This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/380c3c-f308-4dfe-a3a3-e21c6d0f8f04/1/Lx0GZ21TiR4ew8qj_wZ5bar6vug.roa File: Lx0GZ21TiR4ew8qj_wZ5bar6vug.roa (raw, json) Hash identifier: lf4lQFDrnk5VRiTZ4XBPmQTyhm8ggaJBhIQsymhNxRU= Subject key identifier: 2F:1D:06:67:6D:53:89:1E:1E:C3:CA:A3:FF:06:79:6D:AA:FA:BE:E8 Certificate issuer: /CN=5189db2e5f574dda0e3c17e395d5f05b66254ec5 Certificate serial: 019B79101A8712B466246281CA8B1967D832 Authority key identifier: 51:89:DB:2E:5F:57:4D:DA:0E:3C:17:E3:95:D5:F0:5B:66:25:4E:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UYnbLl9XTdoOPBfjldXwW2YlTsU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/380c3c-f308-4dfe-a3a3-e21c6d0f8f04/1/Lx0GZ21TiR4ew8qj_wZ5bar6vug.roa Signing time: Thu 01 Jan 2026 10:17:37 +0000 ROA not before: Thu 01 Jan 2026 10:17:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3303 IP address blocks: 195.47.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/380c3c-f308-4dfe-a3a3-e21c6d0f8f04/1/UYnbLl9XTdoOPBfjldXwW2YlTsU.crl rsync://rpki.ripe.net/repository/DEFAULT/9b/380c3c-f308-4dfe-a3a3-e21c6d0f8f04/1/UYnbLl9XTdoOPBfjldXwW2YlTsU.mft rsync://rpki.ripe.net/repository/DEFAULT/UYnbLl9XTdoOPBfjldXwW2YlTsU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:1a:87:12:b4:66:24:62:81:ca:8b:19:67:d8:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5189db2e5f574dda0e3c17e395d5f05b66254ec5 Validity Not Before: Jan 1 10:17:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2f1d06676d53891e1ec3caa3ff06796daafabee8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:d0:d8:21:00:95:ca:5a:95:6a:94:7e:b4:e1: a0:9b:25:09:9f:62:01:a3:09:89:0b:79:cc:76:19: db:39:ea:29:9b:06:05:ad:47:13:b6:a8:73:ec:05: 73:35:85:a5:50:3c:66:01:35:4e:0c:10:0b:02:36: d1:d9:ed:2c:50:cd:8b:9f:a1:6d:0f:2e:1d:1d:57: 7d:11:33:a9:c4:4d:4a:21:e8:94:6b:53:15:2b:cb: 54:28:7f:65:1d:18:aa:c4:5b:66:9c:52:e8:83:65: d3:6e:d2:c8:ec:4e:51:f2:88:31:c4:6a:6a:04:cb: 29:15:9a:5d:61:9c:4f:50:57:92:38:54:01:31:a7: 70:19:74:22:ea:39:be:6c:a4:8d:b1:e7:09:74:34: 8f:c4:44:8a:a7:23:1c:50:14:7f:2b:99:b4:a3:cf: a9:89:78:9b:5d:ef:ac:c4:ec:22:58:f1:70:4b:2d: 2d:5b:16:9a:54:eb:ac:0d:9c:be:a6:16:c1:db:ad: 3f:0a:40:91:da:21:dc:19:d2:c9:68:de:c3:4f:de: f6:2b:1f:fb:52:e5:b2:25:2b:c9:6a:ed:07:2a:03: b5:a6:a9:f5:fb:e7:8b:f5:98:ec:62:ea:87:5f:9e: bd:2b:35:77:d1:d6:08:d1:a2:a8:77:8c:79:b7:b2: 26:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:1D:06:67:6D:53:89:1E:1E:C3:CA:A3:FF:06:79:6D:AA:FA:BE:E8 X509v3 Authority Key Identifier: keyid:51:89:DB:2E:5F:57:4D:DA:0E:3C:17:E3:95:D5:F0:5B:66:25:4E:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UYnbLl9XTdoOPBfjldXwW2YlTsU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/380c3c-f308-4dfe-a3a3-e21c6d0f8f04/1/Lx0GZ21TiR4ew8qj_wZ5bar6vug.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/380c3c-f308-4dfe-a3a3-e21c6d0f8f04/1/UYnbLl9XTdoOPBfjldXwW2YlTsU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.47.231.0/24 Signature Algorithm: sha256WithRSAEncryption b0:06:b2:64:2e:1b:24:f4:a9:ec:0f:30:24:40:43:29:e3:b9: b0:6c:c7:b9:e5:0d:a8:60:a9:b4:1a:ae:a8:ad:95:ef:ec:10: a6:ab:09:a6:a4:8c:e3:fc:40:b0:61:6d:f2:8e:91:7a:5e:e5: e7:e4:bb:fa:60:a9:61:b2:e4:ef:db:02:5b:4c:8d:80:5e:08: 4f:0d:68:7a:75:ea:d3:40:b0:74:92:1a:27:17:da:b5:aa:46: 92:8d:69:a1:8e:3a:13:07:f9:9d:05:b2:a8:fc:54:d8:e3:61: 43:ee:b2:f9:72:2b:ba:b5:55:10:5a:48:b6:03:20:44:c4:d4: d0:fb:6f:b4:f1:f7:f3:35:db:ef:d7:66:da:a4:a8:75:38:d1: 83:74:2b:c0:1f:9d:aa:c6:25:3c:68:9e:a3:5e:31:8b:cf:0c: 07:06:36:1c:a2:50:8c:07:56:0e:4e:99:ab:ab:26:cb:d7:4e: 29:d5:97:d5:e9:cf:c2:72:23:ca:93:fc:81:6e:cb:51:3a:53: 4c:9e:12:2a:83:99:2b:fa:72:0f:62:75:b5:9f:fa:b4:4a:19: 00:0f:5c:f2:75:24:a8:6a:e8:ac:39:1f:a4:78:d8:7e:9e:2a: ea:94:51:0b:9f:96:f1:03:32:a2:67:58:eb:e5:8b:db:9c:fe: 03:07:44:f3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EBqHErRmJGKByosZZ9gyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxODlkYjJlNWY1NzRkZGEwZTNjMTdlMzk1ZDVmMDViNjYy NTRlYzUwHhcNMjYwMTAxMTAxNzM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZjFkMDY2NzZkNTM4OTFlMWVjM2NhYTNmZjA2Nzk2ZGFhZmFiZWU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAldDYIQCVylqVapR+tOGgmyUJn2IB owmJC3nMdhnbOeopmwYFrUcTtqhz7AVzNYWlUDxmATVODBALAjbR2e0sUM2Ln6Ft Dy4dHVd9ETOpxE1KIeiUa1MVK8tUKH9lHRiqxFtmnFLog2XTbtLI7E5R8ogxxGpq BMspFZpdYZxPUFeSOFQBMadwGXQi6jm+bKSNsecJdDSPxESKpyMcUBR/K5m0o8+p iXibXe+sxOwiWPFwSy0tWxaaVOusDZy+phbB260/CkCR2iHcGdLJaN7DT972Kx/7 UuWyJSvJau0HKgO1pqn1++eL9ZjsYuqHX569KzV30dYI0aKod4x5t7ImZQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFC8dBmdtU4keHsPKo/8GeW2q+r7oMB8GA1UdIwQY MBaAFFGJ2y5fV03aDjwX45XV8FtmJU7FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVVluYkxsOVhUZG9PUEJmamxkWHdXMllsVHNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi8zODBjM2MtZjMwOC00ZGZlLWEzYTMt ZTIxYzZkMGY4ZjA0LzEvTHgwR1oyMVRpUjRldzhxal93WjViYXI2dnVnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yi8zODBjM2MtZjMwOC00ZGZlLWEzYTMtZTIxYzZkMGY4ZjA0 LzEvVVluYkxsOVhUZG9PUEJmamxkWHdXMllsVHNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwy/nMA0G CSqGSIb3DQEBCwUAA4IBAQCwBrJkLhsk9KnsDzAkQEMp47mwbMe55Q2oYKm0Gq6o rZXv7BCmqwmmpIzj/ECwYW3yjpF6XuXn5Lv6YKlhsuTv2wJbTI2AXghPDWh6derT QLB0khonF9q1qkaSjWmhjjoTB/mdBbKo/FTY42FD7rL5ciu6tVUQWki2AyBExNTQ +2+08ffzNdvv12bapKh1ONGDdCvAH52qxiU8aJ6jXjGLzwwHBjYcolCMB1YOTpmr qybL104p1ZfV6c/CciPKk/yBbstROlNMnhIqg5kr+nIPYnW1n/q0ShkAD1zydSSo auisOR+keNh+nirqlFELn5bxAzKiZ1jr5YvbnP4DB0Tz -----END CERTIFICATE-----Generated at Sun Jan 25 17:22:23 2026 by rpki-client