This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/0b55ab-acc8-41da-9c80-e8f20aadde99/1/lwH0nqYhX__-20vFmPdqHfNDIrg.roa File: lwH0nqYhX__-20vFmPdqHfNDIrg.roa (raw, json) Hash identifier: wCraYk4JI+EHVkIbds0t6IzfVaol6i4LvLzpJq3OoSk= Subject key identifier: 97:01:F4:9E:A6:21:5F:FF:FE:DB:4B:C5:98:F7:6A:1D:F3:43:22:B8 Certificate issuer: /CN=dd158a0da03266df144c89a7b6e35a761c4998f7 Certificate serial: 019B7D5AB6CBA6730C46F762A30E4C45D862 Authority key identifier: DD:15:8A:0D:A0:32:66:DF:14:4C:89:A7:B6:E3:5A:76:1C:49:98:F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3RWKDaAyZt8UTImntuNadhxJmPc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/0b55ab-acc8-41da-9c80-e8f20aadde99/1/lwH0nqYhX__-20vFmPdqHfNDIrg.roa Signing time: Fri 02 Jan 2026 06:17:35 +0000 ROA not before: Fri 02 Jan 2026 06:17:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201364 IP address blocks: 46.36.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/0b55ab-acc8-41da-9c80-e8f20aadde99/1/3RWKDaAyZt8UTImntuNadhxJmPc.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/0b55ab-acc8-41da-9c80-e8f20aadde99/1/3RWKDaAyZt8UTImntuNadhxJmPc.mft rsync://rpki.ripe.net/repository/DEFAULT/3RWKDaAyZt8UTImntuNadhxJmPc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5a:b6:cb:a6:73:0c:46:f7:62:a3:0e:4c:45:d8:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dd158a0da03266df144c89a7b6e35a761c4998f7 Validity Not Before: Jan 2 06:17:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9701f49ea6215ffffedb4bc598f76a1df34322b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:3b:e2:45:fb:f7:e7:0d:14:75:94:0e:96:84: 5a:c5:f1:bb:89:6a:67:20:d9:5d:4e:0b:cb:25:47: 1f:bb:90:e7:72:7d:c2:2c:19:09:33:4c:18:fc:55: bc:2f:ce:c7:34:3e:d3:9c:67:ab:09:71:ff:d0:e9: 4e:5a:aa:22:e3:c9:49:85:8c:ca:56:a0:3d:bf:fe: af:61:98:d2:ed:cc:0d:ce:c0:b3:8d:1b:44:e2:17: 83:eb:ea:57:13:e0:90:17:10:3a:27:76:7f:f8:b9: 05:96:93:af:90:45:e5:c8:ff:2c:fa:1a:db:77:15: e8:79:0a:17:02:1e:f6:41:32:a1:49:2b:65:4d:0d: c1:12:64:67:00:5d:03:0f:2a:e2:83:af:81:86:fb: e0:76:a4:7a:bc:78:83:86:55:b0:e5:26:92:39:59: 19:bd:97:d3:49:61:bc:42:a9:9c:3c:e4:4f:19:49: fd:61:9b:b0:89:6c:81:26:0e:fc:28:e4:b5:80:6b: c1:97:2b:17:d4:34:13:1c:e9:66:fc:47:55:0a:6e: 6e:5d:15:7a:c2:d5:5a:9b:89:78:21:1a:36:a2:77: fe:ec:c8:50:9c:a5:bd:57:c1:d4:ec:a9:f6:e9:93: b6:d3:78:cd:5b:0c:3d:1d:ed:bf:bd:04:a4:fc:b1: f4:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:01:F4:9E:A6:21:5F:FF:FE:DB:4B:C5:98:F7:6A:1D:F3:43:22:B8 X509v3 Authority Key Identifier: keyid:DD:15:8A:0D:A0:32:66:DF:14:4C:89:A7:B6:E3:5A:76:1C:49:98:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3RWKDaAyZt8UTImntuNadhxJmPc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/0b55ab-acc8-41da-9c80-e8f20aadde99/1/lwH0nqYhX__-20vFmPdqHfNDIrg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/0b55ab-acc8-41da-9c80-e8f20aadde99/1/3RWKDaAyZt8UTImntuNadhxJmPc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.36.200.0/24 Signature Algorithm: sha256WithRSAEncryption 54:38:b7:74:af:74:16:f7:cb:23:5e:e9:c8:37:6c:c9:df:da: eb:53:92:ac:5f:82:77:2f:5f:5d:e7:2b:f6:5e:c4:2a:3f:94: 63:46:85:fc:7a:a7:97:81:d6:77:40:34:27:dc:52:e7:3b:e0: 0d:00:eb:9d:4f:55:ac:13:a5:1d:ef:7c:b3:52:49:e8:7e:e2: c0:9b:e7:85:86:0c:ed:27:82:fd:44:59:5c:32:f4:e9:29:3a: 35:ee:cf:ca:30:35:f4:93:74:76:d9:f5:d0:d2:8c:82:c5:d1: 2b:98:eb:e1:88:e6:8b:6a:c7:f7:db:eb:7c:29:ca:77:16:ca: 37:0e:4d:21:b7:e1:8f:79:49:1d:2b:3b:ab:0d:47:7a:9b:ab: 8f:68:20:98:f9:c2:53:0c:08:d0:1a:b4:ce:62:96:0d:c1:4b: 6e:4b:8a:77:b8:c1:73:93:16:bb:9f:5f:a6:29:bd:41:09:d1: 6f:ed:85:4c:a5:24:22:74:2e:c0:6c:89:3b:d8:cf:1f:f4:b4: d6:9e:85:76:ac:ca:05:35:2a:4b:ef:78:1d:84:8b:e2:8e:aa: c0:7a:93:49:8d:02:0c:1d:d8:b2:8d:08:b7:4b:14:8e:d0:65: 9d:e0:5c:8d:e9:d2:ce:d1:3a:c0:a3:3e:25:9a:65:a4:4a:23: da:48:44:e2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9WrbLpnMMRvdiow5MRdhiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRkMTU4YTBkYTAzMjY2ZGYxNDRjODlhN2I2ZTM1YTc2MWM0 OTk4ZjcwHhcNMjYwMTAyMDYxNzM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NzAxZjQ5ZWE2MjE1ZmZmZmVkYjRiYzU5OGY3NmExZGYzNDMyMmI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1DviRfv35w0UdZQOloRaxfG7iWpn INldTgvLJUcfu5Dncn3CLBkJM0wY/FW8L87HND7TnGerCXH/0OlOWqoi48lJhYzK VqA9v/6vYZjS7cwNzsCzjRtE4heD6+pXE+CQFxA6J3Z/+LkFlpOvkEXlyP8s+hrb dxXoeQoXAh72QTKhSStlTQ3BEmRnAF0DDyrig6+BhvvgdqR6vHiDhlWw5SaSOVkZ vZfTSWG8QqmcPORPGUn9YZuwiWyBJg78KOS1gGvBlysX1DQTHOlm/EdVCm5uXRV6 wtVam4l4IRo2onf+7MhQnKW9V8HU7Kn26ZO203jNWww9He2/vQSk/LH0wwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJcB9J6mIV///ttLxZj3ah3zQyK4MB8GA1UdIwQY MBaAFN0Vig2gMmbfFEyJp7bjWnYcSZj3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM1JXS0RhQXladDhVVEltbnR1TmFkaHhKbVBjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS8wYjU1YWItYWNjOC00MWRhLTljODAt ZThmMjBhYWRkZTk5LzEvbHdIMG5xWWhYX18tMjB2Rm1QZHFIZk5ESXJnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS8wYjU1YWItYWNjOC00MWRhLTljODAtZThmMjBhYWRkZTk5 LzEvM1JXS0RhQXladDhVVEltbnR1TmFkaHhKbVBjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALiTIMA0G CSqGSIb3DQEBCwUAA4IBAQBUOLd0r3QW98sjXunIN2zJ39rrU5KsX4J3L19d5yv2 XsQqP5RjRoX8eqeXgdZ3QDQn3FLnO+ANAOudT1WsE6Ud73yzUknofuLAm+eFhgzt J4L9RFlcMvTpKTo17s/KMDX0k3R22fXQ0oyCxdErmOvhiOaLasf32+t8Kcp3Fso3 Dk0ht+GPeUkdKzurDUd6m6uPaCCY+cJTDAjQGrTOYpYNwUtuS4p3uMFzkxa7n1+m Kb1BCdFv7YVMpSQidC7AbIk72M8f9LTWnoV2rMoFNSpL73gdhIvijqrAepNJjQIM HdiyjQi3SxSO0GWd4FyN6dLO0TrAoz4lmmWkSiPaSETi -----END CERTIFICATE-----Generated at Sun Jan 25 23:03:41 2026 by rpki-client