This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/4690c0-0b91-4322-94b9-706782cfa03b/1/LxAfqO9DJb5pX4Ib_IiY5pQ6IIs.roa File: LxAfqO9DJb5pX4Ib_IiY5pQ6IIs.roa (raw, json) Hash identifier: YzoiNF9QrUDbASLIJfkxXS0XmPF5J0XBaYWRaRu5sbk= Subject key identifier: 2F:10:1F:A8:EF:43:25:BE:69:5F:82:1B:FC:88:98:E6:94:3A:20:8B Certificate issuer: /CN=2330e26060913c758137488bfd7ab1bfe9e10ae2 Certificate serial: 019B7C1189A53A895743392007C75317A90E Authority key identifier: 23:30:E2:60:60:91:3C:75:81:37:48:8B:FD:7A:B1:BF:E9:E1:0A:E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IzDiYGCRPHWBN0iL_Xqxv-nhCuI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/4690c0-0b91-4322-94b9-706782cfa03b/1/LxAfqO9DJb5pX4Ib_IiY5pQ6IIs.roa Signing time: Fri 02 Jan 2026 00:18:02 +0000 ROA not before: Fri 02 Jan 2026 00:18:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31027 IP address blocks: 185.203.233.0/24 maxlen: 24 185.203.234.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/4690c0-0b91-4322-94b9-706782cfa03b/1/IzDiYGCRPHWBN0iL_Xqxv-nhCuI.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/4690c0-0b91-4322-94b9-706782cfa03b/1/IzDiYGCRPHWBN0iL_Xqxv-nhCuI.mft rsync://rpki.ripe.net/repository/DEFAULT/IzDiYGCRPHWBN0iL_Xqxv-nhCuI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:89:a5:3a:89:57:43:39:20:07:c7:53:17:a9:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2330e26060913c758137488bfd7ab1bfe9e10ae2 Validity Not Before: Jan 2 00:18:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2f101fa8ef4325be695f821bfc8898e6943a208b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:ff:47:cd:dc:4c:8c:47:aa:e5:fe:bb:d7:66: c5:ee:13:4b:c4:f6:a8:bc:51:40:5f:57:86:e4:b0: 38:f1:a0:1a:ec:ef:47:48:c4:17:a3:0a:d5:62:0b: 8a:0b:de:94:c8:44:66:e4:18:d8:2f:fa:db:f5:62: a4:c0:2b:30:c3:75:e6:56:3f:3a:be:89:50:c2:b2: 00:59:00:1b:68:a1:d9:c0:00:41:a9:73:71:55:8c: 34:e9:20:88:bb:1f:43:d4:aa:fb:91:8c:71:ab:2e: ed:fb:ec:ab:e4:e7:77:c6:9e:9e:62:7a:eb:7b:1a: 3c:41:6f:c9:72:4e:1c:7d:be:2f:4a:6c:de:e8:06: 4a:47:51:f7:48:9b:db:97:84:e0:b4:6f:dd:e2:ed: aa:a2:98:bd:e9:d9:11:12:73:f3:55:ff:f3:a0:6c: 2f:89:4a:9c:76:9f:57:c7:9d:41:90:ae:65:fb:93: 91:c4:e1:a3:b7:cd:93:58:27:ac:61:28:6c:80:ca: ee:70:87:b2:d2:49:c6:58:df:2c:bc:f5:e2:dd:3d: 7d:08:c7:d9:36:af:4e:6e:58:d9:48:ea:e3:08:60: f7:7c:99:72:34:45:2f:62:34:32:b6:16:3f:d9:69: 42:52:75:e2:ac:d1:56:5c:54:43:3a:19:d7:6c:77: 95:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:10:1F:A8:EF:43:25:BE:69:5F:82:1B:FC:88:98:E6:94:3A:20:8B X509v3 Authority Key Identifier: keyid:23:30:E2:60:60:91:3C:75:81:37:48:8B:FD:7A:B1:BF:E9:E1:0A:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IzDiYGCRPHWBN0iL_Xqxv-nhCuI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4690c0-0b91-4322-94b9-706782cfa03b/1/LxAfqO9DJb5pX4Ib_IiY5pQ6IIs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4690c0-0b91-4322-94b9-706782cfa03b/1/IzDiYGCRPHWBN0iL_Xqxv-nhCuI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.203.233.0-185.203.234.255 Signature Algorithm: sha256WithRSAEncryption 37:f3:46:d2:52:54:21:55:ce:59:c9:85:f6:c6:90:39:88:d4: 16:18:ae:3c:b2:28:55:74:50:4a:fc:00:01:0e:4a:72:7f:f4: a7:33:85:0d:f6:6a:1c:1f:41:28:37:59:13:c7:57:e4:3b:a8: 5a:eb:1b:43:44:81:89:46:8a:f7:b6:0d:b9:ec:13:bd:33:d1: 90:79:15:02:ac:c2:35:24:cd:fd:aa:c3:b9:43:d3:fc:5a:61: 53:24:ef:83:2f:5b:a6:a2:a2:1b:92:6b:74:b4:88:fb:12:55: e9:55:8d:e8:9d:9a:6a:be:b6:2f:19:0f:d8:63:a6:13:df:b3: 25:df:62:64:95:9a:86:48:f6:7a:7d:0e:22:5d:bd:9a:86:78: e0:34:59:8d:5a:a3:aa:9e:f6:e0:87:a8:11:bb:87:11:b1:6a: 20:90:2c:a0:08:24:f5:8e:0a:1e:6d:2f:98:5c:32:b2:93:bc: 4d:60:f0:f8:39:ca:6f:65:89:c5:f2:c9:78:5c:6f:3e:19:f6: 31:de:c4:a8:27:e9:b8:1b:1d:ef:64:1e:a7:52:5c:a3:3c:b0: e6:b6:43:6a:23:1a:13:70:97:af:b6:8a:4a:8f:cf:c0:8b:18: 68:63:d1:3a:c3:09:03:e6:62:0b:ed:ca:d8:c8:8b:07:fa:97: 38:93:25:58 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt8EYmlOolXQzkgB8dTF6kOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzMzBlMjYwNjA5MTNjNzU4MTM3NDg4YmZkN2FiMWJmZTll MTBhZTIwHhcNMjYwMTAyMDAxODAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZjEwMWZhOGVmNDMyNWJlNjk1ZjgyMWJmYzg4OThlNjk0M2EyMDhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo/9HzdxMjEeq5f6712bF7hNLxPao vFFAX1eG5LA48aAa7O9HSMQXowrVYguKC96UyERm5BjYL/rb9WKkwCsww3XmVj86 volQwrIAWQAbaKHZwABBqXNxVYw06SCIux9D1Kr7kYxxqy7t++yr5Od3xp6eYnrr exo8QW/Jck4cfb4vSmze6AZKR1H3SJvbl4TgtG/d4u2qopi96dkREnPzVf/zoGwv iUqcdp9Xx51BkK5l+5ORxOGjt82TWCesYShsgMrucIey0knGWN8svPXi3T19CMfZ Nq9ObljZSOrjCGD3fJlyNEUvYjQythY/2WlCUnXirNFWXFRDOhnXbHeV4QIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFC8QH6jvQyW+aV+CG/yImOaUOiCLMB8GA1UdIwQY MBaAFCMw4mBgkTx1gTdIi/16sb/p4QriMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXpEaVlHQ1JQSFdCTjBpTF9YcXh2LW5oQ3VJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS80NjkwYzAtMGI5MS00MzIyLTk0Yjkt NzA2NzgyY2ZhMDNiLzEvTHhBZnFPOURKYjVwWDRJYl9JaVk1cFE2SUlzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS80NjkwYzAtMGI5MS00MzIyLTk0YjktNzA2NzgyY2ZhMDNi LzEvSXpEaVlHQ1JQSFdCTjBpTF9YcXh2LW5oQ3VJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAC5y+kD BAC5y+owDQYJKoZIhvcNAQELBQADggEBADfzRtJSVCFVzlnJhfbGkDmI1BYYrjyy KFV0UEr8AAEOSnJ/9KczhQ32ahwfQSg3WRPHV+Q7qFrrG0NEgYlGive2DbnsE70z 0ZB5FQKswjUkzf2qw7lD0/xaYVMk74MvW6aiohuSa3S0iPsSVelVjeidmmq+ti8Z D9hjphPfsyXfYmSVmoZI9np9DiJdvZqGeOA0WY1ao6qe9uCHqBG7hxGxaiCQLKAI JPWOCh5tL5hcMrKTvE1g8Pg5ym9licXyyXhcbz4Z9jHexKgn6bgbHe9kHqdSXKM8 sOa2Q2ojGhNwl6+2ikqPz8CLGGhj0TrDCQPmYgvtytjIiwf6lziTJVg= -----END CERTIFICATE-----Generated at Sun Jan 25 21:27:42 2026 by rpki-client