This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/LzMoFpwq1xtr399Q2O-eh1qOgKY.roa File: LzMoFpwq1xtr399Q2O-eh1qOgKY.roa (raw, json) Hash identifier: VssinASuDA5vdl3dqNLJWGOh/DQjAfjboGvEqrLgXeI= Subject key identifier: 2F:33:28:16:9C:2A:D7:1B:6B:DF:DF:50:D8:EF:9E:87:5A:8E:80:A6 Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf Certificate serial: 019B7910878275C0864FEEE08512433EAB97 Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/LzMoFpwq1xtr399Q2O-eh1qOgKY.roa Signing time: Thu 01 Jan 2026 10:18:05 +0000 ROA not before: Thu 01 Jan 2026 10:18:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214382 IP address blocks: 45.141.150.0/24 maxlen: 24 2a13:a440:8::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:87:82:75:c0:86:4f:ee:e0:85:12:43:3e:ab:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf Validity Not Before: Jan 1 10:18:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2f3328169c2ad71b6bdfdf50d8ef9e875a8e80a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:f4:dc:3f:96:58:f5:03:9f:8b:ea:00:9b:bb: 2d:12:c4:fb:b1:51:06:13:ba:6f:05:96:53:96:4a: 6b:9a:bc:95:25:21:83:d6:25:c2:9a:50:46:51:f4: f5:ff:f6:9c:ea:21:58:1a:d5:f8:c4:ee:27:d8:65: 76:fe:cd:15:7b:1d:b5:cf:d3:f0:ad:b2:83:a8:07: 66:8b:89:9a:17:44:70:b0:93:ed:a9:93:10:35:3a: 15:20:e4:0d:30:59:4b:83:90:27:2b:df:b7:4a:a9: d1:5e:77:3c:5e:00:b5:e6:a7:0b:4e:16:25:6f:de: d0:9f:a1:13:19:6b:ef:66:ee:04:73:67:b9:80:17: ec:7c:97:d8:fd:13:f3:56:ab:09:89:48:1f:82:c0: 89:80:cc:05:36:59:0b:1a:f4:67:35:2f:71:5c:b0: 04:e7:24:20:e8:be:61:fc:f0:44:da:c1:db:36:25: df:28:b7:19:39:b8:f7:bb:7b:4f:0a:26:26:2c:13: 7d:c5:e9:26:85:11:47:51:1a:8f:02:a6:11:6f:7b: 3c:06:ed:37:b8:ff:08:95:4c:f0:12:6c:47:98:18: b0:2f:b8:37:43:95:a5:64:fc:28:3b:9d:4c:9f:3d: db:e1:58:00:09:b3:dc:c9:9b:f1:e4:ee:26:14:5e: 5c:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:33:28:16:9C:2A:D7:1B:6B:DF:DF:50:D8:EF:9E:87:5A:8E:80:A6 X509v3 Authority Key Identifier: keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/LzMoFpwq1xtr399Q2O-eh1qOgKY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.141.150.0/24 IPv6: 2a13:a440:8::/48 Signature Algorithm: sha256WithRSAEncryption 52:1f:c4:85:8a:a9:1e:73:6d:02:4d:98:3c:fc:e8:17:2f:70: 83:44:db:d9:7f:7e:2c:d9:ed:18:4d:06:aa:33:98:27:e0:61: ec:4f:ce:5d:d1:80:28:08:64:e0:9e:d2:54:bf:c4:e7:1d:fe: 60:44:62:42:44:01:ba:ed:9b:f4:e2:f0:d0:50:7a:7f:f3:1c: bd:99:fd:7d:e6:ce:48:a8:4b:c5:e3:bf:86:0a:96:26:18:c9: 56:19:b4:af:be:4c:e6:8c:fd:a8:8c:9c:a5:d0:e0:fb:5f:cb: 77:42:7a:01:c5:ba:0c:0b:91:41:7d:e4:6c:a7:8a:63:e4:ed: b8:60:71:29:d9:c0:15:61:c4:09:61:e4:c1:e1:cc:70:79:8c: e5:b6:2b:42:37:82:51:62:4c:9d:92:81:ac:01:7b:82:e1:4b: 10:44:22:9f:2f:1b:7d:88:1c:4b:b2:4c:c4:62:87:89:dc:91: 9e:f9:19:5e:3f:8d:bf:72:60:e9:eb:1a:ba:1e:36:57:02:39: 89:6e:bc:ab:37:64:3d:5a:a3:20:20:da:04:02:53:7c:39:94: e9:a6:5c:12:53:83:13:d4:fd:11:0b:18:c5:5f:6e:ef:2b:7f: 6e:68:5f:80:a8:1f:55:85:b4:32:21:d3:77:99:38:6f:79:ec: ec:e4:1c:b0 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt5EIeCdcCGT+7ghRJDPquXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4MDVmMTdjMmQ3MTMzZDJkYWQzYThkZjdlMzUzMTVlMzdl ZjVkYWYwHhcNMjYwMTAxMTAxODA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZjMzMjgxNjljMmFkNzFiNmJkZmRmNTBkOGVmOWU4NzVhOGU4MGE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArvTcP5ZY9QOfi+oAm7stEsT7sVEG E7pvBZZTlkprmryVJSGD1iXCmlBGUfT1//ac6iFYGtX4xO4n2GV2/s0Vex21z9Pw rbKDqAdmi4maF0RwsJPtqZMQNToVIOQNMFlLg5AnK9+3SqnRXnc8XgC15qcLThYl b97Qn6ETGWvvZu4Ec2e5gBfsfJfY/RPzVqsJiUgfgsCJgMwFNlkLGvRnNS9xXLAE 5yQg6L5h/PBE2sHbNiXfKLcZObj3u3tPCiYmLBN9xekmhRFHURqPAqYRb3s8Bu03 uP8IlUzwEmxHmBiwL7g3Q5WlZPwoO51Mnz3b4VgACbPcyZvx5O4mFF5cawIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFC8zKBacKtcba9/fUNjvnodajoCmMB8GA1UdIwQY MBaAFEgF8XwtcTPS2tOo3341MV43712vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU0FYeGZDMXhNOUxhMDZqZmZqVXhYamZ2WGE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi84ZTA3ZGQtNGZlNS00ODIwLWJjYmUt NWRkNmUyMmViYWIwLzEvTHpNb0Zwd3ExeHRyMzk5UTJPLWVoMXFPZ0tZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi84ZTA3ZGQtNGZlNS00ODIwLWJjYmUtNWRkNmUyMmViYWIw LzEvU0FYeGZDMXhNOUxhMDZqZmZqVXhYamZ2WGE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQALY2WMA8E AgACMAkDBwAqE6RAAAgwDQYJKoZIhvcNAQELBQADggEBAFIfxIWKqR5zbQJNmDz8 6BcvcINE29l/fizZ7RhNBqozmCfgYexPzl3RgCgIZOCe0lS/xOcd/mBEYkJEAbrt m/Ti8NBQen/zHL2Z/X3mzkioS8Xjv4YKliYYyVYZtK++TOaM/aiMnKXQ4Ptfy3dC egHFugwLkUF95GynimPk7bhgcSnZwBVhxAlh5MHhzHB5jOW2K0I3glFiTJ2SgawB e4LhSxBEIp8vG32IHEuyTMRih4nckZ75GV4/jb9yYOnrGroeNlcCOYluvKs3ZD1a oyAg2gQCU3w5lOmmXBJTgxPU/RELGMVfbu8rf25oX4CoH1WFtDIh03eZOG957Ozk HLA= -----END CERTIFICATE-----Generated at Sun Jan 25 16:53:58 2026 by rpki-client