This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/adcff5-b2b1-48df-b756-6fb4bee99e63/1/LQlTFpdDcZcla07mIRRJrFGaP1c.roa File: LQlTFpdDcZcla07mIRRJrFGaP1c.roa (raw, json) Hash identifier: sT/VihqangGQBYKbzBN6tq9t4QWOtBBUVZJiEDdhqx0= Subject key identifier: 2D:09:53:16:97:43:71:97:25:6B:4E:E6:21:14:49:AC:51:9A:3F:57 Certificate issuer: /CN=8ffdfaeb5a94eb027ec838af530f3c10b39b1cd9 Certificate serial: 019B78A2FD371494779B90EA0C1331C03ADE Authority key identifier: 8F:FD:FA:EB:5A:94:EB:02:7E:C8:38:AF:53:0F:3C:10:B3:9B:1C:D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j_3661qU6wJ-yDivUw88ELObHNk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/adcff5-b2b1-48df-b756-6fb4bee99e63/1/LQlTFpdDcZcla07mIRRJrFGaP1c.roa Signing time: Thu 01 Jan 2026 08:18:26 +0000 ROA not before: Thu 01 Jan 2026 08:18:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 28933 IP address blocks: 195.47.197.0/24 maxlen: 24 212.101.128.0/18 maxlen: 18 2a00:1368::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/adcff5-b2b1-48df-b756-6fb4bee99e63/1/j_3661qU6wJ-yDivUw88ELObHNk.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/adcff5-b2b1-48df-b756-6fb4bee99e63/1/j_3661qU6wJ-yDivUw88ELObHNk.mft rsync://rpki.ripe.net/repository/DEFAULT/j_3661qU6wJ-yDivUw88ELObHNk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:fd:37:14:94:77:9b:90:ea:0c:13:31:c0:3a:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ffdfaeb5a94eb027ec838af530f3c10b39b1cd9 Validity Not Before: Jan 1 08:18:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2d09531697437197256b4ee6211449ac519a3f57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:ae:d7:ac:e2:af:98:93:b1:30:1e:4c:fe:9a: 84:b8:81:36:8b:0d:88:f7:ca:a6:ce:94:7c:c8:3b: cc:2e:fd:8a:aa:3e:59:c2:f0:c0:dd:8f:35:4a:c4: bf:e7:25:31:ef:f3:20:2f:48:ca:3f:8d:37:5d:e7: 56:30:6b:b1:c8:4b:36:09:a6:3a:51:44:98:fa:ba: e1:f3:52:ef:92:1f:7e:75:d7:8c:26:b1:b1:aa:d6: aa:4e:d7:82:dc:40:af:3d:9e:6a:0f:c5:0d:01:f4: ba:4b:3c:2d:33:ae:47:92:4d:a1:86:70:46:97:eb: 0c:3b:89:43:04:47:00:f3:52:ab:bd:a0:cd:c8:d1: 15:b6:87:95:b5:ad:e8:1d:26:94:36:52:1f:60:c6: 60:7e:bd:22:57:63:db:0c:07:58:a5:d4:2f:a5:5a: f3:f7:d4:9c:da:bf:5e:58:a8:99:88:49:d4:db:bb: cb:74:38:23:5b:36:5c:78:55:45:10:20:0e:8b:79: e0:74:ed:5a:ae:c9:3f:95:57:24:07:30:1c:4c:b8: 90:df:06:75:e3:1d:26:47:0e:f2:d0:88:cd:6e:12: 86:7e:99:70:c4:25:9e:c4:cc:1e:c5:0e:f1:7f:9d: e8:bd:3b:e4:8d:d4:5b:45:da:27:26:9d:d6:74:88: ed:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:09:53:16:97:43:71:97:25:6B:4E:E6:21:14:49:AC:51:9A:3F:57 X509v3 Authority Key Identifier: keyid:8F:FD:FA:EB:5A:94:EB:02:7E:C8:38:AF:53:0F:3C:10:B3:9B:1C:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j_3661qU6wJ-yDivUw88ELObHNk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/adcff5-b2b1-48df-b756-6fb4bee99e63/1/LQlTFpdDcZcla07mIRRJrFGaP1c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/adcff5-b2b1-48df-b756-6fb4bee99e63/1/j_3661qU6wJ-yDivUw88ELObHNk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.47.197.0/24 212.101.128.0/18 IPv6: 2a00:1368::/32 Signature Algorithm: sha256WithRSAEncryption c3:da:29:79:8c:5b:6d:29:89:ef:73:87:7d:6a:f3:09:97:02: f5:c3:c2:bd:a6:04:4b:0b:d1:df:2c:23:14:d3:da:8e:8c:17: d0:c1:73:33:3b:3b:fe:b5:cb:78:37:30:56:b0:54:9f:41:23: 78:d4:8b:1b:5e:47:50:7b:f1:e8:ee:70:34:e6:2c:76:73:ec: b6:f2:1c:22:a3:6c:82:29:1d:8e:59:c6:14:06:dd:c0:e6:f4: fa:f1:28:f0:67:fb:81:48:01:16:97:a6:6f:68:78:39:d9:26: 19:b3:1b:c6:41:eb:01:bd:7e:e0:28:9c:db:b5:99:3e:38:c5: db:f4:7c:55:c8:4f:e2:38:35:48:fc:3f:4c:c0:9c:02:0a:0d: 1f:d8:20:3f:06:24:24:e1:34:0e:c2:97:77:18:0d:77:a8:e7: 0b:fc:71:93:bb:a9:a2:55:13:5b:c7:d4:a0:c1:fc:13:82:6f: ca:9a:9b:f4:87:18:98:0b:10:a6:6f:9f:23:7c:ee:6e:0b:5a: 77:66:38:ab:7e:bd:59:f6:c2:8b:4b:09:06:fd:27:d4:ad:cb: a7:d9:4b:ff:6e:89:b5:a5:ab:fa:86:b9:81:52:2f:0b:a9:88: 97:cf:bb:c5:7a:b0:bf:e3:63:7e:20:78:d5:55:52:cd:f1:cb: a8:71:e2:76 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt4ov03FJR3m5DqDBMxwDreMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmZmRmYWViNWE5NGViMDI3ZWM4MzhhZjUzMGYzYzEwYjM5 YjFjZDkwHhcNMjYwMTAxMDgxODI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZDA5NTMxNjk3NDM3MTk3MjU2YjRlZTYyMTE0NDlhYzUxOWEzZjU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArK7XrOKvmJOxMB5M/pqEuIE2iw2I 98qmzpR8yDvMLv2Kqj5ZwvDA3Y81SsS/5yUx7/MgL0jKP403XedWMGuxyEs2CaY6 UUSY+rrh81Lvkh9+ddeMJrGxqtaqTteC3ECvPZ5qD8UNAfS6SzwtM65Hkk2hhnBG l+sMO4lDBEcA81KrvaDNyNEVtoeVta3oHSaUNlIfYMZgfr0iV2PbDAdYpdQvpVrz 99Sc2r9eWKiZiEnU27vLdDgjWzZceFVFECAOi3ngdO1arsk/lVckBzAcTLiQ3wZ1 4x0mRw7y0IjNbhKGfplwxCWexMwexQ7xf53ovTvkjdRbRdonJp3WdIjtNQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFC0JUxaXQ3GXJWtO5iEUSaxRmj9XMB8GA1UdIwQY MBaAFI/9+utalOsCfsg4r1MPPBCzmxzZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQval8zNjYxcVU2d0oteURpdlV3ODhFTE9iSE5rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9hZGNmZjUtYjJiMS00OGRmLWI3NTYt NmZiNGJlZTk5ZTYzLzEvTFFsVEZwZERjWmNsYTA3bUlSUkpyRkdhUDFjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC9hZGNmZjUtYjJiMS00OGRmLWI3NTYtNmZiNGJlZTk5ZTYz LzEval8zNjYxcVU2d0oteURpdlV3ODhFTE9iSE5rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQAwy/FAwQG 1GWAMA0EAgACMAcDBQAqABNoMA0GCSqGSIb3DQEBCwUAA4IBAQDD2il5jFttKYnv c4d9avMJlwL1w8K9pgRLC9HfLCMU09qOjBfQwXMzOzv+tct4NzBWsFSfQSN41Isb XkdQe/Ho7nA05ix2c+y28hwio2yCKR2OWcYUBt3A5vT68SjwZ/uBSAEWl6ZvaHg5 2SYZsxvGQesBvX7gKJzbtZk+OMXb9HxVyE/iODVI/D9MwJwCCg0f2CA/BiQk4TQO wpd3GA13qOcL/HGTu6miVRNbx9SgwfwTgm/Kmpv0hxiYCxCmb58jfO5uC1p3Zjir fr1Z9sKLSwkG/SfUrcun2Uv/bom1pav6hrmBUi8LqYiXz7vFerC/42N+IHjVVVLN 8cuoceJ2 -----END CERTIFICATE-----Generated at Tue Feb 10 04:14:29 2026 by rpki-client