This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/LXIlN5E_-7FwagFmPTLTkaa9y5c.roa
File: LXIlN5E_-7FwagFmPTLTkaa9y5c.roa (raw, json)
Hash identifier: 6fdLU7tUE6uJypDCFnhQj74QKiyWE5+++0HOzxZo/Ls=
Subject key identifier: 2D:72:25:37:91:3F:FB:B1:70:6A:01:66:3D:32:D3:91:A6:BD:CB:97
Certificate issuer: /CN=eac2c1afd4bdec980506fa07df7c8662d554fa46
Certificate serial: 019B77C6E1359AEB6296BE5EBBF45EBA88E3
Authority key identifier: EA:C2:C1:AF:D4:BD:EC:98:05:06:FA:07:DF:7C:86:62:D5:54:FA:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6sLBr9S97JgFBvoH33yGYtVU-kY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/LXIlN5E_-7FwagFmPTLTkaa9y5c.roa
Signing time: Thu 01 Jan 2026 04:18:01 +0000
ROA not before: Thu 01 Jan 2026 04:18:01 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44092
IP address blocks: 147.185.162.0/23 maxlen: 23
147.185.162.0/24 maxlen: 24
147.185.163.0/24 maxlen: 24
185.22.56.0/22 maxlen: 22
185.22.56.0/24 maxlen: 24
185.22.57.0/24 maxlen: 24
185.22.58.0/24 maxlen: 24
185.22.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/6sLBr9S97JgFBvoH33yGYtVU-kY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/6sLBr9S97JgFBvoH33yGYtVU-kY.mft
rsync://rpki.ripe.net/repository/DEFAULT/6sLBr9S97JgFBvoH33yGYtVU-kY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 13:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:77:c6:e1:35:9a:eb:62:96:be:5e:bb:f4:5e:ba:88:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eac2c1afd4bdec980506fa07df7c8662d554fa46
Validity
Not Before: Jan 1 04:18:01 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2d722537913ffbb1706a01663d32d391a6bdcb97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:34:bf:43:cd:51:4c:dd:05:dd:b4:cb:43:67:
aa:60:a6:97:d7:d2:b8:a7:43:49:51:87:7c:24:fe:
55:12:e5:22:1b:fc:95:f8:82:1c:9a:9f:c6:20:1f:
fd:e4:fb:56:2d:9d:08:86:b6:bb:d3:b9:ca:e3:a3:
70:ac:4f:a3:43:b1:61:50:e6:7c:92:f4:14:a3:48:
03:a7:89:52:5a:41:ac:d4:68:97:93:5b:4e:f3:49:
3b:bb:c2:a9:38:e6:59:b7:94:10:3c:ae:46:89:a3:
3a:85:5c:1c:5d:10:08:be:df:c4:a4:b4:26:a1:99:
89:1b:ac:6b:d4:e2:91:6c:30:25:8b:2f:25:7d:57:
06:7c:f6:9a:2b:ce:c7:7e:96:ee:63:68:d1:bc:b0:
b5:7e:61:87:bf:b4:15:30:d6:9c:28:31:f6:0e:f3:
aa:e5:65:59:ac:db:b2:d7:8c:2a:82:de:91:09:83:
b3:90:db:2c:51:d6:3f:47:8d:bb:6c:69:f0:0c:b8:
ba:3d:b1:80:1e:aa:2e:7d:f6:c9:f4:5d:af:9a:cc:
af:cc:aa:ca:e2:aa:ea:f9:5e:b9:e8:1f:31:0b:d2:
e7:e3:36:4a:70:a1:5d:03:6b:3b:db:4b:85:6b:26:
50:ef:77:c9:e4:a1:32:99:ba:c7:6f:bb:12:31:bd:
67:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:72:25:37:91:3F:FB:B1:70:6A:01:66:3D:32:D3:91:A6:BD:CB:97
X509v3 Authority Key Identifier:
keyid:EA:C2:C1:AF:D4:BD:EC:98:05:06:FA:07:DF:7C:86:62:D5:54:FA:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6sLBr9S97JgFBvoH33yGYtVU-kY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/LXIlN5E_-7FwagFmPTLTkaa9y5c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/6sLBr9S97JgFBvoH33yGYtVU-kY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.185.162.0/23
185.22.56.0/22
Signature Algorithm: sha256WithRSAEncryption
06:5d:5b:09:b8:f1:e8:ed:be:71:0a:c6:6e:be:8f:0b:3e:64:
2b:a6:99:c4:e7:d2:a1:34:a1:d0:fe:0a:71:d8:a3:b4:c5:5e:
0c:79:fc:98:ce:bd:78:5e:f6:4c:53:38:f4:00:c0:e7:1d:61:
a1:fc:7e:38:d8:b2:d0:96:a7:b0:9b:a7:34:56:35:81:0f:2e:
01:5b:6f:03:f2:48:c6:39:e6:b7:98:be:00:82:5e:67:6e:ae:
26:3f:b3:8c:72:e5:b8:d6:7c:24:6b:7a:f8:b5:73:47:4e:84:
9c:2c:95:51:93:29:64:17:6f:4c:70:09:11:32:66:85:63:58:
74:3c:00:3b:cc:85:12:58:be:6c:a1:92:fc:ca:93:23:d8:60:
a7:5c:ca:80:59:3b:37:d2:9d:a7:cc:39:2a:95:57:da:cb:7b:
26:6f:2f:a7:09:9a:1c:5d:8c:8e:83:b4:c4:8d:a6:01:b5:aa:
7f:88:a7:15:8b:9b:d9:6a:d5:f7:ce:af:f9:6b:c5:46:b8:21:
2f:25:dd:80:0e:5a:73:7e:fb:32:85:53:85:0e:9e:04:e8:2c:
c7:4d:77:b8:6b:cd:9d:16:91:dc:da:cc:ab:4f:19:13:3e:31:
92:2c:6d:4f:de:51:11:6c:04:b0:58:46:97:a7:11:77:59:40:
b7:c0:bc:11
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZt3xuE1mutilr5eu/ReuojjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhYzJjMWFmZDRiZGVjOTgwNTA2ZmEwN2RmN2M4NjYyZDU1
NGZhNDYwHhcNMjYwMTAxMDQxODAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZDcyMjUzNzkxM2ZmYmIxNzA2YTAxNjYzZDMyZDM5MWE2YmRjYjk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnDS/Q81RTN0F3bTLQ2eqYKaX19K4
p0NJUYd8JP5VEuUiG/yV+IIcmp/GIB/95PtWLZ0Ihra707nK46NwrE+jQ7FhUOZ8
kvQUo0gDp4lSWkGs1GiXk1tO80k7u8KpOOZZt5QQPK5GiaM6hVwcXRAIvt/EpLQm
oZmJG6xr1OKRbDAliy8lfVcGfPaaK87HfpbuY2jRvLC1fmGHv7QVMNacKDH2DvOq
5WVZrNuy14wqgt6RCYOzkNssUdY/R427bGnwDLi6PbGAHqouffbJ9F2vmsyvzKrK
4qrq+V656B8xC9Ln4zZKcKFdA2s720uFayZQ73fJ5KEymbrHb7sSMb1nywIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFC1yJTeRP/uxcGoBZj0y05GmvcuXMB8GA1UdIwQY
MBaAFOrCwa/UveyYBQb6B998hmLVVPpGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNnNMQnI5Uzk3SmdGQnZvSDMzeUdZdFZVLWtZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS81ODlhNmItNGQ3ZS00MDEyLWEwZmMt
YzBjZWIwMzdhZDQyLzEvTFhJbE41RV8tN0Z3YWdGbVBUTFRrYWE5eTVjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS81ODlhNmItNGQ3ZS00MDEyLWEwZmMtYzBjZWIwMzdhZDQy
LzEvNnNMQnI5Uzk3SmdGQnZvSDMzeUdZdFZVLWtZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBk7miAwQC
uRY4MA0GCSqGSIb3DQEBCwUAA4IBAQAGXVsJuPHo7b5xCsZuvo8LPmQrppnE59Kh
NKHQ/gpx2KO0xV4MefyYzr14XvZMUzj0AMDnHWGh/H442LLQlqewm6c0VjWBDy4B
W28D8kjGOea3mL4Agl5nbq4mP7OMcuW41nwka3r4tXNHToScLJVRkylkF29McAkR
MmaFY1h0PAA7zIUSWL5soZL8ypMj2GCnXMqAWTs30p2nzDkqlVfay3smby+nCZoc
XYyOg7TEjaYBtap/iKcVi5vZatX3zq/5a8VGuCEvJd2ADlpzfvsyhVOFDp4E6CzH
TXe4a82dFpHc2syrTxkTPjGSLG1P3lERbASwWEaXpxF3WUC3wLwR
-----END CERTIFICATE-----
Generated at Sun Jan 25 20:48:17 2026 by rpki-client