This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/69efa1-8c99-48f8-943c-2b4a16594213/1/LjEw3uyxaPJLcHI2N1Hp6ot23UE.roa File: LjEw3uyxaPJLcHI2N1Hp6ot23UE.roa (raw, json) Hash identifier: jiCfpWdQJgmhdXrUcXRoAo1coGe6/NfMrbeXLLnoEiM= Subject key identifier: 2E:31:30:DE:EC:B1:68:F2:4B:70:72:36:37:51:E9:EA:8B:76:DD:41 Certificate issuer: /CN=9054c699a81dd962a8860f3fb0b7d03343debf76 Certificate serial: 019B7B3644C529400172A63AB134773A1606 Authority key identifier: 90:54:C6:99:A8:1D:D9:62:A8:86:0F:3F:B0:B7:D0:33:43:DE:BF:76 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kFTGmagd2WKohg8_sLfQM0Pev3Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/69efa1-8c99-48f8-943c-2b4a16594213/1/LjEw3uyxaPJLcHI2N1Hp6ot23UE.roa Signing time: Thu 01 Jan 2026 20:18:32 +0000 ROA not before: Thu 01 Jan 2026 20:18:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49148 IP address blocks: 95.130.240.0/21 maxlen: 21 95.130.240.0/24 maxlen: 24 95.130.241.0/24 maxlen: 24 95.130.242.0/24 maxlen: 24 95.130.243.0/24 maxlen: 24 95.130.244.0/24 maxlen: 24 95.130.245.0/24 maxlen: 24 95.130.246.0/24 maxlen: 24 95.130.247.0/24 maxlen: 24 185.160.176.0/22 maxlen: 22 185.160.176.0/24 maxlen: 24 185.160.177.0/24 maxlen: 24 185.160.178.0/24 maxlen: 24 185.160.179.0/24 maxlen: 24 2a00:b140::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/69efa1-8c99-48f8-943c-2b4a16594213/1/kFTGmagd2WKohg8_sLfQM0Pev3Y.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/69efa1-8c99-48f8-943c-2b4a16594213/1/kFTGmagd2WKohg8_sLfQM0Pev3Y.mft rsync://rpki.ripe.net/repository/DEFAULT/kFTGmagd2WKohg8_sLfQM0Pev3Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:44:c5:29:40:01:72:a6:3a:b1:34:77:3a:16:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9054c699a81dd962a8860f3fb0b7d03343debf76 Validity Not Before: Jan 1 20:18:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2e3130deecb168f24b7072363751e9ea8b76dd41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:80:35:22:b1:5d:b8:c7:e6:9e:2a:e2:77:ad: e8:d1:16:f6:89:30:25:c1:b1:aa:b5:12:8d:9f:ad: 20:0c:0e:0a:34:32:b0:a6:8b:ff:28:5d:2d:78:02: 30:c3:cf:c9:04:40:62:2b:c7:cc:e9:37:ac:7b:04: 06:38:8e:45:17:e7:a4:5a:4c:ab:3a:88:b8:29:30: 96:48:d8:49:a4:d7:32:77:a9:0a:c1:58:1d:2c:d5: 07:1f:d8:ef:18:12:88:cd:d1:4b:36:7c:d5:72:51: 64:81:bb:0e:be:d8:93:5d:51:75:03:de:ca:3f:81: 05:fc:56:c4:ea:8a:55:93:d6:54:ec:66:6d:5c:f8: ec:30:c8:a6:32:39:d8:ef:95:20:3a:f3:9a:91:0c: c9:e3:d2:c9:22:cf:a5:68:22:41:17:53:85:a8:97: 7c:f5:2d:e3:b6:9a:cd:e2:b3:e8:ef:9c:89:bc:86: 7b:35:3a:8a:0d:6b:7c:7e:5d:3b:15:ee:28:78:4a: da:bf:53:ba:c7:70:c3:59:f9:8f:1d:41:6d:34:f5: 84:35:1d:d9:f8:6a:27:21:7e:90:20:cc:45:ee:d6: df:9c:73:66:b6:b2:c3:07:60:73:1b:45:68:4d:8c: 31:fe:e5:3e:79:b2:0b:ef:59:7b:42:7e:28:5a:53: a9:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:31:30:DE:EC:B1:68:F2:4B:70:72:36:37:51:E9:EA:8B:76:DD:41 X509v3 Authority Key Identifier: keyid:90:54:C6:99:A8:1D:D9:62:A8:86:0F:3F:B0:B7:D0:33:43:DE:BF:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kFTGmagd2WKohg8_sLfQM0Pev3Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/69efa1-8c99-48f8-943c-2b4a16594213/1/LjEw3uyxaPJLcHI2N1Hp6ot23UE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/69efa1-8c99-48f8-943c-2b4a16594213/1/kFTGmagd2WKohg8_sLfQM0Pev3Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.130.240.0/21 185.160.176.0/22 IPv6: 2a00:b140::/32 Signature Algorithm: sha256WithRSAEncryption 80:96:80:84:d8:46:a1:2d:dc:2b:b9:b4:35:47:12:6b:94:4a: af:4f:73:fe:88:d0:0e:43:6f:d5:7c:15:8c:17:f6:66:f5:64: 51:54:e8:d3:c7:72:95:c0:bc:0a:0e:75:ab:e1:43:53:d6:5e: e1:73:e7:b3:22:cf:12:cc:a3:0c:8b:f1:6b:a3:4b:4e:e0:87: 45:6d:d8:ba:a2:95:fb:7f:d9:a6:6e:ab:f3:65:dd:89:b6:9d: 95:92:a6:0f:95:65:67:03:dc:22:2c:af:a9:35:42:34:8d:0a: 75:18:76:44:a7:f3:b8:15:af:d4:00:72:84:2d:7c:d0:79:c3: f2:7a:db:a4:97:b5:c8:b8:66:4c:cc:03:b7:b5:56:4c:97:47: 9b:e3:d0:ed:c7:93:c1:3f:e2:52:3e:a5:5d:50:cb:87:f2:37: ed:21:70:de:1f:a2:6f:68:f8:38:9f:2a:ae:b4:6a:50:f2:88: 64:11:eb:97:bf:05:6e:41:3d:39:27:25:98:5d:7f:61:34:a3: 20:48:49:b7:1b:61:37:28:03:58:ec:08:5c:bf:72:89:47:0e: ae:eb:ee:f5:19:ee:93:c5:c3:4d:2e:c3:cb:08:45:eb:48:b6: 9f:76:3b:31:78:23:f8:9c:9b:13:2c:0c:d4:d6:bf:b7:8d:69: f8:ba:94:53 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt7NkTFKUABcqY6sTR3OhYGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkwNTRjNjk5YTgxZGQ5NjJhODg2MGYzZmIwYjdkMDMzNDNk ZWJmNzYwHhcNMjYwMTAxMjAxODMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZTMxMzBkZWVjYjE2OGYyNGI3MDcyMzYzNzUxZTllYThiNzZkZDQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApYA1IrFduMfmnirid63o0Rb2iTAl wbGqtRKNn60gDA4KNDKwpov/KF0teAIww8/JBEBiK8fM6TesewQGOI5FF+ekWkyr Ooi4KTCWSNhJpNcyd6kKwVgdLNUHH9jvGBKIzdFLNnzVclFkgbsOvtiTXVF1A97K P4EF/FbE6opVk9ZU7GZtXPjsMMimMjnY75UgOvOakQzJ49LJIs+laCJBF1OFqJd8 9S3jtprN4rPo75yJvIZ7NTqKDWt8fl07Fe4oeErav1O6x3DDWfmPHUFtNPWENR3Z +GonIX6QIMxF7tbfnHNmtrLDB2BzG0VoTYwx/uU+ebIL71l7Qn4oWlOpkwIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFC4xMN7ssWjyS3ByNjdR6eqLdt1BMB8GA1UdIwQY MBaAFJBUxpmoHdliqIYPP7C30DND3r92MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva0ZUR21hZ2QyV0tvaGc4X3NMZlFNMFBldjNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi82OWVmYTEtOGM5OS00OGY4LTk0M2Mt MmI0YTE2NTk0MjEzLzEvTGpFdzN1eXhhUEpMY0hJMk4xSHA2b3QyM1VFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi82OWVmYTEtOGM5OS00OGY4LTk0M2MtMmI0YTE2NTk0MjEz LzEva0ZUR21hZ2QyV0tvaGc4X3NMZlFNMFBldjNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQDX4LwAwQC uaCwMA0EAgACMAcDBQAqALFAMA0GCSqGSIb3DQEBCwUAA4IBAQCAloCE2EahLdwr ubQ1RxJrlEqvT3P+iNAOQ2/VfBWMF/Zm9WRRVOjTx3KVwLwKDnWr4UNT1l7hc+ez Is8SzKMMi/Fro0tO4IdFbdi6opX7f9mmbqvzZd2Jtp2VkqYPlWVnA9wiLK+pNUI0 jQp1GHZEp/O4Fa/UAHKELXzQecPyetukl7XIuGZMzAO3tVZMl0eb49Dtx5PBP+JS PqVdUMuH8jftIXDeH6JvaPg4nyqutGpQ8ohkEeuXvwVuQT05JyWYXX9hNKMgSEm3 G2E3KANY7Ahcv3KJRw6u6+71Ge6TxcNNLsPLCEXrSLafdjsxeCP4nJsTLAzU1r+3 jWn4upRT -----END CERTIFICATE-----Generated at Mon Feb 9 18:30:05 2026 by rpki-client