This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/lBvn6SF1vFqwxeYo-xid9eS_rS8.roa File: lBvn6SF1vFqwxeYo-xid9eS_rS8.roa (raw, json) Hash identifier: 4BDYnBJ8wTz9VqZL9FamlswLDreQhSYYf4swJdqUeJE= Subject key identifier: 94:1B:E7:E9:21:75:BC:5A:B0:C5:E6:28:FB:18:9D:F5:E4:BF:AD:2F Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171 Certificate serial: 019B08C385191D7DEC7140AA2530161F79AC Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/lBvn6SF1vFqwxeYo-xid9eS_rS8.roa Signing time: Wed 10 Dec 2025 14:56:29 +0000 ROA not before: Wed 10 Dec 2025 14:56:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 3356 IP address blocks: 92.71.68.0/22 maxlen: 24 195.86.241.0/24 maxlen: 24 213.169.192.0/23 maxlen: 23 213.201.250.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:08:c3:85:19:1d:7d:ec:71:40:aa:25:30:16:1f:79:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171 Validity Not Before: Dec 10 14:56:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=941be7e92175bc5ab0c5e628fb189df5e4bfad2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:f5:37:1b:81:95:63:58:57:14:60:8b:46:ea: 09:78:ea:a0:52:be:e9:dd:18:74:37:61:e7:93:9f: 88:38:2e:ed:fa:c2:52:b8:28:a6:f0:3e:7c:e7:e2: d8:2d:58:18:45:43:93:ac:82:22:09:30:48:e5:28: 35:71:46:4e:ce:69:0e:28:61:93:39:c0:e8:46:13: d2:82:4f:83:2a:e4:31:c5:36:3a:e4:c0:3a:39:2d: e1:01:14:99:e5:56:3e:ea:ed:bd:ae:ac:23:32:6d: c4:66:83:53:d4:5d:7a:3b:74:a3:37:aa:52:a2:e3: c7:3b:ce:b7:c7:2d:e3:dd:11:d6:c3:a4:f6:90:0b: e9:2a:73:2f:5a:46:be:02:2a:ba:1d:db:c4:59:94: 0a:c9:38:8e:34:76:be:b3:1a:e2:a7:a4:a6:80:47: 91:88:a3:0e:8f:16:88:b8:18:42:7a:2d:02:a5:02: 75:00:27:2a:7c:0b:2c:6b:ac:93:50:bc:37:95:80: a5:db:aa:05:92:37:7b:67:fd:ea:6d:cc:bb:1d:af: 9d:2b:6a:10:ff:bf:7b:e9:d5:95:32:0a:bb:27:86: 50:39:dd:9b:bf:e0:12:71:65:b4:b3:84:ee:ba:07: 4d:dd:81:0a:a0:13:19:68:b8:1c:c7:ea:50:f4:ed: 00:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:1B:E7:E9:21:75:BC:5A:B0:C5:E6:28:FB:18:9D:F5:E4:BF:AD:2F X509v3 Authority Key Identifier: keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/lBvn6SF1vFqwxeYo-xid9eS_rS8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.71.68.0/22 195.86.241.0/24 213.169.192.0/23 213.201.250.0/23 Signature Algorithm: sha256WithRSAEncryption 34:bb:59:97:b9:fb:38:48:c3:d5:00:bb:c7:92:47:4c:85:5a: b6:7f:77:67:a8:c1:2b:80:3a:9c:54:3e:4d:a4:e9:42:17:a8: da:dc:21:03:a6:c6:f1:3a:0c:30:da:b5:ee:2b:46:4c:37:ef: 3c:5d:0d:9a:b6:de:cf:2d:e7:d0:ce:3a:1a:74:8f:e7:c7:4c: 12:9b:06:76:55:48:f4:0f:ac:d3:e6:87:8a:a4:e6:7c:b5:4a: 9c:4c:d9:99:eb:12:a3:81:7b:49:93:16:e2:73:8e:98:b5:aa: 70:1c:0f:d7:f7:79:0e:59:09:62:7c:6a:d2:5f:bb:23:d5:ae: 26:e3:e6:59:db:ed:ad:48:c9:e5:4d:60:df:7e:8b:b0:6f:7e: 93:3d:8d:6d:8c:35:0b:31:d1:04:3f:48:74:56:aa:ea:b7:4a: b1:3b:a2:6f:b7:5f:82:74:d0:7c:b2:81:8a:1e:36:d2:8f:77: c5:4a:55:45:44:97:ab:16:08:d5:1b:98:8a:57:42:c1:47:75: fc:7b:19:85:54:f7:6c:ea:df:9d:83:92:c4:80:14:13:76:6d: 3a:aa:6b:b5:4b:f4:cc:79:54:df:8f:0c:76:78:88:9e:bd:ea: 0a:f4:ff:69:07:03:00:2e:ac:c7:b8:ce:5a:7b:30:fc:35:2c: 9d:51:d9:10 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZsIw4UZHX3scUCqJTAWH3msMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3OWRiZmRmNGMyMGJkYWU4ZDYxMTg1NjZlY2U3NjQ0NGU0 NmQxNzEwHhcNMjUxMjEwMTQ1NjI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NDFiZTdlOTIxNzViYzVhYjBjNWU2MjhmYjE4OWRmNWU0YmZhZDJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw/U3G4GVY1hXFGCLRuoJeOqgUr7p 3Rh0N2Hnk5+IOC7t+sJSuCim8D585+LYLVgYRUOTrIIiCTBI5Sg1cUZOzmkOKGGT OcDoRhPSgk+DKuQxxTY65MA6OS3hARSZ5VY+6u29rqwjMm3EZoNT1F16O3SjN6pS ouPHO863xy3j3RHWw6T2kAvpKnMvWka+Aiq6HdvEWZQKyTiONHa+sxrip6SmgEeR iKMOjxaIuBhCei0CpQJ1ACcqfAssa6yTULw3lYCl26oFkjd7Z/3qbcy7Ha+dK2oQ /7976dWVMgq7J4ZQOd2bv+AScWW0s4TuugdN3YEKoBMZaLgcx+pQ9O0AkwIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFJQb5+khdbxasMXmKPsYnfXkv60vMB8GA1UdIwQY MBaAFCedv99MIL2ujWEYVm7OdkRORtFxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEt MGNmMTA5M2Q0NTQ4LzEvbEJ2bjZTRjF2RnF3eGVZby14aWQ5ZVNfclM4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEtMGNmMTA5M2Q0NTQ4 LzEvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQCXEdEAwQA w1bxAwQB1anAAwQB1cn6MA0GCSqGSIb3DQEBCwUAA4IBAQA0u1mXufs4SMPVALvH kkdMhVq2f3dnqMErgDqcVD5NpOlCF6ja3CEDpsbxOgww2rXuK0ZMN+88XQ2att7P LefQzjoadI/nx0wSmwZ2VUj0D6zT5oeKpOZ8tUqcTNmZ6xKjgXtJkxbic46Ytapw HA/X93kOWQlifGrSX7sj1a4m4+ZZ2+2tSMnlTWDffouwb36TPY1tjDULMdEEP0h0 Vqrqt0qxO6Jvt1+CdNB8soGKHjbSj3fFSlVFRJerFgjVG5iKV0LBR3X8exmFVPds 6t+dg5LEgBQTdm06qmu1S/TMeVTfjwx2eIieveoK9P9pBwMALqzHuM5aezD8NSyd UdkQ -----END CERTIFICATE-----Generated at Fri Dec 19 23:20:07 2025 by rpki-client