This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/LadPVgBxnNqFC9976JvE11j-gNg.roa File: LadPVgBxnNqFC9976JvE11j-gNg.roa (raw, json) Hash identifier: yFgPWknHVTOnyec0qjzk/ZkvvdjvamZAOLBRpm7y7A0= Subject key identifier: 2D:A7:4F:56:00:71:9C:DA:85:0B:DF:7B:E8:9B:C4:D7:58:FE:80:D8 Certificate issuer: /CN=5a939b0ced38d75cc63ed50d6e5ce72bbb5b4b10 Certificate serial: 019B7BA3C8ECA76A40B8D4EC6E2BE9040AF3 Authority key identifier: 5A:93:9B:0C:ED:38:D7:5C:C6:3E:D5:0D:6E:5C:E7:2B:BB:5B:4B:10 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WpObDO0411zGPtUNblznK7tbSxA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/LadPVgBxnNqFC9976JvE11j-gNg.roa Signing time: Thu 01 Jan 2026 22:18:09 +0000 ROA not before: Thu 01 Jan 2026 22:18:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203709 IP address blocks: 185.123.56.0/24 maxlen: 24 185.123.57.0/24 maxlen: 24 185.123.58.0/24 maxlen: 24 185.123.59.0/24 maxlen: 24 185.214.138.0/24 maxlen: 24 193.56.164.0/24 maxlen: 24 193.56.165.0/24 maxlen: 24 193.56.166.0/24 maxlen: 24 193.56.167.0/24 maxlen: 24 212.119.52.0/22 maxlen: 22 212.119.52.0/24 maxlen: 24 212.119.53.0/24 maxlen: 24 212.119.54.0/24 maxlen: 24 212.119.55.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/WpObDO0411zGPtUNblznK7tbSxA.crl rsync://rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/WpObDO0411zGPtUNblznK7tbSxA.mft rsync://rpki.ripe.net/repository/DEFAULT/WpObDO0411zGPtUNblznK7tbSxA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:c8:ec:a7:6a:40:b8:d4:ec:6e:2b:e9:04:0a:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a939b0ced38d75cc63ed50d6e5ce72bbb5b4b10 Validity Not Before: Jan 1 22:18:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2da74f5600719cda850bdf7be89bc4d758fe80d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:b8:51:bb:f4:a1:e3:65:73:8c:e1:54:d4:c0: a1:12:51:05:8f:03:1c:ee:da:88:64:e4:d5:f6:f0: 2b:a5:9b:2d:33:af:7d:59:12:1f:a2:9a:56:ce:54: f3:0c:9c:99:1e:33:0d:91:bb:f1:ff:58:54:7d:85: e1:68:57:b0:1d:9c:f2:6b:c1:77:c4:ac:a7:d5:8d: 05:92:3d:8f:20:c6:56:01:68:3a:dd:75:c2:da:e6: 8b:54:d6:c1:f8:3e:d7:0f:22:9c:18:82:97:da:36: 3f:09:8b:4b:ba:16:6f:ac:b5:26:7a:63:25:33:4f: ba:f5:ac:fe:22:ff:65:e0:ff:97:0f:30:95:f0:12: 47:73:e6:2a:61:a9:8f:4f:ab:3e:47:7e:64:c2:31: 4c:cb:15:f2:75:5f:90:c8:95:87:f3:2b:cb:0a:80: a3:8b:8d:38:8e:97:8b:12:27:e1:70:71:4f:97:fe: 71:93:57:7c:06:34:71:64:9e:26:ce:1f:e3:07:ab: 4f:5f:8e:be:9d:53:aa:81:4e:a6:a6:fa:9c:53:b7: 02:e3:76:00:26:8d:9a:ea:c1:8e:b5:55:c0:29:d7: 9d:9e:e0:92:07:2b:f3:83:3e:fb:fa:4f:d4:8d:14: 5b:df:38:a8:65:1c:85:a1:95:61:94:a2:28:4b:be: d5:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:A7:4F:56:00:71:9C:DA:85:0B:DF:7B:E8:9B:C4:D7:58:FE:80:D8 X509v3 Authority Key Identifier: keyid:5A:93:9B:0C:ED:38:D7:5C:C6:3E:D5:0D:6E:5C:E7:2B:BB:5B:4B:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WpObDO0411zGPtUNblznK7tbSxA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/LadPVgBxnNqFC9976JvE11j-gNg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/WpObDO0411zGPtUNblznK7tbSxA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.123.56.0/22 185.214.138.0/24 193.56.164.0/22 212.119.52.0/22 Signature Algorithm: sha256WithRSAEncryption 6c:d5:76:c7:9a:05:85:1f:57:b6:21:df:fb:df:28:30:ac:6b: 1c:bc:51:37:14:02:52:48:44:60:0c:f0:89:97:45:82:0b:96: 8d:30:1f:ea:af:6b:34:57:a1:d0:3b:46:16:a6:3b:16:ef:09: fc:2d:40:4d:a8:17:c8:23:04:a0:7d:22:43:f6:8f:e6:03:be: 17:64:2b:d2:07:ef:43:30:3a:90:49:80:29:b1:0a:ac:64:8b: 31:64:4f:16:35:09:9b:75:7c:fb:9a:2e:d8:98:3b:0f:56:81: f6:a2:db:e7:92:3b:f0:17:20:7f:b6:cd:39:57:3e:4f:49:e0: 20:b4:72:da:12:0e:35:57:39:55:60:f8:b0:43:e0:8d:6c:2d: 9e:a5:05:29:f9:3d:76:4e:69:66:bc:96:1d:a9:3a:45:5e:81: f5:e3:c2:3c:71:67:d2:77:c3:68:6c:2f:c2:48:6e:1f:ab:f6: 78:e7:87:ea:d5:1b:eb:9f:83:b8:24:53:dc:b4:92:4f:7d:e8: 5b:ae:3a:df:58:2d:66:8d:2d:d8:85:5f:45:60:b4:3d:c8:2a: 6c:1f:36:19:b2:a3:ea:f0:0c:b7:27:89:61:1e:d9:98:de:9d: c3:bb:28:5b:33:cd:d0:15:6d:d3:d0:07:ff:3c:20:ff:ff:fd: 2f:1d:54:e6 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt7o8jsp2pAuNTsbivpBArzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhOTM5YjBjZWQzOGQ3NWNjNjNlZDUwZDZlNWNlNzJiYmI1 YjRiMTAwHhcNMjYwMTAxMjIxODA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZGE3NGY1NjAwNzE5Y2RhODUwYmRmN2JlODliYzRkNzU4ZmU4MGQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwrhRu/Sh42VzjOFU1MChElEFjwMc 7tqIZOTV9vArpZstM699WRIfoppWzlTzDJyZHjMNkbvx/1hUfYXhaFewHZzya8F3 xKyn1Y0Fkj2PIMZWAWg63XXC2uaLVNbB+D7XDyKcGIKX2jY/CYtLuhZvrLUmemMl M0+69az+Iv9l4P+XDzCV8BJHc+YqYamPT6s+R35kwjFMyxXydV+QyJWH8yvLCoCj i404jpeLEifhcHFPl/5xk1d8BjRxZJ4mzh/jB6tPX46+nVOqgU6mpvqcU7cC43YA Jo2a6sGOtVXAKdednuCSByvzgz77+k/UjRRb3zioZRyFoZVhlKIoS77VXwIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFC2nT1YAcZzahQvfe+ibxNdY/oDYMB8GA1UdIwQY MBaAFFqTmwztONdcxj7VDW5c5yu7W0sQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV3BPYkRPMDQxMXpHUHRVTmJsem5LN3RiU3hBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC9iZWExNGEtMGQzMi00YWE3LWI4OTgt ZDYwYjNiNmNjYTZlLzEvTGFkUFZnQnhuTnFGQzk5NzZKdkUxMWotZ05nLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NC9iZWExNGEtMGQzMi00YWE3LWI4OTgtZDYwYjNiNmNjYTZl LzEvV3BPYkRPMDQxMXpHUHRVTmJsem5LN3RiU3hBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQCuXs4AwQA udaKAwQCwTikAwQC1Hc0MA0GCSqGSIb3DQEBCwUAA4IBAQBs1XbHmgWFH1e2Id/7 3ygwrGscvFE3FAJSSERgDPCJl0WCC5aNMB/qr2s0V6HQO0YWpjsW7wn8LUBNqBfI IwSgfSJD9o/mA74XZCvSB+9DMDqQSYApsQqsZIsxZE8WNQmbdXz7mi7YmDsPVoH2 otvnkjvwFyB/ts05Vz5PSeAgtHLaEg41VzlVYPiwQ+CNbC2epQUp+T12TmlmvJYd qTpFXoH148I8cWfSd8NobC/CSG4fq/Z454fq1Rvrn4O4JFPctJJPfehbrjrfWC1m jS3YhV9FYLQ9yCpsHzYZsqPq8Ay3J4lhHtmY3p3DuyhbM83QFW3T0Af/PCD///0v HVTm -----END CERTIFICATE-----Generated at Sun Jan 25 23:32:48 2026 by rpki-client