This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/91b093-acb7-4cb7-bf8f-5cb934a55b0d/1/LO7eXF6OcCBWRqiHSI58WfsNfTc.roa File: LO7eXF6OcCBWRqiHSI58WfsNfTc.roa (raw, json) Hash identifier: kS9qCezSVg1pWa1B2LuRlgPBMoX60MqXPWVZsOzHZq8= Subject key identifier: 2C:EE:DE:5C:5E:8E:70:20:56:46:A8:87:48:8E:7C:59:FB:0D:7D:37 Certificate issuer: /CN=6511ce5e2f53b7bb8cac8f39e294e89a45b20029 Certificate serial: 019B78A2119AE303002557DABF562F9E2964 Authority key identifier: 65:11:CE:5E:2F:53:B7:BB:8C:AC:8F:39:E2:94:E8:9A:45:B2:00:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZRHOXi9Tt7uMrI854pTomkWyACk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/91b093-acb7-4cb7-bf8f-5cb934a55b0d/1/LO7eXF6OcCBWRqiHSI58WfsNfTc.roa Signing time: Thu 01 Jan 2026 08:17:25 +0000 ROA not before: Thu 01 Jan 2026 08:17:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199522 IP address blocks: 84.244.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/91b093-acb7-4cb7-bf8f-5cb934a55b0d/1/ZRHOXi9Tt7uMrI854pTomkWyACk.crl rsync://rpki.ripe.net/repository/DEFAULT/85/91b093-acb7-4cb7-bf8f-5cb934a55b0d/1/ZRHOXi9Tt7uMrI854pTomkWyACk.mft rsync://rpki.ripe.net/repository/DEFAULT/ZRHOXi9Tt7uMrI854pTomkWyACk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:11:9a:e3:03:00:25:57:da:bf:56:2f:9e:29:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6511ce5e2f53b7bb8cac8f39e294e89a45b20029 Validity Not Before: Jan 1 08:17:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2ceede5c5e8e70205646a887488e7c59fb0d7d37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:60:04:a4:e4:dc:50:16:c0:6a:7e:3d:74:ba: d5:ed:a4:a1:e8:78:78:6b:da:01:2d:d0:83:c4:fd: 09:f3:94:47:cd:7e:aa:f8:53:bc:b8:2c:fd:b7:fb: 75:59:53:40:8a:b8:68:f3:e1:2a:57:91:4e:17:51: a7:f8:23:e6:15:6a:85:9e:06:6e:fb:b2:3f:79:db: f0:33:89:01:8c:65:a0:6e:09:16:dd:19:bb:fb:15: 12:91:59:9c:42:cf:1d:d1:1c:25:22:ed:20:26:2c: 9a:ab:f5:e4:fb:6f:f4:42:3d:e5:86:8e:71:ed:97: 5e:81:ad:3e:94:1c:a3:5f:57:ae:bd:df:0e:e0:e3: e6:7d:b0:60:d0:28:1c:cc:1f:e3:aa:8e:12:22:de: ea:be:27:54:a3:0e:e0:a8:f6:68:70:70:b0:91:c0: c5:e4:4b:2e:5d:f0:04:c8:cb:34:10:3f:3c:e1:0a: 7f:45:77:e1:27:6c:09:83:ec:ec:f9:c2:fe:b9:2d: 7b:b2:8e:db:81:6c:ac:41:9e:07:b5:9d:4f:e3:72: 2c:d7:6f:e0:d1:9d:22:7e:5d:87:21:81:1e:0a:7b: 7d:1e:4f:2a:59:e7:9d:cd:c2:b2:89:ea:35:45:97: c6:79:89:48:60:4b:cb:5c:b8:e6:b6:bc:3b:19:59: 09:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:EE:DE:5C:5E:8E:70:20:56:46:A8:87:48:8E:7C:59:FB:0D:7D:37 X509v3 Authority Key Identifier: keyid:65:11:CE:5E:2F:53:B7:BB:8C:AC:8F:39:E2:94:E8:9A:45:B2:00:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZRHOXi9Tt7uMrI854pTomkWyACk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/91b093-acb7-4cb7-bf8f-5cb934a55b0d/1/LO7eXF6OcCBWRqiHSI58WfsNfTc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/85/91b093-acb7-4cb7-bf8f-5cb934a55b0d/1/ZRHOXi9Tt7uMrI854pTomkWyACk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.244.172.0/24 Signature Algorithm: sha256WithRSAEncryption 43:1f:af:29:f8:e8:5a:46:3f:88:34:b0:10:e9:96:28:8d:02: 05:b7:c2:10:4f:21:a9:b5:c6:7d:86:cc:d3:40:01:68:d5:43: 9e:4d:d9:ed:1a:6d:66:42:af:42:48:15:3a:21:8b:18:07:71: 70:46:51:2b:2e:fe:12:7a:57:50:f9:e6:16:af:18:fa:0d:82: aa:f8:36:7c:59:6b:47:27:ba:25:16:d6:ad:a2:5a:93:48:49: c2:0f:e7:2c:5e:3f:73:7b:ba:c6:11:79:c6:11:c2:f5:c5:ed: 18:e5:45:96:13:ef:e9:fa:00:c2:9b:34:56:1d:f5:18:da:ea: 95:41:72:5d:a8:89:ec:9a:31:83:c2:db:30:41:5d:87:6d:f3: c8:41:81:42:75:30:d4:c6:03:8f:50:92:5f:54:af:e0:be:a3: 29:ff:4a:5e:85:23:1d:00:97:83:5f:4b:0b:e0:b8:27:2d:a9: 90:91:fe:4e:71:86:e2:81:65:4e:65:ef:24:10:ac:4c:d2:e4: 47:d3:fd:d5:89:6b:2c:a0:23:04:c5:47:f3:03:fe:01:9b:ff: dc:44:d6:c8:49:61:c9:e4:a6:7d:bd:20:51:ac:5d:15:12:2e: f3:f7:60:74:6a:d5:d2:f9:0f:49:12:d8:40:76:cc:3e:88:f5: d6:38:66:2b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4ohGa4wMAJVfav1YvnilkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1MTFjZTVlMmY1M2I3YmI4Y2FjOGYzOWUyOTRlODlhNDVi MjAwMjkwHhcNMjYwMTAxMDgxNzI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyY2VlZGU1YzVlOGU3MDIwNTY0NmE4ODc0ODhlN2M1OWZiMGQ3ZDM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu2AEpOTcUBbAan49dLrV7aSh6Hh4 a9oBLdCDxP0J85RHzX6q+FO8uCz9t/t1WVNAirho8+EqV5FOF1Gn+CPmFWqFngZu +7I/edvwM4kBjGWgbgkW3Rm7+xUSkVmcQs8d0RwlIu0gJiyaq/Xk+2/0Qj3lho5x 7Zdega0+lByjX1euvd8O4OPmfbBg0CgczB/jqo4SIt7qvidUow7gqPZocHCwkcDF 5EsuXfAEyMs0ED884Qp/RXfhJ2wJg+zs+cL+uS17so7bgWysQZ4HtZ1P43Is12/g 0Z0ifl2HIYEeCnt9Hk8qWeedzcKyieo1RZfGeYlIYEvLXLjmtrw7GVkJ1wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCzu3lxejnAgVkaoh0iOfFn7DX03MB8GA1UdIwQY MBaAFGURzl4vU7e7jKyPOeKU6JpFsgApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWlJIT1hpOVR0N3VNckk4NTRwVG9ta1d5QUNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS85MWIwOTMtYWNiNy00Y2I3LWJmOGYt NWNiOTM0YTU1YjBkLzEvTE83ZVhGNk9jQ0JXUnFpSFNJNThXZnNOZlRjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NS85MWIwOTMtYWNiNy00Y2I3LWJmOGYtNWNiOTM0YTU1YjBk LzEvWlJIT1hpOVR0N3VNckk4NTRwVG9ta1d5QUNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVPSsMA0G CSqGSIb3DQEBCwUAA4IBAQBDH68p+OhaRj+INLAQ6ZYojQIFt8IQTyGptcZ9hszT QAFo1UOeTdntGm1mQq9CSBU6IYsYB3FwRlErLv4SeldQ+eYWrxj6DYKq+DZ8WWtH J7olFtatolqTSEnCD+csXj9ze7rGEXnGEcL1xe0Y5UWWE+/p+gDCmzRWHfUY2uqV QXJdqInsmjGDwtswQV2HbfPIQYFCdTDUxgOPUJJfVK/gvqMp/0pehSMdAJeDX0sL 4LgnLamQkf5OcYbigWVOZe8kEKxM0uRH0/3ViWssoCMExUfzA/4Bm//cRNbISWHJ 5KZ9vSBRrF0VEi7z92B0atXS+Q9JEthAdsw+iPXWOGYr -----END CERTIFICATE-----Generated at Mon Jan 26 02:18:37 2026 by rpki-client