This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/LoCu5YJbrkgW5IhN_nr1FwwScLc.roa File: LoCu5YJbrkgW5IhN_nr1FwwScLc.roa (raw, json) Hash identifier: G3QWqX81eBXK7lToFJSaKAey4M3nMMcmJYTc7Wxnpio= Subject key identifier: 2E:80:AE:E5:82:5B:AE:48:16:E4:88:4D:FE:7A:F5:17:0C:12:70:B7 Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704 Certificate serial: 019B76EABF71D0F90595C2DCE4D646482D5E Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/LoCu5YJbrkgW5IhN_nr1FwwScLc.roa Signing time: Thu 01 Jan 2026 00:17:34 +0000 ROA not before: Thu 01 Jan 2026 00:17:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 52041 IP address blocks: 85.208.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:bf:71:d0:f9:05:95:c2:dc:e4:d6:46:48:2d:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704 Validity Not Before: Jan 1 00:17:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2e80aee5825bae4816e4884dfe7af5170c1270b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:31:a1:ce:8e:59:8b:2e:59:92:c2:79:ab:d7: cc:56:d9:88:ad:2b:f3:be:ab:00:65:a4:8a:0d:6e: e9:14:57:c8:db:6d:5b:c2:cf:e4:a5:13:30:39:37: 52:81:58:b7:a1:61:d5:29:9a:f0:8c:7e:8b:19:77: 5b:29:6b:e7:ea:ce:08:a3:04:9c:f6:d2:0c:6a:5a: 20:c8:49:22:8c:2f:89:9c:63:5b:2d:a0:c9:f9:ae: 25:f9:02:3a:0a:8b:79:67:20:a9:88:1f:5c:23:e8: d8:61:17:a1:27:b0:8b:ce:4e:18:e3:dc:6b:1a:2c: 82:05:1e:2e:2d:ad:d1:3d:6f:39:da:d1:ba:44:55: fc:b2:b3:0d:7b:70:f6:ae:c2:d9:d1:80:c6:04:87: 28:d6:9f:49:db:f4:27:35:2b:c2:28:3c:d3:3a:d1: a4:81:f6:de:ce:90:50:37:45:58:d5:12:e4:b7:30: 7c:a2:ec:9e:cf:4a:22:95:08:38:bb:cb:29:85:fd: ee:de:d6:75:bd:2e:32:7d:ec:a6:db:fc:ae:b3:d4: c0:52:8a:da:0c:71:2c:10:c8:8b:4f:37:d4:46:fc: 69:7b:a7:c3:69:80:31:07:5c:df:14:7e:98:d5:c3: 8e:3c:28:e6:09:a6:cb:37:f7:54:9a:a4:cf:2f:a1: 65:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:80:AE:E5:82:5B:AE:48:16:E4:88:4D:FE:7A:F5:17:0C:12:70:B7 X509v3 Authority Key Identifier: keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/LoCu5YJbrkgW5IhN_nr1FwwScLc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.208.112.0/24 Signature Algorithm: sha256WithRSAEncryption 19:2b:17:2d:94:e6:94:2e:5a:c2:21:7d:a9:da:c9:1c:e5:75: 1e:f3:a2:37:f0:f4:6d:57:50:5b:4f:36:ad:1f:7a:c3:ec:9c: 2a:68:89:70:32:06:3f:3c:13:a6:b0:a1:91:10:3c:80:ac:b1: 84:f9:24:48:96:53:34:14:b2:82:a0:11:5a:57:ec:4e:4c:37: d5:3c:e6:32:f4:28:45:4d:ad:21:44:cb:58:3e:bc:9c:d4:aa: 7c:b2:31:03:aa:93:88:af:02:8e:72:e8:a0:47:96:fa:e0:09: f4:d4:f7:c0:60:5f:0c:2d:ba:a2:3d:7c:3a:2e:fc:c1:c5:4f: eb:00:cb:b4:56:df:45:ff:38:7d:d3:74:ee:01:51:10:5a:74: 89:1a:3e:b2:c8:3f:8c:8e:a2:9a:cc:8b:a7:78:28:e7:88:94: 91:0e:91:eb:55:06:29:19:1c:b9:86:19:f5:6a:0b:6f:0e:b9: c8:8e:5f:66:95:42:e8:33:39:87:12:15:02:77:c2:ac:de:f6: 75:ba:19:98:4f:63:b1:29:10:d2:b4:42:18:46:d1:16:13:bf: be:d2:af:0d:33:a7:5c:59:ca:a6:75:25:9c:8f:67:ce:e8:56: 8f:04:3e:81:7d:a7:24:60:ef:7a:a2:90:2d:36:a7:80:83:e2: 52:2c:94:e6 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt26r9x0PkFlcLc5NZGSC1eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyZmRiNjc2NTRkZjYxODRlN2Q2MGM0MTUwZWE5NTMzYzJj Zjk3MDQwHhcNMjYwMTAxMDAxNzM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZTgwYWVlNTgyNWJhZTQ4MTZlNDg4NGRmZTdhZjUxNzBjMTI3MGI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlzGhzo5Ziy5ZksJ5q9fMVtmIrSvz vqsAZaSKDW7pFFfI221bws/kpRMwOTdSgVi3oWHVKZrwjH6LGXdbKWvn6s4IowSc 9tIMalogyEkijC+JnGNbLaDJ+a4l+QI6Cot5ZyCpiB9cI+jYYRehJ7CLzk4Y49xr GiyCBR4uLa3RPW852tG6RFX8srMNe3D2rsLZ0YDGBIco1p9J2/QnNSvCKDzTOtGk gfbezpBQN0VY1RLktzB8ouyez0oilQg4u8sphf3u3tZ1vS4yfeym2/yus9TAUora DHEsEMiLTzfURvxpe6fDaYAxB1zfFH6Y1cOOPCjmCabLN/dUmqTPL6FlOwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFC6AruWCW65IFuSITf569RcMEnC3MB8GA1UdIwQY MBaAFGL9tnZU32GE59YMQVDqlTPCz5cEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTct ZTg2MTIxYzU5NGRmLzEvTG9DdTVZSmJya2dXNUloTl9ucjFGd3dTY0xjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTctZTg2MTIxYzU5NGRm LzEvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVdBwMA0G CSqGSIb3DQEBCwUAA4IBAQAZKxctlOaULlrCIX2p2skc5XUe86I38PRtV1BbTzat H3rD7JwqaIlwMgY/PBOmsKGREDyArLGE+SRIllM0FLKCoBFaV+xOTDfVPOYy9ChF Ta0hRMtYPryc1Kp8sjEDqpOIrwKOcuigR5b64An01PfAYF8MLbqiPXw6LvzBxU/r AMu0Vt9F/zh903TuAVEQWnSJGj6yyD+MjqKazIuneCjniJSRDpHrVQYpGRy5hhn1 agtvDrnIjl9mlULoMzmHEhUCd8Ks3vZ1uhmYT2OxKRDStEIYRtEWE7++0q8NM6dc WcqmdSWcj2fO6FaPBD6BfackYO96opAtNqeAg+JSLJTm -----END CERTIFICATE-----Generated at Sun Jan 25 07:16:40 2026 by rpki-client