/24 213.220.0.0/24 213.220.2.0/24 213.220.4.0/24 213.220.6.0/23 213.220.11.0/24 213.220.13.0/24 Signature Algorithm: sha256WithRSAEncryption 7c:b2:df:ba:4a:b6:33:92:1b:fb:66:21:2b:bb:38:27:15:33: 14:7a:78:07:9d:85:3e:9d:05:01:89:71:11:a8:76:12:18:cf: 94:14:0b:08:98:c8:8e:68:53:d2:dd:c8:6e:55:ff:4e:75:9a: 2b:33:7d:a5:e6:2b:8e:ce:cd:96:6b:a4:e4:77:5f:26:97:27: c6:44:99:76:4e:38:e6:f5:e6:b6:13:01:dd:5a:e9:67:24:a3: 46:c2:f3:a6:08:e2:0e:70:7f:d2:b7:dd:0b:e1:30:11:a0:4d: bf:67:94:20:e8:39:b4:bb:98:92:2d:0e:30:57:1b:fd:ce:2c: 2d:a9:50:c7:23:97:b4:36:e7:1d:4d:1c:8b:4b:2e:b0:d3:49: 7d:f8:61:54:94:b8:9c:69:bd:0a:3a:43:e9:af:56:fa:c7:9e: 5e:7a:b1:77:ea:d2:7e:58:f3:c0:da:f2:c3:a7:75:a6:75:69: 14:a4:d4:f0:29:55:df:ef:f1:45:f2:46:b4:db:b4:1b:70:6d: 4b:6d:9c:fd:36:48:8e:27:10:8d:12:8b:d6:65:3d:47:51:1d: 45:6c:f0:34:a0:1f:77:5f:18:33:be:27:ea:59:bf:65:6d:3b: a8:27:49:cb:2e:b8:fa:43:66:59:1a:d4:9b:d3:88:be:99:a0: 12:35:42:9b -----BEGIN CERTIFICATE----- MIIFZjCCBE6gAwIBAgISAZvXDD2ntlXj8LE+HTWhmf2iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2NzFkY2M3YTlhYzczNTFjNzFlMGJjMjI3OGNmNDVmZDAy MGFlMmUwHhcNMjYwMTE5MTYxNzQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NDQ5YjcwOTkwM2MxYjMxYzQyNzU1Yzg0N2IxMmRjMzNjODM0ZTFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxKTjiTjfe1qFm7KmtLdDSG0P73hj 6IqzvvdVIRSoK42fM/H1a2ZpqOjJLA+Vlw9lFpE8ulTvMJplqHrKFe8NgHgZF3Gk RaQWdxjAnnGRYMxhjni+JZDX3bkif72HNvza5uL487LUaVRm6+eaRBbFidop/7fJ cBsOObtlyl+1nuz9822AXrHnmmvfAhDUFzN8p0LBPhkXyp+J0SfaGUsLlSDan4NL QjLZBbe8VbgvEORl/WGhIOfEvaE8Zbo9HZyGLIXMF6lEWHHeIirzNsYNH/cO00fQ 5EwB8IvQdoc3jTJan23wioCfnMifQPTsQzxZuqLR8Nll1TwdWjGMbX+hewIDAQAB o4ICcjCCAm4wHQYDVR0OBBYEFJRJtwmQPBsxxCdVyEexLcM8g04dMB8GA1UdIwQY MBaAFAZx3MeprHNRxx4LwieM9F/QIK4uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQm5IY3g2bXNjMUhISGd2Q0o0ejBYOUFncmk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS8xZjk0OTMtZDQ2OC00YTdjLThjNGIt MWRkZWM0Y2NlMjRjLzEvbEVtM0NaQThHekhFSjFYSVI3RXR3enlEVGgwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS8xZjk0OTMtZDQ2OC00YTdjLThjNGItMWRkZWM0Y2NlMjRj LzEvQm5IY3g2bXNjMUhISGd2Q0o0ejBYOUFncmk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGHBggrBgEFBQcBBwEB/wR4MHYwdAQCAAEwbjAMAwQALZvx AwQALZvyAwQBwo/OMAwDBADCj9kDBADCj9owDAMEAMKP3QMEBcKPwDAMAwQCw3LE AwQAw3LGAwQAw3LLAwQAw3LNAwQA1dwAAwQA1dwCAwQA1dwEAwQB1dwGAwQA1dwL AwQA1dwNMA0GCSqGSIb3DQEBCwUAA4IBAQB8st+6SrYzkhv7ZiEruzgnFTMUengH nYU+nQUBiXERqHYSGM+UFAsImMiOaFPS3chuVf9OdZorM32l5iuOzs2Wa6Tkd18m lyfGRJl2Tjjm9ea2EwHdWulnJKNGwvOmCOIOcH/St90L4TARoE2/Z5Qg6Dm0u5iS LQ4wVxv9ziwtqVDHI5e0NucdTRyLSy6w00l9+GFUlLicab0KOkPpr1b6x55eerF3 6tJ+WPPA2vLDp3WmdWkUpNTwKVXf7/FF8ka027QbcG1LbZz9NkiOJxCNEovWZT1H UR1FbPA0oB93XxgzvifqWb9lbTuoJ0nLLrj6Q2ZZGtSb04i+maASNUKb -----END CERTIFICATE-----Generated at Tue Jan 20 02:48:01 2026 by rpki-client