This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/LY1fBMtbeXqoPs6JAb2Fp7GAya0.roa File: LY1fBMtbeXqoPs6JAb2Fp7GAya0.roa (raw, json) Hash identifier: Qr2vedHCJgdf38v/J9aAhF6BgY1+sX1GDop+VSlJ8A0= Subject key identifier: 2D:8D:5F:04:CB:5B:79:7A:A8:3E:CE:89:01:BD:85:A7:B1:80:C9:AD Certificate issuer: /CN=2fa16ab06020067740a4c1fb47a912622f1d0722 Certificate serial: 019B7B36D785FEA90DCC43B2C0C6171A5EFF Authority key identifier: 2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/LY1fBMtbeXqoPs6JAb2Fp7GAya0.roa Signing time: Thu 01 Jan 2026 20:19:10 +0000 ROA not before: Thu 01 Jan 2026 20:19:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3320 IP address blocks: 213.145.90.0/23 maxlen: 24 213.145.92.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.crl rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.mft rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 02:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:d7:85:fe:a9:0d:cc:43:b2:c0:c6:17:1a:5e:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2fa16ab06020067740a4c1fb47a912622f1d0722 Validity Not Before: Jan 1 20:19:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2d8d5f04cb5b797aa83ece8901bd85a7b180c9ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:88:32:dd:0e:c5:af:02:f4:8a:8f:d6:5c:72: 44:79:d3:d7:8c:33:1f:c0:36:05:fe:fc:48:75:0e: 7d:c5:b7:5d:ac:8d:51:03:64:26:9a:67:fa:fa:fc: fb:2b:6d:de:10:c4:74:80:7f:60:88:83:5c:57:dd: 14:e0:9d:65:61:f0:a0:6f:33:7b:e8:eb:5d:32:d4: c3:87:1f:b7:91:b8:51:47:ab:4e:ee:09:f3:a8:f5: 34:3a:94:6b:b7:ad:eb:d3:f3:22:e8:3f:c4:0c:69: 9a:9b:fb:b8:7d:89:8d:3f:68:7b:23:35:c3:f1:95: 27:17:63:29:13:13:c7:32:6d:9c:3f:28:0d:7a:88: 43:85:d7:8e:f7:ed:df:ed:2f:fb:e4:d2:2e:cf:16: 2d:ab:f0:02:1c:c3:60:77:dc:55:31:bf:4d:80:d7: 8c:49:62:84:b9:51:7a:ae:86:82:75:08:8f:5e:05: 53:a2:76:6f:17:2b:ce:8a:a1:e1:df:66:bd:b9:64: a6:48:f9:96:36:42:63:4d:69:4c:e0:86:0a:b7:e6: 4d:3c:74:fa:01:00:a7:5b:96:06:35:da:6b:c5:6e: aa:e9:e3:a0:4c:6c:0f:8e:f6:b8:c7:02:46:ed:9b: aa:98:3c:c0:8e:5a:0b:7c:e9:12:c5:23:39:a3:4c: 1e:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:8D:5F:04:CB:5B:79:7A:A8:3E:CE:89:01:BD:85:A7:B1:80:C9:AD X509v3 Authority Key Identifier: keyid:2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/LY1fBMtbeXqoPs6JAb2Fp7GAya0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.145.90.0-213.145.93.255 Signature Algorithm: sha256WithRSAEncryption 8b:3b:43:e7:0e:5e:06:fe:58:71:61:15:e2:08:a1:9e:8d:3c: c8:06:ad:c0:47:ba:8e:84:50:26:f5:b1:06:6c:5d:93:81:de: 5c:e2:29:78:f2:74:fe:de:7d:ff:9a:72:1c:57:af:cb:74:25: d6:d9:24:57:bc:3f:91:28:f5:14:ed:ed:45:5d:13:d0:26:2f: c3:3a:96:6a:f4:79:d5:fd:28:65:35:9f:7d:67:05:48:5f:a9: 80:7f:da:e7:51:77:74:61:6f:dd:0a:5f:03:0a:1f:83:2a:cb: eb:06:84:bd:3a:02:24:c2:05:cb:a3:93:2b:81:6e:ed:b9:80: 7a:bd:6c:98:2f:c9:56:61:37:6d:1b:21:b2:d0:1a:f2:82:bf: 68:dd:c1:41:c8:18:e2:a9:8b:f1:4b:50:27:84:46:10:e0:03: 03:9f:81:05:30:98:48:4f:a6:34:c6:88:49:7a:f1:17:69:b6: 17:df:0f:1b:db:28:ba:9f:35:30:6a:0b:8c:a6:5d:e7:02:5a: a6:24:b6:7e:3c:6a:e6:58:30:fd:86:81:37:7a:65:2a:9c:21: 94:ad:73:30:a0:37:65:33:dd:d3:b2:ad:5c:5d:b9:81:31:d8: 9a:28:3f:13:1b:d9:ca:21:2b:60:6d:c7:10:55:99:4a:f1:9d: a9:93:f2:94 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt7NteF/qkNzEOywMYXGl7/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmYTE2YWIwNjAyMDA2Nzc0MGE0YzFmYjQ3YTkxMjYyMmYx ZDA3MjIwHhcNMjYwMTAxMjAxOTEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZDhkNWYwNGNiNWI3OTdhYTgzZWNlODkwMWJkODVhN2IxODBjOWFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt4gy3Q7FrwL0io/WXHJEedPXjDMf wDYF/vxIdQ59xbddrI1RA2Qmmmf6+vz7K23eEMR0gH9giINcV90U4J1lYfCgbzN7 6OtdMtTDhx+3kbhRR6tO7gnzqPU0OpRrt63r0/Mi6D/EDGmam/u4fYmNP2h7IzXD 8ZUnF2MpExPHMm2cPygNeohDhdeO9+3f7S/75NIuzxYtq/ACHMNgd9xVMb9NgNeM SWKEuVF6roaCdQiPXgVTonZvFyvOiqHh32a9uWSmSPmWNkJjTWlM4IYKt+ZNPHT6 AQCnW5YGNdprxW6q6eOgTGwPjva4xwJG7ZuqmDzAjloLfOkSxSM5o0wewwIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFC2NXwTLW3l6qD7OiQG9haexgMmtMB8GA1UdIwQY MBaAFC+harBgIAZ3QKTB+0epEmIvHQciMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTDZGcXNHQWdCbmRBcE1IN1I2a1NZaThkQnlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy83ZjIzOTMtZDAxYS00MWY3LWE1MmUt ZDI0MmI2ZjNhOGExLzEvTFkxZkJNdGJlWHFvUHM2SkFiMkZwN0dBeWEwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNy83ZjIzOTMtZDAxYS00MWY3LWE1MmUtZDI0MmI2ZjNhOGEx LzEvTDZGcXNHQWdCbmRBcE1IN1I2a1NZaThkQnlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAHVkVoD BAHVkVwwDQYJKoZIhvcNAQELBQADggEBAIs7Q+cOXgb+WHFhFeIIoZ6NPMgGrcBH uo6EUCb1sQZsXZOB3lziKXjydP7eff+achxXr8t0JdbZJFe8P5Eo9RTt7UVdE9Am L8M6lmr0edX9KGU1n31nBUhfqYB/2udRd3Rhb90KXwMKH4Mqy+sGhL06AiTCBcuj kyuBbu25gHq9bJgvyVZhN20bIbLQGvKCv2jdwUHIGOKpi/FLUCeERhDgAwOfgQUw mEhPpjTGiEl68RdpthffDxvbKLqfNTBqC4ymXecCWqYktn48auZYMP2GgTd6ZSqc IZStczCgN2Uz3dOyrVxduYEx2JooPxMb2cohK2BtxxBVmUrxnamT8pQ= -----END CERTIFICATE-----Generated at Mon Jan 19 11:47:26 2026 by rpki-client