This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/8e2067-283b-4e4e-b67e-69f33fe1b530/1/L1zbFMwgTo8k0cGpa43eL9rJSvs.roa File: L1zbFMwgTo8k0cGpa43eL9rJSvs.roa (raw, json) Hash identifier: 3nOYFWDqeUlGtXtuv/0p8OtC8pzPOMkeWtIsBYndPi0= Subject key identifier: 2F:5C:DB:14:CC:20:4E:8F:24:D1:C1:A9:6B:8D:DE:2F:DA:C9:4A:FB Certificate issuer: /CN=162e48329c8be8ef209e9958da66ab0240145e19 Certificate serial: 019B79EC9CAB31600E82B8AE2894D14881F1 Authority key identifier: 16:2E:48:32:9C:8B:E8:EF:20:9E:99:58:DA:66:AB:02:40:14:5E:19 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fi5IMpyL6O8gnplY2marAkAUXhk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/8e2067-283b-4e4e-b67e-69f33fe1b530/1/L1zbFMwgTo8k0cGpa43eL9rJSvs.roa Signing time: Thu 01 Jan 2026 14:18:28 +0000 ROA not before: Thu 01 Jan 2026 14:18:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60893 IP address blocks: 185.144.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/8e2067-283b-4e4e-b67e-69f33fe1b530/1/Fi5IMpyL6O8gnplY2marAkAUXhk.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/8e2067-283b-4e4e-b67e-69f33fe1b530/1/Fi5IMpyL6O8gnplY2marAkAUXhk.mft rsync://rpki.ripe.net/repository/DEFAULT/Fi5IMpyL6O8gnplY2marAkAUXhk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:9c:ab:31:60:0e:82:b8:ae:28:94:d1:48:81:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=162e48329c8be8ef209e9958da66ab0240145e19 Validity Not Before: Jan 1 14:18:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2f5cdb14cc204e8f24d1c1a96b8dde2fdac94afb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:91:e8:3c:b5:cb:c8:34:4a:45:81:de:94:57: 01:8b:2b:09:8d:a7:c2:58:05:bd:ca:e5:e5:8c:a7: 45:c8:86:a7:8f:4f:16:a3:0d:7b:e6:e8:e2:ab:07: c3:38:db:66:06:a8:ef:fa:fb:4c:a3:3b:9c:a6:07: fe:b6:79:20:1e:8a:72:35:df:01:36:62:5e:b6:f6: 0e:4f:30:17:2f:96:a4:56:d2:75:94:75:38:77:37: 6b:19:18:56:b3:cf:df:4f:1b:96:cb:49:59:42:30: aa:e4:98:61:5c:f1:0d:6f:d6:1c:02:28:7d:ae:1b: c4:e7:8a:53:ff:c3:22:c8:4f:48:15:c2:f0:d8:fc: 33:01:16:4e:2a:e7:b8:1f:75:8d:08:ed:7a:f3:02: 94:88:ab:d6:b7:3a:11:a5:a0:c3:f8:f4:53:67:39: 4f:f7:b2:e1:75:94:b0:99:c1:62:db:c5:6c:4e:e4: ae:50:88:b0:b8:54:cb:5c:4c:0b:f2:d6:9f:df:9e: 44:de:2a:69:52:8e:ca:13:e9:18:ed:3f:7d:77:4e: 97:c4:2a:90:38:cb:ca:78:68:80:ff:37:be:10:48: 21:5c:d0:34:c0:38:1e:41:88:fe:ff:4a:88:f4:87: c5:7c:de:86:cf:5e:40:31:d7:94:e6:0c:d2:57:a7: db:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:5C:DB:14:CC:20:4E:8F:24:D1:C1:A9:6B:8D:DE:2F:DA:C9:4A:FB X509v3 Authority Key Identifier: keyid:16:2E:48:32:9C:8B:E8:EF:20:9E:99:58:DA:66:AB:02:40:14:5E:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fi5IMpyL6O8gnplY2marAkAUXhk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/8e2067-283b-4e4e-b67e-69f33fe1b530/1/L1zbFMwgTo8k0cGpa43eL9rJSvs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/8e2067-283b-4e4e-b67e-69f33fe1b530/1/Fi5IMpyL6O8gnplY2marAkAUXhk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.144.20.0/24 Signature Algorithm: sha256WithRSAEncryption 5d:72:eb:24:94:ab:54:9c:6b:51:55:fa:19:db:b5:87:73:b6: 80:d8:2a:37:81:5b:78:a8:33:74:f2:77:2c:68:8a:5e:54:cf: db:f2:c3:7b:ef:4b:2f:ae:c7:42:c5:5f:d3:10:d4:80:b7:f9: f7:ad:4c:fb:2c:55:fd:51:94:fb:cd:9f:92:e1:7b:58:0c:02: 21:64:79:39:fd:1b:7c:5c:62:42:b1:2a:fa:84:db:e8:b3:d7: c9:92:43:bc:d7:2a:05:8c:79:1c:02:00:98:97:4e:3d:76:17: 5a:e9:45:bd:2e:24:50:3f:ee:82:47:78:2e:23:2c:4f:6e:f2: 3c:44:8a:6b:ba:c5:1c:9d:a3:14:35:34:16:29:50:32:7e:95: 03:7a:38:f9:45:7d:06:e0:9f:6a:41:78:a7:e7:1f:b0:b8:88: f9:3c:53:df:c8:18:27:4b:0c:6f:2c:79:39:40:42:2f:f6:ee: 33:41:1d:b8:a5:72:7f:74:7c:0f:09:0f:7e:1d:c3:32:43:5b: 98:e9:e2:e1:cf:a0:d4:87:55:62:c0:1c:94:ad:27:f9:81:ae: 40:25:07:92:24:42:63:41:7d:cd:a9:a3:91:96:81:c9:1d:fa: 8a:be:73:8c:ce:13:fd:82:e9:e8:e5:07:84:ee:3c:18:92:1a: af:cd:0f:61 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57JyrMWAOgriuKJTRSIHxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2MmU0ODMyOWM4YmU4ZWYyMDllOTk1OGRhNjZhYjAyNDAx NDVlMTkwHhcNMjYwMTAxMTQxODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZjVjZGIxNGNjMjA0ZThmMjRkMWMxYTk2YjhkZGUyZmRhYzk0YWZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlpHoPLXLyDRKRYHelFcBiysJjafC WAW9yuXljKdFyIanj08Wow175ujiqwfDONtmBqjv+vtMozucpgf+tnkgHopyNd8B NmJetvYOTzAXL5akVtJ1lHU4dzdrGRhWs8/fTxuWy0lZQjCq5JhhXPENb9YcAih9 rhvE54pT/8MiyE9IFcLw2PwzARZOKue4H3WNCO168wKUiKvWtzoRpaDD+PRTZzlP 97LhdZSwmcFi28VsTuSuUIiwuFTLXEwL8taf355E3ippUo7KE+kY7T99d06XxCqQ OMvKeGiA/ze+EEghXNA0wDgeQYj+/0qI9IfFfN6Gz15AMdeU5gzSV6fbdQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFC9c2xTMIE6PJNHBqWuN3i/ayUr7MB8GA1UdIwQY MBaAFBYuSDKci+jvIJ6ZWNpmqwJAFF4ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRmk1SU1weUw2TzhnbnBsWTJtYXJBa0FVWGhrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi84ZTIwNjctMjgzYi00ZTRlLWI2N2Ut NjlmMzNmZTFiNTMwLzEvTDF6YkZNd2dUbzhrMGNHcGE0M2VMOXJKU3ZzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi84ZTIwNjctMjgzYi00ZTRlLWI2N2UtNjlmMzNmZTFiNTMw LzEvRmk1SU1weUw2TzhnbnBsWTJtYXJBa0FVWGhrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuZAUMA0G CSqGSIb3DQEBCwUAA4IBAQBdcusklKtUnGtRVfoZ27WHc7aA2Co3gVt4qDN08ncs aIpeVM/b8sN770svrsdCxV/TENSAt/n3rUz7LFX9UZT7zZ+S4XtYDAIhZHk5/Rt8 XGJCsSr6hNvos9fJkkO81yoFjHkcAgCYl049dhda6UW9LiRQP+6CR3guIyxPbvI8 RIprusUcnaMUNTQWKVAyfpUDejj5RX0G4J9qQXin5x+wuIj5PFPfyBgnSwxvLHk5 QEIv9u4zQR24pXJ/dHwPCQ9+HcMyQ1uY6eLhz6DUh1ViwByUrSf5ga5AJQeSJEJj QX3NqaORloHJHfqKvnOMzhP9guno5QeE7jwYkhqvzQ9h -----END CERTIFICATE-----Generated at Mon Jan 26 07:56:34 2026 by rpki-client