This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/LDWe2SngnhCT8P4q-miYjt99pqY.roa File: LDWe2SngnhCT8P4q-miYjt99pqY.roa (raw, json) Hash identifier: aLbq8y9d6k1sRpBOiELvMKcrET2yuN4aNlw+zUtUThI= Subject key identifier: 2C:35:9E:D9:29:E0:9E:10:93:F0:FE:2A:FA:68:98:8E:DF:7D:A6:A6 Certificate issuer: /CN=297ae7592ca52491dc166a30fe1477d712bd465d Certificate serial: 019B7C8060B2849AED4BD557ACE43DF401CB Authority key identifier: 29:7A:E7:59:2C:A5:24:91:DC:16:6A:30:FE:14:77:D7:12:BD:46:5D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KXrnWSylJJHcFmow_hR31xK9Rl0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/LDWe2SngnhCT8P4q-miYjt99pqY.roa Signing time: Fri 02 Jan 2026 02:19:06 +0000 ROA not before: Fri 02 Jan 2026 02:19:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214356 IP address blocks: 94.159.81.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.mft rsync://rpki.ripe.net/repository/DEFAULT/KXrnWSylJJHcFmow_hR31xK9Rl0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:60:b2:84:9a:ed:4b:d5:57:ac:e4:3d:f4:01:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=297ae7592ca52491dc166a30fe1477d712bd465d Validity Not Before: Jan 2 02:19:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2c359ed929e09e1093f0fe2afa68988edf7da6a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:66:6f:60:46:74:9f:63:9b:2f:8b:0a:4b:b4: 5a:d1:89:f6:fe:ac:dd:88:cb:56:67:32:2a:87:67: d6:00:54:3a:33:f3:73:85:ff:9b:df:b1:db:e1:aa: 01:4f:5f:f5:e6:ae:18:24:54:6b:43:fa:53:20:9b: f3:7a:ba:8c:21:42:8c:24:b9:0a:15:ff:36:d6:4b: 04:a0:29:1f:bb:dd:c3:72:83:34:2e:2c:dd:1e:e0: 94:6f:7d:cf:95:07:e7:a7:a4:04:4a:23:5f:d1:57: 01:a4:fe:b1:dc:11:12:3d:63:68:a8:57:35:19:7d: 14:e6:3b:b1:7a:90:10:ae:6e:27:5b:6d:a9:a3:45: 01:da:e8:12:2c:d6:cb:ff:96:bb:11:35:ef:56:72: f9:93:b7:ea:e2:5c:6f:6e:34:bc:83:86:3e:55:f8: cd:0e:d8:10:a8:27:1b:0c:c8:08:e5:53:2d:ef:18: 7e:e5:e0:09:b0:9a:f9:fa:49:3c:5c:4b:b9:f5:fe: 4d:12:b7:05:20:88:ed:69:5b:00:f2:b1:32:35:14: a8:89:b4:69:a6:18:90:4d:26:ce:a0:5c:d4:4b:4f: b9:2e:5d:2a:18:f3:0e:98:55:d2:8d:2c:91:75:2a: 06:fe:d0:be:02:1d:cf:f0:c4:0a:90:e1:e1:ea:f4: 33:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:35:9E:D9:29:E0:9E:10:93:F0:FE:2A:FA:68:98:8E:DF:7D:A6:A6 X509v3 Authority Key Identifier: keyid:29:7A:E7:59:2C:A5:24:91:DC:16:6A:30:FE:14:77:D7:12:BD:46:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXrnWSylJJHcFmow_hR31xK9Rl0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/LDWe2SngnhCT8P4q-miYjt99pqY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.159.81.0/24 Signature Algorithm: sha256WithRSAEncryption 15:b0:11:aa:2a:e2:b0:38:68:1c:8f:8a:00:d2:b9:59:80:ee: 1f:96:8c:c9:dc:e8:d0:f6:d8:6c:62:5e:44:1b:41:33:a4:51: 6a:20:03:bc:02:b3:ec:d6:b4:74:53:81:ea:13:15:c6:57:d5: e9:13:19:ca:bb:e2:6e:0d:84:25:97:3e:21:0d:00:ff:03:bf: 98:3e:9c:16:15:87:1d:09:61:a3:d7:09:6b:0b:31:09:ef:f4: b2:14:f4:6d:8f:b0:c0:87:27:65:08:90:2a:4e:43:30:b9:d8: c1:4a:fb:17:69:e0:15:f3:72:b0:29:10:e0:43:85:a0:79:f7: e2:4b:03:9c:b6:47:32:72:6f:64:7d:10:bb:b7:96:f7:1d:1e: 47:be:d9:36:15:a9:f6:d3:13:5e:a0:71:06:bd:12:54:fa:d9: c9:2b:15:a9:f9:94:00:51:d2:3a:48:65:ed:fd:a8:ec:6d:87: b3:fc:4d:97:f6:7d:97:0b:17:6f:87:1a:3c:69:55:24:32:09: a6:72:76:a4:50:39:53:c4:34:fc:2d:48:90:aa:f4:60:ed:76: f7:a2:6b:e9:ee:0c:c6:fc:e1:9e:40:09:41:09:30:aa:55:9f: 60:52:fe:2c:e2:49:fb:ba:91:58:16:f4:46:21:dc:0b:a8:ca: 0f:0e:44:95 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gGCyhJrtS9VXrOQ99AHLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5N2FlNzU5MmNhNTI0OTFkYzE2NmEzMGZlMTQ3N2Q3MTJi ZDQ2NWQwHhcNMjYwMTAyMDIxOTA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYzM1OWVkOTI5ZTA5ZTEwOTNmMGZlMmFmYTY4OTg4ZWRmN2RhNmE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtmZvYEZ0n2ObL4sKS7Ra0Yn2/qzd iMtWZzIqh2fWAFQ6M/Nzhf+b37Hb4aoBT1/15q4YJFRrQ/pTIJvzerqMIUKMJLkK Ff821ksEoCkfu93DcoM0LizdHuCUb33PlQfnp6QESiNf0VcBpP6x3BESPWNoqFc1 GX0U5juxepAQrm4nW22po0UB2ugSLNbL/5a7ETXvVnL5k7fq4lxvbjS8g4Y+VfjN DtgQqCcbDMgI5VMt7xh+5eAJsJr5+kk8XEu59f5NErcFIIjtaVsA8rEyNRSoibRp phiQTSbOoFzUS0+5Ll0qGPMOmFXSjSyRdSoG/tC+Ah3P8MQKkOHh6vQz7wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCw1ntkp4J4Qk/D+KvpomI7ffaamMB8GA1UdIwQY MBaAFCl651kspSSR3BZqMP4Ud9cSvUZdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1hybldTeWxKSkhjRm1vd19oUjMxeEs5UmwwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS80OGUxZTgtMzI4ZC00ZjgyLTkzOTgt MzkxMGE1OWExMTIxLzEvTERXZTJTbmduaENUOFA0cS1taVlqdDk5cHFZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS80OGUxZTgtMzI4ZC00ZjgyLTkzOTgtMzkxMGE1OWExMTIx LzEvS1hybldTeWxKSkhjRm1vd19oUjMxeEs5UmwwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXp9RMA0G CSqGSIb3DQEBCwUAA4IBAQAVsBGqKuKwOGgcj4oA0rlZgO4flozJ3OjQ9thsYl5E G0EzpFFqIAO8ArPs1rR0U4HqExXGV9XpExnKu+JuDYQllz4hDQD/A7+YPpwWFYcd CWGj1wlrCzEJ7/SyFPRtj7DAhydlCJAqTkMwudjBSvsXaeAV83KwKRDgQ4Wgeffi SwOctkcycm9kfRC7t5b3HR5Hvtk2Fan20xNeoHEGvRJU+tnJKxWp+ZQAUdI6SGXt /ajsbYez/E2X9n2XCxdvhxo8aVUkMgmmcnakUDlTxDT8LUiQqvRg7Xb3omvp7gzG /OGeQAlBCTCqVZ9gUv4s4kn7upFYFvRGIdwLqMoPDkSV -----END CERTIFICATE-----Generated at Sun Jan 25 16:56:02 2026 by rpki-client