This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/ea7e61-98b3-4120-83ce-c077e1702bc7/1/LAOAzix8Zi6Y7eROUhiHseM7d1U.roa File: LAOAzix8Zi6Y7eROUhiHseM7d1U.roa (raw, json) Hash identifier: Qhgem+rCCIPGj27tJdRK6lacEFlZtLP66ADVBe3CFfA= Subject key identifier: 2C:03:80:CE:2C:7C:66:2E:98:ED:E4:4E:52:18:87:B1:E3:3B:77:55 Certificate issuer: /CN=fcea08e8421df2f245c7cb333ee76a14a8882d4a Certificate serial: 019B7E376CAA9F6062ECEBC9587764F8DD84 Authority key identifier: FC:EA:08:E8:42:1D:F2:F2:45:C7:CB:33:3E:E7:6A:14:A8:88:2D:4A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_OoI6EId8vJFx8szPudqFKiILUo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/ea7e61-98b3-4120-83ce-c077e1702bc7/1/LAOAzix8Zi6Y7eROUhiHseM7d1U.roa Signing time: Fri 02 Jan 2026 10:18:40 +0000 ROA not before: Fri 02 Jan 2026 10:18:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208662 IP address blocks: 45.86.105.0/24 maxlen: 24 45.86.106.0/24 maxlen: 24 45.86.107.0/24 maxlen: 24 2a0f:95c0:4000::/34 maxlen: 34 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/ea7e61-98b3-4120-83ce-c077e1702bc7/1/_OoI6EId8vJFx8szPudqFKiILUo.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/ea7e61-98b3-4120-83ce-c077e1702bc7/1/_OoI6EId8vJFx8szPudqFKiILUo.mft rsync://rpki.ripe.net/repository/DEFAULT/_OoI6EId8vJFx8szPudqFKiILUo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:6c:aa:9f:60:62:ec:eb:c9:58:77:64:f8:dd:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fcea08e8421df2f245c7cb333ee76a14a8882d4a Validity Not Before: Jan 2 10:18:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2c0380ce2c7c662e98ede44e521887b1e33b7755 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:2d:89:12:ff:a2:f6:23:99:1d:fc:a9:f0:14: 08:f8:79:9d:ee:d1:9e:b3:92:07:f5:80:3c:f1:11: aa:72:eb:bd:14:81:c4:cf:8b:14:ae:f0:c3:a0:ce: d5:8e:d7:6a:38:65:69:8a:a4:f2:26:a0:0f:53:38: b6:86:08:32:a5:38:5a:a4:c9:91:79:83:79:b7:e0: fc:cd:cf:ca:67:fc:02:c4:31:94:45:bb:99:f9:b4: 35:5b:c9:3e:52:4e:24:61:0d:db:3d:34:24:ba:03: 38:5a:16:7d:5c:89:8d:40:95:79:c3:57:0a:8b:76: db:6d:f1:9e:b8:be:6b:bc:62:5d:34:22:3a:9f:18: 10:b0:ec:60:61:47:1b:5a:80:17:72:39:41:1e:35: b8:88:ae:7f:ad:11:76:01:2a:9d:f5:22:b5:c5:f5: dd:2b:25:27:1d:e6:7f:d0:5d:38:70:eb:ed:7b:99: 71:e8:f1:30:b0:d2:17:0d:6f:b6:2b:d4:a8:52:e3: 79:87:70:7f:d8:be:9b:88:48:98:e4:80:4f:56:cf: 9a:fe:56:eb:0a:ae:22:2e:cd:0f:c2:b4:89:97:c6: 76:1c:42:1a:d4:a6:ac:e1:b1:d5:fc:45:80:14:d2: bc:41:c5:b3:b0:4c:ed:cd:61:c5:5b:10:5d:65:4b: 02:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:03:80:CE:2C:7C:66:2E:98:ED:E4:4E:52:18:87:B1:E3:3B:77:55 X509v3 Authority Key Identifier: keyid:FC:EA:08:E8:42:1D:F2:F2:45:C7:CB:33:3E:E7:6A:14:A8:88:2D:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_OoI6EId8vJFx8szPudqFKiILUo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/ea7e61-98b3-4120-83ce-c077e1702bc7/1/LAOAzix8Zi6Y7eROUhiHseM7d1U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/ea7e61-98b3-4120-83ce-c077e1702bc7/1/_OoI6EId8vJFx8szPudqFKiILUo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.86.105.0-45.86.107.255 IPv6: 2a0f:95c0:4000::/34 Signature Algorithm: sha256WithRSAEncryption 3b:7c:77:84:62:64:ae:75:93:12:cf:79:dd:23:fe:a2:40:65: 49:29:b3:ce:94:b9:ff:02:98:f7:24:ca:57:c4:ec:dc:22:6a: 2d:ee:08:74:51:5c:d4:34:8a:9b:45:5b:da:d0:f5:54:5f:5c: c8:d1:b6:c2:c5:58:b9:b3:07:d8:3f:40:6f:60:8c:51:ac:dc: 48:67:b6:f8:99:a3:20:20:46:2f:49:62:bd:df:cd:08:fb:af: 67:0e:cf:d1:8c:6a:13:f1:6d:ea:ee:f6:bc:b3:c5:f4:ff:eb: 23:0e:31:d8:6e:f3:ef:96:4b:de:34:bc:69:20:68:7f:9e:49: 58:1d:3f:ab:11:1d:c3:c2:cb:f9:34:6c:c1:69:e3:c0:6a:12: 28:97:e1:33:d0:81:68:65:b2:41:55:26:4b:1e:ae:bd:11:e1: 28:8b:44:6a:47:87:87:b6:c5:80:13:3f:a5:ff:d2:52:6a:cc: 48:d0:7b:c1:27:ad:0a:f3:4f:60:52:2f:71:6c:78:f0:37:3a: 71:14:98:e3:06:10:e6:ad:56:13:24:68:9d:95:a0:db:c3:78: 57:fc:25:d4:65:6c:a1:a5:f0:24:68:92:31:52:4c:71:91:9d: 21:a8:c1:c7:99:d5:c8:e0:64:f9:fd:05:01:ce:7b:0d:8b:93: e1:8f:f4:fe -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZt+N2yqn2Bi7OvJWHdk+N2EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZjZWEwOGU4NDIxZGYyZjI0NWM3Y2IzMzNlZTc2YTE0YTg4 ODJkNGEwHhcNMjYwMTAyMTAxODQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYzAzODBjZTJjN2M2NjJlOThlZGU0NGU1MjE4ODdiMWUzM2I3NzU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmC2JEv+i9iOZHfyp8BQI+Hmd7tGe s5IH9YA88RGqcuu9FIHEz4sUrvDDoM7VjtdqOGVpiqTyJqAPUzi2hggypThapMmR eYN5t+D8zc/KZ/wCxDGURbuZ+bQ1W8k+Uk4kYQ3bPTQkugM4WhZ9XImNQJV5w1cK i3bbbfGeuL5rvGJdNCI6nxgQsOxgYUcbWoAXcjlBHjW4iK5/rRF2ASqd9SK1xfXd KyUnHeZ/0F04cOvte5lx6PEwsNIXDW+2K9SoUuN5h3B/2L6biEiY5IBPVs+a/lbr Cq4iLs0PwrSJl8Z2HEIa1Kas4bHV/EWAFNK8QcWzsEztzWHFWxBdZUsCYQIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFCwDgM4sfGYumO3kTlIYh7HjO3dVMB8GA1UdIwQY MBaAFPzqCOhCHfLyRcfLMz7nahSoiC1KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX09vSTZFSWQ4dkpGeDhzelB1ZHFGS2lJTFVvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS9lYTdlNjEtOThiMy00MTIwLTgzY2Ut YzA3N2UxNzAyYmM3LzEvTEFPQXppeDhaaTZZN2VST1VoaUhzZU03ZDFVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS9lYTdlNjEtOThiMy00MTIwLTgzY2UtYzA3N2UxNzAyYmM3 LzEvX09vSTZFSWQ4dkpGeDhzelB1ZHFGS2lJTFVvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAUBAIAATAOMAwDBAAtVmkD BAItVmgwDgQCAAIwCAMGBioPlcBAMA0GCSqGSIb3DQEBCwUAA4IBAQA7fHeEYmSu dZMSz3ndI/6iQGVJKbPOlLn/Apj3JMpXxOzcImot7gh0UVzUNIqbRVva0PVUX1zI 0bbCxVi5swfYP0BvYIxRrNxIZ7b4maMgIEYvSWK9380I+69nDs/RjGoT8W3q7va8 s8X0/+sjDjHYbvPvlkveNLxpIGh/nklYHT+rER3Dwsv5NGzBaePAahIol+Ez0IFo ZbJBVSZLHq69EeEoi0RqR4eHtsWAEz+l/9JSasxI0HvBJ60K809gUi9xbHjwNzpx FJjjBhDmrVYTJGidlaDbw3hX/CXUZWyhpfAkaJIxUkxxkZ0hqMHHmdXI4GT5/QUB znsNi5Phj/T+ -----END CERTIFICATE-----Generated at Sun Jan 25 20:00:24 2026 by rpki-client