This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/cf2f87-8197-4600-a3ab-576ce4101483/1/LoExB3SySSOSvyA87CRCDE0Kt-g.roa File: LoExB3SySSOSvyA87CRCDE0Kt-g.roa (raw, json) Hash identifier: qT5LlbFo1gEnOuh8HOShKNDJzx+51hr1jlt2Cq6Q304= Subject key identifier: 2E:81:31:07:74:B2:49:23:92:BF:20:3C:EC:24:42:0C:4D:0A:B7:E8 Certificate issuer: /CN=95ed1b93d3bce6b6afcde9020b80167b85c68f5b Certificate serial: 019B7F15F8843BC96ADEA16DD02764B53CAD Authority key identifier: 95:ED:1B:93:D3:BC:E6:B6:AF:CD:E9:02:0B:80:16:7B:85:C6:8F:5B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/le0bk9O85ravzekCC4AWe4XGj1s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/cf2f87-8197-4600-a3ab-576ce4101483/1/LoExB3SySSOSvyA87CRCDE0Kt-g.roa Signing time: Fri 02 Jan 2026 14:21:44 +0000 ROA not before: Fri 02 Jan 2026 14:21:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41634 IP address blocks: 193.239.232.0/24 maxlen: 24 195.96.151.0/24 maxlen: 24 2001:678:b30::/48 maxlen: 48 2a12:1e01::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/cf2f87-8197-4600-a3ab-576ce4101483/1/le0bk9O85ravzekCC4AWe4XGj1s.crl rsync://rpki.ripe.net/repository/DEFAULT/9c/cf2f87-8197-4600-a3ab-576ce4101483/1/le0bk9O85ravzekCC4AWe4XGj1s.mft rsync://rpki.ripe.net/repository/DEFAULT/le0bk9O85ravzekCC4AWe4XGj1s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 05:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:f8:84:3b:c9:6a:de:a1:6d:d0:27:64:b5:3c:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95ed1b93d3bce6b6afcde9020b80167b85c68f5b Validity Not Before: Jan 2 14:21:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2e81310774b2492392bf203cec24420c4d0ab7e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:4d:60:bb:cc:f5:2c:8d:d9:a4:bc:0f:b3:f1: f2:8d:5e:61:37:e8:18:63:ed:3c:cd:0d:12:e9:e9: e9:44:52:0d:0f:98:f6:d6:05:fd:52:9d:7b:ca:cd: 0f:2c:cf:b6:0a:ea:1f:ba:29:21:38:bf:57:4c:b6: 61:44:a2:ae:19:3a:c5:db:ed:2f:d7:61:97:35:d9: 79:a7:a6:fa:1e:44:10:70:e3:14:3c:54:f0:8f:f1: 06:b5:ef:d7:dc:8a:cf:21:f2:b1:fd:92:47:75:88: bb:0e:82:e5:bd:44:5e:41:10:4b:d7:6c:35:b9:c3: 61:7c:82:7c:dc:b4:d4:f2:6d:e7:7a:ed:e0:e1:91: 51:ca:a4:57:8d:76:b5:46:af:ca:e3:64:69:2b:4e: b3:0f:e5:85:7f:59:ef:5e:b6:88:ff:d2:77:83:e2: 70:ab:af:84:59:42:d7:09:90:0a:b6:e4:21:cf:ff: 5c:a5:4b:4f:48:1e:60:40:60:41:6d:e7:b1:6e:49: fc:12:98:49:c4:5c:ed:2a:53:e2:bd:89:1c:14:4e: fa:68:9c:da:70:16:a8:2e:0a:c5:ef:0f:8e:ef:87: 41:b9:dc:36:39:c1:92:d0:2e:e3:fe:dd:e5:77:e9: 0a:16:63:bc:d0:db:71:d7:35:00:c1:32:6e:1c:1e: 1d:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:81:31:07:74:B2:49:23:92:BF:20:3C:EC:24:42:0C:4D:0A:B7:E8 X509v3 Authority Key Identifier: keyid:95:ED:1B:93:D3:BC:E6:B6:AF:CD:E9:02:0B:80:16:7B:85:C6:8F:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/le0bk9O85ravzekCC4AWe4XGj1s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/cf2f87-8197-4600-a3ab-576ce4101483/1/LoExB3SySSOSvyA87CRCDE0Kt-g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/cf2f87-8197-4600-a3ab-576ce4101483/1/le0bk9O85ravzekCC4AWe4XGj1s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.239.232.0/24 195.96.151.0/24 IPv6: 2001:678:b30::/48 2a12:1e01::/32 Signature Algorithm: sha256WithRSAEncryption 5c:0a:3b:98:c3:6d:9b:8f:dc:50:5e:48:4b:3a:3b:4c:fc:a9: 12:ef:a3:81:61:a5:76:a9:a7:cb:79:1e:0a:75:01:ea:cb:15: 6d:a8:b7:9d:8f:a3:0b:24:5d:1e:b7:af:b4:68:7c:21:80:0d: 69:2e:2e:5f:c3:d8:65:20:58:9e:78:8f:c5:b3:aa:fe:77:14: 85:6f:30:28:79:83:82:22:e9:b5:b9:75:01:2a:44:c6:88:a2: ed:ba:df:78:e1:2a:72:bc:d7:fc:8d:47:4d:1e:a4:5d:17:26: 0d:84:6b:1a:5c:a2:dd:d3:6e:8c:e8:c4:91:77:3e:64:e4:a4: 9e:40:08:5e:e3:00:76:7d:85:fc:67:de:01:15:e9:73:37:76: 55:1b:b3:e5:17:a8:b8:73:c3:7a:c4:a5:64:be:fb:3b:7d:46: e8:80:01:08:cc:38:9f:af:e2:2c:0a:40:4c:ca:b6:b8:3a:8a: 40:13:53:59:79:6b:7a:60:2c:4b:5a:91:d9:4d:1b:b3:07:82: 8c:d1:89:f7:95:41:bf:ae:9c:3d:42:77:21:d0:32:f1:cd:b0: 52:e9:05:dd:2a:19:55:26:3f:03:8e:20:b9:90:3e:08:be:4d: b0:17:74:c7:bf:ad:9f:03:98:72:71:6e:ce:59:14:39:80:58: 74:5d:73:b9 -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgISAZt/FfiEO8lq3qFt0CdktTytMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1ZWQxYjkzZDNiY2U2YjZhZmNkZTkwMjBiODAxNjdiODVj NjhmNWIwHhcNMjYwMTAyMTQyMTQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZTgxMzEwNzc0YjI0OTIzOTJiZjIwM2NlYzI0NDIwYzRkMGFiN2U4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx01gu8z1LI3ZpLwPs/HyjV5hN+gY Y+08zQ0S6enpRFIND5j21gX9Up17ys0PLM+2CuofuikhOL9XTLZhRKKuGTrF2+0v 12GXNdl5p6b6HkQQcOMUPFTwj/EGte/X3IrPIfKx/ZJHdYi7DoLlvUReQRBL12w1 ucNhfIJ83LTU8m3neu3g4ZFRyqRXjXa1Rq/K42RpK06zD+WFf1nvXraI/9J3g+Jw q6+EWULXCZAKtuQhz/9cpUtPSB5gQGBBbeexbkn8EphJxFztKlPivYkcFE76aJza cBaoLgrF7w+O74dBudw2OcGS0C7j/t3ld+kKFmO80Ntx1zUAwTJuHB4dcwIDAQAB o4ICJzCCAiMwHQYDVR0OBBYEFC6BMQd0skkjkr8gPOwkQgxNCrfoMB8GA1UdIwQY MBaAFJXtG5PTvOa2r83pAguAFnuFxo9bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbGUwYms5Tzg1cmF2emVrQ0M0QVdlNFhHajFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy9jZjJmODctODE5Ny00NjAwLWEzYWIt NTc2Y2U0MTAxNDgzLzEvTG9FeEIzU3lTU09TdnlBODdDUkNERTBLdC1nLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yy9jZjJmODctODE5Ny00NjAwLWEzYWItNTc2Y2U0MTAxNDgz LzEvbGUwYms5Tzg1cmF2emVrQ0M0QVdlNFhHajFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDASBAIAATAMAwQAwe/oAwQA w2CXMBYEAgACMBADBwAgAQZ4CzADBQAqEh4BMA0GCSqGSIb3DQEBCwUAA4IBAQBc CjuYw22bj9xQXkhLOjtM/KkS76OBYaV2qafLeR4KdQHqyxVtqLedj6MLJF0et6+0 aHwhgA1pLi5fw9hlIFieeI/Fs6r+dxSFbzAoeYOCIum1uXUBKkTGiKLtut944Spy vNf8jUdNHqRdFyYNhGsaXKLd026M6MSRdz5k5KSeQAhe4wB2fYX8Z94BFelzN3ZV G7PlF6i4c8N6xKVkvvs7fUbogAEIzDifr+IsCkBMyra4OopAE1NZeWt6YCxLWpHZ TRuzB4KM0Yn3lUG/rpw9Qnch0DLxzbBS6QXdKhlVJj8DjiC5kD4Ivk2wF3THv62f A5hycW7OWRQ5gFh0XXO5 -----END CERTIFICATE-----Generated at Mon Jan 26 12:55:13 2026 by rpki-client