This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/7cd157-c58f-4cb9-8252-1696b246cd50/1/LAK8MpI2c0abasjZoSw7_w7kgs4.roa File: LAK8MpI2c0abasjZoSw7_w7kgs4.roa (raw, json) Hash identifier: clU497fVHM51q9eiZ1bT8jJiNXCByxpgSNSxbj5Sv9U= Subject key identifier: 2C:02:BC:32:92:36:73:46:9B:6A:C8:D9:A1:2C:3B:FF:0E:E4:82:CE Certificate issuer: /CN=3a92f5d936752baf2d0df713299499cecfa9f48d Certificate serial: 019B7B35D49D1366F32F58CABB3EB68FF50C Authority key identifier: 3A:92:F5:D9:36:75:2B:AF:2D:0D:F7:13:29:94:99:CE:CF:A9:F4:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OpL12TZ1K68tDfcTKZSZzs-p9I0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/7cd157-c58f-4cb9-8252-1696b246cd50/1/LAK8MpI2c0abasjZoSw7_w7kgs4.roa Signing time: Thu 01 Jan 2026 20:18:03 +0000 ROA not before: Thu 01 Jan 2026 20:18:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198279 IP address blocks: 185.239.8.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/7cd157-c58f-4cb9-8252-1696b246cd50/1/OpL12TZ1K68tDfcTKZSZzs-p9I0.crl rsync://rpki.ripe.net/repository/DEFAULT/41/7cd157-c58f-4cb9-8252-1696b246cd50/1/OpL12TZ1K68tDfcTKZSZzs-p9I0.mft rsync://rpki.ripe.net/repository/DEFAULT/OpL12TZ1K68tDfcTKZSZzs-p9I0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 14:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:d4:9d:13:66:f3:2f:58:ca:bb:3e:b6:8f:f5:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a92f5d936752baf2d0df713299499cecfa9f48d Validity Not Before: Jan 1 20:18:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2c02bc32923673469b6ac8d9a12c3bff0ee482ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:eb:a0:31:1a:48:e7:b7:1c:a4:ec:ab:6e:53: f5:e5:c3:bc:31:28:b6:25:40:bc:16:ea:1e:3e:c0: 6f:c8:6b:ac:4a:33:5f:b5:10:cd:34:20:ca:7e:9c: bf:71:ee:46:b2:5d:b2:10:98:ee:b8:e0:f5:96:c5: 0f:31:45:89:d7:47:9c:04:b7:e5:14:2a:34:be:3a: 95:ae:e0:e0:f7:68:1a:78:dc:22:52:6c:02:4b:a8: 5f:3e:92:6a:5f:1e:01:95:91:e6:88:cd:ec:30:13: 07:5f:24:f1:bd:b0:4b:63:4a:02:32:43:a5:cf:22: 31:24:01:f2:ec:5d:16:73:47:21:c1:c4:14:7a:96: ef:22:94:13:44:f8:a3:57:95:93:b4:d3:05:fc:40: ff:0d:e0:11:32:0b:b3:0b:de:04:9a:ed:5c:83:95: 76:e2:7b:eb:72:e6:b8:8d:af:6d:42:da:af:92:4c: 0e:ab:4b:57:10:40:f9:ca:25:35:df:cc:ac:1b:04: c1:95:79:48:53:fe:a3:b3:6b:b8:37:6d:b8:9d:83: 69:47:c9:f8:b6:21:1f:f1:ed:a1:50:75:95:f5:cb: 8f:25:96:62:b3:c2:e2:99:e5:75:64:f9:fe:fe:d2: 62:bd:41:29:e1:a9:ce:f1:5d:26:20:10:6d:81:95: 2b:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:02:BC:32:92:36:73:46:9B:6A:C8:D9:A1:2C:3B:FF:0E:E4:82:CE X509v3 Authority Key Identifier: keyid:3A:92:F5:D9:36:75:2B:AF:2D:0D:F7:13:29:94:99:CE:CF:A9:F4:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OpL12TZ1K68tDfcTKZSZzs-p9I0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/7cd157-c58f-4cb9-8252-1696b246cd50/1/LAK8MpI2c0abasjZoSw7_w7kgs4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/7cd157-c58f-4cb9-8252-1696b246cd50/1/OpL12TZ1K68tDfcTKZSZzs-p9I0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.239.8.0/24 Signature Algorithm: sha256WithRSAEncryption 6c:72:5f:fb:b7:dc:be:21:d2:fc:19:a0:40:fe:40:1b:5a:d1: 74:3c:cd:27:95:b3:5c:21:52:a9:d6:d0:75:ce:01:7d:0f:7b: 85:6c:f7:a9:23:2c:7c:5e:75:ce:61:59:db:38:90:c9:39:b7: 59:7d:be:66:33:23:0b:ab:6d:e9:23:f8:28:c8:92:16:9b:9a: bc:a3:6e:6c:d2:d4:ce:eb:db:1b:9b:3d:d8:b1:66:c2:1b:83: 52:bc:8b:4b:5e:a5:8a:5f:d2:a3:35:bb:d3:36:fa:f9:75:ec: aa:1b:36:f7:2e:7e:29:8b:e0:6d:6c:9d:c3:bd:6a:01:49:03: 31:e8:e6:b7:4d:e6:d3:a4:b2:14:22:ad:89:98:86:66:83:0d: 79:73:f6:27:2e:0a:2d:00:19:e5:97:7e:2b:ea:be:f2:32:32: 56:de:b2:25:2d:15:94:aa:0d:84:a5:ef:35:f5:e9:2a:0d:d5: 0a:56:93:17:5d:af:3b:e9:3b:5d:04:92:0c:48:44:48:d9:92: 67:7c:75:60:e8:d3:1e:8c:fc:2c:46:7b:79:90:90:ff:d3:79: b1:12:fb:1f:91:f6:33:77:d4:c6:0d:81:7f:de:e8:ad:b6:b1: ae:5e:1e:89:8f:1b:19:64:ea:81:e3:e7:a5:6d:21:8d:4c:0d: fb:c2:c4:d1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NdSdE2bzL1jKuz62j/UMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhOTJmNWQ5MzY3NTJiYWYyZDBkZjcxMzI5OTQ5OWNlY2Zh OWY0OGQwHhcNMjYwMTAxMjAxODAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYzAyYmMzMjkyMzY3MzQ2OWI2YWM4ZDlhMTJjM2JmZjBlZTQ4MmNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAseugMRpI57ccpOyrblP15cO8MSi2 JUC8FuoePsBvyGusSjNftRDNNCDKfpy/ce5Gsl2yEJjuuOD1lsUPMUWJ10ecBLfl FCo0vjqVruDg92gaeNwiUmwCS6hfPpJqXx4BlZHmiM3sMBMHXyTxvbBLY0oCMkOl zyIxJAHy7F0Wc0chwcQUepbvIpQTRPijV5WTtNMF/ED/DeARMguzC94Emu1cg5V2 4nvrcua4ja9tQtqvkkwOq0tXEED5yiU138ysGwTBlXlIU/6js2u4N224nYNpR8n4 tiEf8e2hUHWV9cuPJZZis8LimeV1ZPn+/tJivUEp4anO8V0mIBBtgZUrbQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCwCvDKSNnNGm2rI2aEsO/8O5ILOMB8GA1UdIwQY MBaAFDqS9dk2dSuvLQ33EymUmc7PqfSNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3BMMTJUWjFLNjh0RGZjVEtaU1p6cy1wOUkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS83Y2QxNTctYzU4Zi00Y2I5LTgyNTIt MTY5NmIyNDZjZDUwLzEvTEFLOE1wSTJjMGFiYXNqWm9TdzdfdzdrZ3M0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS83Y2QxNTctYzU4Zi00Y2I5LTgyNTItMTY5NmIyNDZjZDUw LzEvT3BMMTJUWjFLNjh0RGZjVEtaU1p6cy1wOUkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAue8IMA0G CSqGSIb3DQEBCwUAA4IBAQBscl/7t9y+IdL8GaBA/kAbWtF0PM0nlbNcIVKp1tB1 zgF9D3uFbPepIyx8XnXOYVnbOJDJObdZfb5mMyMLq23pI/goyJIWm5q8o25s0tTO 69sbmz3YsWbCG4NSvItLXqWKX9KjNbvTNvr5deyqGzb3Ln4pi+BtbJ3DvWoBSQMx 6Oa3TebTpLIUIq2JmIZmgw15c/YnLgotABnll34r6r7yMjJW3rIlLRWUqg2Epe81 9ekqDdUKVpMXXa876TtdBJIMSERI2ZJnfHVg6NMejPwsRnt5kJD/03mxEvsfkfYz d9TGDYF/3uittrGuXh6JjxsZZOqB4+elbSGNTA37wsTR -----END CERTIFICATE-----Generated at Tue Jan 27 00:07:40 2026 by rpki-client