This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/lpxrIgCiC2xkznZ89CgmdfgEhCw.roa File: lpxrIgCiC2xkznZ89CgmdfgEhCw.roa (raw, json) Hash identifier: JtumJ30bGMVW5iKbWBu0sHNH8SQyWNPkrCzX/38M+zQ= Subject key identifier: 96:9C:6B:22:00:A2:0B:6C:64:CE:76:7C:F4:28:26:75:F8:04:84:2C Certificate issuer: /CN=b91b91504983091506a1a944457a4558b94dab7f Certificate serial: 019B7AC92A1A47AEC433243821827113C0AD Authority key identifier: B9:1B:91:50:49:83:09:15:06:A1:A9:44:45:7A:45:58:B9:4D:AB:7F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRuRUEmDCRUGoalERXpFWLlNq38.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/lpxrIgCiC2xkznZ89CgmdfgEhCw.roa Signing time: Thu 01 Jan 2026 18:19:22 +0000 ROA not before: Thu 01 Jan 2026 18:19:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216303 IP address blocks: 178.175.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/uRuRUEmDCRUGoalERXpFWLlNq38.crl rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/uRuRUEmDCRUGoalERXpFWLlNq38.mft rsync://rpki.ripe.net/repository/DEFAULT/uRuRUEmDCRUGoalERXpFWLlNq38.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c9:2a:1a:47:ae:c4:33:24:38:21:82:71:13:c0:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b91b91504983091506a1a944457a4558b94dab7f Validity Not Before: Jan 1 18:19:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=969c6b2200a20b6c64ce767cf4282675f804842c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:8c:77:cd:79:dc:f4:1d:50:3d:48:a3:2a:30: e2:9b:3b:36:b9:22:a0:f9:af:b5:84:c0:e6:f4:40: 1e:13:55:7c:32:d8:a2:49:a2:7f:71:d0:67:82:d8: 94:6f:52:b8:d4:10:16:29:66:9f:59:88:25:65:8d: 33:1b:f7:e7:96:26:dc:34:1d:b5:4f:24:b0:63:ea: e3:14:c4:f5:5a:4a:c9:1a:a2:81:8a:77:9a:30:49: 08:50:d7:09:aa:23:27:4e:80:3e:e1:1f:5f:55:ee: 15:71:1d:ba:88:db:94:b1:18:fb:d3:b6:d8:21:c4: 8f:a6:06:f7:47:30:1e:7f:7a:24:4f:ab:05:56:5d: c3:d9:e6:9a:1e:3c:5c:06:91:b3:54:3f:4f:0d:bb: 48:dd:6c:47:4c:53:48:6a:f4:7b:d8:65:b5:3d:f2: 30:13:60:a1:5c:c5:3e:0d:51:45:be:59:93:10:aa: 80:a3:06:62:6f:e9:82:42:cb:a4:0a:68:04:fc:d9: 4a:3d:2f:14:1f:08:aa:46:db:61:95:62:c4:4a:1d: 76:4c:a7:cf:96:1e:7e:f2:ee:3c:03:0d:67:c7:20: 6a:e6:e7:66:29:a4:9d:5b:f9:b3:85:a8:48:d8:e3: fc:72:da:d6:2a:73:c9:79:37:45:1a:70:30:97:2b: fe:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:9C:6B:22:00:A2:0B:6C:64:CE:76:7C:F4:28:26:75:F8:04:84:2C X509v3 Authority Key Identifier: keyid:B9:1B:91:50:49:83:09:15:06:A1:A9:44:45:7A:45:58:B9:4D:AB:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRuRUEmDCRUGoalERXpFWLlNq38.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/lpxrIgCiC2xkznZ89CgmdfgEhCw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/uRuRUEmDCRUGoalERXpFWLlNq38.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.175.173.0/24 Signature Algorithm: sha256WithRSAEncryption 5d:94:75:3c:a5:2c:1b:bc:e4:ef:80:70:76:83:10:55:f6:7a: 11:b7:02:ce:9c:f4:5e:c2:e7:12:c1:fb:f9:63:25:95:5c:31: d3:e9:f2:e3:9c:53:34:7e:0d:b7:40:df:2b:74:11:2a:00:00: 69:66:37:f0:97:62:ff:9e:bb:8c:44:59:01:97:83:1d:7b:40: 29:ce:c2:ea:82:64:78:ab:53:30:3f:b2:2e:47:db:2c:9c:a6: 5b:af:2e:a3:e1:51:8e:ba:7c:bc:5b:89:35:a5:64:e6:11:aa: 4e:fa:ea:48:95:be:72:47:0c:83:45:81:c7:e1:b4:8e:5f:51: 03:03:f9:6f:58:df:f8:63:d2:94:cd:5b:01:b6:2d:0c:7e:3e: 8b:48:b2:75:8f:c0:aa:8e:98:b5:e7:2d:6f:0c:c0:94:3b:33: e7:65:4e:f8:25:99:57:c1:a7:59:f3:10:ae:44:63:5c:2b:2f: 65:4e:f5:aa:c1:d8:9a:5c:29:a8:0d:f7:30:d1:e4:88:4a:8b: 6b:ec:b1:f9:4f:24:ed:5c:ef:68:ed:11:6d:26:7e:35:68:43: f8:aa:6f:f7:8d:4a:c5:1d:07:0a:00:69:6e:71:4e:d8:a3:d1: 31:2c:d0:63:3e:17:6e:da:ae:47:85:ad:74:f8:ee:49:4f:70: fe:12:e9:aa -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6ySoaR67EMyQ4IYJxE8CtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5MWI5MTUwNDk4MzA5MTUwNmExYTk0NDQ1N2E0NTU4Yjk0 ZGFiN2YwHhcNMjYwMTAxMTgxOTIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NjljNmIyMjAwYTIwYjZjNjRjZTc2N2NmNDI4MjY3NWY4MDQ4NDJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxIx3zXnc9B1QPUijKjDimzs2uSKg +a+1hMDm9EAeE1V8MtiiSaJ/cdBngtiUb1K41BAWKWafWYglZY0zG/fnlibcNB21 TySwY+rjFMT1WkrJGqKBineaMEkIUNcJqiMnToA+4R9fVe4VcR26iNuUsRj707bY IcSPpgb3RzAef3okT6sFVl3D2eaaHjxcBpGzVD9PDbtI3WxHTFNIavR72GW1PfIw E2ChXMU+DVFFvlmTEKqAowZib+mCQsukCmgE/NlKPS8UHwiqRtthlWLESh12TKfP lh5+8u48Aw1nxyBq5udmKaSdW/mzhahI2OP8ctrWKnPJeTdFGnAwlyv++QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJacayIAogtsZM52fPQoJnX4BIQsMB8GA1UdIwQY MBaAFLkbkVBJgwkVBqGpREV6RVi5Tat/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdVJ1UlVFbURDUlVHb2FsRVJYcEZXTGxOcTM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS83NGUxN2YtZjlmNC00Nzg5LTkyYjct OWRkNmU4OGZjYzhkLzEvbHB4cklnQ2lDMnhrem5aODlDZ21kZmdFaEN3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS83NGUxN2YtZjlmNC00Nzg5LTkyYjctOWRkNmU4OGZjYzhk LzEvdVJ1UlVFbURDUlVHb2FsRVJYcEZXTGxOcTM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsq+tMA0G CSqGSIb3DQEBCwUAA4IBAQBdlHU8pSwbvOTvgHB2gxBV9noRtwLOnPRewucSwfv5 YyWVXDHT6fLjnFM0fg23QN8rdBEqAABpZjfwl2L/nruMRFkBl4Mde0ApzsLqgmR4 q1MwP7IuR9ssnKZbry6j4VGOuny8W4k1pWTmEapO+upIlb5yRwyDRYHH4bSOX1ED A/lvWN/4Y9KUzVsBti0Mfj6LSLJ1j8Cqjpi15y1vDMCUOzPnZU74JZlXwadZ8xCu RGNcKy9lTvWqwdiaXCmoDfcw0eSISotr7LH5TyTtXO9o7RFtJn41aEP4qm/3jUrF HQcKAGlucU7Yo9ExLNBjPhdu2q5Hha10+O5JT3D+Eumq -----END CERTIFICATE-----Generated at Mon Jan 26 10:53:47 2026 by rpki-client