This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/c82215-e939-485d-82d7-d188c8085305/1/lTrIYbwh25WZaMx9FTa-lJOaOXw.roa File: lTrIYbwh25WZaMx9FTa-lJOaOXw.roa (raw, json) Hash identifier: yIg48QwH4K69I8dvoAjoM5Eex+bVMTIw9/IsxOLJtfY= Subject key identifier: 95:3A:C8:61:BC:21:DB:95:99:68:CC:7D:15:36:BE:94:93:9A:39:7C Certificate issuer: /CN=7c5dfdb6e1d93c092823de96bdd7c88bbc36a1d1 Certificate serial: 019B797E73261DD0F868BE7ECF5D3099EAFF Authority key identifier: 7C:5D:FD:B6:E1:D9:3C:09:28:23:DE:96:BD:D7:C8:8B:BC:36:A1:D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fF39tuHZPAkoI96WvdfIi7w2odE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/c82215-e939-485d-82d7-d188c8085305/1/lTrIYbwh25WZaMx9FTa-lJOaOXw.roa Signing time: Thu 01 Jan 2026 12:18:08 +0000 ROA not before: Thu 01 Jan 2026 12:18:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204576 IP address blocks: 185.246.88.0/22 maxlen: 22 185.246.88.0/24 maxlen: 24 185.246.89.0/24 maxlen: 24 185.246.90.0/24 maxlen: 24 185.246.91.0/24 maxlen: 24 2a10:2040::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/c82215-e939-485d-82d7-d188c8085305/1/fF39tuHZPAkoI96WvdfIi7w2odE.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/c82215-e939-485d-82d7-d188c8085305/1/fF39tuHZPAkoI96WvdfIi7w2odE.mft rsync://rpki.ripe.net/repository/DEFAULT/fF39tuHZPAkoI96WvdfIi7w2odE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:73:26:1d:d0:f8:68:be:7e:cf:5d:30:99:ea:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c5dfdb6e1d93c092823de96bdd7c88bbc36a1d1 Validity Not Before: Jan 1 12:18:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=953ac861bc21db959968cc7d1536be94939a397c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:28:3c:79:68:6f:cc:73:d5:27:df:ec:4e:57: 5b:31:39:68:88:b7:5e:12:34:43:16:40:44:a8:8e: 71:34:cb:f0:a5:c8:89:7b:9b:49:5b:83:d7:08:a1: c2:ac:bd:26:05:b3:ca:d0:c8:c9:cc:76:4c:ef:9e: 36:02:71:20:44:db:35:84:38:1e:f2:6b:61:1b:96: 2b:74:09:3f:ee:1d:da:83:d9:b1:ff:a5:8f:95:f4: c0:ee:45:86:73:fe:3d:3b:ce:8a:81:3f:37:e9:be: aa:9c:37:ec:a6:66:02:0f:75:5c:0b:e3:a8:0b:5a: 13:e3:db:c4:2b:b6:48:d4:c2:e8:7c:da:e0:fa:5c: fc:37:ec:a0:68:80:51:40:c3:93:6a:d7:f4:24:2c: 42:56:39:ee:3e:f2:1a:6d:ac:e1:64:ac:86:89:e5: 3a:32:f4:b6:bc:b1:4a:13:35:d5:65:0b:58:e0:1e: 81:f0:70:8b:6f:01:90:b0:1f:e3:68:af:7b:04:2f: 99:e0:2c:3d:8e:30:31:cb:7b:09:2e:f6:4f:90:3f: c4:a2:2b:2c:bc:0f:6c:41:dd:b0:db:25:5a:9a:9e: 00:a8:f0:e0:bb:94:52:19:e9:6b:7e:39:60:6b:77: 14:21:96:49:5c:4d:77:28:b1:36:3e:aa:c4:0a:c9: 50:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:3A:C8:61:BC:21:DB:95:99:68:CC:7D:15:36:BE:94:93:9A:39:7C X509v3 Authority Key Identifier: keyid:7C:5D:FD:B6:E1:D9:3C:09:28:23:DE:96:BD:D7:C8:8B:BC:36:A1:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fF39tuHZPAkoI96WvdfIi7w2odE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c82215-e939-485d-82d7-d188c8085305/1/lTrIYbwh25WZaMx9FTa-lJOaOXw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c82215-e939-485d-82d7-d188c8085305/1/fF39tuHZPAkoI96WvdfIi7w2odE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.246.88.0/22 IPv6: 2a10:2040::/29 Signature Algorithm: sha256WithRSAEncryption 9a:d4:86:dd:b9:3e:f3:a9:90:ad:8a:bf:5d:80:05:f1:f8:de: 64:91:e7:d9:1a:b8:c8:e5:a0:7e:4d:f6:5a:cc:b5:6e:1d:fe: c9:47:49:ad:e3:17:d8:aa:ea:39:14:a3:c5:34:86:44:fc:d1: ac:0c:a3:42:5b:ed:0c:cc:64:54:37:24:52:70:b5:1f:c7:6d: 8a:84:3e:69:3e:43:e6:af:8e:ac:71:7c:41:d0:29:e2:7b:8f: b8:63:a0:ef:84:3e:29:27:c9:38:29:73:9e:d6:3c:a9:0c:a7: 15:bc:f9:6c:1d:d2:eb:86:4f:73:e9:de:11:63:66:e9:bc:14: 1d:9c:e9:ad:ff:a0:94:a7:ec:43:78:89:f3:ff:e5:1e:03:8b: a0:1d:3d:7a:f7:a9:e0:8b:c4:20:ff:32:b9:fe:9f:d8:61:af: 94:3a:bb:d4:49:c7:41:c4:65:a9:e6:53:a6:b1:86:ed:b7:1a: e8:77:83:14:58:3f:82:cf:3e:52:0e:13:59:ac:ed:5c:b8:85: ab:a9:11:0a:49:54:59:00:b7:9c:7a:b9:78:8f:c1:a7:55:a1: ae:95:fd:25:a4:5e:25:cb:bb:77:d7:17:14:14:6e:02:1a:0d: 8b:e3:c8:9d:00:33:bf:a4:21:66:a9:c3:df:80:40:4c:1c:d4: 52:c0:e5:1c -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt5fnMmHdD4aL5+z10wmer/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjNWRmZGI2ZTFkOTNjMDkyODIzZGU5NmJkZDdjODhiYmMz NmExZDEwHhcNMjYwMTAxMTIxODA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NTNhYzg2MWJjMjFkYjk1OTk2OGNjN2QxNTM2YmU5NDkzOWEzOTdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvSg8eWhvzHPVJ9/sTldbMTloiLde EjRDFkBEqI5xNMvwpciJe5tJW4PXCKHCrL0mBbPK0MjJzHZM7542AnEgRNs1hDge 8mthG5YrdAk/7h3ag9mx/6WPlfTA7kWGc/49O86KgT836b6qnDfspmYCD3VcC+Oo C1oT49vEK7ZI1MLofNrg+lz8N+ygaIBRQMOTatf0JCxCVjnuPvIabazhZKyGieU6 MvS2vLFKEzXVZQtY4B6B8HCLbwGQsB/jaK97BC+Z4Cw9jjAxy3sJLvZPkD/Eoiss vA9sQd2w2yVamp4AqPDgu5RSGelrfjlga3cUIZZJXE13KLE2PqrECslQuwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFJU6yGG8IduVmWjMfRU2vpSTmjl8MB8GA1UdIwQY MBaAFHxd/bbh2TwJKCPelr3XyIu8NqHRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZkYzOXR1SFpQQWtvSTk2V3ZkZklpN3cyb2RFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9jODIyMTUtZTkzOS00ODVkLTgyZDct ZDE4OGM4MDg1MzA1LzEvbFRySVlid2gyNVdaYU14OUZUYS1sSk9hT1h3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC9jODIyMTUtZTkzOS00ODVkLTgyZDctZDE4OGM4MDg1MzA1 LzEvZkYzOXR1SFpQQWtvSTk2V3ZkZklpN3cyb2RFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCufZYMA0E AgACMAcDBQMqECBAMA0GCSqGSIb3DQEBCwUAA4IBAQCa1IbduT7zqZCtir9dgAXx +N5kkefZGrjI5aB+TfZazLVuHf7JR0mt4xfYquo5FKPFNIZE/NGsDKNCW+0MzGRU NyRScLUfx22KhD5pPkPmr46scXxB0Cnie4+4Y6DvhD4pJ8k4KXOe1jypDKcVvPls HdLrhk9z6d4RY2bpvBQdnOmt/6CUp+xDeInz/+UeA4ugHT1696ngi8Qg/zK5/p/Y Ya+UOrvUScdBxGWp5lOmsYbttxrod4MUWD+Czz5SDhNZrO1cuIWrqREKSVRZALec erl4j8GnVaGulf0lpF4ly7t31xcUFG4CGg2L48idADO/pCFmqcPfgEBMHNRSwOUc -----END CERTIFICATE-----Generated at Mon Feb 9 23:46:20 2026 by rpki-client