This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/LTj2PGdyu1TZVch3WwkoLN3benA.roa File: LTj2PGdyu1TZVch3WwkoLN3benA.roa (raw, json) Hash identifier: 0uIInrnjr5BRMLrYPZ3TlKAb12B+T0z8Pu5nxkwhOwA= Subject key identifier: 2D:38:F6:3C:67:72:BB:54:D9:55:C8:77:5B:09:28:2C:DD:DB:7A:70 Certificate issuer: /CN=387d6df7eb7542e0333aeedd14adff8f51f8cbd8 Certificate serial: 019B7D5B6F7D88FDC8C36AB78CDEF943832A Authority key identifier: 38:7D:6D:F7:EB:75:42:E0:33:3A:EE:DD:14:AD:FF:8F:51:F8:CB:D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OH1t9-t1QuAzOu7dFK3_j1H4y9g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/LTj2PGdyu1TZVch3WwkoLN3benA.roa Signing time: Fri 02 Jan 2026 06:18:22 +0000 ROA not before: Fri 02 Jan 2026 06:18:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212141 IP address blocks: 185.203.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/OH1t9-t1QuAzOu7dFK3_j1H4y9g.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/OH1t9-t1QuAzOu7dFK3_j1H4y9g.mft rsync://rpki.ripe.net/repository/DEFAULT/OH1t9-t1QuAzOu7dFK3_j1H4y9g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:6f:7d:88:fd:c8:c3:6a:b7:8c:de:f9:43:83:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=387d6df7eb7542e0333aeedd14adff8f51f8cbd8 Validity Not Before: Jan 2 06:18:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2d38f63c6772bb54d955c8775b09282cdddb7a70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:fd:29:53:8e:e4:83:02:67:80:74:c9:a9:70: 2e:8f:3c:33:f4:bc:33:e4:88:00:b6:5e:7b:8b:87: e6:f3:1f:86:f7:a8:c9:65:7c:57:9d:2f:b2:69:e6: f6:80:5a:4b:76:6a:ee:ec:c0:ae:fd:23:56:96:c8: bd:64:07:57:59:87:1d:f8:2e:25:8a:5e:31:b5:25: 60:52:8d:a2:a3:71:7a:ff:95:78:fd:45:a1:c3:fd: 61:fc:b6:1c:66:74:47:43:07:03:d3:39:15:fb:3e: 35:46:f9:6b:5d:f5:36:d3:0a:64:2d:f8:92:8a:77: 8e:94:05:92:c8:7f:1b:20:63:e2:43:8e:fe:af:9b: 3f:b9:00:17:83:51:f0:29:83:a8:a8:07:a6:52:a0: 4e:01:96:f4:98:e8:bb:5b:a4:96:c5:76:4a:2a:bc: 8d:45:d5:41:8d:2b:1a:f7:8f:61:70:30:54:11:f3: e8:64:fb:b9:81:03:70:00:43:12:c1:33:db:ff:07: a5:df:c8:20:a3:58:04:7e:78:03:47:29:95:6b:05: c3:93:7c:c1:cb:9b:7f:aa:d4:42:7a:0d:91:ba:94: 51:89:63:e4:5c:49:62:5e:f8:d0:83:61:1b:a2:52: 35:a1:be:dc:a0:1e:23:25:70:31:c4:82:79:cd:3a: a6:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:38:F6:3C:67:72:BB:54:D9:55:C8:77:5B:09:28:2C:DD:DB:7A:70 X509v3 Authority Key Identifier: keyid:38:7D:6D:F7:EB:75:42:E0:33:3A:EE:DD:14:AD:FF:8F:51:F8:CB:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OH1t9-t1QuAzOu7dFK3_j1H4y9g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/LTj2PGdyu1TZVch3WwkoLN3benA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/OH1t9-t1QuAzOu7dFK3_j1H4y9g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.203.199.0/24 Signature Algorithm: sha256WithRSAEncryption 13:18:4e:b2:64:b8:e3:ff:ab:20:ce:a5:e7:87:9a:b0:d4:2e: 47:12:94:46:80:b1:60:21:d3:b5:5b:27:0e:2c:e3:62:8d:35: 1e:f9:82:79:80:8c:2b:39:9b:b0:b4:20:27:57:aa:b8:95:a4: df:b2:02:73:3d:7a:a9:a6:27:7f:01:02:86:de:48:97:ea:5c: ee:7f:1d:12:2a:25:cd:25:3f:bb:ca:b1:a5:f6:1d:6c:4a:72: 77:8b:72:62:48:d5:08:a8:73:e3:56:95:75:2f:3f:8d:20:86: b2:82:69:e3:1c:e0:b5:24:b6:14:b8:dd:41:68:ad:0a:26:cc: bd:a3:e1:c8:18:f5:cd:bf:a2:77:63:85:1d:24:f2:59:bc:9e: 18:35:8e:6f:1b:65:26:2b:91:ff:41:24:f5:35:ce:55:7b:dd: 91:7e:8a:ca:45:9e:df:7d:ae:c2:82:8d:f1:ce:96:da:17:1e: d9:5c:a8:f9:c0:a4:42:93:18:84:0b:18:42:88:bc:91:e1:63: 5a:d0:78:66:bf:cc:17:93:9f:a5:9f:dc:13:f8:5a:d1:2a:65: d4:8c:fc:bd:18:09:50:34:17:b4:64:e3:37:42:d1:6f:52:65: a5:cc:e8:d9:37:82:65:87:f8:03:f4:af:ac:c0:05:e6:cc:f9: 62:ec:74:63 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9W299iP3Iw2q3jN75Q4MqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4N2Q2ZGY3ZWI3NTQyZTAzMzNhZWVkZDE0YWRmZjhmNTFm OGNiZDgwHhcNMjYwMTAyMDYxODIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZDM4ZjYzYzY3NzJiYjU0ZDk1NWM4Nzc1YjA5MjgyY2RkZGI3YTcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2v0pU47kgwJngHTJqXAujzwz9Lwz 5IgAtl57i4fm8x+G96jJZXxXnS+yaeb2gFpLdmru7MCu/SNWlsi9ZAdXWYcd+C4l il4xtSVgUo2io3F6/5V4/UWhw/1h/LYcZnRHQwcD0zkV+z41RvlrXfU20wpkLfiS ineOlAWSyH8bIGPiQ47+r5s/uQAXg1HwKYOoqAemUqBOAZb0mOi7W6SWxXZKKryN RdVBjSsa949hcDBUEfPoZPu5gQNwAEMSwTPb/wel38ggo1gEfngDRymVawXDk3zB y5t/qtRCeg2RupRRiWPkXEliXvjQg2EbolI1ob7coB4jJXAxxIJ5zTqmVwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFC049jxncrtU2VXId1sJKCzd23pwMB8GA1UdIwQY MBaAFDh9bffrdULgMzru3RSt/49R+MvYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0gxdDktdDFRdUF6T3U3ZEZLM19qMUg0eTlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9kNGE4OWMtNTRiMi00NDViLWJiN2Mt NjA5YTQ4YjJiMTRkLzEvTFRqMlBHZHl1MVRaVmNoM1d3a29MTjNiZW5BLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9kNGE4OWMtNTRiMi00NDViLWJiN2MtNjA5YTQ4YjJiMTRk LzEvT0gxdDktdDFRdUF6T3U3ZEZLM19qMUg0eTlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAucvHMA0G CSqGSIb3DQEBCwUAA4IBAQATGE6yZLjj/6sgzqXnh5qw1C5HEpRGgLFgIdO1WycO LONijTUe+YJ5gIwrOZuwtCAnV6q4laTfsgJzPXqppid/AQKG3kiX6lzufx0SKiXN JT+7yrGl9h1sSnJ3i3JiSNUIqHPjVpV1Lz+NIIaygmnjHOC1JLYUuN1BaK0KJsy9 o+HIGPXNv6J3Y4UdJPJZvJ4YNY5vG2UmK5H/QST1Nc5Ve92RforKRZ7ffa7Cgo3x zpbaFx7ZXKj5wKRCkxiECxhCiLyR4WNa0Hhmv8wXk5+ln9wT+FrRKmXUjPy9GAlQ NBe0ZOM3QtFvUmWlzOjZN4Jlh/gD9K+swAXmzPli7HRj -----END CERTIFICATE-----Generated at Mon Jan 26 00:14:08 2026 by rpki-client