This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/f9d8d0-cc02-4abf-99bb-e018da53d129/1/0lsa2lsdRbGhXDlBoxyUzEcvTkw.roa File: 0lsa2lsdRbGhXDlBoxyUzEcvTkw.roa (raw, json) Hash identifier: TZA+evGUSrxkMyqk95k24o509cA93t42uHVcHnI4ehI= Subject key identifier: D2:5B:1A:DA:5B:1D:45:B1:A1:5C:39:41:A3:1C:94:CC:47:2F:4E:4C Certificate issuer: /CN=ce43fe94da4aef7adfb1c162875af1cac7cba4b1 Certificate serial: 019B7F84948FF3417428826EDB5C14AEDDAF Authority key identifier: CE:43:FE:94:DA:4A:EF:7A:DF:B1:C1:62:87:5A:F1:CA:C7:CB:A4:B1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zkP-lNpK73rfscFih1rxysfLpLE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/f9d8d0-cc02-4abf-99bb-e018da53d129/1/0lsa2lsdRbGhXDlBoxyUzEcvTkw.roa Signing time: Fri 02 Jan 2026 16:22:33 +0000 ROA not before: Fri 02 Jan 2026 16:22:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48544 IP address blocks: 185.86.200.0/23 maxlen: 24 185.86.202.0/24 maxlen: 24 185.86.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/f9d8d0-cc02-4abf-99bb-e018da53d129/1/zkP-lNpK73rfscFih1rxysfLpLE.crl rsync://rpki.ripe.net/repository/DEFAULT/8f/f9d8d0-cc02-4abf-99bb-e018da53d129/1/zkP-lNpK73rfscFih1rxysfLpLE.mft rsync://rpki.ripe.net/repository/DEFAULT/zkP-lNpK73rfscFih1rxysfLpLE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 07:01:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:94:8f:f3:41:74:28:82:6e:db:5c:14:ae:dd:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ce43fe94da4aef7adfb1c162875af1cac7cba4b1 Validity Not Before: Jan 2 16:22:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d25b1ada5b1d45b1a15c3941a31c94cc472f4e4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:6f:ae:95:aa:c5:fc:a0:01:da:66:c6:4c:cc: 89:19:90:f7:95:34:b5:37:a3:e2:0f:8e:3b:82:65: 94:64:9a:f7:20:10:3c:52:88:20:dc:2d:8f:25:b4: 6c:e4:d1:f4:0a:fe:92:be:bd:e9:24:fd:f6:7f:e5: 49:5c:67:d5:2d:c8:8f:3e:1e:9c:23:53:81:81:0a: 83:5d:41:c1:5b:80:eb:e9:52:71:65:7b:64:fb:71: 2e:3e:c1:1d:84:3d:93:96:ee:47:ec:ad:5a:e2:cd: 30:e8:50:5a:6d:24:ee:f2:ac:18:80:6c:64:c0:12: 37:2c:b3:fd:c6:3f:ff:3c:9c:71:12:a0:f7:e5:45: 75:5c:35:44:40:77:fd:78:d2:b1:b8:3c:b4:3d:a2: bf:ec:c0:d0:e8:66:c1:ce:6e:aa:41:fa:aa:cb:b1: 8d:bf:2e:cf:15:4b:25:53:59:77:76:2c:fb:70:7a: f5:d9:36:91:c4:5d:24:6c:d7:0e:8f:74:ad:eb:2f: 6f:54:10:5e:a5:3d:a4:e9:0e:68:11:88:33:14:f5: a5:a8:57:43:18:11:1b:c9:2f:19:91:60:4f:ef:0f: a8:14:dc:54:c9:41:1f:d3:fe:79:3b:a9:4c:e3:fa: 1e:83:5c:e7:be:b9:0f:6d:14:9c:8a:55:03:42:a9: 9f:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:5B:1A:DA:5B:1D:45:B1:A1:5C:39:41:A3:1C:94:CC:47:2F:4E:4C X509v3 Authority Key Identifier: keyid:CE:43:FE:94:DA:4A:EF:7A:DF:B1:C1:62:87:5A:F1:CA:C7:CB:A4:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zkP-lNpK73rfscFih1rxysfLpLE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/f9d8d0-cc02-4abf-99bb-e018da53d129/1/0lsa2lsdRbGhXDlBoxyUzEcvTkw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/f9d8d0-cc02-4abf-99bb-e018da53d129/1/zkP-lNpK73rfscFih1rxysfLpLE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.86.200.0/22 Signature Algorithm: sha256WithRSAEncryption 27:27:27:4e:bc:80:48:13:13:8f:f3:03:71:b4:66:7f:3d:af: 2c:7a:d0:57:0f:58:4e:9f:1d:5d:ef:98:21:fe:8d:f6:26:89: 01:4b:f9:a2:23:4b:99:ba:ff:81:5b:0e:31:da:77:bc:57:8e: d0:0f:6c:b6:ba:15:71:31:20:f0:65:22:39:eb:05:bb:98:6f: 2e:de:97:09:50:c9:b7:51:1e:c1:29:1a:b4:ff:8c:de:c9:70: 60:f0:97:18:30:04:8a:35:46:a6:c4:58:56:85:4c:26:6d:11: 53:26:59:74:9b:25:a9:a2:ac:8f:76:58:8c:19:73:bf:e0:a1: 2c:4a:f5:05:86:b5:8b:e2:d4:d3:bf:c5:07:ed:de:93:86:44: 94:92:79:ed:ff:ee:3f:dd:fc:e3:6e:ac:e7:3c:cf:1c:d7:6f: 08:82:fc:ad:96:5e:28:96:a9:7e:37:c2:6c:81:0b:f5:d2:48: d0:39:d4:f9:9a:97:16:47:4d:5e:40:d8:e8:a9:10:26:8c:a8: e0:1d:de:53:30:7c:68:e6:35:49:b5:d1:5d:aa:da:c7:5c:11: ef:6f:c6:5a:52:5d:b4:7c:55:70:f1:c4:de:f6:69:2c:e2:bb: 9e:50:99:3e:cf:e0:bb:60:b8:f9:f8:42:b8:e1:35:70:7b:60: 59:43:2e:07 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hJSP80F0KIJu21wUrt2vMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlNDNmZTk0ZGE0YWVmN2FkZmIxYzE2Mjg3NWFmMWNhYzdj YmE0YjEwHhcNMjYwMTAyMTYyMjMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMjViMWFkYTViMWQ0NWIxYTE1YzM5NDFhMzFjOTRjYzQ3MmY0ZTRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAum+ularF/KAB2mbGTMyJGZD3lTS1 N6PiD447gmWUZJr3IBA8Uogg3C2PJbRs5NH0Cv6Svr3pJP32f+VJXGfVLciPPh6c I1OBgQqDXUHBW4Dr6VJxZXtk+3EuPsEdhD2Tlu5H7K1a4s0w6FBabSTu8qwYgGxk wBI3LLP9xj//PJxxEqD35UV1XDVEQHf9eNKxuDy0PaK/7MDQ6GbBzm6qQfqqy7GN vy7PFUslU1l3diz7cHr12TaRxF0kbNcOj3St6y9vVBBepT2k6Q5oEYgzFPWlqFdD GBEbyS8ZkWBP7w+oFNxUyUEf0/55O6lM4/oeg1znvrkPbRScilUDQqmf/QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNJbGtpbHUWxoVw5QaMclMxHL05MMB8GA1UdIwQY MBaAFM5D/pTaSu9637HBYoda8crHy6SxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvemtQLWxOcEs3M3Jmc2NGaWgxcnh5c2ZMcExFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi9mOWQ4ZDAtY2MwMi00YWJmLTk5YmIt ZTAxOGRhNTNkMTI5LzEvMGxzYTJsc2RSYkdoWERsQm94eVV6RWN2VGt3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Zi9mOWQ4ZDAtY2MwMi00YWJmLTk5YmItZTAxOGRhNTNkMTI5 LzEvemtQLWxOcEs3M3Jmc2NGaWgxcnh5c2ZMcExFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuVbIMA0G CSqGSIb3DQEBCwUAA4IBAQAnJydOvIBIExOP8wNxtGZ/Pa8setBXD1hOnx1d75gh /o32JokBS/miI0uZuv+BWw4x2ne8V47QD2y2uhVxMSDwZSI56wW7mG8u3pcJUMm3 UR7BKRq0/4zeyXBg8JcYMASKNUamxFhWhUwmbRFTJll0myWpoqyPdliMGXO/4KEs SvUFhrWL4tTTv8UH7d6ThkSUknnt/+4/3fzjbqznPM8c128Igvytll4olql+N8Js gQv10kjQOdT5mpcWR01eQNjoqRAmjKjgHd5TMHxo5jVJtdFdqtrHXBHvb8ZaUl20 fFVw8cTe9mks4rueUJk+z+C7YLj5+EK44TVwe2BZQy4H -----END CERTIFICATE-----Generated at Mon Jan 26 15:33:52 2026 by rpki-client