This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/bf8338-8752-4d55-9c31-0e1b8fea8913/1/_lawUkPbMS6rKq0eJzdtFnozaP0.roa File: _lawUkPbMS6rKq0eJzdtFnozaP0.roa (raw, json) Hash identifier: 8VAyeac9InM+D4DkCVJjHuFb1ne2vlYSxpVOPX8DTlI= Subject key identifier: FE:56:B0:52:43:DB:31:2E:AB:2A:AD:1E:27:37:6D:16:7A:33:68:FD Certificate issuer: /CN=69507f066f2bb0389dd88436074e1426114f2d92 Certificate serial: 019B7758F4DEDE8DFF180A0A1480B2784A35 Authority key identifier: 69:50:7F:06:6F:2B:B0:38:9D:D8:84:36:07:4E:14:26:11:4F:2D:92 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aVB_Bm8rsDid2IQ2B04UJhFPLZI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/bf8338-8752-4d55-9c31-0e1b8fea8913/1/_lawUkPbMS6rKq0eJzdtFnozaP0.roa Signing time: Thu 01 Jan 2026 02:17:57 +0000 ROA not before: Thu 01 Jan 2026 02:17:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214798 IP address blocks: 178.208.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/bf8338-8752-4d55-9c31-0e1b8fea8913/1/aVB_Bm8rsDid2IQ2B04UJhFPLZI.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/bf8338-8752-4d55-9c31-0e1b8fea8913/1/aVB_Bm8rsDid2IQ2B04UJhFPLZI.mft rsync://rpki.ripe.net/repository/DEFAULT/aVB_Bm8rsDid2IQ2B04UJhFPLZI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:f4:de:de:8d:ff:18:0a:0a:14:80:b2:78:4a:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69507f066f2bb0389dd88436074e1426114f2d92 Validity Not Before: Jan 1 02:17:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fe56b05243db312eab2aad1e27376d167a3368fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:3e:98:6b:93:25:43:7c:5f:11:21:ed:46:02: a9:03:94:3f:3d:a2:43:77:4f:1d:ca:83:f9:30:df: bb:78:d7:e1:ba:bc:d3:a5:44:aa:8b:18:bc:5b:33: 0d:41:0e:f2:21:81:ec:11:cd:f1:5c:b0:f4:f4:16: a3:50:d5:5b:8f:ac:cb:66:b0:8c:0f:fe:5b:57:66: 2c:bd:06:5f:83:89:3f:1a:f4:e9:20:b4:57:e8:1a: 36:47:fb:af:77:0d:8e:9c:d7:15:12:c4:2a:36:4a: 7d:1f:24:af:5a:cc:7d:52:9a:b0:d9:e4:fe:fd:19: 80:50:33:45:ff:af:92:55:fc:9d:c3:38:17:06:c3: 42:2a:fa:b5:35:28:6a:55:09:10:53:dd:cf:60:e2: 4b:be:7b:cd:14:5b:41:14:c0:c9:d8:bf:13:5a:fc: 0b:ef:91:d0:58:e0:85:32:24:04:24:35:ec:be:f2: 0a:92:cf:f1:5e:69:b1:e5:14:5a:2f:62:17:bb:0f: 2d:34:d8:df:4d:70:bf:00:a1:e2:1e:c7:f2:a1:9f: bf:43:86:4e:94:47:e9:db:c2:61:ac:67:fd:a2:6a: 0f:73:1b:40:57:1a:90:ef:dc:58:70:4f:60:3a:45: d9:d4:fb:ce:a7:f6:53:42:c0:dc:e7:97:9f:6b:a8: 51:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:56:B0:52:43:DB:31:2E:AB:2A:AD:1E:27:37:6D:16:7A:33:68:FD X509v3 Authority Key Identifier: keyid:69:50:7F:06:6F:2B:B0:38:9D:D8:84:36:07:4E:14:26:11:4F:2D:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aVB_Bm8rsDid2IQ2B04UJhFPLZI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/bf8338-8752-4d55-9c31-0e1b8fea8913/1/_lawUkPbMS6rKq0eJzdtFnozaP0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/bf8338-8752-4d55-9c31-0e1b8fea8913/1/aVB_Bm8rsDid2IQ2B04UJhFPLZI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.208.87.0/24 Signature Algorithm: sha256WithRSAEncryption 60:15:27:32:ac:23:ad:cc:42:a2:0b:42:f6:78:5a:fc:4d:cf: 23:02:25:f4:f7:02:b9:7b:fa:27:2e:4e:3c:da:c4:f8:1b:f9: f6:b0:a0:62:41:ca:7e:88:dc:9d:a4:47:90:e3:e4:43:ec:db: 58:f0:ff:64:36:01:49:be:c5:70:90:89:c2:6b:8f:21:b3:96: 13:ad:df:8e:09:8e:33:fe:0f:5b:3f:d1:05:49:1f:f9:14:4e: bb:c0:ee:9f:e9:4c:f9:e8:40:7e:1b:22:f2:45:8c:68:7a:8e: 31:98:fd:34:fc:a4:c9:dd:2d:06:6c:3c:89:5e:2c:3f:32:dc: a7:00:8e:ce:cc:ea:96:64:d6:02:8d:79:9b:33:36:e3:c3:08: d2:5d:68:43:ce:94:d3:5e:3d:c5:9e:8b:4e:8c:d4:4b:9a:67: b5:81:6c:d4:c3:6c:cc:c1:9a:85:3c:f1:d1:b4:81:8c:c1:07: 8b:7c:9b:1f:2f:58:03:69:f8:a9:2f:a6:52:18:15:b4:25:84: 6a:cf:eb:ac:32:d4:dd:79:6a:05:ab:81:19:81:96:52:cc:b1: 50:80:d9:26:b5:47:56:67:c5:0b:8f:56:e1:f9:49:0e:11:98: b8:ab:8d:a6:f0:7a:48:23:e1:1b:8f:ff:db:90:9e:15:dc:62: 38:20:3e:e9 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WPTe3o3/GAoKFICyeEo1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5NTA3ZjA2NmYyYmIwMzg5ZGQ4ODQzNjA3NGUxNDI2MTE0 ZjJkOTIwHhcNMjYwMTAxMDIxNzU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZTU2YjA1MjQzZGIzMTJlYWIyYWFkMWUyNzM3NmQxNjdhMzM2OGZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApT6Ya5MlQ3xfESHtRgKpA5Q/PaJD d08dyoP5MN+7eNfhurzTpUSqixi8WzMNQQ7yIYHsEc3xXLD09BajUNVbj6zLZrCM D/5bV2YsvQZfg4k/GvTpILRX6Bo2R/uvdw2OnNcVEsQqNkp9HySvWsx9Upqw2eT+ /RmAUDNF/6+SVfydwzgXBsNCKvq1NShqVQkQU93PYOJLvnvNFFtBFMDJ2L8TWvwL 75HQWOCFMiQEJDXsvvIKks/xXmmx5RRaL2IXuw8tNNjfTXC/AKHiHsfyoZ+/Q4ZO lEfp28JhrGf9omoPcxtAVxqQ79xYcE9gOkXZ1PvOp/ZTQsDc55efa6hRIQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFP5WsFJD2zEuqyqtHic3bRZ6M2j9MB8GA1UdIwQY MBaAFGlQfwZvK7A4ndiENgdOFCYRTy2SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYVZCX0JtOHJzRGlkMklRMkIwNFVKaEZQTFpJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy9iZjgzMzgtODc1Mi00ZDU1LTljMzEt MGUxYjhmZWE4OTEzLzEvX2xhd1VrUGJNUzZyS3EwZUp6ZHRGbm96YVAwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy9iZjgzMzgtODc1Mi00ZDU1LTljMzEtMGUxYjhmZWE4OTEz LzEvYVZCX0JtOHJzRGlkMklRMkIwNFVKaEZQTFpJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAstBXMA0G CSqGSIb3DQEBCwUAA4IBAQBgFScyrCOtzEKiC0L2eFr8Tc8jAiX09wK5e/onLk48 2sT4G/n2sKBiQcp+iNydpEeQ4+RD7NtY8P9kNgFJvsVwkInCa48hs5YTrd+OCY4z /g9bP9EFSR/5FE67wO6f6Uz56EB+GyLyRYxoeo4xmP00/KTJ3S0GbDyJXiw/Mtyn AI7OzOqWZNYCjXmbMzbjwwjSXWhDzpTTXj3FnotOjNRLmme1gWzUw2zMwZqFPPHR tIGMwQeLfJsfL1gDafipL6ZSGBW0JYRqz+usMtTdeWoFq4EZgZZSzLFQgNkmtUdW Z8ULj1bh+UkOEZi4q42m8HpII+Ebj//bkJ4V3GI4ID7p -----END CERTIFICATE-----Generated at Sun Jan 25 10:20:08 2026 by rpki-client