This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/LoSatXKTLwEw3FJXDxXLGi_t6Ec.roa File: LoSatXKTLwEw3FJXDxXLGi_t6Ec.roa (raw, json) Hash identifier: QlUz4c9V3BMW/OobjmQHCJX1uHFpwrKtKrnhYg55zA8= Subject key identifier: 2E:84:9A:B5:72:93:2F:01:30:DC:52:57:0F:15:CB:1A:2F:ED:E8:47 Certificate issuer: /CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e Certificate serial: 019B7AC8E1692B078334AE34F7BEAB227FB7 Authority key identifier: A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/LoSatXKTLwEw3FJXDxXLGi_t6Ec.roa Signing time: Thu 01 Jan 2026 18:19:03 +0000 ROA not before: Thu 01 Jan 2026 18:19:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41272 IP address blocks: 46.165.64.0/18 maxlen: 18 80.185.0.0/16 maxlen: 16 188.7.0.0/16 maxlen: 16 2a00:8380::/32 maxlen: 32 2a04:800:6000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.crl rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.mft rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:e1:69:2b:07:83:34:ae:34:f7:be:ab:22:7f:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e Validity Not Before: Jan 1 18:19:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2e849ab572932f0130dc52570f15cb1a2fede847 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:7d:6e:f2:80:c4:e2:0b:85:07:a0:43:c7:42: 36:d7:f5:17:5d:97:88:52:ba:a1:e1:c7:21:17:18: 4b:1f:5d:b6:49:81:32:e4:da:21:3e:78:56:00:ca: 01:a6:99:5c:ee:0b:76:62:04:dc:51:f4:79:57:b2: d6:92:7a:1e:17:cb:82:4e:f5:a4:a5:d7:f8:7c:a1: ed:8d:80:50:a6:06:c3:63:29:fd:9f:38:db:0d:96: f7:8e:60:d2:02:c5:76:6e:81:39:24:dc:c5:23:8e: e5:90:6e:bf:0a:b8:b8:13:23:8d:53:b6:97:99:34: f3:f7:86:e9:ab:da:fa:c9:29:91:ed:cf:51:82:41: 64:f8:1c:5e:b4:cf:ea:3a:9e:94:43:68:26:4c:d1: 86:3d:2e:0e:4e:03:2e:1d:54:64:bb:80:8c:02:f8: 20:39:0e:35:cc:c0:5f:1f:eb:9d:78:d6:eb:67:81: 9f:b7:3f:fd:72:cb:74:f6:a1:20:b4:59:fe:df:ba: 08:b1:60:62:a7:56:2a:ac:2f:e0:69:42:98:27:b0: 46:31:a5:c7:37:ba:51:dc:6d:d5:fa:88:ab:18:08: ce:26:87:63:d4:cd:38:e4:4d:7e:d1:e2:0c:d7:9c: 1a:91:ea:12:e1:22:73:1b:fb:96:fb:a1:70:0c:57: 29:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:84:9A:B5:72:93:2F:01:30:DC:52:57:0F:15:CB:1A:2F:ED:E8:47 X509v3 Authority Key Identifier: keyid:A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/LoSatXKTLwEw3FJXDxXLGi_t6Ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.165.64.0/18 80.185.0.0/16 188.7.0.0/16 IPv6: 2a00:8380::/32 2a04:800:6000::/36 Signature Algorithm: sha256WithRSAEncryption 77:74:09:88:5d:8f:72:b3:5e:93:bb:6b:08:70:ce:ed:9e:b0: 66:0c:00:29:5e:ea:65:37:23:f5:48:66:c3:fa:f8:3e:b7:23: 16:ca:35:73:88:b8:a5:18:4c:19:b3:59:19:68:42:82:11:d9: fa:b4:8d:27:bc:a5:fe:9a:e7:7a:a5:a7:08:bf:79:4d:33:20: 7b:3a:a3:55:f0:f6:ea:ca:07:94:13:fc:e7:a4:61:94:41:03: 5c:19:69:09:8b:fb:6c:f4:b4:08:9e:be:bc:c9:82:74:ec:5b: 20:2d:9e:34:d7:bd:b8:e4:6b:39:37:94:33:c2:a4:b8:63:64: ce:40:1c:e7:2e:ed:19:fc:0d:64:4d:cb:cf:3d:1f:ff:6f:86: 20:32:00:36:f3:e6:11:a1:b8:c8:5e:1a:17:35:52:af:ee:80: 37:10:2f:c1:80:0b:72:93:13:e0:c9:43:42:1c:71:86:eb:b2: e3:b4:e3:10:12:75:12:cd:17:6c:be:0c:9e:4a:72:2d:55:db: de:11:6c:41:36:6b:6f:d7:a3:c2:6c:b2:4c:00:54:3d:f6:21: bc:69:58:65:ff:37:40:f2:0f:42:a5:0d:43:2a:f6:5c:35:21: a8:f4:b0:d7:a6:9d:c9:de:91:7c:11:f9:b3:83:5f:44:c0:4d: 01:0b:50:27 -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgISAZt6yOFpKweDNK40976rIn+3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEwZWY1ZmJiZmNhN2E5M2NmZWU5NjVlZWI2YmRlZTZmYjQz YzQwM2UwHhcNMjYwMTAxMTgxOTAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZTg0OWFiNTcyOTMyZjAxMzBkYzUyNTcwZjE1Y2IxYTJmZWRlODQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuH1u8oDE4guFB6BDx0I21/UXXZeI Urqh4cchFxhLH122SYEy5NohPnhWAMoBpplc7gt2YgTcUfR5V7LWknoeF8uCTvWk pdf4fKHtjYBQpgbDYyn9nzjbDZb3jmDSAsV2boE5JNzFI47lkG6/Cri4EyONU7aX mTTz94bpq9r6ySmR7c9RgkFk+BxetM/qOp6UQ2gmTNGGPS4OTgMuHVRku4CMAvgg OQ41zMBfH+udeNbrZ4Gftz/9cst09qEgtFn+37oIsWBip1YqrC/gaUKYJ7BGMaXH N7pR3G3V+oirGAjOJodj1M045E1+0eIM15wakeoS4SJzG/uW+6FwDFcp2wIDAQAB o4ICKjCCAiYwHQYDVR0OBBYEFC6EmrVyky8BMNxSVw8Vyxov7ehHMB8GA1UdIwQY MBaAFKDvX7v8p6k8/ull7ra97m+0PEA+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb085ZnVfeW5xVHotNldYdXRyM3ViN1E4UUQ0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi9mZTkxNWMtYmY3MC00NjAyLThhM2Mt MDI5MmIwMjAxNTBhLzEvTG9TYXRYS1RMd0V3M0ZKWER4WExHaV90NkVjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Mi9mZTkxNWMtYmY3MC00NjAyLThhM2MtMDI5MmIwMjAxNTBh LzEvb085ZnVfeW5xVHotNldYdXRyM3ViN1E4UUQ0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAWBAIAATAQAwQGLqVAAwMA ULkDAwC8BzAVBAIAAjAPAwUAKgCDgAMGBCoECABgMA0GCSqGSIb3DQEBCwUAA4IB AQB3dAmIXY9ys16Tu2sIcM7tnrBmDAApXuplNyP1SGbD+vg+tyMWyjVziLilGEwZ s1kZaEKCEdn6tI0nvKX+mud6pacIv3lNMyB7OqNV8PbqygeUE/znpGGUQQNcGWkJ i/ts9LQInr68yYJ07FsgLZ4017245Gs5N5QzwqS4Y2TOQBznLu0Z/A1kTcvPPR// b4YgMgA28+YRobjIXhoXNVKv7oA3EC/BgAtykxPgyUNCHHGG67LjtOMQEnUSzRds vgyeSnItVdveEWxBNmtv16PCbLJMAFQ99iG8aVhl/zdA8g9CpQ1DKvZcNSGo9LDX pp3J3pF8Efmzg19EwE0BC1An -----END CERTIFICATE-----Generated at Mon Jan 26 02:08:07 2026 by rpki-client