This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/260e24-2040-4a5c-92cf-ec58a3125ee5/1/lo3R5w_kTel81Z1irkIbzAD6F8Q.roa File: lo3R5w_kTel81Z1irkIbzAD6F8Q.roa (raw, json) Hash identifier: PuU1Xdn3kY1LjMwZS3Qaqe5MniakxiQ+Y+f6yTPGRCQ= Subject key identifier: 96:8D:D1:E7:0F:E4:4D:E9:7C:D5:9D:62:AE:42:1B:CC:00:FA:17:C4 Certificate issuer: /CN=c4b1b458abf797dedcc661e54a685f651834b5d1 Certificate serial: 019B7B35F93C38F4107A6AE080FF45E27CE9 Authority key identifier: C4:B1:B4:58:AB:F7:97:DE:DC:C6:61:E5:4A:68:5F:65:18:34:B5:D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xLG0WKv3l97cxmHlSmhfZRg0tdE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/260e24-2040-4a5c-92cf-ec58a3125ee5/1/lo3R5w_kTel81Z1irkIbzAD6F8Q.roa Signing time: Thu 01 Jan 2026 20:18:13 +0000 ROA not before: Thu 01 Jan 2026 20:18:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197610 IP address blocks: 178.136.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/260e24-2040-4a5c-92cf-ec58a3125ee5/1/xLG0WKv3l97cxmHlSmhfZRg0tdE.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/260e24-2040-4a5c-92cf-ec58a3125ee5/1/xLG0WKv3l97cxmHlSmhfZRg0tdE.mft rsync://rpki.ripe.net/repository/DEFAULT/xLG0WKv3l97cxmHlSmhfZRg0tdE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:f9:3c:38:f4:10:7a:6a:e0:80:ff:45:e2:7c:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c4b1b458abf797dedcc661e54a685f651834b5d1 Validity Not Before: Jan 1 20:18:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=968dd1e70fe44de97cd59d62ae421bcc00fa17c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:2c:30:90:4d:a1:bc:b6:b3:d9:6f:34:5e:be: 2f:f3:56:3b:1f:10:83:50:fe:e9:a1:20:0a:9a:a7: a2:51:c6:e8:48:ed:8f:68:90:4b:63:c9:0b:5b:31: ae:f4:5c:70:76:7f:c7:c5:ee:43:1d:0e:07:8b:c4: 4f:c8:a6:5b:47:70:d0:c3:95:ba:07:de:64:1c:9e: 9d:51:23:09:2e:56:b0:28:41:6b:b0:11:19:d5:29: b4:52:02:5b:c9:a8:8f:24:d9:31:7c:4f:06:e3:5c: 9a:a2:88:49:87:36:3e:93:4d:9b:14:33:67:0e:e1: 6e:4d:ff:c8:c3:3d:d5:35:fc:c0:7a:87:30:6e:4f: 68:da:de:77:44:7a:38:5f:96:45:82:e4:73:32:06: f1:16:77:6b:9c:66:7d:af:e4:cc:4f:be:72:7c:01: 35:74:73:fd:19:36:0a:79:d8:c0:a5:6c:9d:99:21: fd:fc:9c:e5:b3:9a:75:73:33:4f:12:7e:b7:26:0e: 7d:f0:d9:14:4f:fa:90:0c:8e:3d:ea:23:b2:5b:b9: 81:93:3e:e0:6e:ab:11:ca:fc:36:78:ac:d9:de:24: 3e:d4:3f:d2:46:a9:fd:68:dc:24:8c:cd:a4:f5:60: da:25:a6:2f:fe:5d:8c:6b:25:48:36:46:96:d0:03: 99:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:8D:D1:E7:0F:E4:4D:E9:7C:D5:9D:62:AE:42:1B:CC:00:FA:17:C4 X509v3 Authority Key Identifier: keyid:C4:B1:B4:58:AB:F7:97:DE:DC:C6:61:E5:4A:68:5F:65:18:34:B5:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xLG0WKv3l97cxmHlSmhfZRg0tdE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/260e24-2040-4a5c-92cf-ec58a3125ee5/1/lo3R5w_kTel81Z1irkIbzAD6F8Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/260e24-2040-4a5c-92cf-ec58a3125ee5/1/xLG0WKv3l97cxmHlSmhfZRg0tdE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.136.228.0/24 Signature Algorithm: sha256WithRSAEncryption 6a:37:8e:7a:24:fe:0d:c4:90:cc:52:17:36:64:52:d2:52:e2: 96:83:68:e9:64:69:c2:ee:19:5b:57:6c:43:f0:96:92:f3:8e: f1:16:d6:ec:9e:6c:16:cf:cc:be:3c:be:e3:eb:2c:6a:60:d5: d7:d3:33:bf:5d:68:ca:eb:e0:29:76:87:37:f1:48:55:7a:cb: 84:92:6d:97:73:96:fc:e5:cf:91:fd:48:f3:9d:d9:38:78:00: 21:aa:03:0f:ab:f7:a2:f4:84:cc:15:c7:9f:27:4e:6d:e5:13: fc:0a:30:ba:0b:31:09:50:26:88:dd:da:39:c6:84:22:7b:c7: 4c:54:13:47:e1:45:4a:5b:78:32:c1:cb:ae:82:62:b9:46:cb: 20:8c:25:b5:02:52:76:70:97:f5:06:03:66:d2:ee:57:ff:9a: a8:75:a0:cb:86:30:ee:ec:06:64:b2:e2:b3:7a:7b:5b:7e:2a: 98:d6:f9:d5:2b:01:46:32:90:b7:7f:fc:96:47:7f:e9:95:d2: 71:78:d9:44:20:f2:a9:5e:5c:0b:b6:0e:61:a3:71:c3:18:9b: 40:28:2e:dc:ca:46:c0:e7:f4:d3:ce:5d:96:73:67:52:c4:02: 5f:44:74:00:3f:c5:f7:9d:85:eb:f5:43:c1:4d:fd:9b:c7:b5: d9:32:70:47 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7Nfk8OPQQemrggP9F4nzpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0YjFiNDU4YWJmNzk3ZGVkY2M2NjFlNTRhNjg1ZjY1MTgz NGI1ZDEwHhcNMjYwMTAxMjAxODEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NjhkZDFlNzBmZTQ0ZGU5N2NkNTlkNjJhZTQyMWJjYzAwZmExN2M0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnywwkE2hvLaz2W80Xr4v81Y7HxCD UP7poSAKmqeiUcboSO2PaJBLY8kLWzGu9Fxwdn/Hxe5DHQ4Hi8RPyKZbR3DQw5W6 B95kHJ6dUSMJLlawKEFrsBEZ1Sm0UgJbyaiPJNkxfE8G41yaoohJhzY+k02bFDNn DuFuTf/Iwz3VNfzAeocwbk9o2t53RHo4X5ZFguRzMgbxFndrnGZ9r+TMT75yfAE1 dHP9GTYKedjApWydmSH9/Jzls5p1czNPEn63Jg598NkUT/qQDI496iOyW7mBkz7g bqsRyvw2eKzZ3iQ+1D/SRqn9aNwkjM2k9WDaJaYv/l2MayVINkaW0AOZNQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJaN0ecP5E3pfNWdYq5CG8wA+hfEMB8GA1UdIwQY MBaAFMSxtFir95fe3MZh5UpoX2UYNLXRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveExHMFdLdjNsOTdjeG1IbFNtaGZaUmcwdGRFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS8yNjBlMjQtMjA0MC00YTVjLTkyY2Yt ZWM1OGEzMTI1ZWU1LzEvbG8zUjV3X2tUZWw4MVoxaXJrSWJ6QUQ2RjhRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS8yNjBlMjQtMjA0MC00YTVjLTkyY2YtZWM1OGEzMTI1ZWU1 LzEveExHMFdLdjNsOTdjeG1IbFNtaGZaUmcwdGRFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsojkMA0G CSqGSIb3DQEBCwUAA4IBAQBqN456JP4NxJDMUhc2ZFLSUuKWg2jpZGnC7hlbV2xD 8JaS847xFtbsnmwWz8y+PL7j6yxqYNXX0zO/XWjK6+Apdoc38UhVesuEkm2Xc5b8 5c+R/Ujzndk4eAAhqgMPq/ei9ITMFcefJ05t5RP8CjC6CzEJUCaI3do5xoQie8dM VBNH4UVKW3gywcuugmK5RssgjCW1AlJ2cJf1BgNm0u5X/5qodaDLhjDu7AZksuKz entbfiqY1vnVKwFGMpC3f/yWR3/pldJxeNlEIPKpXlwLtg5ho3HDGJtAKC7cykbA 5/TTzl2Wc2dSxAJfRHQAP8X3nYXr9UPBTf2bx7XZMnBH -----END CERTIFICATE-----Generated at Sun Jan 25 15:28:46 2026 by rpki-client