This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/7fd3e1-35c0-4528-9854-0989494588bf/1/LPtgrCTtvqxu3cjuNnJKHmVe1hU.roa File: LPtgrCTtvqxu3cjuNnJKHmVe1hU.roa (raw, json) Hash identifier: BGV23TnfOPa93rWNrPOH2klHvaD0qSg8RA6zxqAnbzM= Subject key identifier: 2C:FB:60:AC:24:ED:BE:AC:6E:DD:C8:EE:36:72:4A:1E:65:5E:D6:15 Certificate issuer: /CN=25de34b17c537b0962e4cdbbd9bc6729c8b1d90a Certificate serial: 019B7A5AFC75ECBAB88CA2958304C141B23D Authority key identifier: 25:DE:34:B1:7C:53:7B:09:62:E4:CD:BB:D9:BC:67:29:C8:B1:D9:0A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jd40sXxTewli5M272bxnKcix2Qo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/7fd3e1-35c0-4528-9854-0989494588bf/1/LPtgrCTtvqxu3cjuNnJKHmVe1hU.roa Signing time: Thu 01 Jan 2026 16:19:01 +0000 ROA not before: Thu 01 Jan 2026 16:19:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25151 IP address blocks: 130.193.5.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/7fd3e1-35c0-4528-9854-0989494588bf/1/Jd40sXxTewli5M272bxnKcix2Qo.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/7fd3e1-35c0-4528-9854-0989494588bf/1/Jd40sXxTewli5M272bxnKcix2Qo.mft rsync://rpki.ripe.net/repository/DEFAULT/Jd40sXxTewli5M272bxnKcix2Qo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:fc:75:ec:ba:b8:8c:a2:95:83:04:c1:41:b2:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25de34b17c537b0962e4cdbbd9bc6729c8b1d90a Validity Not Before: Jan 1 16:19:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2cfb60ac24edbeac6eddc8ee36724a1e655ed615 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:e4:7b:81:97:ed:9e:3e:d4:2e:ac:cf:cd:ae: a6:4e:15:02:94:6c:e4:73:45:95:a1:50:dc:5b:7e: 61:7e:f1:8a:75:2a:2c:a0:68:26:cf:88:4d:7f:9d: ee:f6:64:95:08:1c:15:a1:a8:72:b1:32:c1:05:cd: a2:2d:3c:9c:f2:88:09:56:c0:43:9a:17:a2:03:ec: 4b:9f:fa:78:7b:14:58:57:9f:02:16:40:6b:6d:8a: 5b:4b:c9:ce:8a:31:fb:e1:b9:b9:5a:6c:3e:22:71: 32:16:2a:dd:41:d5:e6:5f:e3:76:dc:ef:23:f8:65: 1f:83:88:a0:a1:66:19:5e:43:b0:5f:d2:47:41:20: 5b:fb:e8:b7:db:6c:f8:f7:b1:70:65:be:da:1f:72: b9:95:2e:bc:c9:90:9f:4c:56:50:d7:5d:79:fb:a6: 8f:75:7b:fe:bd:aa:8e:50:c7:24:16:d1:a3:25:da: af:23:3d:50:e7:91:1d:44:f0:5d:43:d7:12:02:f5: de:fe:53:53:fb:e2:de:31:f8:a4:42:2c:46:4c:ff: 81:1a:9d:0b:fb:70:67:fb:41:ac:19:bd:5b:2f:07: 36:a6:24:4c:8c:98:6d:04:fc:70:56:d2:04:a2:f4: b1:03:b9:8d:18:ad:0e:75:5a:cb:bb:dc:57:f2:09: f8:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:FB:60:AC:24:ED:BE:AC:6E:DD:C8:EE:36:72:4A:1E:65:5E:D6:15 X509v3 Authority Key Identifier: keyid:25:DE:34:B1:7C:53:7B:09:62:E4:CD:BB:D9:BC:67:29:C8:B1:D9:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jd40sXxTewli5M272bxnKcix2Qo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/7fd3e1-35c0-4528-9854-0989494588bf/1/LPtgrCTtvqxu3cjuNnJKHmVe1hU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/7fd3e1-35c0-4528-9854-0989494588bf/1/Jd40sXxTewli5M272bxnKcix2Qo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 130.193.5.0/24 Signature Algorithm: sha256WithRSAEncryption 75:f2:e8:e0:1a:b8:d5:f4:28:7d:60:d6:39:f7:d6:a6:5c:7a: fb:e4:8c:09:c3:17:d3:97:9e:fc:4f:08:05:bf:62:e1:e2:f6: 40:e8:44:b9:ea:9f:97:ca:d1:2f:db:e4:e5:2c:df:58:2b:57: e8:16:40:8e:fb:5c:bd:7d:1b:d9:ce:09:63:0c:8e:6a:de:0c: c5:a6:94:71:4c:47:f9:ea:6f:02:a4:5d:59:62:8e:32:e3:0a: 71:9b:33:55:3b:4e:c1:fd:2c:52:43:51:05:15:fa:55:41:18: fc:f6:c9:53:d7:a8:95:70:25:17:81:3d:b7:f7:1f:7e:26:e0: 8b:f4:9b:87:53:66:a6:12:26:f7:59:78:9f:b7:e7:d1:a8:cf: 88:dd:17:91:d9:15:db:41:65:9b:72:89:3e:c9:87:af:00:fe: 76:8b:de:db:17:98:e2:0b:85:c5:55:be:5f:b1:92:31:38:0e: e4:fe:eb:ee:ff:7d:ec:31:75:e6:85:f2:09:7e:ca:61:1e:70: b8:05:00:13:3b:f4:0f:7b:6e:f1:6f:c5:7a:90:4a:8b:a5:53: fc:8e:75:80:3e:0a:93:ef:14:4c:70:38:13:b1:31:90:5d:96: 88:c0:3e:26:f9:fe:84:c1:e3:34:15:8d:95:77:7d:b2:b6:15: ec:9a:15:32 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6Wvx17Lq4jKKVgwTBQbI9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1ZGUzNGIxN2M1MzdiMDk2MmU0Y2RiYmQ5YmM2NzI5Yzhi MWQ5MGEwHhcNMjYwMTAxMTYxOTAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyY2ZiNjBhYzI0ZWRiZWFjNmVkZGM4ZWUzNjcyNGExZTY1NWVkNjE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt+R7gZftnj7ULqzPza6mThUClGzk c0WVoVDcW35hfvGKdSosoGgmz4hNf53u9mSVCBwVoahysTLBBc2iLTyc8ogJVsBD mheiA+xLn/p4exRYV58CFkBrbYpbS8nOijH74bm5Wmw+InEyFirdQdXmX+N23O8j +GUfg4igoWYZXkOwX9JHQSBb++i322z497FwZb7aH3K5lS68yZCfTFZQ1115+6aP dXv+vaqOUMckFtGjJdqvIz1Q55EdRPBdQ9cSAvXe/lNT++LeMfikQixGTP+BGp0L +3Bn+0GsGb1bLwc2piRMjJhtBPxwVtIEovSxA7mNGK0OdVrLu9xX8gn42wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCz7YKwk7b6sbt3I7jZySh5lXtYVMB8GA1UdIwQY MBaAFCXeNLF8U3sJYuTNu9m8ZynIsdkKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSmQ0MHNYeFRld2xpNU0yNzJieG5LY2l4MlFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy83ZmQzZTEtMzVjMC00NTI4LTk4NTQt MDk4OTQ5NDU4OGJmLzEvTFB0Z3JDVHR2cXh1M2NqdU5uSktIbVZlMWhVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy83ZmQzZTEtMzVjMC00NTI4LTk4NTQtMDk4OTQ5NDU4OGJm LzEvSmQ0MHNYeFRld2xpNU0yNzJieG5LY2l4MlFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgsEFMA0G CSqGSIb3DQEBCwUAA4IBAQB18ujgGrjV9Ch9YNY599amXHr75IwJwxfTl578TwgF v2Lh4vZA6ES56p+XytEv2+TlLN9YK1foFkCO+1y9fRvZzgljDI5q3gzFppRxTEf5 6m8CpF1ZYo4y4wpxmzNVO07B/SxSQ1EFFfpVQRj89slT16iVcCUXgT239x9+JuCL 9JuHU2amEib3WXift+fRqM+I3ReR2RXbQWWbcok+yYevAP52i97bF5jiC4XFVb5f sZIxOA7k/uvu/33sMXXmhfIJfsphHnC4BQATO/QPe27xb8V6kEqLpVP8jnWAPgqT 7xRMcDgTsTGQXZaIwD4m+f6EweM0FY2Vd32ythXsmhUy -----END CERTIFICATE-----Generated at Mon Jan 26 01:44:38 2026 by rpki-client