This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/1-PeUZDh2-1Afu1QRFV_yHzYhPCM.roa File: 1-PeUZDh2-1Afu1QRFV_yHzYhPCM.roa (raw, json) Hash identifier: OuunDL6LgvQ6D8lmFD9dFkeAYcQl23IGkOT49tokdT4= Subject key identifier: F8:F7:94:64:38:76:FB:50:1F:BB:54:11:15:5F:F2:1F:36:21:3C:23 Certificate issuer: /CN=2e82963ff1aa70ab10d1d33e86b1d6d494d6ce51 Certificate serial: 019B77C67EDA8425A7522330FEE75A5A75F6 Authority key identifier: 2E:82:96:3F:F1:AA:70:AB:10:D1:D3:3E:86:B1:D6:D4:94:D6:CE:51 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/1-PeUZDh2-1Afu1QRFV_yHzYhPCM.roa Signing time: Thu 01 Jan 2026 04:17:35 +0000 ROA not before: Thu 01 Jan 2026 04:17:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 58056 IP address blocks: 109.123.0.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.mft rsync://rpki.ripe.net/repository/DEFAULT/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:7e:da:84:25:a7:52:23:30:fe:e7:5a:5a:75:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e82963ff1aa70ab10d1d33e86b1d6d494d6ce51 Validity Not Before: Jan 1 04:17:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f8f794643876fb501fbb5411155ff21f36213c23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:48:98:5e:a9:55:43:bc:e7:81:7e:d8:0c:5f: 5b:c9:a1:c2:f5:28:07:ce:34:a9:ef:fe:bc:0f:8e: 34:aa:f6:ef:e4:46:2e:fb:e9:bd:11:ff:e9:ef:d8: 3d:b0:be:5a:0b:c3:b2:63:b6:00:ab:84:18:34:90: 8d:91:71:46:6d:39:e2:27:0e:42:49:45:71:a5:1a: 02:5b:72:97:01:ce:5b:ef:65:33:38:cf:40:b3:d2: 3c:e6:db:e1:aa:b4:2c:37:4a:c4:ab:64:75:3e:e9: 9c:be:c1:d5:ac:6b:6d:c6:d7:31:b8:85:a7:1b:92: 33:a1:e0:0a:c8:5a:b5:d6:eb:a9:69:43:70:79:a3: d7:2f:7d:37:c5:a0:fb:55:73:07:4a:30:2a:bf:64: bc:1f:4a:84:5b:a6:9b:52:5e:5a:57:d5:40:f3:d9: 65:18:55:ed:cf:c7:1b:6a:eb:6c:09:6e:4a:6e:96: 69:10:cd:3e:de:7f:ff:c5:00:cc:52:b1:43:ac:7b: 98:0d:d1:1b:d0:6b:5c:62:0e:d3:fc:3c:0d:69:4f: 9e:1e:85:d2:66:a4:78:34:55:87:88:d2:6c:d6:98: a1:01:cf:5f:17:e9:5a:b7:9c:65:66:60:49:77:e0: e5:11:55:de:44:b7:79:f3:3e:38:50:6f:d0:60:b1: c1:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:F7:94:64:38:76:FB:50:1F:BB:54:11:15:5F:F2:1F:36:21:3C:23 X509v3 Authority Key Identifier: keyid:2E:82:96:3F:F1:AA:70:AB:10:D1:D3:3E:86:B1:D6:D4:94:D6:CE:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/1-PeUZDh2-1Afu1QRFV_yHzYhPCM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.123.0.0/18 Signature Algorithm: sha256WithRSAEncryption 13:72:27:96:d2:b2:01:cd:46:73:58:b5:56:2f:57:f0:2f:24: fd:6e:37:ed:c8:28:b4:79:e8:d0:07:b7:f3:69:be:3f:61:98: 30:37:bd:4a:c2:27:61:e4:09:f0:9e:cc:0e:85:a3:8f:25:dd: b4:a5:6c:1b:4f:0b:71:92:d7:42:3e:b2:cd:33:57:9e:93:7a: fa:17:ae:e0:3c:c4:5e:61:a8:14:4a:c4:1b:12:6f:31:90:3d: 7f:71:45:96:d5:99:6f:bf:f3:47:25:5d:f2:f7:4b:88:dc:20: 53:7a:8c:d1:71:32:b8:1d:2b:53:53:1f:82:f5:04:40:fa:2d: e1:ea:63:51:8e:c5:87:7d:c7:99:5e:cf:7b:7d:35:33:2b:35: 85:6c:04:34:6b:39:4b:22:cc:25:21:cf:be:d9:10:5f:9f:3b: 3b:09:96:c7:a6:ca:94:0b:13:01:d0:f9:63:4e:af:5c:9d:f5: 22:79:84:96:3d:c2:c0:c2:5a:58:5e:c8:6a:c0:ee:c2:9d:96: bb:94:a1:ee:c3:0e:0b:12:5d:7c:7a:4b:86:8c:09:6a:9f:6d: 07:96:38:24:4f:d1:69:40:6f:90:db:95:ac:1e:74:f8:0f:56: 33:c9:5b:89:34:8f:bb:dc:54:ba:c9:b2:06:3d:89:ea:6f:a2: 9a:01:88:72 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt3xn7ahCWnUiMw/udaWnX2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlODI5NjNmZjFhYTcwYWIxMGQxZDMzZTg2YjFkNmQ0OTRk NmNlNTEwHhcNMjYwMTAxMDQxNzM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOGY3OTQ2NDM4NzZmYjUwMWZiYjU0MTExNTVmZjIxZjM2MjEzYzIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtkiYXqlVQ7zngX7YDF9byaHC9SgH zjSp7/68D440qvbv5EYu++m9Ef/p79g9sL5aC8OyY7YAq4QYNJCNkXFGbTniJw5C SUVxpRoCW3KXAc5b72UzOM9As9I85tvhqrQsN0rEq2R1PumcvsHVrGttxtcxuIWn G5IzoeAKyFq11uupaUNweaPXL303xaD7VXMHSjAqv2S8H0qEW6abUl5aV9VA89ll GFXtz8cbautsCW5KbpZpEM0+3n//xQDMUrFDrHuYDdEb0GtcYg7T/DwNaU+eHoXS ZqR4NFWHiNJs1pihAc9fF+lat5xlZmBJd+DlEVXeRLd58z44UG/QYLHBlQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPj3lGQ4dvtQH7tUERVf8h82ITwjMB8GA1UdIwQY MBaAFC6Clj/xqnCrENHTPoax1tSU1s5RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTG9LV1BfR3FjS3NRMGRNLWhySFcxSlRXemxFLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi85NTdjNjgtNmYyNy00MGVkLWFiZWQt ZGY2NGYwZTgyMzYwLzEvMS1QZVVaRGgyLTFBZnUxUVJGVl95SHpZaFBDTS5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvYTIvOTU3YzY4LTZmMjctNDBlZC1hYmVkLWRmNjRmMGU4MjM2 MC8xL0xvS1dQX0dxY0tzUTBkTS1ockhXMUpUV3psRS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBm17ADAN BgkqhkiG9w0BAQsFAAOCAQEAE3InltKyAc1Gc1i1Vi9X8C8k/W437cgotHno0Ae3 82m+P2GYMDe9SsInYeQJ8J7MDoWjjyXdtKVsG08LcZLXQj6yzTNXnpN6+heu4DzE XmGoFErEGxJvMZA9f3FFltWZb7/zRyVd8vdLiNwgU3qM0XEyuB0rU1MfgvUEQPot 4epjUY7Fh33HmV7Pe301Mys1hWwENGs5SyLMJSHPvtkQX587OwmWx6bKlAsTAdD5 Y06vXJ31InmElj3CwMJaWF7IasDuwp2Wu5Sh7sMOCxJdfHpLhowJap9tB5Y4JE/R aUBvkNuVrB50+A9WM8lbiTSPu9xUusmyBj2J6m+imgGIcg== -----END CERTIFICATE-----Generated at Sun Jan 25 13:47:22 2026 by rpki-client