This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/lPSRXM3S12fXdtxx39QF8F0M4c0.roa File: lPSRXM3S12fXdtxx39QF8F0M4c0.roa (raw, json) Hash identifier: /A9PCEl9b+e1T3TwSmFYBvVgodse+T5jSTXaVD1y3ew= Subject key identifier: 94:F4:91:5C:CD:D2:D7:67:D7:76:DC:71:DF:D4:05:F0:5D:0C:E1:CD Certificate issuer: /CN=05f3e160172ecc75c8cab1bae271be3ebf407a80 Certificate serial: 019B7D5B7BD0B0A65AD57E354A581E864DA8 Authority key identifier: 05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/lPSRXM3S12fXdtxx39QF8F0M4c0.roa Signing time: Fri 02 Jan 2026 06:18:25 +0000 ROA not before: Fri 02 Jan 2026 06:18:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 13628 IP address blocks: 217.79.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.mft rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:7b:d0:b0:a6:5a:d5:7e:35:4a:58:1e:86:4d:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05f3e160172ecc75c8cab1bae271be3ebf407a80 Validity Not Before: Jan 2 06:18:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=94f4915ccdd2d767d776dc71dfd405f05d0ce1cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:67:d4:52:a7:06:1c:f3:60:71:72:08:fc:fe: 1d:75:54:12:da:2a:c3:2b:45:74:70:0d:be:b2:9e: 42:31:ea:a6:69:a6:2d:3a:3c:54:91:73:f1:2f:71: df:bd:af:30:eb:45:a7:42:ec:af:b2:cf:27:6c:2f: 6f:7f:97:24:2d:f9:82:4d:4b:32:f1:fa:81:b8:5a: 8a:e7:fa:6f:4f:52:87:53:56:4c:53:13:74:67:08: 95:44:5d:3f:7d:a7:2a:bb:b9:86:80:74:6b:e1:1e: 8a:c1:c5:38:ba:ec:e0:dc:9c:16:fc:dd:83:91:e0: 14:48:75:c9:63:41:7c:33:1c:76:3b:0a:63:0d:94: d1:15:7e:83:8f:4b:6c:a0:f4:19:77:dd:bd:26:9c: 4c:58:bd:d9:38:39:7d:9a:ed:79:3d:ad:d3:79:6c: 52:b7:4e:9c:ad:70:e1:06:03:b3:18:ea:6b:bd:ef: 17:3a:41:02:36:b9:ca:5e:51:1b:d7:c1:85:d7:1a: fd:f1:c6:41:94:0d:c1:44:4e:a9:3b:4a:92:c8:06: a8:9c:3f:ac:48:dc:c1:ae:cc:6c:7b:5b:56:71:25: 35:86:28:5a:f8:0a:6f:1c:f3:d3:3c:e5:82:8e:fa: 25:42:bb:2d:55:24:49:00:61:e6:22:69:84:34:93: 13:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:F4:91:5C:CD:D2:D7:67:D7:76:DC:71:DF:D4:05:F0:5D:0C:E1:CD X509v3 Authority Key Identifier: keyid:05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/lPSRXM3S12fXdtxx39QF8F0M4c0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.79.175.0/24 Signature Algorithm: sha256WithRSAEncryption 55:c6:94:e8:aa:5d:52:8e:83:71:fb:42:5f:80:5e:f4:d5:1e: 4c:9c:54:68:85:d8:7c:d9:bc:05:f6:c5:dc:e5:34:e5:ad:33: 34:6c:2d:87:88:f5:25:43:a8:77:24:5d:80:0c:3e:51:53:cf: 65:18:11:0e:67:3c:1d:c7:49:e6:b3:48:4b:df:76:49:76:49: 5e:f4:3d:cc:f9:0e:e0:bf:1c:d3:ca:f8:ba:df:12:d1:c9:44: 46:5e:d7:e3:48:5e:d4:14:6d:9d:8e:56:07:64:c5:9e:94:c4: 30:22:ea:14:74:a5:d7:83:08:24:9b:57:d6:6f:69:3e:d3:6d: 0e:e9:d4:e3:e8:03:ab:d9:d8:c4:b2:59:8b:12:17:bc:f5:a0: 1c:4e:e6:b9:f6:b6:30:53:ea:6c:9f:21:45:ef:67:46:50:4d: cc:4b:6c:e1:50:20:3c:05:6a:b5:ca:e2:b2:b8:21:67:7a:7a: 51:ea:d8:90:a1:b9:8d:06:4d:fb:95:17:07:95:ed:49:25:a1: 39:81:ea:fe:9c:08:f9:e2:6b:3e:dd:a0:93:4e:b2:b4:d2:3e: 90:2a:5a:07:b2:53:a5:5b:4d:04:28:a4:04:9f:3a:e5:75:af: 2f:56:d7:1a:ec:4c:3b:0e:f0:de:8b:0c:f6:4d:21:4d:05:8b: 78:3f:d6:1e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9W3vQsKZa1X41Slgehk2oMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1ZjNlMTYwMTcyZWNjNzVjOGNhYjFiYWUyNzFiZTNlYmY0 MDdhODAwHhcNMjYwMTAyMDYxODI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NGY0OTE1Y2NkZDJkNzY3ZDc3NmRjNzFkZmQ0MDVmMDVkMGNlMWNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwGfUUqcGHPNgcXII/P4ddVQS2irD K0V0cA2+sp5CMeqmaaYtOjxUkXPxL3Hfva8w60WnQuyvss8nbC9vf5ckLfmCTUsy 8fqBuFqK5/pvT1KHU1ZMUxN0ZwiVRF0/facqu7mGgHRr4R6KwcU4uuzg3JwW/N2D keAUSHXJY0F8Mxx2OwpjDZTRFX6Dj0tsoPQZd929JpxMWL3ZODl9mu15Pa3TeWxS t06crXDhBgOzGOprve8XOkECNrnKXlEb18GF1xr98cZBlA3BRE6pO0qSyAaonD+s SNzBrsxse1tWcSU1hiha+ApvHPPTPOWCjvolQrstVSRJAGHmImmENJMTVQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJT0kVzN0tdn13bccd/UBfBdDOHNMB8GA1UdIwQY MBaAFAXz4WAXLsx1yMqxuuJxvj6/QHqAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmZQaFlCY3V6SFhJeXJHNjRuRy1QcjlBZW9BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS9hYThiNDYtOTY0NS00NjIwLTg0Nzkt NWQ1NjA5ODljZjdiLzEvbFBTUlhNM1MxMmZYZHR4eDM5UUY4RjBNNGMwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZS9hYThiNDYtOTY0NS00NjIwLTg0NzktNWQ1NjA5ODljZjdi LzEvQmZQaFlCY3V6SFhJeXJHNjRuRy1QcjlBZW9BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2U+vMA0G CSqGSIb3DQEBCwUAA4IBAQBVxpToql1SjoNx+0JfgF701R5MnFRohdh82bwF9sXc 5TTlrTM0bC2HiPUlQ6h3JF2ADD5RU89lGBEOZzwdx0nms0hL33ZJdkle9D3M+Q7g vxzTyvi63xLRyURGXtfjSF7UFG2djlYHZMWelMQwIuoUdKXXgwgkm1fWb2k+020O 6dTj6AOr2djEslmLEhe89aAcTua59rYwU+psnyFF72dGUE3MS2zhUCA8BWq1yuKy uCFnenpR6tiQobmNBk37lRcHle1JJaE5ger+nAj54ms+3aCTTrK00j6QKloHslOl W00EKKQEnzrlda8vVtca7Ew7DvDeiwz2TSFNBYt4P9Ye -----END CERTIFICATE-----Generated at Sun Jan 25 16:38:02 2026 by rpki-client