This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/df140a-0ac3-4105-b83a-051886d0ed4e/1/L8bZH6SZP0Do8W2usy05gMWTJfA.roa File: L8bZH6SZP0Do8W2usy05gMWTJfA.roa (raw, json) Hash identifier: GqrUrTcZzLpiG3dkPkOQYKLJl/nz6um2HMjJRvXU0cM= Subject key identifier: 2F:C6:D9:1F:A4:99:3F:40:E8:F1:6D:AE:B3:2D:39:80:C5:93:25:F0 Certificate issuer: /CN=955fcf92798a9dbb30abd2b9fa29bfa8804220f3 Certificate serial: 019B7CEE4ED6EF065C50F8C7A415E3BBC8F3 Authority key identifier: 95:5F:CF:92:79:8A:9D:BB:30:AB:D2:B9:FA:29:BF:A8:80:42:20:F3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lV_PknmKnbswq9K5-im_qIBCIPM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/df140a-0ac3-4105-b83a-051886d0ed4e/1/L8bZH6SZP0Do8W2usy05gMWTJfA.roa Signing time: Fri 02 Jan 2026 04:19:11 +0000 ROA not before: Fri 02 Jan 2026 04:19:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 21368 IP address blocks: 45.86.137.0/24 maxlen: 24 45.86.138.0/23 maxlen: 23 185.109.252.0/23 maxlen: 23 185.109.252.0/24 maxlen: 24 185.109.253.0/24 maxlen: 24 185.109.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/df140a-0ac3-4105-b83a-051886d0ed4e/1/lV_PknmKnbswq9K5-im_qIBCIPM.crl rsync://rpki.ripe.net/repository/DEFAULT/62/df140a-0ac3-4105-b83a-051886d0ed4e/1/lV_PknmKnbswq9K5-im_qIBCIPM.mft rsync://rpki.ripe.net/repository/DEFAULT/lV_PknmKnbswq9K5-im_qIBCIPM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 19:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:4e:d6:ef:06:5c:50:f8:c7:a4:15:e3:bb:c8:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=955fcf92798a9dbb30abd2b9fa29bfa8804220f3 Validity Not Before: Jan 2 04:19:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2fc6d91fa4993f40e8f16daeb32d3980c59325f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:de:bb:af:d4:8a:cf:aa:2d:b0:79:ab:b6:bf: b6:9b:96:81:45:38:d6:a8:45:d5:82:04:61:f7:25: 4f:b4:2b:7e:2f:6d:f9:eb:ef:07:8f:2b:7f:5b:05: ca:39:13:78:c2:67:d0:20:0d:40:82:1e:9c:54:2b: 61:02:c5:ae:cf:57:60:05:2b:a6:98:41:1e:43:ed: 0d:45:c8:c6:bb:b2:cb:ac:95:b7:b4:b2:e1:cf:08: 9a:79:5d:e5:d1:6c:f7:05:56:1c:3f:5c:e3:86:f5: a6:6f:b3:9b:72:39:28:5c:62:5f:f0:e2:cc:ee:7f: 7b:72:04:7d:90:b7:46:c0:90:94:0e:dc:e1:35:5f: 97:5a:e1:86:ef:6e:43:6d:3e:46:bd:37:a9:c4:66: 92:23:8f:f5:27:25:12:d9:f7:7e:5b:67:bf:6d:6a: 70:be:38:10:b0:02:b5:68:56:53:0f:ab:64:0d:9d: 0b:99:1b:15:ab:f8:c0:d2:b7:28:0d:82:f6:6c:4e: e8:bb:99:a4:c2:78:61:a3:7c:dc:16:57:7b:7a:fd: 6e:89:32:aa:98:3e:dc:e5:15:5c:07:6c:4b:60:3c: ce:e9:b5:e8:f6:71:12:f2:f6:24:12:0c:e4:25:9a: 6e:e7:ea:4a:1f:61:c1:ee:6f:95:4b:ce:e6:41:74: 77:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:C6:D9:1F:A4:99:3F:40:E8:F1:6D:AE:B3:2D:39:80:C5:93:25:F0 X509v3 Authority Key Identifier: keyid:95:5F:CF:92:79:8A:9D:BB:30:AB:D2:B9:FA:29:BF:A8:80:42:20:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lV_PknmKnbswq9K5-im_qIBCIPM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/df140a-0ac3-4105-b83a-051886d0ed4e/1/L8bZH6SZP0Do8W2usy05gMWTJfA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/df140a-0ac3-4105-b83a-051886d0ed4e/1/lV_PknmKnbswq9K5-im_qIBCIPM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.86.137.0-45.86.139.255 185.109.252.0/23 185.109.255.0/24 Signature Algorithm: sha256WithRSAEncryption 98:c5:34:e7:99:ae:21:e0:33:51:fc:50:2b:bc:f2:cf:7c:7c: 1d:10:f5:bd:fc:6b:a2:41:8c:ca:93:8e:0f:26:96:cc:6f:f5: ee:71:e4:10:cd:fb:2c:97:5c:30:61:e9:0c:8c:6c:79:f0:90: e3:5d:5f:17:88:4e:d2:55:ee:23:3a:ef:cb:dc:43:4c:ad:be: f7:f0:0f:48:43:e5:77:82:96:3b:10:a9:92:78:7b:63:c6:51: 92:df:29:2b:fe:52:86:56:33:b0:6d:47:08:fd:c1:3b:f9:07: dc:35:59:be:69:16:14:06:bd:0a:a3:bc:59:03:0f:bd:1c:0e: 14:7d:9e:bb:cd:56:08:6a:f6:3c:e5:e3:13:93:43:97:5a:ff: 39:97:42:f7:35:a2:b4:e2:93:42:3c:f2:93:e7:96:3b:bf:55: f7:ea:e8:34:bb:9b:70:06:c0:6e:25:2c:3d:e0:ff:ce:8f:1a: 89:3b:0f:3c:2c:a9:db:27:b7:84:c4:b8:20:9b:bd:29:95:2d: de:f0:f3:ee:2c:a8:84:59:72:d9:d8:30:df:5a:25:d1:bc:cf: 8c:93:bc:8f:e7:5e:71:61:47:2c:21:b0:ed:ad:e7:6c:55:45: b5:20:9c:f8:ff:ae:aa:04:96:4c:7d:29:89:ec:9e:06:dc:5a: 64:ab:88:5e -----BEGIN CERTIFICATE----- MIIFETCCA/mgAwIBAgISAZt87k7W7wZcUPjHpBXju8jzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1NWZjZjkyNzk4YTlkYmIzMGFiZDJiOWZhMjliZmE4ODA0 MjIwZjMwHhcNMjYwMTAyMDQxOTExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZmM2ZDkxZmE0OTkzZjQwZThmMTZkYWViMzJkMzk4MGM1OTMyNWYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlN67r9SKz6otsHmrtr+2m5aBRTjW qEXVggRh9yVPtCt+L2356+8Hjyt/WwXKORN4wmfQIA1Agh6cVCthAsWuz1dgBSum mEEeQ+0NRcjGu7LLrJW3tLLhzwiaeV3l0Wz3BVYcP1zjhvWmb7ObcjkoXGJf8OLM 7n97cgR9kLdGwJCUDtzhNV+XWuGG725DbT5GvTepxGaSI4/1JyUS2fd+W2e/bWpw vjgQsAK1aFZTD6tkDZ0LmRsVq/jA0rcoDYL2bE7ou5mkwnhho3zcFld7ev1uiTKq mD7c5RVcB2xLYDzO6bXo9nES8vYkEgzkJZpu5+pKH2HB7m+VS87mQXR3OQIDAQAB o4ICHTCCAhkwHQYDVR0OBBYEFC/G2R+kmT9A6PFtrrMtOYDFkyXwMB8GA1UdIwQY MBaAFJVfz5J5ip27MKvSufopv6iAQiDzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbFZfUGtubUtuYnN3cTlLNS1pbV9xSUJDSVBNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi9kZjE0MGEtMGFjMy00MTA1LWI4M2Et MDUxODg2ZDBlZDRlLzEvTDhiWkg2U1pQMERvOFcydXN5MDVnTVdUSmZBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi9kZjE0MGEtMGFjMy00MTA1LWI4M2EtMDUxODg2ZDBlZDRl LzEvbFZfUGtubUtuYnN3cTlLNS1pbV9xSUJDSVBNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaMAwDBAAtVokD BAItVogDBAG5bfwDBAC5bf8wDQYJKoZIhvcNAQELBQADggEBAJjFNOeZriHgM1H8 UCu88s98fB0Q9b38a6JBjMqTjg8mlsxv9e5x5BDN+yyXXDBh6QyMbHnwkONdXxeI TtJV7iM678vcQ0ytvvfwD0hD5XeCljsQqZJ4e2PGUZLfKSv+UoZWM7BtRwj9wTv5 B9w1Wb5pFhQGvQqjvFkDD70cDhR9nrvNVghq9jzl4xOTQ5da/zmXQvc1orTik0I8 8pPnlju/Vffq6DS7m3AGwG4lLD3g/86PGok7Dzwsqdsnt4TEuCCbvSmVLd7w8+4s qIRZctnYMN9aJdG8z4yTvI/nXnFhRywhsO2t52xVRbUgnPj/rqoElkx9KYnsngbc WmSriF4= -----END CERTIFICATE-----Generated at Mon Jan 26 05:14:57 2026 by rpki-client