This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/LtFa8fzT4CR2AEnPbRCTDs_X1mw.roa File: LtFa8fzT4CR2AEnPbRCTDs_X1mw.roa (raw, json) Hash identifier: 5KHvYB5qI8p8UlnZYpCutk5KoGFu+weT0Vm7OjyhBW4= Subject key identifier: 2E:D1:5A:F1:FC:D3:E0:24:76:00:49:CF:6D:10:93:0E:CF:D7:D6:6C Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0 Certificate serial: 019B77C7745CD25AFBBF31A0E5FBFCDABF19 Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/LtFa8fzT4CR2AEnPbRCTDs_X1mw.roa Signing time: Thu 01 Jan 2026 04:18:38 +0000 ROA not before: Thu 01 Jan 2026 04:18:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198833 IP address blocks: 5.8.178.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.mft rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:74:5c:d2:5a:fb:bf:31:a0:e5:fb:fc:da:bf:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0 Validity Not Before: Jan 1 04:18:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2ed15af1fcd3e024760049cf6d10930ecfd7d66c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:54:2d:87:39:fe:04:d6:d7:f0:37:1c:e2:0d: 43:48:30:3f:ec:a3:d9:10:c0:35:dc:bb:fc:86:de: 80:1a:37:79:b1:68:be:a6:de:75:96:bb:3e:69:fb: de:cb:ce:66:71:99:d1:78:2d:5b:d6:ab:ae:8f:e0: 36:1f:9b:fe:15:32:96:30:bb:52:4a:21:90:eb:9b: 6a:07:2f:13:c5:a5:af:45:33:75:79:c9:0f:19:a2: eb:34:f8:03:0c:79:82:79:6d:12:6c:95:71:05:1a: 66:02:6c:ed:09:a6:56:25:41:4c:dd:a5:af:d4:e5: 2f:4a:9e:85:47:68:ea:06:86:0e:66:b6:b1:46:97: 5f:f0:03:ef:45:a0:1a:57:1a:12:3e:61:56:35:e2: 78:d4:62:58:35:6f:c7:d9:9c:a6:e7:8b:ba:74:8d: 33:01:94:67:fc:3e:a1:5e:f9:35:1b:8d:6c:14:54: 20:b0:3c:25:cc:d4:a2:0b:a9:fd:4b:8c:9e:99:c6: 82:f3:58:21:57:4a:d0:90:d2:82:b2:09:fb:1b:25: 56:c7:cc:35:10:c5:93:ab:39:10:d1:e7:26:95:05: 08:d1:79:f8:97:95:2f:67:ba:7c:49:e2:a1:3c:3b: b0:0f:70:36:b6:bc:81:ed:70:48:9a:73:a2:9f:54: ac:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:D1:5A:F1:FC:D3:E0:24:76:00:49:CF:6D:10:93:0E:CF:D7:D6:6C X509v3 Authority Key Identifier: keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/LtFa8fzT4CR2AEnPbRCTDs_X1mw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.8.178.0/24 Signature Algorithm: sha256WithRSAEncryption 30:a1:c4:16:e5:fb:04:46:17:92:e1:9c:0d:6b:7f:5e:15:a1: 19:be:bf:9f:a5:13:06:1d:1b:b9:4b:08:cf:ca:6b:f0:d3:7f: 01:e1:e6:34:e5:50:d2:f8:35:0e:c2:c6:36:7d:a2:eb:e6:56: 5d:41:ee:17:f6:22:a5:3f:fb:96:ab:7e:ae:2d:34:40:c0:c7: 74:3e:07:45:e5:09:ea:2c:8d:9f:b2:8c:98:74:dd:f2:78:8a: 53:a4:16:37:7b:89:0f:7c:b9:f3:bd:dc:56:29:fb:5b:68:4d: c2:7f:43:71:b9:86:76:9e:f5:e0:22:5c:24:13:14:dc:0f:68: 13:87:4f:9d:c8:63:70:a3:5f:a9:8e:a4:75:29:98:5e:d2:b4: 1c:d0:24:db:06:e0:d3:96:62:c4:12:bf:f0:ce:94:a6:f5:fc: e7:f4:75:41:c1:8c:11:6f:31:51:85:76:16:33:68:3f:cd:35: e2:4d:3d:f2:34:27:d5:b9:fe:ef:62:35:52:ae:41:79:fb:f3: 1e:55:2d:18:43:9e:89:d6:d4:4c:74:18:5e:00:05:7f:cb:92: 5c:20:55:cc:57:0e:cd:b8:c8:cf:a4:8e:35:4f:36:09:09:ae: 9b:3c:ea:ff:80:8d:08:d9:20:ed:b4:dd:e4:4b:59:c8:04:3c: 7d:fe:97:64 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3x3Rc0lr7vzGg5fv82r8ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyZDdjMmExMDcyZDczNTA3YWRiZjY1MDdkZTY4YWFhYzAx Nzg1YzAwHhcNMjYwMTAxMDQxODM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZWQxNWFmMWZjZDNlMDI0NzYwMDQ5Y2Y2ZDEwOTMwZWNmZDdkNjZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA01Qthzn+BNbX8Dcc4g1DSDA/7KPZ EMA13Lv8ht6AGjd5sWi+pt51lrs+afvey85mcZnReC1b1quuj+A2H5v+FTKWMLtS SiGQ65tqBy8TxaWvRTN1eckPGaLrNPgDDHmCeW0SbJVxBRpmAmztCaZWJUFM3aWv 1OUvSp6FR2jqBoYOZraxRpdf8APvRaAaVxoSPmFWNeJ41GJYNW/H2Zym54u6dI0z AZRn/D6hXvk1G41sFFQgsDwlzNSiC6n9S4yemcaC81ghV0rQkNKCsgn7GyVWx8w1 EMWTqzkQ0ecmlQUI0Xn4l5UvZ7p8SeKhPDuwD3A2tryB7XBImnOin1SstwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFC7RWvH80+AkdgBJz20Qkw7P19ZsMB8GA1UdIwQY MBaAFJLXwqEHLXNQetv2UH3miqrAF4XAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTct ODllNTZjODBkMWQwLzEvTHRGYThmelQ0Q1IyQUVuUGJSQ1REc19YMW13LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTctODllNTZjODBkMWQw LzEva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABQiyMA0G CSqGSIb3DQEBCwUAA4IBAQAwocQW5fsERheS4ZwNa39eFaEZvr+fpRMGHRu5SwjP ymvw038B4eY05VDS+DUOwsY2faLr5lZdQe4X9iKlP/uWq36uLTRAwMd0PgdF5Qnq LI2fsoyYdN3yeIpTpBY3e4kPfLnzvdxWKftbaE3Cf0NxuYZ2nvXgIlwkExTcD2gT h0+dyGNwo1+pjqR1KZhe0rQc0CTbBuDTlmLEEr/wzpSm9fzn9HVBwYwRbzFRhXYW M2g/zTXiTT3yNCfVuf7vYjVSrkF5+/MeVS0YQ56J1tRMdBheAAV/y5JcIFXMVw7N uMjPpI41TzYJCa6bPOr/gI0I2SDttN3kS1nIBDx9/pdk -----END CERTIFICATE-----Generated at Sun Jan 25 22:47:06 2026 by rpki-client