This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/LVf00OwBfRzfAd6G6KBKwIxU48Q.roa File: LVf00OwBfRzfAd6G6KBKwIxU48Q.roa (raw, json) Hash identifier: Xvect/bo+Wr+aXHUQYsyRoqwRvv8UXPXPU1oErWXh0o= Subject key identifier: 2D:57:F4:D0:EC:01:7D:1C:DF:01:DE:86:E8:A0:4A:C0:8C:54:E3:C4 Certificate issuer: /CN=ac7cc334f51d2b6eb4e27d6d56b9bce3e85560cc Certificate serial: 019B7EA7478711EBF8E604E08BE6EF4F1B04 Authority key identifier: AC:7C:C3:34:F5:1D:2B:6E:B4:E2:7D:6D:56:B9:BC:E3:E8:55:60:CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rHzDNPUdK2604n1tVrm84-hVYMw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/LVf00OwBfRzfAd6G6KBKwIxU48Q.roa Signing time: Fri 02 Jan 2026 12:20:50 +0000 ROA not before: Fri 02 Jan 2026 12:20:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200873 IP address blocks: 37.221.99.0/24 maxlen: 24 185.67.236.0/23 maxlen: 23 185.67.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/rHzDNPUdK2604n1tVrm84-hVYMw.crl rsync://rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/rHzDNPUdK2604n1tVrm84-hVYMw.mft rsync://rpki.ripe.net/repository/DEFAULT/rHzDNPUdK2604n1tVrm84-hVYMw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 03:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:47:87:11:eb:f8:e6:04:e0:8b:e6:ef:4f:1b:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac7cc334f51d2b6eb4e27d6d56b9bce3e85560cc Validity Not Before: Jan 2 12:20:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2d57f4d0ec017d1cdf01de86e8a04ac08c54e3c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:c6:19:8b:69:ce:fa:b8:80:52:9f:22:9e:9f: 47:71:f6:c5:a3:8c:48:1d:ba:a5:93:12:c4:75:af: 43:af:d6:14:f1:39:43:6c:61:00:6f:ec:7a:ee:72: b6:f1:77:cc:7b:6c:a0:64:5c:f1:79:5d:a1:fa:e5: 69:6f:28:86:d8:76:4d:c9:5c:4f:4a:8e:ca:b3:8f: f2:8f:30:85:f3:5b:64:71:48:58:5f:d0:61:2f:2a: 8c:e9:09:43:8d:c5:ff:93:3a:2a:b3:cf:b8:52:e2: 18:a3:c8:41:b1:e0:2c:98:09:74:d7:23:96:43:a7: 90:59:27:fd:7c:3d:73:37:98:87:56:f2:5f:ea:41: 78:dc:a9:a4:89:ad:a5:1a:17:38:d9:df:16:dc:a8: aa:38:30:a1:93:48:3f:26:f0:28:d0:49:8b:9e:d8: 34:f4:cd:78:94:c5:7b:02:d1:03:85:13:01:f8:cb: eb:ef:f0:2d:c3:fc:d8:6a:3a:ba:ec:2b:77:2a:3f: b8:fd:f1:fc:27:c8:ff:a1:7f:b8:67:88:4b:7c:ed: 6e:a2:d8:26:9d:57:0b:00:71:d2:ff:3f:c3:c3:25: cb:ad:4f:df:27:1b:0d:c6:e2:19:e0:22:98:3d:b0: 0f:1f:b7:62:fa:27:60:66:79:b9:b7:c9:fd:1d:13: 60:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:57:F4:D0:EC:01:7D:1C:DF:01:DE:86:E8:A0:4A:C0:8C:54:E3:C4 X509v3 Authority Key Identifier: keyid:AC:7C:C3:34:F5:1D:2B:6E:B4:E2:7D:6D:56:B9:BC:E3:E8:55:60:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rHzDNPUdK2604n1tVrm84-hVYMw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/LVf00OwBfRzfAd6G6KBKwIxU48Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/rHzDNPUdK2604n1tVrm84-hVYMw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.221.99.0/24 185.67.236.0-185.67.238.255 Signature Algorithm: sha256WithRSAEncryption 36:e6:8a:45:c8:d4:82:f8:e2:df:9b:47:3a:e3:6e:75:0c:d5: aa:77:99:e7:79:14:ea:c0:02:6f:ae:0b:57:3e:c7:69:19:9e: d7:8c:b7:20:11:7e:27:cb:e4:51:7d:3b:7c:25:a7:46:56:f8: e9:4f:9a:ff:c0:7e:04:07:c5:8e:20:76:e9:05:e7:ed:79:72: 93:23:25:d4:eb:66:73:5d:da:74:8a:a6:51:bd:9d:b5:f2:7e: 60:79:d1:13:ac:02:85:3b:9f:8b:fe:ec:18:f9:d1:31:57:9f: 69:e7:8b:fd:08:74:e3:ac:2c:82:8c:bf:a9:b2:af:e3:c9:14: 65:8c:46:ee:3a:ff:be:ee:14:29:17:69:1e:10:41:eb:a8:83: a7:79:fe:8f:67:e4:15:3f:dd:35:ee:54:47:17:e0:00:fc:7b: ba:83:fa:c3:04:a1:e5:80:6d:81:5e:d4:21:aa:2a:0a:1c:8a: 15:56:96:80:91:3f:b0:e4:93:f3:7c:f7:cb:2f:c6:d3:22:b4: a6:05:0c:b5:86:d1:eb:3a:1b:47:90:7f:dc:56:41:62:a8:f2: ab:25:b1:c6:67:e8:09:e4:04:9c:92:5b:f6:2f:21:ab:9e:43: e8:25:c7:7e:8b:02:15:3d:ea:38:ab:38:35:c7:e5:f5:8d:4f: fa:9d:a9:93 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt+p0eHEev45gTgi+bvTxsEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjN2NjMzM0ZjUxZDJiNmViNGUyN2Q2ZDU2YjliY2UzZTg1 NTYwY2MwHhcNMjYwMTAyMTIyMDUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZDU3ZjRkMGVjMDE3ZDFjZGYwMWRlODZlOGEwNGFjMDhjNTRlM2M0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArMYZi2nO+riAUp8inp9HcfbFo4xI HbqlkxLEda9Dr9YU8TlDbGEAb+x67nK28XfMe2ygZFzxeV2h+uVpbyiG2HZNyVxP So7Ks4/yjzCF81tkcUhYX9BhLyqM6QlDjcX/kzoqs8+4UuIYo8hBseAsmAl01yOW Q6eQWSf9fD1zN5iHVvJf6kF43Kmkia2lGhc42d8W3KiqODChk0g/JvAo0EmLntg0 9M14lMV7AtEDhRMB+Mvr7/Atw/zYajq67Ct3Kj+4/fH8J8j/oX+4Z4hLfO1uotgm nVcLAHHS/z/DwyXLrU/fJxsNxuIZ4CKYPbAPH7di+idgZnm5t8n9HRNgawIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFC1X9NDsAX0c3wHehuigSsCMVOPEMB8GA1UdIwQY MBaAFKx8wzT1HStutOJ9bVa5vOPoVWDMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvckh6RE5QVWRLMjYwNG4xdFZybTg0LWhWWU13LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9kZDU1ZTgtZmViZC00OWQwLWE1YTct MWNmMTViMmJhN2JlLzEvTFZmMDBPd0JmUnpmQWQ2RzZLQkt3SXhVNDhRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS9kZDU1ZTgtZmViZC00OWQwLWE1YTctMWNmMTViMmJhN2Jl LzEvckh6RE5QVWRLMjYwNG4xdFZybTg0LWhWWU13LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQAJd1jMAwD BAK5Q+wDBAC5Q+4wDQYJKoZIhvcNAQELBQADggEBADbmikXI1IL44t+bRzrjbnUM 1ap3med5FOrAAm+uC1c+x2kZnteMtyARfifL5FF9O3wlp0ZW+OlPmv/AfgQHxY4g dukF5+15cpMjJdTrZnNd2nSKplG9nbXyfmB50ROsAoU7n4v+7Bj50TFXn2nni/0I dOOsLIKMv6myr+PJFGWMRu46/77uFCkXaR4QQeuog6d5/o9n5BU/3TXuVEcX4AD8 e7qD+sMEoeWAbYFe1CGqKgocihVWloCRP7Dkk/N898svxtMitKYFDLWG0es6G0eQ f9xWQWKo8qslscZn6AnkBJySW/YvIaueQ+glx36LAhU96jirODXH5fWNT/qdqZM= -----END CERTIFICATE-----Generated at Mon Jan 26 11:44:22 2026 by rpki-client