This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/lVPgELtMp9RB_S61fK8qqiZW4aI.roa File: lVPgELtMp9RB_S61fK8qqiZW4aI.roa (raw, json) Hash identifier: uqNvdjoIkyNaidvvXcb7t2ZyW5hJxyRKJLsDQa0e1rM= Subject key identifier: 95:53:E0:10:BB:4C:A7:D4:41:FD:2E:B5:7C:AF:2A:AA:26:56:E1:A2 Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da Certificate serial: 019B7E37B91A11BB0573A771712A9710F526 Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/lVPgELtMp9RB_S61fK8qqiZW4aI.roa Signing time: Fri 02 Jan 2026 10:18:59 +0000 ROA not before: Fri 02 Jan 2026 10:18:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48300 IP address blocks: 158.173.184.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 00:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:b9:1a:11:bb:05:73:a7:71:71:2a:97:10:f5:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da Validity Not Before: Jan 2 10:18:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9553e010bb4ca7d441fd2eb57caf2aaa2656e1a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:90:03:b0:e0:6b:78:5c:bf:ce:bf:1a:b6:9d: 7f:50:e0:49:b1:2c:d5:87:5e:6a:b3:d5:09:e7:a6: 4a:a1:77:ea:81:d7:bd:77:af:50:9c:31:dd:09:45: b9:af:eb:4e:b9:75:8d:d9:44:95:31:fc:ee:63:c6: ba:61:3c:e6:0f:9a:d9:a1:aa:bb:19:d6:6c:21:8f: 99:1a:2d:0e:62:7d:ae:b9:0d:74:a6:f2:c3:b5:f0: b3:6d:8f:5a:79:a4:bd:4c:5e:70:ec:9c:b5:5e:fa: 26:8c:40:ef:3d:18:aa:7d:5f:92:13:f7:1b:8d:1a: b8:1d:2b:71:04:2a:49:b4:3c:f4:6b:c1:6c:a9:70: d2:8b:1f:f3:27:7d:c1:d9:55:da:41:ed:31:e2:f2: cf:da:f9:5b:c5:e3:04:f6:38:38:36:e3:59:0d:4a: e3:6e:42:2d:60:dc:ff:f0:20:17:43:e6:fa:f5:53: 48:e8:e9:7d:4d:88:cd:2b:58:5d:a6:42:ca:26:07: f2:91:23:44:d8:dc:1b:04:b8:57:f3:ea:93:f8:80: 31:f0:91:8c:8e:c2:0f:af:c0:ef:c1:3c:5f:8c:6f: 9c:33:0a:8e:3b:41:d0:d2:e0:2d:c4:d6:1e:51:ee: 99:e3:90:e3:a1:40:ad:d6:e6:dd:01:d8:13:e9:6e: 90:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:53:E0:10:BB:4C:A7:D4:41:FD:2E:B5:7C:AF:2A:AA:26:56:E1:A2 X509v3 Authority Key Identifier: keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/lVPgELtMp9RB_S61fK8qqiZW4aI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 158.173.184.0/21 Signature Algorithm: sha256WithRSAEncryption a1:a4:e7:2d:3c:54:75:6f:17:48:da:ac:f3:68:9e:8d:ad:40: 0a:4a:25:9a:96:c1:68:af:71:2c:4e:2f:4f:f5:19:f4:07:ab: aa:a7:fe:98:45:81:5d:89:14:40:d7:83:9c:77:99:56:37:22: bd:c3:8a:c0:75:ea:06:31:11:cb:e8:ce:c2:e7:12:3f:62:ce: e8:35:90:16:23:ab:2d:df:35:ae:14:90:6c:b7:a3:af:68:c3: ad:80:26:49:99:73:f8:2b:88:d0:e3:c9:02:a8:89:7f:f6:ea: bc:65:8a:a2:fb:2d:7a:41:c9:dc:49:d1:e4:52:2b:33:d1:cf: 78:49:82:95:ba:75:85:8e:b8:fa:9c:5e:50:bc:ee:f6:38:83: 84:2c:ca:3a:1a:fd:7a:f9:a4:a5:27:e1:b5:80:f6:a9:f7:83: 58:ca:52:49:d1:51:7d:2e:66:9e:9a:a5:6e:c3:b0:ea:9d:a1: 01:e7:02:8c:d3:43:fb:39:f3:5f:1b:50:8e:b2:03:4d:8f:78: 6b:d6:ed:e0:44:0e:79:4f:1d:21:ab:8c:70:1e:a0:79:66:bd: 50:f4:ed:55:89:e2:a6:f8:dd:ed:44:da:ef:44:e2:0a:38:f5: d6:41:dd:be:6d:e3:7d:a3:95:8d:ea:0e:c8:39:f3:a5:a1:5f: 5b:3e:dd:14 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+N7kaEbsFc6dxcSqXEPUmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwNGE1ODA0N2YzN2JiYzA1Nzk0NGJiZjhjYWQ4NzQyODc5 NTkyZGEwHhcNMjYwMTAyMTAxODU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NTUzZTAxMGJiNGNhN2Q0NDFmZDJlYjU3Y2FmMmFhYTI2NTZlMWEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmJADsOBreFy/zr8atp1/UOBJsSzV h15qs9UJ56ZKoXfqgde9d69QnDHdCUW5r+tOuXWN2USVMfzuY8a6YTzmD5rZoaq7 GdZsIY+ZGi0OYn2uuQ10pvLDtfCzbY9aeaS9TF5w7Jy1XvomjEDvPRiqfV+SE/cb jRq4HStxBCpJtDz0a8FsqXDSix/zJ33B2VXaQe0x4vLP2vlbxeME9jg4NuNZDUrj bkItYNz/8CAXQ+b69VNI6Ol9TYjNK1hdpkLKJgfykSNE2NwbBLhX8+qT+IAx8JGM jsIPr8DvwTxfjG+cMwqOO0HQ0uAtxNYeUe6Z45DjoUCt1ubdAdgT6W6QCQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJVT4BC7TKfUQf0utXyvKqomVuGiMB8GA1UdIwQY MBaAFPBKWAR/N7vAV5RLv4yth0KHlZLaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEVwWUJIODN1OEJYbEV1X2pLMkhRb2VWa3RvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni8yYmE5N2UtNTk4Yi00OGRkLThkNTYt ZjVmYjcxYjlhNTFmLzEvbFZQZ0VMdE1wOVJCX1M2MWZLOHFxaVpXNGFJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni8yYmE5N2UtNTk4Yi00OGRkLThkNTYtZjVmYjcxYjlhNTFm LzEvOEVwWUJIODN1OEJYbEV1X2pLMkhRb2VWa3RvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDnq24MA0G CSqGSIb3DQEBCwUAA4IBAQChpOctPFR1bxdI2qzzaJ6NrUAKSiWalsFor3EsTi9P 9Rn0B6uqp/6YRYFdiRRA14Ocd5lWNyK9w4rAdeoGMRHL6M7C5xI/Ys7oNZAWI6st 3zWuFJBst6OvaMOtgCZJmXP4K4jQ48kCqIl/9uq8ZYqi+y16QcncSdHkUisz0c94 SYKVunWFjrj6nF5QvO72OIOELMo6Gv16+aSlJ+G1gPap94NYylJJ0VF9LmaemqVu w7DqnaEB5wKM00P7OfNfG1COsgNNj3hr1u3gRA55Tx0hq4xwHqB5Zr1Q9O1VieKm +N3tRNrvROIKOPXWQd2+beN9o5WN6g7IOfOloV9bPt0U -----END CERTIFICATE-----Generated at Fri Jan 23 04:39:22 2026 by rpki-client