This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/02d3f6-4301-4be5-8c37-0375a9c32b00/1/lN52A8wmVdK-KeTgv5TB-V3C8VU.roa File: lN52A8wmVdK-KeTgv5TB-V3C8VU.roa (raw, json) Hash identifier: r7UmoxX/ZzMNRX796XCzomjg3WCGmP7MqKUteRQKBkc= Subject key identifier: 94:DE:76:03:CC:26:55:D2:BE:29:E4:E0:BF:94:C1:F9:5D:C2:F1:55 Certificate issuer: /CN=67e24c7284ef4887e45d4ccd9bde679cd9ab4f00 Certificate serial: 019B7EA6C38453FD52AD95DE015704C47126 Authority key identifier: 67:E2:4C:72:84:EF:48:87:E4:5D:4C:CD:9B:DE:67:9C:D9:AB:4F:00 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z-JMcoTvSIfkXUzNm95nnNmrTwA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/02d3f6-4301-4be5-8c37-0375a9c32b00/1/lN52A8wmVdK-KeTgv5TB-V3C8VU.roa Signing time: Fri 02 Jan 2026 12:20:16 +0000 ROA not before: Fri 02 Jan 2026 12:20:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215915 IP address blocks: 185.136.232.0/22 maxlen: 24 2a10:c885::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/02d3f6-4301-4be5-8c37-0375a9c32b00/1/Z-JMcoTvSIfkXUzNm95nnNmrTwA.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/02d3f6-4301-4be5-8c37-0375a9c32b00/1/Z-JMcoTvSIfkXUzNm95nnNmrTwA.mft rsync://rpki.ripe.net/repository/DEFAULT/Z-JMcoTvSIfkXUzNm95nnNmrTwA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:c3:84:53:fd:52:ad:95:de:01:57:04:c4:71:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67e24c7284ef4887e45d4ccd9bde679cd9ab4f00 Validity Not Before: Jan 2 12:20:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=94de7603cc2655d2be29e4e0bf94c1f95dc2f155 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:27:e2:ed:7f:3e:f3:80:c2:f3:e9:d4:c3:61: 85:d6:a8:ab:28:e0:13:db:66:f4:80:94:e7:b5:a0: 00:9f:2f:9b:e0:d4:71:2a:d7:62:84:fa:b3:f6:8a: 30:62:e1:aa:4b:51:87:41:e2:d9:74:61:2f:05:f9: bb:45:0c:21:7e:13:8d:12:92:99:8f:08:e0:ea:1b: 6e:bf:f4:d5:3d:fd:5e:44:39:c8:1b:c6:db:78:06: bc:41:aa:3f:07:f9:e7:fb:d2:d0:20:73:43:ce:89: e4:c7:2b:91:38:f7:c6:b0:d0:aa:8b:34:2b:79:34: f2:71:59:1f:1d:07:68:a1:57:0c:66:39:11:49:f3: 04:73:93:3c:5e:a7:14:c2:6c:57:8a:97:14:0b:e0: 8f:e3:08:3b:f4:5b:47:e5:51:d7:06:9b:da:0f:b5: 9c:46:fb:a0:f5:53:46:42:e5:c6:ad:9f:bb:8d:01: 01:7d:55:21:38:a4:d9:12:6e:fa:86:1a:23:8c:a9: 75:01:94:83:69:be:63:d8:e8:da:a0:9e:b4:da:be: 3f:4f:62:1e:bb:00:58:bf:0e:ba:5d:f0:eb:3e:10: 22:05:9a:31:aa:69:97:f8:a2:3a:1e:ee:81:33:f3: 98:99:9e:66:17:e4:1b:e9:57:e9:d9:ea:d0:b2:b3: 2b:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:DE:76:03:CC:26:55:D2:BE:29:E4:E0:BF:94:C1:F9:5D:C2:F1:55 X509v3 Authority Key Identifier: keyid:67:E2:4C:72:84:EF:48:87:E4:5D:4C:CD:9B:DE:67:9C:D9:AB:4F:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z-JMcoTvSIfkXUzNm95nnNmrTwA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/02d3f6-4301-4be5-8c37-0375a9c32b00/1/lN52A8wmVdK-KeTgv5TB-V3C8VU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/02d3f6-4301-4be5-8c37-0375a9c32b00/1/Z-JMcoTvSIfkXUzNm95nnNmrTwA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.136.232.0/22 IPv6: 2a10:c885::/32 Signature Algorithm: sha256WithRSAEncryption 9d:8f:4e:f3:88:42:ec:fd:5b:d0:01:11:72:64:26:e8:80:98: 46:bb:56:59:03:d4:66:85:6c:5b:96:1f:f5:e6:59:11:ac:7d: f4:72:42:51:a5:b9:24:05:5f:b3:84:e9:0c:63:e2:fe:a0:df: 82:59:be:e8:6c:91:f6:9c:bf:ae:6c:fb:da:61:a8:ce:0f:9c: 25:e6:80:1d:cb:a0:3a:a3:11:86:88:89:d4:e6:31:a6:66:b4: 48:05:a8:fe:36:41:84:e7:06:92:1c:e1:eb:6e:26:91:30:e4: e1:8a:5c:9c:b2:0f:65:57:b3:b0:5a:0e:9b:4b:a7:28:ba:6c: 18:84:c0:9a:52:11:16:df:de:14:1b:25:2a:0d:ca:59:66:bd: 32:c8:3d:b2:4e:ca:a5:89:aa:4c:5d:56:cc:f8:81:e4:74:97: 2a:8f:20:db:b4:f5:3b:8a:de:dd:e3:13:b9:7b:3b:d6:f6:01: 14:61:64:08:e9:40:77:4e:29:de:00:68:d4:54:aa:10:f4:1f: ba:17:e5:9d:a9:82:45:b6:46:f4:98:60:48:44:30:3c:77:94: 27:38:dc:b1:ea:fc:c9:13:62:17:8e:a4:35:9c:60:16:a8:35: 80:55:c0:c8:1a:d7:39:d8:05:79:ce:60:1f:af:93:20:b4:51: a2:07:79:1b -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt+psOEU/1SrZXeAVcExHEmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3ZTI0YzcyODRlZjQ4ODdlNDVkNGNjZDliZGU2NzljZDlh YjRmMDAwHhcNMjYwMTAyMTIyMDE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NGRlNzYwM2NjMjY1NWQyYmUyOWU0ZTBiZjk0YzFmOTVkYzJmMTU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyyfi7X8+84DC8+nUw2GF1qirKOAT 22b0gJTntaAAny+b4NRxKtdihPqz9oowYuGqS1GHQeLZdGEvBfm7RQwhfhONEpKZ jwjg6htuv/TVPf1eRDnIG8bbeAa8Qao/B/nn+9LQIHNDzonkxyuROPfGsNCqizQr eTTycVkfHQdooVcMZjkRSfMEc5M8XqcUwmxXipcUC+CP4wg79FtH5VHXBpvaD7Wc Rvug9VNGQuXGrZ+7jQEBfVUhOKTZEm76hhojjKl1AZSDab5j2OjaoJ602r4/T2Ie uwBYvw66XfDrPhAiBZoxqmmX+KI6Hu6BM/OYmZ5mF+Qb6Vfp2erQsrMrNQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFJTedgPMJlXSvink4L+UwfldwvFVMB8GA1UdIwQY MBaAFGfiTHKE70iH5F1MzZveZ5zZq08AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWi1KTWNvVHZTSWZrWFV6Tm05NW5uTm1yVHdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC8wMmQzZjYtNDMwMS00YmU1LThjMzct MDM3NWE5YzMyYjAwLzEvbE41MkE4d21WZEstS2VUZ3Y1VEItVjNDOFZVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC8wMmQzZjYtNDMwMS00YmU1LThjMzctMDM3NWE5YzMyYjAw LzEvWi1KTWNvVHZTSWZrWFV6Tm05NW5uTm1yVHdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuYjoMA0E AgACMAcDBQAqEMiFMA0GCSqGSIb3DQEBCwUAA4IBAQCdj07ziELs/VvQARFyZCbo gJhGu1ZZA9RmhWxblh/15lkRrH30ckJRpbkkBV+zhOkMY+L+oN+CWb7obJH2nL+u bPvaYajOD5wl5oAdy6A6oxGGiInU5jGmZrRIBaj+NkGE5waSHOHrbiaRMOThilyc sg9lV7OwWg6bS6coumwYhMCaUhEW394UGyUqDcpZZr0yyD2yTsqliapMXVbM+IHk dJcqjyDbtPU7it7d4xO5ezvW9gEUYWQI6UB3TineAGjUVKoQ9B+6F+WdqYJFtkb0 mGBIRDA8d5QnONyx6vzJE2IXjqQ1nGAWqDWAVcDIGtc52AV5zmAfr5MgtFGiB3kb -----END CERTIFICATE-----Generated at Sun Jan 25 21:28:01 2026 by rpki-client