This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/Lo2XT5MvXp3jJXeKo9851h0hMiQ.roa File: Lo2XT5MvXp3jJXeKo9851h0hMiQ.roa (raw, json) Hash identifier: BbHuhDUXyn6LgVC6At2JbRLy1BJVGPqkS16DCy63GYo= Subject key identifier: 2E:8D:97:4F:93:2F:5E:9D:E3:25:77:8A:A3:DF:39:D6:1D:21:32:24 Certificate issuer: /CN=0c90c356e2864f43894857443555d8b5c0352819 Certificate serial: 019B7A5B0F45033227ECEE9EDB6D09A4B9C3 Authority key identifier: 0C:90:C3:56:E2:86:4F:43:89:48:57:44:35:55:D8:B5:C0:35:28:19 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DJDDVuKGT0OJSFdENVXYtcA1KBk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/Lo2XT5MvXp3jJXeKo9851h0hMiQ.roa Signing time: Thu 01 Jan 2026 16:19:06 +0000 ROA not before: Thu 01 Jan 2026 16:19:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214198 IP address blocks: 82.199.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.mft rsync://rpki.ripe.net/repository/DEFAULT/DJDDVuKGT0OJSFdENVXYtcA1KBk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:0f:45:03:32:27:ec:ee:9e:db:6d:09:a4:b9:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c90c356e2864f43894857443555d8b5c0352819 Validity Not Before: Jan 1 16:19:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2e8d974f932f5e9de325778aa3df39d61d213224 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:16:1b:07:f8:ce:b7:70:61:c6:a9:ca:ca:cc: 03:84:e6:07:8b:83:47:78:5f:6d:50:dc:56:83:4e: 35:d2:71:3b:1f:35:77:dd:3e:07:c6:46:da:e8:37: c1:66:9c:3b:e5:00:8c:b7:c5:56:a3:7a:c1:c2:22: d8:62:42:04:f3:5f:16:30:68:97:93:b1:a4:a6:93: 05:e4:38:ca:ca:e7:53:a9:4a:fa:05:f6:93:60:75: d3:af:02:b1:e3:97:6b:89:4a:eb:ac:4f:a0:89:75: f3:fb:a8:36:99:c1:4f:89:ed:75:86:42:9d:4f:89: 27:5d:44:35:e1:0a:51:ba:83:7d:5c:81:2d:77:90: ab:7d:49:26:d4:5c:3b:33:da:3a:7a:0a:fa:13:a9: b5:04:0f:05:47:fa:e4:71:fa:a7:34:13:75:bb:a9: b1:57:59:9b:4b:77:ba:e6:e8:ee:16:09:52:2e:89: e8:05:64:c6:91:66:24:d0:4f:90:43:0e:c4:fe:7d: 36:72:57:88:2e:d9:81:c4:2a:1e:1d:bb:9b:a7:f8: 80:b8:fb:88:4c:2d:dc:db:31:28:ea:66:5c:0f:cc: b2:ea:05:1b:f1:5e:91:06:bc:20:44:31:d2:2f:67: d2:07:32:07:f1:eb:08:05:f9:84:ef:a6:c6:38:4d: 09:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:8D:97:4F:93:2F:5E:9D:E3:25:77:8A:A3:DF:39:D6:1D:21:32:24 X509v3 Authority Key Identifier: keyid:0C:90:C3:56:E2:86:4F:43:89:48:57:44:35:55:D8:B5:C0:35:28:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DJDDVuKGT0OJSFdENVXYtcA1KBk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/Lo2XT5MvXp3jJXeKo9851h0hMiQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.199.200.0/24 Signature Algorithm: sha256WithRSAEncryption 63:65:ae:9d:95:0a:78:d0:0c:cb:35:65:73:61:ae:17:0a:6c: 89:04:45:9a:fc:b5:77:ad:b7:3e:9a:8b:9a:56:76:93:32:7d: df:4c:d4:1d:0c:e2:87:9b:db:fd:5e:ea:01:f9:6b:d2:58:be: 47:0c:dc:77:d0:65:94:5e:dc:8c:e3:02:ab:87:1c:5a:a4:ef: 3f:57:3c:d8:47:7c:66:af:dd:b8:8b:92:9c:53:91:1d:23:9e: 16:eb:db:77:e3:fd:ea:f2:6a:4b:6a:54:21:f2:b0:e2:f3:eb: 52:8d:b2:3c:9d:63:42:33:17:5f:de:f6:49:6d:c0:2d:8f:11: 6d:9e:4e:70:f6:51:7d:b4:54:af:ba:c9:7c:2e:f7:72:60:5b: 47:00:8d:02:93:65:7d:8d:6d:c4:64:46:1c:a3:31:53:fa:2f: 01:3f:5c:79:4f:77:a3:b4:b0:aa:e7:63:3a:c0:e5:bf:33:9f: 6a:b8:40:23:0c:16:c0:2c:91:0e:dc:57:f3:72:a0:60:2f:82: f4:30:82:fb:02:7a:2a:ad:f5:51:0f:34:33:e8:7e:21:ad:19: bc:60:0e:ac:28:44:73:1b:de:60:fe:47:9e:bb:cf:ed:8e:d7: d0:0f:88:48:5c:b0:d9:25:5c:f5:f7:9f:09:d0:8e:51:37:25: 5d:be:a4:72 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6Ww9FAzIn7O6e220JpLnDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjOTBjMzU2ZTI4NjRmNDM4OTQ4NTc0NDM1NTVkOGI1YzAz NTI4MTkwHhcNMjYwMTAxMTYxOTA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZThkOTc0ZjkzMmY1ZTlkZTMyNTc3OGFhM2RmMzlkNjFkMjEzMjI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoxYbB/jOt3BhxqnKyswDhOYHi4NH eF9tUNxWg0410nE7HzV33T4Hxkba6DfBZpw75QCMt8VWo3rBwiLYYkIE818WMGiX k7GkppMF5DjKyudTqUr6BfaTYHXTrwKx45driUrrrE+giXXz+6g2mcFPie11hkKd T4knXUQ14QpRuoN9XIEtd5CrfUkm1Fw7M9o6egr6E6m1BA8FR/rkcfqnNBN1u6mx V1mbS3e65ujuFglSLonoBWTGkWYk0E+QQw7E/n02cleILtmBxCoeHbubp/iAuPuI TC3c2zEo6mZcD8yy6gUb8V6RBrwgRDHSL2fSBzIH8esIBfmE76bGOE0JnQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFC6Nl0+TL16d4yV3iqPfOdYdITIkMB8GA1UdIwQY MBaAFAyQw1bihk9DiUhXRDVV2LXANSgZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvREpERFZ1S0dUME9KU0ZkRU5WWFl0Y0ExS0JrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9hYzVhNTYtMTYzYS00OTdhLTk1NDct ZTM3OTlhZGU5ZGZlLzEvTG8yWFQ1TXZYcDNqSlhlS285ODUxaDBoTWlRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9hYzVhNTYtMTYzYS00OTdhLTk1NDctZTM3OTlhZGU5ZGZl LzEvREpERFZ1S0dUME9KU0ZkRU5WWFl0Y0ExS0JrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUsfIMA0G CSqGSIb3DQEBCwUAA4IBAQBjZa6dlQp40AzLNWVzYa4XCmyJBEWa/LV3rbc+moua VnaTMn3fTNQdDOKHm9v9XuoB+WvSWL5HDNx30GWUXtyM4wKrhxxapO8/VzzYR3xm r924i5KcU5EdI54W69t34/3q8mpLalQh8rDi8+tSjbI8nWNCMxdf3vZJbcAtjxFt nk5w9lF9tFSvusl8LvdyYFtHAI0Ck2V9jW3EZEYcozFT+i8BP1x5T3ejtLCq52M6 wOW/M59quEAjDBbALJEO3FfzcqBgL4L0MIL7AnoqrfVRDzQz6H4hrRm8YA6sKERz G95g/keeu8/tjtfQD4hIXLDZJVz1958J0I5RNyVdvqRy -----END CERTIFICATE-----Generated at Mon Jan 26 03:27:45 2026 by rpki-client