This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/lsFM17k2ZtwL3Bozkjk-itU6fX8.roa File: lsFM17k2ZtwL3Bozkjk-itU6fX8.roa (raw, json) Hash identifier: PyQz7GTqlUWm5GnNRZLXoq3Y3tepCY9boCvSS0rIfDI= Subject key identifier: 96:C1:4C:D7:B9:36:66:DC:0B:DC:1A:33:92:39:3E:8A:D5:3A:7D:7F Certificate issuer: /CN=c44db8b0983acf97a3255152c2ea592adae7735b Certificate serial: 019B7835642B5E043996A9BCE579BBADB18D Authority key identifier: C4:4D:B8:B0:98:3A:CF:97:A3:25:51:52:C2:EA:59:2A:DA:E7:73:5B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xE24sJg6z5ejJVFSwupZKtrnc1s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/lsFM17k2ZtwL3Bozkjk-itU6fX8.roa Signing time: Thu 01 Jan 2026 06:18:43 +0000 ROA not before: Thu 01 Jan 2026 06:18:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204287 IP address blocks: 86.104.76.0/22 maxlen: 32 89.32.132.0/22 maxlen: 32 89.38.155.0/24 maxlen: 32 93.114.236.0/22 maxlen: 32 94.176.172.0/22 maxlen: 32 176.223.68.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.crl rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.mft rsync://rpki.ripe.net/repository/DEFAULT/xE24sJg6z5ejJVFSwupZKtrnc1s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:64:2b:5e:04:39:96:a9:bc:e5:79:bb:ad:b1:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c44db8b0983acf97a3255152c2ea592adae7735b Validity Not Before: Jan 1 06:18:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=96c14cd7b93666dc0bdc1a3392393e8ad53a7d7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:49:03:37:87:a1:8c:27:92:95:a1:3c:ff:87: 1e:85:86:09:56:87:2f:71:19:fb:92:ee:12:a2:06: 53:89:16:58:e4:71:f4:a3:59:98:8a:35:c7:5b:a8: ea:d6:d5:db:c5:2f:9f:5c:0c:5e:04:ca:e4:81:0c: 73:21:a6:bd:8c:31:27:31:88:fd:c9:f5:48:95:31: ee:b0:b5:e8:a0:a5:f0:94:e8:f3:08:7b:db:9d:53: 10:fa:a3:8a:cc:aa:b6:b3:e7:8f:71:cc:9f:16:eb: ab:94:5a:05:fc:b8:d1:5c:12:90:5f:e2:61:35:37: 81:af:b1:81:d9:37:a2:25:f6:17:46:39:3f:77:7b: e6:30:13:4a:43:c8:0c:a1:a1:6e:be:24:d5:71:37: c6:38:ab:1d:f7:96:b5:bd:65:62:9a:8a:24:23:4e: 7c:0e:0e:5c:da:f6:a7:50:c5:a7:12:34:40:ac:bd: 63:dd:c7:03:8a:6a:0f:20:cf:25:95:38:82:80:cb: 21:d0:ca:c4:16:1c:f1:af:59:fe:54:95:57:cf:2d: 9c:fb:3c:c4:c1:c7:dc:3a:3a:9b:ff:83:0e:a9:fb: f9:7d:a9:48:b3:36:30:f8:ff:e5:73:58:e6:06:34: 2f:6e:7b:82:46:64:48:fb:4d:b4:db:ed:ac:b8:92: 3d:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:C1:4C:D7:B9:36:66:DC:0B:DC:1A:33:92:39:3E:8A:D5:3A:7D:7F X509v3 Authority Key Identifier: keyid:C4:4D:B8:B0:98:3A:CF:97:A3:25:51:52:C2:EA:59:2A:DA:E7:73:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xE24sJg6z5ejJVFSwupZKtrnc1s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/lsFM17k2ZtwL3Bozkjk-itU6fX8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 86.104.76.0/22 89.32.132.0/22 89.38.155.0/24 93.114.236.0/22 94.176.172.0/22 176.223.68.0/22 Signature Algorithm: sha256WithRSAEncryption 92:b6:42:49:2f:68:bf:47:4b:5b:24:09:a2:ec:b6:3f:b8:7a: dc:95:6f:2b:af:c5:92:34:dc:f2:09:18:87:54:92:2c:fd:5f: e7:be:dd:ee:86:65:cb:81:9d:88:ed:21:c4:c4:a3:d8:12:4a: e2:cc:13:76:fb:f7:7a:75:1e:31:d5:ea:7c:82:5f:c3:8f:a0: 42:5c:2f:88:5d:b0:67:6a:10:88:80:19:5b:ab:96:fc:18:84: 93:bc:1b:c9:8c:da:27:0d:7e:4a:4e:b4:8b:ef:38:4b:56:64: 27:00:b2:e6:e5:86:1b:a8:1e:13:da:c7:29:c1:c5:4b:51:5b: a6:a4:9e:12:1b:6b:60:8a:93:ff:56:5f:88:50:78:bb:4e:5b: ee:6f:15:ec:fe:4c:ce:a5:1a:de:db:1f:3f:5c:d1:c1:82:ed: bb:06:8e:32:90:2a:57:2b:91:26:c6:4f:ee:1b:1c:e0:de:a2: 72:ca:07:c9:2f:98:2a:dc:03:68:3e:ca:c0:d0:f1:b0:a5:30: bc:d7:f8:1a:83:78:a6:96:4f:08:04:58:9f:bb:8a:63:00:f5: a9:19:a5:1c:a5:79:e7:56:68:77:99:ef:4f:50:16:78:cb:79: ff:44:17:95:91:c9:0c:fd:dd:f8:16:af:d2:45:36:7c:33:c4: c0:f6:ea:96 -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgISAZt4NWQrXgQ5lqm85Xm7rbGNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0NGRiOGIwOTgzYWNmOTdhMzI1NTE1MmMyZWE1OTJhZGFl NzczNWIwHhcNMjYwMTAxMDYxODQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NmMxNGNkN2I5MzY2NmRjMGJkYzFhMzM5MjM5M2U4YWQ1M2E3ZDdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoUkDN4ehjCeSlaE8/4cehYYJVocv cRn7ku4SogZTiRZY5HH0o1mYijXHW6jq1tXbxS+fXAxeBMrkgQxzIaa9jDEnMYj9 yfVIlTHusLXooKXwlOjzCHvbnVMQ+qOKzKq2s+ePccyfFuurlFoF/LjRXBKQX+Jh NTeBr7GB2TeiJfYXRjk/d3vmMBNKQ8gMoaFuviTVcTfGOKsd95a1vWVimookI058 Dg5c2vanUMWnEjRArL1j3ccDimoPIM8llTiCgMsh0MrEFhzxr1n+VJVXzy2c+zzE wcfcOjqb/4MOqfv5falIszYw+P/lc1jmBjQvbnuCRmRI+0202+2suJI9vwIDAQAB o4ICJzCCAiMwHQYDVR0OBBYEFJbBTNe5NmbcC9waM5I5PorVOn1/MB8GA1UdIwQY MBaAFMRNuLCYOs+XoyVRUsLqWSra53NbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveEUyNHNKZzZ6NWVqSlZGU3d1cFpLdHJuYzFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC80Mzc4OTctYWY1OC00OTU5LThlNzYt ZWVkZDk0ZWMxMjhjLzEvbHNGTTE3azJadHdMM0Jvemtqay1pdFU2Zlg4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC80Mzc4OTctYWY1OC00OTU5LThlNzYtZWVkZDk0ZWMxMjhj LzEveEUyNHNKZzZ6NWVqSlZGU3d1cFpLdHJuYzFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQCVmhMAwQC WSCEAwQAWSabAwQCXXLsAwQCXrCsAwQCsN9EMA0GCSqGSIb3DQEBCwUAA4IBAQCS tkJJL2i/R0tbJAmi7LY/uHrclW8rr8WSNNzyCRiHVJIs/V/nvt3uhmXLgZ2I7SHE xKPYEkrizBN2+/d6dR4x1ep8gl/Dj6BCXC+IXbBnahCIgBlbq5b8GISTvBvJjNon DX5KTrSL7zhLVmQnALLm5YYbqB4T2scpwcVLUVumpJ4SG2tgipP/Vl+IUHi7Tlvu bxXs/kzOpRre2x8/XNHBgu27Bo4ykCpXK5Emxk/uGxzg3qJyygfJL5gq3ANoPsrA 0PGwpTC81/gag3imlk8IBFifu4pjAPWpGaUcpXnnVmh3me9PUBZ4y3n/RBeVkckM /d34Fq/SRTZ8M8TA9uqW -----END CERTIFICATE-----Generated at Fri Jan 2 11:34:14 2026 by rpki-client