This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/LrPSDGCXp6btjjwoEJhUgSUKZ4s.roa File: LrPSDGCXp6btjjwoEJhUgSUKZ4s.roa (raw, json) Hash identifier: RgLfujHehPIjZwbtkrjllbzq9VCiHHdznMUzfj6na44= Subject key identifier: 2E:B3:D2:0C:60:97:A7:A6:ED:8E:3C:28:10:98:54:81:25:0A:67:8B Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59 Certificate serial: 019B77595CBB81E372A99D84322B6BBA336A Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/LrPSDGCXp6btjjwoEJhUgSUKZ4s.roa Signing time: Thu 01 Jan 2026 02:18:23 +0000 ROA not before: Thu 01 Jan 2026 02:18:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59765 IP address blocks: 188.214.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.mft rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:5c:bb:81:e3:72:a9:9d:84:32:2b:6b:ba:33:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59 Validity Not Before: Jan 1 02:18:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2eb3d20c6097a7a6ed8e3c2810985481250a678b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:1e:7c:3a:ca:12:f7:e9:39:a3:8b:5a:e8:b6: 89:91:52:1e:fe:0a:9a:98:1e:ce:bd:7c:e7:1e:7e: 29:e1:ab:86:eb:bc:2e:94:f2:67:16:94:be:49:d1: c4:d3:b1:fc:5e:11:3b:e9:87:a0:f5:16:9d:75:37: 07:59:51:da:f5:bd:cb:5d:9e:5e:29:d3:e2:03:0b: d7:59:84:ba:66:6a:96:7a:57:55:42:3d:74:c2:e3: fc:a7:18:b9:20:fc:71:e9:1d:6a:db:64:9b:bf:9a: a4:92:ad:1e:4d:cc:8a:48:d2:5c:40:cc:08:43:8e: 1b:be:b8:e1:03:a7:eb:20:db:0c:a0:61:ff:17:86: b0:bb:fd:af:88:4c:4d:4d:32:00:9d:29:20:52:76: 23:bb:b9:e4:cd:7e:4f:c5:32:0d:08:f7:35:7c:94: c2:ad:31:58:0e:f4:80:c0:a6:6f:98:59:2b:be:07: 22:a6:23:23:62:e4:6e:e6:e2:10:e7:e3:78:20:e5: 6a:13:d0:97:32:ed:97:51:9f:a2:da:f3:d7:ea:5d: f6:43:d7:9c:64:a8:03:0c:53:49:df:e6:d6:75:47: f4:16:cc:71:e7:d3:c9:ff:27:f4:9f:3d:97:91:ab: 5f:64:8c:af:e0:f4:b8:d4:f8:a8:8d:f4:4e:e5:5a: 45:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:B3:D2:0C:60:97:A7:A6:ED:8E:3C:28:10:98:54:81:25:0A:67:8B X509v3 Authority Key Identifier: keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/LrPSDGCXp6btjjwoEJhUgSUKZ4s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.214.111.0/24 Signature Algorithm: sha256WithRSAEncryption 46:28:27:76:82:75:3c:06:90:a3:c3:6f:fd:0b:b7:d2:24:4a: b5:2d:2f:4f:2b:5c:25:4e:73:94:5c:d9:e8:da:94:1a:44:eb: 2e:e4:d5:06:0f:dc:aa:85:a6:ef:f1:6a:d7:22:3f:9d:08:62: 4b:cf:cc:dd:5e:89:7a:5e:aa:3d:9b:91:a0:b6:6b:ca:c0:6c: 20:8e:4b:02:b7:58:7e:c9:59:82:0b:cb:62:63:42:05:35:9f: 99:d1:d4:72:da:21:e4:f8:1b:c8:23:e7:a5:c9:49:67:3a:db: 2a:c7:6f:d4:93:b7:80:23:1b:d3:ae:4b:12:ce:6e:f8:ce:99: fc:b8:98:f4:4f:fd:c6:27:0d:69:03:db:21:36:26:01:89:0c: 52:c7:e3:fe:6d:3a:b4:30:f1:53:45:bc:ac:b5:4c:42:9c:f8: 37:aa:6f:bd:fd:74:37:8d:c7:86:70:85:43:64:0d:87:8e:b5: a4:7b:e6:8f:c6:8c:21:30:9f:bc:9a:bc:ed:78:f0:6b:3f:77: 6c:e4:0d:03:db:ca:5c:3d:cf:e8:0e:6b:e0:e9:c1:85:64:e1: 93:4c:e5:dd:8c:e2:61:da:d5:b1:7c:08:69:d7:66:07:1b:c5: 16:49:05:df:4c:74:e1:65:d0:6f:0c:45:fa:64:3b:19:e5:b1: d7:c7:cf:9a -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt3WVy7geNyqZ2EMitrujNqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4ZTYyNjM0ZTFiZDUxMzNhOWRlNDUxMmFlOThjYWQxYjIy MTliNTkwHhcNMjYwMTAxMDIxODIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZWIzZDIwYzYwOTdhN2E2ZWQ4ZTNjMjgxMDk4NTQ4MTI1MGE2NzhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoB58OsoS9+k5o4ta6LaJkVIe/gqa mB7OvXznHn4p4auG67wulPJnFpS+SdHE07H8XhE76Yeg9RaddTcHWVHa9b3LXZ5e KdPiAwvXWYS6ZmqWeldVQj10wuP8pxi5IPxx6R1q22Sbv5qkkq0eTcyKSNJcQMwI Q44bvrjhA6frINsMoGH/F4awu/2viExNTTIAnSkgUnYju7nkzX5PxTINCPc1fJTC rTFYDvSAwKZvmFkrvgcipiMjYuRu5uIQ5+N4IOVqE9CXMu2XUZ+i2vPX6l32Q9ec ZKgDDFNJ3+bWdUf0Fsxx59PJ/yf0nz2XkatfZIyv4PS41PiojfRO5VpFHQIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFC6z0gxgl6em7Y48KBCYVIElCmeLMB8GA1UdIwQY MBaAFPjmJjThvVEzqd5FEq6YytGyIZtZMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1PWW1OT0c5VVRPcDNrVVNycGpLMGJJaG0xay5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzgvZGEzMzk4LTY2OTgtNDVmMi1iYWFl LTkyZTI1ZmUxNjMzMS8xL0xyUFNER0NYcDZidGpqd29FSmhVZ1NVS1o0cy5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNzgvZGEzMzk4LTY2OTgtNDVmMi1iYWFlLTkyZTI1ZmUxNjMz MS8xLzEtT1ltTk9HOVVUT3Aza1VTcnBqSzBiSWhtMWsuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC81m8w DQYJKoZIhvcNAQELBQADggEBAEYoJ3aCdTwGkKPDb/0Lt9IkSrUtL08rXCVOc5Rc 2ejalBpE6y7k1QYP3KqFpu/xatciP50IYkvPzN1eiXpeqj2bkaC2a8rAbCCOSwK3 WH7JWYILy2JjQgU1n5nR1HLaIeT4G8gj56XJSWc62yrHb9STt4AjG9OuSxLObvjO mfy4mPRP/cYnDWkD2yE2JgGJDFLH4/5tOrQw8VNFvKy1TEKc+Deqb739dDeNx4Zw hUNkDYeOtaR75o/GjCEwn7yavO148Gs/d2zkDQPbylw9z+gOa+DpwYVk4ZNM5d2M 4mHa1bF8CGnXZgcbxRZJBd9MdOFl0G8MRfpkOxnlsdfHz5o= -----END CERTIFICATE-----Generated at Sun Jan 25 16:13:25 2026 by rpki-client