This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/87d48a-fa27-4b93-b4e8-b539d6cea6e1/1/lCTE0e6511lXYUV4jzoQANe1D0c.roa File: lCTE0e6511lXYUV4jzoQANe1D0c.roa (raw, json) Hash identifier: duBHYLft9CmJTD9gy5FmFbBDQw9Rjhhhi+M/Mn6KU3Y= Subject key identifier: 94:24:C4:D1:EE:B9:D7:59:57:61:45:78:8F:3A:10:00:D7:B5:0F:47 Certificate issuer: /CN=bf7a0258a521e99d213fb30e79667e584e37c7db Certificate serial: 019B77C73B217AF734E083B6A67DA265FD83 Authority key identifier: BF:7A:02:58:A5:21:E9:9D:21:3F:B3:0E:79:66:7E:58:4E:37:C7:DB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v3oCWKUh6Z0hP7MOeWZ-WE43x9s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/87d48a-fa27-4b93-b4e8-b539d6cea6e1/1/lCTE0e6511lXYUV4jzoQANe1D0c.roa Signing time: Thu 01 Jan 2026 04:18:24 +0000 ROA not before: Thu 01 Jan 2026 04:18:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12480 IP address blocks: 194.172.58.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/87d48a-fa27-4b93-b4e8-b539d6cea6e1/1/v3oCWKUh6Z0hP7MOeWZ-WE43x9s.crl rsync://rpki.ripe.net/repository/DEFAULT/88/87d48a-fa27-4b93-b4e8-b539d6cea6e1/1/v3oCWKUh6Z0hP7MOeWZ-WE43x9s.mft rsync://rpki.ripe.net/repository/DEFAULT/v3oCWKUh6Z0hP7MOeWZ-WE43x9s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:3b:21:7a:f7:34:e0:83:b6:a6:7d:a2:65:fd:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf7a0258a521e99d213fb30e79667e584e37c7db Validity Not Before: Jan 1 04:18:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9424c4d1eeb9d759576145788f3a1000d7b50f47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:3b:63:04:9f:65:ba:84:ee:cf:57:10:14:47: ad:c1:51:17:39:3a:6b:dd:9d:7f:53:30:fd:aa:7a: e0:32:bc:f4:ac:4e:d2:11:71:82:82:e3:9b:42:20: 57:41:0f:64:d0:1f:c3:e0:9f:b4:99:e9:ec:28:8b: 84:86:36:4f:72:72:c4:99:61:5a:0e:dd:a0:cb:ea: 95:46:a1:66:62:51:ce:88:50:05:cb:c3:41:59:65: de:9c:d7:1f:d9:1d:41:db:d4:9d:2f:24:c6:71:2b: 34:4e:8c:fe:e4:4e:7c:58:27:18:63:d9:0a:ca:39: 6d:91:db:43:47:08:59:6e:15:94:8c:86:fc:1b:13: d0:d3:97:98:aa:e0:77:91:1e:67:fe:08:97:b7:83: 4f:ec:3d:ff:52:f1:70:85:e3:a3:be:53:f9:23:d3: 86:f0:4e:65:e5:36:2f:7b:5a:b9:77:a3:45:df:60: 56:71:57:cf:90:c2:c2:46:2b:ea:62:11:9e:de:8e: ef:d3:7c:0f:b3:95:8b:85:75:a4:09:01:f3:1e:44: d6:0c:c5:bc:0a:38:fd:56:62:79:04:44:b6:4d:0d: 19:54:39:0c:e7:bd:c6:f5:6e:eb:d8:5f:6a:db:26: 39:2b:f4:24:1f:7f:ca:10:39:92:f0:b7:96:a2:c3: d3:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:24:C4:D1:EE:B9:D7:59:57:61:45:78:8F:3A:10:00:D7:B5:0F:47 X509v3 Authority Key Identifier: keyid:BF:7A:02:58:A5:21:E9:9D:21:3F:B3:0E:79:66:7E:58:4E:37:C7:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v3oCWKUh6Z0hP7MOeWZ-WE43x9s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/87d48a-fa27-4b93-b4e8-b539d6cea6e1/1/lCTE0e6511lXYUV4jzoQANe1D0c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/88/87d48a-fa27-4b93-b4e8-b539d6cea6e1/1/v3oCWKUh6Z0hP7MOeWZ-WE43x9s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.172.58.0/24 Signature Algorithm: sha256WithRSAEncryption 6a:1b:74:7a:ea:12:1b:ba:b7:9b:08:06:47:c1:e9:71:50:ca: df:e7:03:95:7f:cc:0a:fe:34:f5:fc:d1:0d:96:74:a9:14:5f: 44:52:a5:10:42:bb:e3:a8:ed:c2:d2:53:26:ba:fb:65:21:85: ae:63:48:a4:51:f9:63:85:cf:88:1a:33:8d:b7:f6:61:4e:d6: 8d:ee:28:80:ce:be:2a:61:26:a8:ad:9d:10:c5:40:10:42:2a: eb:5f:02:9a:7a:ab:68:9d:3a:9d:40:c2:e7:3d:d3:a4:3f:76: 9d:73:df:5e:94:cf:22:f3:52:83:96:49:f9:36:a5:46:33:36: f0:d9:46:8b:cb:b9:56:ba:41:c6:4d:85:37:b0:c4:40:1e:8a: e7:3f:4a:3e:4d:a5:5d:a2:8d:aa:ee:93:6a:e8:eb:43:e3:1c: 2e:95:2b:c0:3d:19:83:f2:ca:88:26:6f:51:a5:93:0f:5d:1f: ce:11:25:a5:c7:db:a0:78:5e:02:bb:bf:44:7f:68:cf:e0:02: 7e:82:83:cf:54:3f:05:cb:bf:d5:01:2c:05:14:38:2e:3a:95: e0:e4:ce:ac:0a:1e:e7:5f:e7:e5:21:d5:2f:59:fc:66:0d:0d: 3d:3f:5b:94:65:2a:84:29:be:dd:26:dd:5e:1d:ec:08:89:1a: 98:79:25:22 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xzshevc04IO2pn2iZf2DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmN2EwMjU4YTUyMWU5OWQyMTNmYjMwZTc5NjY3ZTU4NGUz N2M3ZGIwHhcNMjYwMTAxMDQxODI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NDI0YzRkMWVlYjlkNzU5NTc2MTQ1Nzg4ZjNhMTAwMGQ3YjUwZjQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmTtjBJ9luoTuz1cQFEetwVEXOTpr 3Z1/UzD9qnrgMrz0rE7SEXGCguObQiBXQQ9k0B/D4J+0mensKIuEhjZPcnLEmWFa Dt2gy+qVRqFmYlHOiFAFy8NBWWXenNcf2R1B29SdLyTGcSs0Toz+5E58WCcYY9kK yjltkdtDRwhZbhWUjIb8GxPQ05eYquB3kR5n/giXt4NP7D3/UvFwheOjvlP5I9OG 8E5l5TYve1q5d6NF32BWcVfPkMLCRivqYhGe3o7v03wPs5WLhXWkCQHzHkTWDMW8 Cjj9VmJ5BES2TQ0ZVDkM573G9W7r2F9q2yY5K/QkH3/KEDmS8LeWosPT8QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJQkxNHuuddZV2FFeI86EADXtQ9HMB8GA1UdIwQY MBaAFL96AlilIemdIT+zDnlmflhON8fbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdjNvQ1dLVWg2WjBoUDdNT2VXWi1XRTQzeDlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC84N2Q0OGEtZmEyNy00YjkzLWI0ZTgt YjUzOWQ2Y2VhNmUxLzEvbENURTBlNjUxMWxYWVVWNGp6b1FBTmUxRDBjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OC84N2Q0OGEtZmEyNy00YjkzLWI0ZTgtYjUzOWQ2Y2VhNmUx LzEvdjNvQ1dLVWg2WjBoUDdNT2VXWi1XRTQzeDlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwqw6MA0G CSqGSIb3DQEBCwUAA4IBAQBqG3R66hIburebCAZHwelxUMrf5wOVf8wK/jT1/NEN lnSpFF9EUqUQQrvjqO3C0lMmuvtlIYWuY0ikUfljhc+IGjONt/ZhTtaN7iiAzr4q YSaorZ0QxUAQQirrXwKaeqtonTqdQMLnPdOkP3adc99elM8i81KDlkn5NqVGMzbw 2UaLy7lWukHGTYU3sMRAHornP0o+TaVdoo2q7pNq6OtD4xwulSvAPRmD8sqIJm9R pZMPXR/OESWlx9ugeF4Cu79Ef2jP4AJ+goPPVD8Fy7/VASwFFDguOpXg5M6sCh7n X+flIdUvWfxmDQ09P1uUZSqEKb7dJt1eHewIiRqYeSUi -----END CERTIFICATE-----Generated at Sun Jan 25 19:16:17 2026 by rpki-client