This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/eb25b5-71ea-469d-9484-4ea6dfb2e5d3/1/LQ8BLEzCZY3QowxDFOGsxJ9uOAU.roa File: LQ8BLEzCZY3QowxDFOGsxJ9uOAU.roa (raw, json) Hash identifier: k5Vr4nHqfxcqa1n3ZsAMJk6uHu5H4HSOAsJXgQNi+cQ= Subject key identifier: 2D:0F:01:2C:4C:C2:65:8D:D0:A3:0C:43:14:E1:AC:C4:9F:6E:38:05 Certificate issuer: /CN=49af2153f02409a464e4d7461c802d4b8dd10dff Certificate serial: 019B7F831F0E7D9299BFE3314A495D6493B8 Authority key identifier: 49:AF:21:53:F0:24:09:A4:64:E4:D7:46:1C:80:2D:4B:8D:D1:0D:FF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sa8hU_AkCaRk5NdGHIAtS43RDf8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/eb25b5-71ea-469d-9484-4ea6dfb2e5d3/1/LQ8BLEzCZY3QowxDFOGsxJ9uOAU.roa Signing time: Fri 02 Jan 2026 16:20:58 +0000 ROA not before: Fri 02 Jan 2026 16:20:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62282 IP address blocks: 185.140.230.0/24 maxlen: 24 185.140.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/eb25b5-71ea-469d-9484-4ea6dfb2e5d3/1/Sa8hU_AkCaRk5NdGHIAtS43RDf8.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/eb25b5-71ea-469d-9484-4ea6dfb2e5d3/1/Sa8hU_AkCaRk5NdGHIAtS43RDf8.mft rsync://rpki.ripe.net/repository/DEFAULT/Sa8hU_AkCaRk5NdGHIAtS43RDf8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:1f:0e:7d:92:99:bf:e3:31:4a:49:5d:64:93:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49af2153f02409a464e4d7461c802d4b8dd10dff Validity Not Before: Jan 2 16:20:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2d0f012c4cc2658dd0a30c4314e1acc49f6e3805 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:83:69:27:e3:7c:5b:a0:99:a2:54:fa:34:17: 91:25:91:a9:d5:d9:c1:31:3c:ff:46:af:0b:6a:a0: a6:e5:87:cc:2b:9c:c5:dd:a8:61:d3:af:e8:bc:6a: e1:5f:46:7b:6b:06:28:14:66:86:3b:8b:64:bf:57: 8b:ca:1e:c4:3f:8d:75:fe:c8:49:42:23:5f:b0:32: 08:d3:dc:84:de:92:79:3b:e2:32:51:9c:d8:d4:b7: 8b:05:a2:96:bc:7d:f5:36:ed:41:ca:21:e1:49:fa: cf:81:d8:88:e1:fc:3b:37:d5:b7:e9:08:c9:fc:6d: 41:f0:14:44:f1:f0:f6:fc:be:24:f7:d8:db:a2:07: 61:a9:3e:1e:d5:2e:a4:e5:c5:ff:8f:65:23:d2:4e: e6:fa:27:33:c9:c4:28:b7:e9:f0:4a:8e:49:f2:f8: 0c:24:3c:67:59:04:f7:a6:2e:e0:5f:38:05:47:9f: 30:36:84:f6:8a:91:59:5d:9e:83:01:86:e7:2c:a1: 6e:c6:ed:7a:e1:26:c4:c0:8e:8f:09:56:51:72:9f: 64:3d:56:aa:6e:04:52:16:3a:59:01:2d:ab:27:92: 6c:67:f0:7a:8f:a1:90:3d:a4:82:9d:d6:02:15:a8: 7d:9b:e9:53:77:01:5d:78:ba:07:17:28:d4:62:94: 90:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:0F:01:2C:4C:C2:65:8D:D0:A3:0C:43:14:E1:AC:C4:9F:6E:38:05 X509v3 Authority Key Identifier: keyid:49:AF:21:53:F0:24:09:A4:64:E4:D7:46:1C:80:2D:4B:8D:D1:0D:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sa8hU_AkCaRk5NdGHIAtS43RDf8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/eb25b5-71ea-469d-9484-4ea6dfb2e5d3/1/LQ8BLEzCZY3QowxDFOGsxJ9uOAU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/eb25b5-71ea-469d-9484-4ea6dfb2e5d3/1/Sa8hU_AkCaRk5NdGHIAtS43RDf8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.140.230.0/23 Signature Algorithm: sha256WithRSAEncryption 89:3b:14:40:12:cb:c2:4a:33:a9:6a:06:bd:08:b5:0f:27:66: b4:c3:0f:e2:69:0a:e7:64:78:b1:a6:9d:47:3c:fc:74:e7:61: 56:69:26:28:5e:53:bc:02:31:36:fd:77:ee:52:61:b9:67:d5: 69:49:ff:b9:44:f2:b0:f3:0f:fb:b5:d1:b7:5f:35:60:ac:58: e5:84:c2:89:fe:28:ce:03:be:3e:3c:62:8c:f6:2f:63:86:1a: d5:a5:52:4a:c1:fc:22:16:f8:86:4d:e6:57:48:e0:04:1b:c5: 2b:d4:10:25:4b:08:ae:81:bf:e2:cd:d3:e0:06:48:5c:6f:81: 30:1c:88:15:e7:a0:99:f9:d1:e0:68:57:4e:50:11:4d:2e:a6: 5a:69:9e:d9:06:77:74:49:71:ad:ed:74:92:e4:02:8e:4f:91: bb:8e:72:12:7d:7a:10:4d:ec:8a:59:18:46:8f:2f:da:74:00: d9:7c:16:c7:14:24:10:a3:13:90:f4:a6:be:93:90:a8:40:74: 62:19:44:09:98:db:e8:c8:5d:01:4a:26:a9:22:a0:a8:b4:21: 48:ef:ec:d8:5e:94:00:1f:93:77:06:f8:21:e3:ab:0e:7e:6e: 5f:d3:84:33:a7:43:64:d3:e9:e9:db:a8:43:19:01:b7:03:2c: 3d:57:17:cb -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/gx8OfZKZv+MxSkldZJO4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5YWYyMTUzZjAyNDA5YTQ2NGU0ZDc0NjFjODAyZDRiOGRk MTBkZmYwHhcNMjYwMTAyMTYyMDU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZDBmMDEyYzRjYzI2NThkZDBhMzBjNDMxNGUxYWNjNDlmNmUzODA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA04NpJ+N8W6CZolT6NBeRJZGp1dnB MTz/Rq8LaqCm5YfMK5zF3ahh06/ovGrhX0Z7awYoFGaGO4tkv1eLyh7EP411/shJ QiNfsDII09yE3pJ5O+IyUZzY1LeLBaKWvH31Nu1ByiHhSfrPgdiI4fw7N9W36QjJ /G1B8BRE8fD2/L4k99jbogdhqT4e1S6k5cX/j2Uj0k7m+iczycQot+nwSo5J8vgM JDxnWQT3pi7gXzgFR58wNoT2ipFZXZ6DAYbnLKFuxu164SbEwI6PCVZRcp9kPVaq bgRSFjpZAS2rJ5JsZ/B6j6GQPaSCndYCFah9m+lTdwFdeLoHFyjUYpSQHwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFC0PASxMwmWN0KMMQxThrMSfbjgFMB8GA1UdIwQY MBaAFEmvIVPwJAmkZOTXRhyALUuN0Q3/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU2E4aFVfQWtDYVJrNU5kR0hJQXRTNDNSRGY4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9lYjI1YjUtNzFlYS00NjlkLTk0ODQt NGVhNmRmYjJlNWQzLzEvTFE4QkxFekNaWTNRb3d4REZPR3N4Sjl1T0FVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS9lYjI1YjUtNzFlYS00NjlkLTk0ODQtNGVhNmRmYjJlNWQz LzEvU2E4aFVfQWtDYVJrNU5kR0hJQXRTNDNSRGY4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuYzmMA0G CSqGSIb3DQEBCwUAA4IBAQCJOxRAEsvCSjOpaga9CLUPJ2a0ww/iaQrnZHixpp1H PPx052FWaSYoXlO8AjE2/XfuUmG5Z9VpSf+5RPKw8w/7tdG3XzVgrFjlhMKJ/ijO A74+PGKM9i9jhhrVpVJKwfwiFviGTeZXSOAEG8Ur1BAlSwiugb/izdPgBkhcb4Ew HIgV56CZ+dHgaFdOUBFNLqZaaZ7ZBnd0SXGt7XSS5AKOT5G7jnISfXoQTeyKWRhG jy/adADZfBbHFCQQoxOQ9Ka+k5CoQHRiGUQJmNvoyF0BSiapIqCotCFI7+zYXpQA H5N3Bvgh46sOfm5f04Qzp0Nk0+np26hDGQG3Ayw9VxfL -----END CERTIFICATE-----Generated at Sun Jan 25 18:06:31 2026 by rpki-client