This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/f7977e-ad30-4cb7-8ed3-29f4cd0ba804/1/LFtuG7P8iCtOMJ-_HIpVvd27MIk.roa File: LFtuG7P8iCtOMJ-_HIpVvd27MIk.roa (raw, json) Hash identifier: +FNhZHEAVTu13uveNE5cM1cVHyXcnYJhiraSKz/AoYc= Subject key identifier: 2C:5B:6E:1B:B3:FC:88:2B:4E:30:9F:BF:1C:8A:55:BD:DD:BB:30:89 Certificate issuer: /CN=13cd87027d7d3a3b9f7c4ba4495e49e21ad5a4bb Certificate serial: 019B797DDE0E52B56D5C17EA84570F222966 Authority key identifier: 13:CD:87:02:7D:7D:3A:3B:9F:7C:4B:A4:49:5E:49:E2:1A:D5:A4:BB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E82HAn19OjuffEukSV5J4hrVpLs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/f7977e-ad30-4cb7-8ed3-29f4cd0ba804/1/LFtuG7P8iCtOMJ-_HIpVvd27MIk.roa Signing time: Thu 01 Jan 2026 12:17:30 +0000 ROA not before: Thu 01 Jan 2026 12:17:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202709 IP address blocks: 185.242.178.0/24 maxlen: 24 2a10:98c0::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/f7977e-ad30-4cb7-8ed3-29f4cd0ba804/1/E82HAn19OjuffEukSV5J4hrVpLs.crl rsync://rpki.ripe.net/repository/DEFAULT/28/f7977e-ad30-4cb7-8ed3-29f4cd0ba804/1/E82HAn19OjuffEukSV5J4hrVpLs.mft rsync://rpki.ripe.net/repository/DEFAULT/E82HAn19OjuffEukSV5J4hrVpLs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7d:de:0e:52:b5:6d:5c:17:ea:84:57:0f:22:29:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=13cd87027d7d3a3b9f7c4ba4495e49e21ad5a4bb Validity Not Before: Jan 1 12:17:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2c5b6e1bb3fc882b4e309fbf1c8a55bdddbb3089 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:2e:a8:4c:eb:f2:1d:d3:b6:37:4e:f8:0e:ef: 7b:2e:fd:f0:05:ce:6f:24:b8:44:a0:1f:93:43:c2: 26:87:f3:b7:b7:50:4a:94:ad:ba:25:a7:93:88:12: ac:c8:42:ae:9e:ac:48:0b:71:b3:17:cb:84:77:b6: af:71:44:8e:a8:12:cb:e7:1a:42:30:fd:e5:59:ca: bd:84:ff:78:22:5e:b6:d0:82:76:80:c1:68:97:39: 46:6b:11:75:de:5c:ab:3f:51:c3:c2:12:8f:ad:cf: d9:c8:70:35:95:d9:bf:d7:f7:b2:43:e2:dc:59:dd: b9:ee:dc:9d:d0:15:c3:8d:a4:a0:3d:81:d4:61:f2: a1:01:37:0e:1d:05:8f:ef:62:07:e4:ce:00:23:a8: 24:fd:c3:fa:85:c1:3b:a9:4f:44:74:d0:ba:08:64: 6e:6a:7f:50:ae:51:44:e1:bf:a9:8e:39:b9:5f:06: a8:23:21:04:a8:09:83:33:ce:10:85:b5:7e:b1:c7: 9d:07:33:18:7d:e1:95:f8:6e:1a:f0:53:ad:9e:62: ef:e9:f8:89:9b:37:3d:48:14:85:eb:d4:16:0c:91: 95:27:b8:58:76:ce:27:8f:a1:5e:6a:fe:aa:0f:34: 9c:52:98:36:10:d9:34:26:c7:04:78:57:8d:43:ab: 0b:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:5B:6E:1B:B3:FC:88:2B:4E:30:9F:BF:1C:8A:55:BD:DD:BB:30:89 X509v3 Authority Key Identifier: keyid:13:CD:87:02:7D:7D:3A:3B:9F:7C:4B:A4:49:5E:49:E2:1A:D5:A4:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E82HAn19OjuffEukSV5J4hrVpLs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/f7977e-ad30-4cb7-8ed3-29f4cd0ba804/1/LFtuG7P8iCtOMJ-_HIpVvd27MIk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/f7977e-ad30-4cb7-8ed3-29f4cd0ba804/1/E82HAn19OjuffEukSV5J4hrVpLs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.242.178.0/24 IPv6: 2a10:98c0::/29 Signature Algorithm: sha256WithRSAEncryption c0:7e:75:d9:31:ca:dd:cc:b6:85:2d:60:40:ee:9a:61:82:4f: d3:29:0d:1b:f7:1b:c8:2a:9d:4f:22:59:5d:17:42:c6:0e:a6: d7:85:e0:72:12:12:ef:99:ce:69:34:69:f3:98:46:48:40:b6: 0f:d9:79:91:58:f2:3d:f3:ac:f8:e9:71:3e:dc:4e:d3:ea:5f: df:09:83:1c:55:67:91:99:ed:4b:b5:60:e8:fd:56:82:6c:32: 12:08:f7:bf:34:fc:0b:cd:93:0b:64:02:44:88:84:a9:b0:24: 8a:d8:35:88:c7:b7:aa:c2:97:de:2d:43:db:cf:1e:52:9b:81: e8:80:b1:c4:55:21:1f:bb:a4:1c:c9:ff:a3:6d:5b:75:61:98: af:0d:c5:ce:1c:88:d4:c0:ff:bb:fc:07:63:95:be:6d:8e:25: 7d:3f:35:b7:56:f9:e6:cc:44:f5:30:43:2d:53:92:cc:fb:fd: da:98:35:79:a4:3b:13:20:15:18:6a:bf:24:53:e1:a4:93:94: 03:98:c7:03:86:57:63:d0:21:94:86:41:ff:9e:52:57:e3:a1: ca:41:a9:3b:b1:2b:8d:cc:89:81:76:47:da:41:18:ac:80:d3: fd:0d:2a:39:74:e6:a5:e4:d8:5f:2f:c6:94:9f:60:0d:f7:15: 2f:99:91:5f -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt5fd4OUrVtXBfqhFcPIilmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEzY2Q4NzAyN2Q3ZDNhM2I5ZjdjNGJhNDQ5NWU0OWUyMWFk NWE0YmIwHhcNMjYwMTAxMTIxNzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYzViNmUxYmIzZmM4ODJiNGUzMDlmYmYxYzhhNTViZGRkYmIzMDg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAui6oTOvyHdO2N074Du97Lv3wBc5v JLhEoB+TQ8Imh/O3t1BKlK26JaeTiBKsyEKunqxIC3GzF8uEd7avcUSOqBLL5xpC MP3lWcq9hP94Il620IJ2gMFolzlGaxF13lyrP1HDwhKPrc/ZyHA1ldm/1/eyQ+Lc Wd257tyd0BXDjaSgPYHUYfKhATcOHQWP72IH5M4AI6gk/cP6hcE7qU9EdNC6CGRu an9QrlFE4b+pjjm5XwaoIyEEqAmDM84QhbV+scedBzMYfeGV+G4a8FOtnmLv6fiJ mzc9SBSF69QWDJGVJ7hYds4nj6Feav6qDzScUpg2ENk0JscEeFeNQ6sLMwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFCxbbhuz/IgrTjCfvxyKVb3duzCJMB8GA1UdIwQY MBaAFBPNhwJ9fTo7n3xLpEleSeIa1aS7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRTgySEFuMTlPanVmZkV1a1NWNUo0aHJWcExzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9mNzk3N2UtYWQzMC00Y2I3LThlZDMt MjlmNGNkMGJhODA0LzEvTEZ0dUc3UDhpQ3RPTUotX0hJcFZ2ZDI3TUlrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC9mNzk3N2UtYWQzMC00Y2I3LThlZDMtMjlmNGNkMGJhODA0 LzEvRTgySEFuMTlPanVmZkV1a1NWNUo0aHJWcExzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAufKyMA0E AgACMAcDBQMqEJjAMA0GCSqGSIb3DQEBCwUAA4IBAQDAfnXZMcrdzLaFLWBA7pph gk/TKQ0b9xvIKp1PIlldF0LGDqbXheByEhLvmc5pNGnzmEZIQLYP2XmRWPI986z4 6XE+3E7T6l/fCYMcVWeRme1LtWDo/VaCbDISCPe/NPwLzZMLZAJEiISpsCSK2DWI x7eqwpfeLUPbzx5Sm4HogLHEVSEfu6Qcyf+jbVt1YZivDcXOHIjUwP+7/Adjlb5t jiV9PzW3VvnmzET1MEMtU5LM+/3amDV5pDsTIBUYar8kU+Gkk5QDmMcDhldj0CGU hkH/nlJX46HKQak7sSuNzImBdkfaQRisgNP9DSo5dOal5NhfL8aUn2AN9xUvmZFf -----END CERTIFICATE-----Generated at Mon Jan 26 09:23:42 2026 by rpki-client