This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/e17RwhgnfhbbPqBDUmotA7NGqF0.roa File: e17RwhgnfhbbPqBDUmotA7NGqF0.roa (raw, json) Hash identifier: 8UAIiRosHyt54pppcCRrXWyOAjKor7ewGANqepos+1c= Subject key identifier: 7B:5E:D1:C2:18:27:7E:16:DB:3E:A0:43:52:6A:2D:03:B3:46:A8:5D Certificate issuer: /CN=2e82963ff1aa70ab10d1d33e86b1d6d494d6ce51 Certificate serial: 019B77C67E9A74B677F0CC5F54BB3AC9BBA9 Authority key identifier: 2E:82:96:3F:F1:AA:70:AB:10:D1:D3:3E:86:B1:D6:D4:94:D6:CE:51 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/e17RwhgnfhbbPqBDUmotA7NGqF0.roa Signing time: Thu 01 Jan 2026 04:17:35 +0000 ROA not before: Thu 01 Jan 2026 04:17:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48430 IP address blocks: 195.95.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.mft rsync://rpki.ripe.net/repository/DEFAULT/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:7e:9a:74:b6:77:f0:cc:5f:54:bb:3a:c9:bb:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e82963ff1aa70ab10d1d33e86b1d6d494d6ce51 Validity Not Before: Jan 1 04:17:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7b5ed1c218277e16db3ea043526a2d03b346a85d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:56:3e:8c:8d:00:05:cf:70:7e:04:33:ad:e2: 51:83:c3:1a:7e:bc:15:f7:63:7d:73:c8:17:21:05: c8:a5:f1:97:1a:8a:ae:4a:52:88:52:26:16:a4:7f: 97:0d:6d:b5:f5:b6:6a:55:82:63:1c:f6:b8:99:8c: 37:13:8b:f4:c6:b6:f6:7e:dd:6d:a5:fc:82:d2:57: 2d:62:81:67:8d:62:69:38:27:59:bc:28:c2:03:d4: d9:2e:36:61:aa:c5:62:03:48:a3:01:e5:d9:2b:3c: 79:04:d3:26:e1:9e:96:f7:3b:8f:33:dc:4b:26:4e: d5:7f:7a:cb:3d:bc:59:71:a6:aa:02:3b:a5:bd:7e: 74:c1:78:95:f0:b8:88:62:cc:08:77:1f:26:9d:fc: 7e:12:be:9c:ed:ff:12:e5:67:a0:69:65:78:8e:4d: bb:3d:57:80:a0:b6:5b:42:f6:c2:98:82:67:b5:af: c0:3a:77:20:d7:8a:87:0d:5d:72:77:c7:0e:18:11: cb:74:5f:e3:ef:a0:b5:38:b9:b9:f4:7a:e6:66:5e: 18:be:c7:b2:a3:4d:7c:d9:e0:b2:ba:53:f7:f9:62: 91:0e:cd:69:11:b5:80:58:33:13:1b:b3:36:e0:fb: 8f:07:3f:84:2c:a0:c6:9e:c8:dd:c2:76:4a:84:5a: 09:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:5E:D1:C2:18:27:7E:16:DB:3E:A0:43:52:6A:2D:03:B3:46:A8:5D X509v3 Authority Key Identifier: keyid:2E:82:96:3F:F1:AA:70:AB:10:D1:D3:3E:86:B1:D6:D4:94:D6:CE:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/e17RwhgnfhbbPqBDUmotA7NGqF0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.95.204.0/24 Signature Algorithm: sha256WithRSAEncryption 46:b8:f8:55:1c:a0:18:24:f2:cf:9a:eb:98:28:a2:79:e4:0e: 4c:6b:dd:02:1d:54:15:f7:38:6f:b0:fb:0c:49:bf:2b:b4:fa: e7:9d:6c:81:37:42:9d:d6:73:38:90:36:8e:9d:41:ad:ff:8f: 79:ba:5b:9a:df:e8:27:b0:56:55:2e:08:ca:d4:35:66:1d:9d: 2d:12:56:b3:20:7b:22:82:58:09:a1:8e:94:43:49:91:e6:a8: c7:4f:05:18:16:c6:1f:98:ad:95:fa:73:15:80:e9:62:a1:a0: 9b:60:2b:ba:19:74:c2:f9:04:80:5b:2a:ab:79:0e:f0:a0:1d: ae:dd:0e:fb:c3:28:41:1a:ab:25:c6:53:b4:ff:65:bd:f4:48: 18:1f:21:73:8d:4c:3a:5e:95:ef:35:d8:5a:9a:6f:39:56:c8: bc:3a:b4:f8:1f:3d:cc:71:71:f7:4a:74:d4:e2:40:dc:88:a9: 6f:0b:ce:c1:1c:1e:3e:39:1a:a8:91:76:da:de:9c:f6:be:53: af:00:29:e4:4e:ef:2f:98:07:ab:93:67:83:8e:40:43:7c:e7: 23:ca:41:b5:7c:f8:04:19:cc:50:a3:13:63:65:f6:8e:1a:55: 2c:41:23:18:5a:7d:ad:0c:ad:e4:67:20:6e:83:2f:38:01:54: 17:60:b8:fc -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xn6adLZ38MxfVLs6ybupMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlODI5NjNmZjFhYTcwYWIxMGQxZDMzZTg2YjFkNmQ0OTRk NmNlNTEwHhcNMjYwMTAxMDQxNzM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YjVlZDFjMjE4Mjc3ZTE2ZGIzZWEwNDM1MjZhMmQwM2IzNDZhODVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo1Y+jI0ABc9wfgQzreJRg8MafrwV 92N9c8gXIQXIpfGXGoquSlKIUiYWpH+XDW219bZqVYJjHPa4mYw3E4v0xrb2ft1t pfyC0lctYoFnjWJpOCdZvCjCA9TZLjZhqsViA0ijAeXZKzx5BNMm4Z6W9zuPM9xL Jk7Vf3rLPbxZcaaqAjulvX50wXiV8LiIYswIdx8mnfx+Er6c7f8S5WegaWV4jk27 PVeAoLZbQvbCmIJnta/AOncg14qHDV1yd8cOGBHLdF/j76C1OLm59HrmZl4Yvsey o0182eCyulP3+WKRDs1pEbWAWDMTG7M24PuPBz+ELKDGnsjdwnZKhFoJTwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHte0cIYJ34W2z6gQ1JqLQOzRqhdMB8GA1UdIwQY MBaAFC6Clj/xqnCrENHTPoax1tSU1s5RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTG9LV1BfR3FjS3NRMGRNLWhySFcxSlRXemxFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi85NTdjNjgtNmYyNy00MGVkLWFiZWQt ZGY2NGYwZTgyMzYwLzEvZTE3UndoZ25maGJiUHFCRFVtb3RBN05HcUYwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi85NTdjNjgtNmYyNy00MGVkLWFiZWQtZGY2NGYwZTgyMzYw LzEvTG9LV1BfR3FjS3NRMGRNLWhySFcxSlRXemxFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw1/MMA0G CSqGSIb3DQEBCwUAA4IBAQBGuPhVHKAYJPLPmuuYKKJ55A5Ma90CHVQV9zhvsPsM Sb8rtPrnnWyBN0Kd1nM4kDaOnUGt/495ulua3+gnsFZVLgjK1DVmHZ0tElazIHsi glgJoY6UQ0mR5qjHTwUYFsYfmK2V+nMVgOlioaCbYCu6GXTC+QSAWyqreQ7woB2u 3Q77wyhBGqslxlO0/2W99EgYHyFzjUw6XpXvNdhamm85Vsi8OrT4Hz3McXH3SnTU 4kDciKlvC87BHB4+ORqokXba3pz2vlOvACnkTu8vmAerk2eDjkBDfOcjykG1fPgE GcxQoxNjZfaOGlUsQSMYWn2tDK3kZyBugy84AVQXYLj8 -----END CERTIFICATE-----Generated at Sun Jan 25 13:54:57 2026 by rpki-client