This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/325b84-2ed4-4092-906c-100eed812c40/1/lplNqf06vua3DkgbqqhwRpQX5y4.roa File: lplNqf06vua3DkgbqqhwRpQX5y4.roa (raw, json) Hash identifier: yaa0RKonl28mWEtrN2B7tlLyBAqCTM4woPMQSkOo7wE= Subject key identifier: 96:99:4D:A9:FD:3A:BE:E6:B7:0E:48:1B:AA:A8:70:46:94:17:E7:2E Certificate issuer: /CN=a62f2d3c269d935227690b28b7fbdd953e1e9edc Certificate serial: 019B7BA518C656AB841B9643588E7851373C Authority key identifier: A6:2F:2D:3C:26:9D:93:52:27:69:0B:28:B7:FB:DD:95:3E:1E:9E:DC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pi8tPCadk1InaQsot_vdlT4entw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/325b84-2ed4-4092-906c-100eed812c40/1/lplNqf06vua3DkgbqqhwRpQX5y4.roa Signing time: Thu 01 Jan 2026 22:19:35 +0000 ROA not before: Thu 01 Jan 2026 22:19:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3215 IP address blocks: 185.42.232.0/24 maxlen: 24 185.42.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/325b84-2ed4-4092-906c-100eed812c40/1/pi8tPCadk1InaQsot_vdlT4entw.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/325b84-2ed4-4092-906c-100eed812c40/1/pi8tPCadk1InaQsot_vdlT4entw.mft rsync://rpki.ripe.net/repository/DEFAULT/pi8tPCadk1InaQsot_vdlT4entw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:18:c6:56:ab:84:1b:96:43:58:8e:78:51:37:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a62f2d3c269d935227690b28b7fbdd953e1e9edc Validity Not Before: Jan 1 22:19:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=96994da9fd3abee6b70e481baaa870469417e72e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:25:75:84:80:36:df:63:67:5a:da:3b:7f:90: 29:de:3d:dc:c9:46:3f:32:0e:be:a2:aa:54:77:4a: 8f:2d:b6:e6:0a:4f:4e:28:11:e5:66:9f:03:1a:4e: af:9e:fe:d3:71:d2:30:fc:da:ad:34:b4:19:d2:71: fe:19:7d:e9:48:a8:4c:c3:c2:b8:25:31:1b:e6:a3: 13:65:6c:a6:9e:21:6b:22:c9:02:c2:a9:e7:6f:20: f6:31:e1:81:56:b6:ae:d0:44:fe:4e:b8:1a:62:7f: 89:6c:26:e0:0f:8c:9e:b8:6c:e3:46:57:ca:9b:c7: 79:5d:41:da:0d:8c:b7:07:ad:75:06:5d:86:c4:77: 7d:70:99:92:08:97:de:5f:c4:86:11:f4:19:6c:6c: 87:cd:61:49:f1:7f:1a:4e:94:08:b9:20:ef:8e:36: 5f:64:62:46:cb:bd:f7:cc:8c:c1:7f:70:4e:25:dc: 5c:9d:00:f3:b0:1a:1c:04:33:26:5a:0a:ac:b6:48: bf:fd:37:01:a2:27:86:c6:72:95:5c:47:33:96:9c: fa:b0:94:bc:18:f2:1d:a4:cb:8a:07:2b:10:df:1b: 84:36:40:f3:c9:d7:c4:b0:92:5d:ca:50:53:3d:5a: 59:11:99:ed:c9:dd:c4:7b:c2:1d:98:08:7a:c4:08: ee:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:99:4D:A9:FD:3A:BE:E6:B7:0E:48:1B:AA:A8:70:46:94:17:E7:2E X509v3 Authority Key Identifier: keyid:A6:2F:2D:3C:26:9D:93:52:27:69:0B:28:B7:FB:DD:95:3E:1E:9E:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pi8tPCadk1InaQsot_vdlT4entw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/325b84-2ed4-4092-906c-100eed812c40/1/lplNqf06vua3DkgbqqhwRpQX5y4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/325b84-2ed4-4092-906c-100eed812c40/1/pi8tPCadk1InaQsot_vdlT4entw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.42.232.0/23 Signature Algorithm: sha256WithRSAEncryption 72:ed:74:8e:e8:43:95:b4:13:e9:fc:ee:76:30:08:d7:c1:84: aa:f3:82:7b:0e:61:b5:a8:02:6d:92:35:76:18:4e:9d:6c:a8: 90:01:ab:73:8a:11:64:f5:13:0e:04:8b:0d:ba:54:4f:d4:4e: 31:34:92:a1:a7:fa:6d:d7:23:e1:f4:90:83:92:88:ab:2b:70: 9a:a5:a8:3b:f0:d5:ca:2e:4f:29:9f:31:67:51:fe:5d:fd:02: 33:83:c4:75:07:7c:7c:f4:be:61:ae:6a:33:9f:54:c6:9d:97: 04:5d:17:8f:e5:c4:49:49:c7:54:57:97:c3:38:99:a6:dd:6a: 64:b9:e3:9c:23:63:6e:31:77:23:92:61:d8:11:41:e2:fa:e5: 9c:48:bf:ce:b1:25:67:70:eb:02:40:88:d6:f2:c7:0b:8f:8a: d2:56:5a:6f:fb:13:d5:4d:0d:cc:60:28:2b:fe:7c:16:54:0c: 78:34:75:e5:a7:a1:b3:0a:01:c5:a2:ca:fc:b7:08:b7:3d:84: cf:fa:f1:d2:52:16:aa:b6:79:a9:97:c4:99:b0:28:ff:81:a0: f8:aa:b2:fa:c3:ff:31:52:b0:6e:e9:54:bf:93:d7:ff:1f:ad: 4f:8b:f0:fb:3f:93:d1:50:b5:f1:65:05:bf:c8:00:f5:3d:22: 1f:db:54:df -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pRjGVquEG5ZDWI54UTc8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2MmYyZDNjMjY5ZDkzNTIyNzY5MGIyOGI3ZmJkZDk1M2Ux ZTllZGMwHhcNMjYwMTAxMjIxOTM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5Njk5NGRhOWZkM2FiZWU2YjcwZTQ4MWJhYWE4NzA0Njk0MTdlNzJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqyV1hIA232NnWto7f5Ap3j3cyUY/ Mg6+oqpUd0qPLbbmCk9OKBHlZp8DGk6vnv7TcdIw/NqtNLQZ0nH+GX3pSKhMw8K4 JTEb5qMTZWymniFrIskCwqnnbyD2MeGBVrau0ET+TrgaYn+JbCbgD4yeuGzjRlfK m8d5XUHaDYy3B611Bl2GxHd9cJmSCJfeX8SGEfQZbGyHzWFJ8X8aTpQIuSDvjjZf ZGJGy733zIzBf3BOJdxcnQDzsBocBDMmWgqstki//TcBoieGxnKVXEczlpz6sJS8 GPIdpMuKBysQ3xuENkDzydfEsJJdylBTPVpZEZntyd3Ee8IdmAh6xAju6QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJaZTan9Or7mtw5IG6qocEaUF+cuMB8GA1UdIwQY MBaAFKYvLTwmnZNSJ2kLKLf73ZU+Hp7cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGk4dFBDYWRrMUluYVFzb3RfdmRsVDRlbnR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS8zMjViODQtMmVkNC00MDkyLTkwNmMt MTAwZWVkODEyYzQwLzEvbHBsTnFmMDZ2dWEzRGtnYnFxaHdScFFYNXk0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS8zMjViODQtMmVkNC00MDkyLTkwNmMtMTAwZWVkODEyYzQw LzEvcGk4dFBDYWRrMUluYVFzb3RfdmRsVDRlbnR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuSroMA0G CSqGSIb3DQEBCwUAA4IBAQBy7XSO6EOVtBPp/O52MAjXwYSq84J7DmG1qAJtkjV2 GE6dbKiQAatzihFk9RMOBIsNulRP1E4xNJKhp/pt1yPh9JCDkoirK3Capag78NXK Lk8pnzFnUf5d/QIzg8R1B3x89L5hrmozn1TGnZcEXReP5cRJScdUV5fDOJmm3Wpk ueOcI2NuMXcjkmHYEUHi+uWcSL/OsSVncOsCQIjW8scLj4rSVlpv+xPVTQ3MYCgr /nwWVAx4NHXlp6GzCgHFosr8twi3PYTP+vHSUhaqtnmpl8SZsCj/gaD4qrL6w/8x UrBu6VS/k9f/H61Pi/D7P5PRULXxZQW/yAD1PSIf21Tf -----END CERTIFICATE-----Generated at Mon Jan 26 03:08:10 2026 by rpki-client