This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/LXdVZsghVBzvzoaxQRbvjkVx8jQ.roa File: LXdVZsghVBzvzoaxQRbvjkVx8jQ.roa (raw, json) Hash identifier: NF23Tpd0XzXu/8VnH1fo4lwK7GUHlQSNd4PIlBQQqXM= Subject key identifier: 2D:77:55:66:C8:21:54:1C:EF:CE:86:B1:41:16:EF:8E:45:71:F2:34 Certificate issuer: /CN=71bddeaf0f30fbdaf9e75b92ac7d5bd13f285de7 Certificate serial: 019B78A31AE51A23D83DA002DCAFAE268602 Authority key identifier: 71:BD:DE:AF:0F:30:FB:DA:F9:E7:5B:92:AC:7D:5B:D1:3F:28:5D:E7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cb3erw8w-9r551uSrH1b0T8oXec.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/LXdVZsghVBzvzoaxQRbvjkVx8jQ.roa Signing time: Thu 01 Jan 2026 08:18:33 +0000 ROA not before: Thu 01 Jan 2026 08:18:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203436 IP address blocks: 185.224.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/cb3erw8w-9r551uSrH1b0T8oXec.crl rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/cb3erw8w-9r551uSrH1b0T8oXec.mft rsync://rpki.ripe.net/repository/DEFAULT/cb3erw8w-9r551uSrH1b0T8oXec.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:1a:e5:1a:23:d8:3d:a0:02:dc:af:ae:26:86:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71bddeaf0f30fbdaf9e75b92ac7d5bd13f285de7 Validity Not Before: Jan 1 08:18:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2d775566c821541cefce86b14116ef8e4571f234 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:2e:7b:18:a1:2a:2f:19:3f:84:4f:c6:1f:cd: 52:04:ef:99:26:eb:2d:ab:be:9d:87:ed:15:38:fc: 9b:54:7c:8a:03:72:55:57:eb:0f:16:8e:2d:ab:4e: 88:44:41:e8:0e:05:e4:6c:44:a8:10:24:94:c8:da: 7e:98:c9:a1:1c:39:db:ee:d5:3e:ed:c3:be:de:2f: 52:09:a9:6e:31:83:52:fa:08:2b:8f:a7:3d:0d:47: 75:cd:b7:d4:c4:63:73:ff:db:d4:f9:a6:5d:de:58: 45:3d:e7:b1:d9:04:48:cb:e8:bb:e9:d1:d7:d0:32: 6e:29:83:77:cf:af:27:05:6a:82:50:d7:7a:99:11: b8:da:5e:21:38:19:39:c2:7b:f4:c8:c9:17:98:91: 0e:58:98:4e:f9:b6:8f:c0:ad:2e:76:08:1b:52:3e: e5:ce:a6:e2:d6:cb:ba:6c:bd:ca:04:76:17:57:81: 17:78:c8:54:03:8c:f6:69:43:71:1b:87:ca:d8:c3: 4a:06:4d:49:98:f5:6b:17:b1:d1:3b:b8:49:04:2c: 20:4f:8d:4a:9a:b0:05:6a:8d:72:e8:8a:88:e3:bd: aa:1c:87:d7:6c:e9:b9:20:93:51:de:49:48:01:0c: f7:d0:1c:53:3d:82:80:57:2a:fb:7f:47:9f:cb:4c: 3e:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:77:55:66:C8:21:54:1C:EF:CE:86:B1:41:16:EF:8E:45:71:F2:34 X509v3 Authority Key Identifier: keyid:71:BD:DE:AF:0F:30:FB:DA:F9:E7:5B:92:AC:7D:5B:D1:3F:28:5D:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb3erw8w-9r551uSrH1b0T8oXec.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/LXdVZsghVBzvzoaxQRbvjkVx8jQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/cb3erw8w-9r551uSrH1b0T8oXec.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.224.217.0/24 Signature Algorithm: sha256WithRSAEncryption 71:cb:7c:68:26:da:14:42:6d:3b:2b:49:4b:b2:6f:ea:5f:79: 97:77:dc:e2:cf:4d:ce:f0:d1:ac:18:e5:f0:5e:67:f0:bd:a2: 1f:48:19:8a:74:ad:0e:68:f2:6f:aa:0a:c3:55:66:b5:52:bc: bc:53:5d:c5:48:fb:1e:e7:30:58:7a:82:e7:a8:f0:ba:80:57: c0:db:b4:20:5d:cd:ed:2b:e0:9e:f1:99:70:43:1f:5a:97:ad: 73:0d:28:c8:39:d3:9d:5b:50:f7:04:72:2a:30:73:98:5d:51: 10:d6:01:00:4d:da:df:7b:3d:07:d7:13:f6:df:a0:44:93:ef: 0e:80:5a:91:fe:b5:7c:02:ef:37:9d:13:90:7d:0e:71:6e:2a: 28:ce:71:3e:ad:6a:91:ae:84:93:e3:74:8d:ef:70:d0:e7:6d: c3:78:99:79:e2:82:85:d9:25:be:b6:92:72:8f:42:93:34:a7: 47:52:5a:70:90:f6:b8:ed:37:17:ee:e3:bc:e1:65:05:df:f2: f2:ac:03:e3:4b:7a:65:0e:85:72:76:e0:d7:ab:7e:c9:74:b0: ee:0b:ba:24:39:59:b4:72:92:1a:47:01:7d:b6:63:0f:e8:97: 34:2d:30:db:3d:c6:a0:d3:6c:fb:a6:83:4f:d6:8d:f9:42:25: d1:28:d1:00 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4oxrlGiPYPaAC3K+uJoYCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcxYmRkZWFmMGYzMGZiZGFmOWU3NWI5MmFjN2Q1YmQxM2Yy ODVkZTcwHhcNMjYwMTAxMDgxODMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZDc3NTU2NmM4MjE1NDFjZWZjZTg2YjE0MTE2ZWY4ZTQ1NzFmMjM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwS57GKEqLxk/hE/GH81SBO+ZJust q76dh+0VOPybVHyKA3JVV+sPFo4tq06IREHoDgXkbESoECSUyNp+mMmhHDnb7tU+ 7cO+3i9SCaluMYNS+ggrj6c9DUd1zbfUxGNz/9vU+aZd3lhFPeex2QRIy+i76dHX 0DJuKYN3z68nBWqCUNd6mRG42l4hOBk5wnv0yMkXmJEOWJhO+baPwK0udggbUj7l zqbi1su6bL3KBHYXV4EXeMhUA4z2aUNxG4fK2MNKBk1JmPVrF7HRO7hJBCwgT41K mrAFao1y6IqI472qHIfXbOm5IJNR3klIAQz30BxTPYKAVyr7f0efy0w+1QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFC13VWbIIVQc786GsUEW745FcfI0MB8GA1UdIwQY MBaAFHG93q8PMPva+edbkqx9W9E/KF3nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2IzZXJ3OHctOXI1NTF1U3JIMWIwVDhvWGVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS84MTRlYzUtOWU0MS00YjVhLWE2ZmUt NDc3MjMxMTkxYTM1LzEvTFhkVlpzZ2hWQnp2em9heFFSYnZqa1Z4OGpRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS84MTRlYzUtOWU0MS00YjVhLWE2ZmUtNDc3MjMxMTkxYTM1 LzEvY2IzZXJ3OHctOXI1NTF1U3JIMWIwVDhvWGVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAueDZMA0G CSqGSIb3DQEBCwUAA4IBAQBxy3xoJtoUQm07K0lLsm/qX3mXd9ziz03O8NGsGOXw XmfwvaIfSBmKdK0OaPJvqgrDVWa1Ury8U13FSPse5zBYeoLnqPC6gFfA27QgXc3t K+Ce8ZlwQx9al61zDSjIOdOdW1D3BHIqMHOYXVEQ1gEATdrfez0H1xP236BEk+8O gFqR/rV8Au83nROQfQ5xbiooznE+rWqRroST43SN73DQ523DeJl54oKF2SW+tpJy j0KTNKdHUlpwkPa47TcX7uO84WUF3/LyrAPjS3plDoVyduDXq37JdLDuC7okOVm0 cpIaRwF9tmMP6Jc0LTDbPcag02z7poNP1o35QiXRKNEA -----END CERTIFICATE-----Generated at Sun Jan 25 20:29:59 2026 by rpki-client