This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/ladyd0Ekz6wTE_sJyN3_nLE-AOE.roa File: ladyd0Ekz6wTE_sJyN3_nLE-AOE.roa (raw, json) Hash identifier: jAOULnSvYDzySi6HdzX7/I1TqKIDoW3zVHgFUF+Swa8= Subject key identifier: 95:A7:72:77:41:24:CF:AC:13:13:FB:09:C8:DD:FF:9C:B1:3E:00:E1 Certificate issuer: /CN=0c5140282591f9912f9639ee1412b6d1dcff0861 Certificate serial: 019B7F1375C7888ABD677BC83FF5982599BE Authority key identifier: 0C:51:40:28:25:91:F9:91:2F:96:39:EE:14:12:B6:D1:DC:FF:08:61 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DFFAKCWR-ZEvljnuFBK20dz_CGE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/ladyd0Ekz6wTE_sJyN3_nLE-AOE.roa Signing time: Fri 02 Jan 2026 14:19:00 +0000 ROA not before: Fri 02 Jan 2026 14:19:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212460 IP address blocks: 188.72.0.0/24 maxlen: 24 188.72.51.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.mft rsync://rpki.ripe.net/repository/DEFAULT/DFFAKCWR-ZEvljnuFBK20dz_CGE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:13:75:c7:88:8a:bd:67:7b:c8:3f:f5:98:25:99:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c5140282591f9912f9639ee1412b6d1dcff0861 Validity Not Before: Jan 2 14:19:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=95a772774124cfac1313fb09c8ddff9cb13e00e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:80:4f:7e:f7:c6:96:63:e1:b2:47:ce:b2:2a: f1:f6:1c:2a:b2:10:be:4c:f0:22:7a:91:04:b8:32: c9:d7:bf:70:cd:27:20:8d:77:cc:ce:3e:cd:ef:32: 19:3d:d8:2d:88:b5:0d:7a:88:2d:6f:15:d8:b4:04: 24:4a:81:7f:a0:5e:fa:bf:a2:da:95:e3:34:40:fe: b8:f5:96:73:c4:f6:bf:cb:01:72:29:ae:fe:ba:fd: 89:ca:22:9a:ae:30:99:9f:9f:1c:e0:a9:82:30:f7: 3e:60:6f:7c:be:06:0a:e5:ee:f6:05:53:98:1d:67: 08:b0:e7:3d:e3:d8:51:68:cb:8a:07:c0:2e:a4:e3: f4:25:e3:ab:03:9d:4f:7a:85:63:5e:11:68:d1:18: e6:40:40:74:80:21:55:a2:86:fc:43:61:14:e6:49: f4:4d:4d:ef:54:b6:84:88:fb:35:06:2e:0f:a4:d3: f3:eb:99:bd:9e:bc:9a:4c:13:d9:f8:9d:a9:dd:62: b1:b8:5f:4b:85:c3:32:2b:03:f7:83:1e:18:29:d5: df:53:18:b4:2d:f3:82:cc:30:d0:27:6f:7c:39:1e: 72:ee:4a:70:24:56:3c:0b:c5:44:0e:cf:5c:5b:89: aa:4c:09:f6:a2:db:7d:ca:fc:24:fe:87:79:96:13: 09:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:A7:72:77:41:24:CF:AC:13:13:FB:09:C8:DD:FF:9C:B1:3E:00:E1 X509v3 Authority Key Identifier: keyid:0C:51:40:28:25:91:F9:91:2F:96:39:EE:14:12:B6:D1:DC:FF:08:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DFFAKCWR-ZEvljnuFBK20dz_CGE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/ladyd0Ekz6wTE_sJyN3_nLE-AOE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.72.0.0/24 188.72.51.0/24 Signature Algorithm: sha256WithRSAEncryption e1:27:b0:21:c1:cf:61:ee:b2:56:8a:5b:2b:12:8c:da:6d:ab: a2:19:54:de:3d:b0:87:0a:42:72:6d:07:4d:f3:6a:8b:4f:a8: 0f:6e:c4:aa:44:6a:fc:b1:49:27:93:92:8b:7c:7b:69:19:ef: 54:c9:56:be:bd:c3:f3:68:8f:b6:ca:0f:91:95:7d:8b:51:b3: 0e:5d:9d:9d:a0:1c:ac:9f:d4:1f:9b:91:e1:cc:88:8e:f7:40: 7c:f6:5e:3c:8a:84:16:69:04:bb:2a:8c:ad:f6:c0:f6:19:bf: 13:58:a1:a3:8e:12:3b:c0:d7:22:d9:11:7a:93:7d:df:e5:ae: 15:32:2c:eb:fe:71:f7:2e:5d:ed:e1:0d:8a:6f:1e:98:14:e3: 80:97:63:63:6c:b2:55:59:7c:0b:2f:ea:bb:2c:20:fe:66:a4: f8:b4:b9:20:85:c2:ec:01:a2:fe:fb:af:32:7c:21:3c:3a:a2: 9c:cc:7a:be:c9:e2:b5:46:ad:15:bd:49:5d:9c:75:20:b5:33: 82:20:b3:1a:12:46:82:1d:ac:92:ae:07:8e:44:ee:5b:48:f1: 60:53:a2:33:1e:3c:da:12:6f:42:bf:b2:d1:4c:af:c2:f1:0d: 85:f1:f0:6a:5f:5f:de:83:d3:4e:20:26:a0:34:fd:50:91:39: 37:0e:5f:f8 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/E3XHiIq9Z3vIP/WYJZm+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjNTE0MDI4MjU5MWY5OTEyZjk2MzllZTE0MTJiNmQxZGNm ZjA4NjEwHhcNMjYwMTAyMTQxOTAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NWE3NzI3NzQxMjRjZmFjMTMxM2ZiMDljOGRkZmY5Y2IxM2UwMGUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnYBPfvfGlmPhskfOsirx9hwqshC+ TPAiepEEuDLJ179wzScgjXfMzj7N7zIZPdgtiLUNeogtbxXYtAQkSoF/oF76v6La leM0QP649ZZzxPa/ywFyKa7+uv2JyiKarjCZn58c4KmCMPc+YG98vgYK5e72BVOY HWcIsOc949hRaMuKB8AupOP0JeOrA51PeoVjXhFo0RjmQEB0gCFVoob8Q2EU5kn0 TU3vVLaEiPs1Bi4PpNPz65m9nryaTBPZ+J2p3WKxuF9LhcMyKwP3gx4YKdXfUxi0 LfOCzDDQJ298OR5y7kpwJFY8C8VEDs9cW4mqTAn2ott9yvwk/od5lhMJKQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFJWncndBJM+sExP7Ccjd/5yxPgDhMB8GA1UdIwQY MBaAFAxRQCglkfmRL5Y57hQSttHc/whhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvREZGQUtDV1ItWkV2bGpudUZCSzIwZHpfQ0dFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy8wNTU0YTItZDNkOS00ZmM0LThlZDUt ZGU5MTQ2OWQzNzcyLzEvbGFkeWQwRWt6NndURV9zSnlOM19uTEUtQU9FLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy8wNTU0YTItZDNkOS00ZmM0LThlZDUtZGU5MTQ2OWQzNzcy LzEvREZGQUtDV1ItWkV2bGpudUZCSzIwZHpfQ0dFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAvEgAAwQA vEgzMA0GCSqGSIb3DQEBCwUAA4IBAQDhJ7Ahwc9h7rJWilsrEozabauiGVTePbCH CkJybQdN82qLT6gPbsSqRGr8sUknk5KLfHtpGe9UyVa+vcPzaI+2yg+RlX2LUbMO XZ2doBysn9Qfm5HhzIiO90B89l48ioQWaQS7Koyt9sD2Gb8TWKGjjhI7wNci2RF6 k33f5a4VMizr/nH3Ll3t4Q2Kbx6YFOOAl2NjbLJVWXwLL+q7LCD+ZqT4tLkghcLs AaL++68yfCE8OqKczHq+yeK1Rq0VvUldnHUgtTOCILMaEkaCHaySrgeORO5bSPFg U6IzHjzaEm9Cv7LRTK/C8Q2F8fBqX1/eg9NOICagNP1QkTk3Dl/4 -----END CERTIFICATE-----Generated at Sun Jan 25 13:03:08 2026 by rpki-client