This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/205d24-009f-486a-976f-2ecda11de153/1/lX8eqAs6CwoIAtAewjNrfYtrQ4s.roa File: lX8eqAs6CwoIAtAewjNrfYtrQ4s.roa (raw, json) Hash identifier: z/P+PTXsb20XgLXYqeqn92M2nr8qJ+zQMUYiqOb95J8= Subject key identifier: 95:7F:1E:A8:0B:3A:0B:0A:08:02:D0:1E:C2:33:6B:7D:8B:6B:43:8B Certificate issuer: /CN=025f2a93db10f2dd5f6a55bb2a440f67486cd1a3 Certificate serial: 019B79ECE78217870D940FB238061A5F185A Authority key identifier: 02:5F:2A:93:DB:10:F2:DD:5F:6A:55:BB:2A:44:0F:67:48:6C:D1:A3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Al8qk9sQ8t1falW7KkQPZ0hs0aM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/205d24-009f-486a-976f-2ecda11de153/1/lX8eqAs6CwoIAtAewjNrfYtrQ4s.roa Signing time: Thu 01 Jan 2026 14:18:47 +0000 ROA not before: Thu 01 Jan 2026 14:18:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62304 IP address blocks: 45.95.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/205d24-009f-486a-976f-2ecda11de153/1/Al8qk9sQ8t1falW7KkQPZ0hs0aM.crl rsync://rpki.ripe.net/repository/DEFAULT/df/205d24-009f-486a-976f-2ecda11de153/1/Al8qk9sQ8t1falW7KkQPZ0hs0aM.mft rsync://rpki.ripe.net/repository/DEFAULT/Al8qk9sQ8t1falW7KkQPZ0hs0aM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:e7:82:17:87:0d:94:0f:b2:38:06:1a:5f:18:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=025f2a93db10f2dd5f6a55bb2a440f67486cd1a3 Validity Not Before: Jan 1 14:18:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=957f1ea80b3a0b0a0802d01ec2336b7d8b6b438b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:37:b3:46:a0:bf:23:61:df:9a:91:5b:22:ff: b4:dd:66:37:93:23:41:53:0c:92:e3:ad:8b:9e:4a: 0a:aa:34:84:68:67:56:34:5e:b0:18:c3:5f:11:75: 9a:f6:35:0e:b2:df:a5:bf:c6:eb:56:3a:53:12:38: ae:38:97:68:9c:f7:e1:52:51:bf:01:a4:6e:0a:7d: 44:40:fc:65:9e:0f:4d:70:18:c3:78:a2:ea:ca:5f: 21:d8:55:a7:58:f3:59:6d:c4:fb:c3:93:e5:42:56: 0a:92:56:95:0a:e7:04:00:1f:bb:7b:0e:c9:97:bd: 81:ab:92:ee:96:56:9c:71:54:51:74:a3:2d:13:07: 03:bc:dd:3b:9e:22:5c:a4:48:c6:37:a2:eb:94:0a: 98:d1:4c:fa:31:94:7e:0a:e2:3d:b6:1c:91:56:87: c1:75:68:d8:fe:ec:7b:21:1e:66:5d:7a:84:36:7e: 18:64:b6:27:cd:2a:92:b6:a1:85:02:fb:3c:b1:0c: 73:6d:db:90:0d:70:7c:ff:9a:1f:2c:8d:5b:93:29: d5:02:70:7b:8f:29:6a:93:87:b4:00:b8:af:e5:c5: 5e:7b:f9:9c:f8:39:94:d5:18:95:b3:f2:3a:f5:29: d7:cf:e2:2f:44:4e:07:f0:70:36:f0:5f:bc:cb:9c: 55:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:7F:1E:A8:0B:3A:0B:0A:08:02:D0:1E:C2:33:6B:7D:8B:6B:43:8B X509v3 Authority Key Identifier: keyid:02:5F:2A:93:DB:10:F2:DD:5F:6A:55:BB:2A:44:0F:67:48:6C:D1:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Al8qk9sQ8t1falW7KkQPZ0hs0aM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/205d24-009f-486a-976f-2ecda11de153/1/lX8eqAs6CwoIAtAewjNrfYtrQ4s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/205d24-009f-486a-976f-2ecda11de153/1/Al8qk9sQ8t1falW7KkQPZ0hs0aM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.95.144.0/24 Signature Algorithm: sha256WithRSAEncryption a5:25:b6:c8:cb:0f:d4:56:a2:24:e5:e0:fb:ab:f4:bf:9e:18: c7:e2:51:b8:ae:98:b3:97:3d:75:43:34:44:b1:50:f2:95:05: 92:f4:65:80:78:63:99:83:af:c5:a3:26:0b:d3:93:a4:d2:f4: 65:65:0a:98:90:4f:0f:98:63:fb:59:38:90:53:8d:89:72:a8: 08:b5:b3:f3:ce:0d:ae:1d:b8:36:4b:af:05:7b:f6:b6:89:a4: cb:ab:d0:d9:33:3f:cf:48:59:17:e2:b2:bf:36:a3:dd:f2:c8: 91:e6:6a:56:6d:af:98:5a:a3:7a:67:aa:6f:8c:6b:94:79:19: 7c:c5:e6:37:df:c1:f9:dc:9b:50:28:39:ea:14:eb:d6:e7:41: 72:cf:50:19:83:cd:e8:3b:4d:86:88:d3:a2:a5:ba:75:43:df: 48:db:90:3c:c7:67:a0:04:e5:82:84:b0:17:4a:1e:44:cd:ac: 09:78:7a:19:14:01:69:5a:e3:69:61:ec:a3:a1:f8:ae:35:77: c8:93:88:bc:70:f7:c1:71:1e:34:55:14:3f:8d:75:0c:e0:cf: 64:df:18:f0:07:4d:c4:4c:81:60:70:16:bb:0a:23:24:b7:37: 63:1f:eb:97:8b:d8:e0:68:be:74:d9:90:28:0d:0a:43:a0:71: 51:e6:d9:62 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57OeCF4cNlA+yOAYaXxhaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAyNWYyYTkzZGIxMGYyZGQ1ZjZhNTViYjJhNDQwZjY3NDg2 Y2QxYTMwHhcNMjYwMTAxMTQxODQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NTdmMWVhODBiM2EwYjBhMDgwMmQwMWVjMjMzNmI3ZDhiNmI0MzhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAujezRqC/I2HfmpFbIv+03WY3kyNB UwyS462LnkoKqjSEaGdWNF6wGMNfEXWa9jUOst+lv8brVjpTEjiuOJdonPfhUlG/ AaRuCn1EQPxlng9NcBjDeKLqyl8h2FWnWPNZbcT7w5PlQlYKklaVCucEAB+7ew7J l72Bq5LullaccVRRdKMtEwcDvN07niJcpEjGN6LrlAqY0Uz6MZR+CuI9thyRVofB dWjY/ux7IR5mXXqENn4YZLYnzSqStqGFAvs8sQxzbduQDXB8/5ofLI1bkynVAnB7 jylqk4e0ALiv5cVee/mc+DmU1RiVs/I69SnXz+IvRE4H8HA28F+8y5xVPQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJV/HqgLOgsKCALQHsIza32La0OLMB8GA1UdIwQY MBaAFAJfKpPbEPLdX2pVuypED2dIbNGjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQWw4cWs5c1E4dDFmYWxXN0trUVBaMGhzMGFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi8yMDVkMjQtMDA5Zi00ODZhLTk3NmYt MmVjZGExMWRlMTUzLzEvbFg4ZXFBczZDd29JQXRBZXdqTnJmWXRyUTRzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi8yMDVkMjQtMDA5Zi00ODZhLTk3NmYtMmVjZGExMWRlMTUz LzEvQWw4cWs5c1E4dDFmYWxXN0trUVBaMGhzMGFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALV+QMA0G CSqGSIb3DQEBCwUAA4IBAQClJbbIyw/UVqIk5eD7q/S/nhjH4lG4rpizlz11QzRE sVDylQWS9GWAeGOZg6/FoyYL05Ok0vRlZQqYkE8PmGP7WTiQU42JcqgItbPzzg2u Hbg2S68Fe/a2iaTLq9DZMz/PSFkX4rK/NqPd8siR5mpWba+YWqN6Z6pvjGuUeRl8 xeY338H53JtQKDnqFOvW50Fyz1AZg83oO02GiNOipbp1Q99I25A8x2egBOWChLAX Sh5EzawJeHoZFAFpWuNpYeyjofiuNXfIk4i8cPfBcR40VRQ/jXUM4M9k3xjwB03E TIFgcBa7CiMktzdjH+uXi9jgaL502ZAoDQpDoHFR5tli -----END CERTIFICATE-----Generated at Sun Jan 25 22:13:12 2026 by rpki-client