This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/368df0-5c41-49d3-a9a9-c45903c3b329/1/LpO0hsOEcMHcdSPXsw1kOB0PVvE.roa File: LpO0hsOEcMHcdSPXsw1kOB0PVvE.roa (raw, json) Hash identifier: 8FUnmkYO7X+R70r5Qjt/trvO3JLv/tCU91NZ2PZ0JyU= Subject key identifier: 2E:93:B4:86:C3:84:70:C1:DC:75:23:D7:B3:0D:64:38:1D:0F:56:F1 Certificate issuer: /CN=e9d2721f2e2bd011b8a6860ad2572c405c0b540f Certificate serial: 019B7F841BCDD6E04AA39A32210948156207 Authority key identifier: E9:D2:72:1F:2E:2B:D0:11:B8:A6:86:0A:D2:57:2C:40:5C:0B:54:0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6dJyHy4r0BG4poYK0lcsQFwLVA8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/368df0-5c41-49d3-a9a9-c45903c3b329/1/LpO0hsOEcMHcdSPXsw1kOB0PVvE.roa Signing time: Fri 02 Jan 2026 16:22:02 +0000 ROA not before: Fri 02 Jan 2026 16:22:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 185.43.192.0/24 maxlen: 24 185.43.193.0/24 maxlen: 24 185.43.194.0/24 maxlen: 24 185.43.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/368df0-5c41-49d3-a9a9-c45903c3b329/1/6dJyHy4r0BG4poYK0lcsQFwLVA8.crl rsync://rpki.ripe.net/repository/DEFAULT/9d/368df0-5c41-49d3-a9a9-c45903c3b329/1/6dJyHy4r0BG4poYK0lcsQFwLVA8.mft rsync://rpki.ripe.net/repository/DEFAULT/6dJyHy4r0BG4poYK0lcsQFwLVA8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 17 Jan 2026 22:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:1b:cd:d6:e0:4a:a3:9a:32:21:09:48:15:62:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e9d2721f2e2bd011b8a6860ad2572c405c0b540f Validity Not Before: Jan 2 16:22:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2e93b486c38470c1dc7523d7b30d64381d0f56f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:16:24:56:98:c8:d3:b3:95:11:d7:3a:7c:ea: 80:e0:2a:cf:c9:65:5b:5e:00:fb:be:34:69:25:ff: aa:33:91:4f:e0:cc:50:d6:f9:92:cc:af:12:b4:b5: 06:ff:5e:78:66:e0:89:0d:7c:73:f0:47:51:00:2d: 89:23:7c:14:8a:6f:6b:9f:16:73:ee:2f:85:f3:37: 5b:c1:e1:87:c0:99:aa:0b:b7:57:55:65:7f:de:1d: 91:70:82:ec:6c:7a:8e:4d:b7:7f:65:e6:3b:f3:aa: 97:dc:08:c3:04:c3:08:4b:4c:ad:4b:e6:c2:24:67: 3a:fa:95:2e:6c:a4:56:5a:a6:cf:e3:bd:19:50:0e: 9f:76:4b:a4:63:81:5d:e2:7b:1f:10:7a:f4:32:4c: 4e:58:1f:57:d6:7a:0d:b1:d8:dd:db:19:d0:b0:29: 1c:be:d3:c1:af:52:65:77:ce:04:b5:7b:4e:86:2c: 04:9b:8e:8c:91:06:b8:6e:82:61:2a:f3:16:36:d3: d2:23:1d:33:df:ea:04:30:5b:e0:73:c5:96:27:84: 73:f3:6d:e5:2e:ec:f0:21:62:a7:c6:3b:1d:a4:cc: 7d:d3:31:63:8e:de:aa:c1:ff:91:dc:26:2f:c5:b2: ce:13:c3:d2:43:b8:b3:6d:b0:21:f0:2d:14:7d:96: 95:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:93:B4:86:C3:84:70:C1:DC:75:23:D7:B3:0D:64:38:1D:0F:56:F1 X509v3 Authority Key Identifier: keyid:E9:D2:72:1F:2E:2B:D0:11:B8:A6:86:0A:D2:57:2C:40:5C:0B:54:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6dJyHy4r0BG4poYK0lcsQFwLVA8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/368df0-5c41-49d3-a9a9-c45903c3b329/1/LpO0hsOEcMHcdSPXsw1kOB0PVvE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/368df0-5c41-49d3-a9a9-c45903c3b329/1/6dJyHy4r0BG4poYK0lcsQFwLVA8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.43.192.0/22 Signature Algorithm: sha256WithRSAEncryption a0:4b:62:ea:59:4d:f5:3b:fa:c5:9d:25:b4:6e:eb:59:66:fb: 7b:63:70:32:ca:39:dc:10:5f:b2:af:42:12:70:e6:10:2e:bc: 40:d9:2f:9c:06:46:33:1a:55:c5:fd:50:12:34:a4:41:f6:f5: 37:2c:8e:26:3f:d8:d5:2a:49:6e:2b:f0:3d:70:d3:c4:3d:5e: cf:58:4e:46:4d:27:fa:ed:8f:f7:b8:89:5f:12:0a:23:a0:aa: 1b:ef:21:07:03:b0:65:92:de:50:46:bd:4f:5f:e5:ca:fd:ea: 2b:9f:df:eb:ce:27:39:7f:fd:67:86:17:16:76:22:16:2a:f0: 2f:43:31:f2:63:66:77:ed:f5:85:04:7d:02:32:e6:ba:01:0e: 6c:5d:cd:af:fc:0c:cb:d7:44:4c:6b:7d:65:ab:eb:e7:75:df: c1:92:2a:44:a6:5d:c4:3f:94:7a:ff:40:8d:a7:2d:14:bd:67: 0a:01:95:34:60:13:d7:4f:ff:ca:36:bd:ca:c9:7a:cc:52:1f: cd:cd:bc:da:a6:25:3a:59:36:61:22:0c:d6:ed:73:89:db:dc: 61:bd:57:2d:37:28:69:cd:fb:8a:c3:ab:5a:b2:c0:05:7c:e9: e9:72:57:e5:19:9d:76:f4:8c:04:fa:bd:91:d4:10:42:9b:a8: 34:7f:06:5c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hBvN1uBKo5oyIQlIFWIHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU5ZDI3MjFmMmUyYmQwMTFiOGE2ODYwYWQyNTcyYzQwNWMw YjU0MGYwHhcNMjYwMTAyMTYyMjAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZTkzYjQ4NmMzODQ3MGMxZGM3NTIzZDdiMzBkNjQzODFkMGY1NmYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjBYkVpjI07OVEdc6fOqA4CrPyWVb XgD7vjRpJf+qM5FP4MxQ1vmSzK8StLUG/154ZuCJDXxz8EdRAC2JI3wUim9rnxZz 7i+F8zdbweGHwJmqC7dXVWV/3h2RcILsbHqOTbd/ZeY786qX3AjDBMMIS0ytS+bC JGc6+pUubKRWWqbP470ZUA6fdkukY4Fd4nsfEHr0MkxOWB9X1noNsdjd2xnQsCkc vtPBr1Jld84EtXtOhiwEm46MkQa4boJhKvMWNtPSIx0z3+oEMFvgc8WWJ4Rz823l LuzwIWKnxjsdpMx90zFjjt6qwf+R3CYvxbLOE8PSQ7izbbAh8C0UfZaVRQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFC6TtIbDhHDB3HUj17MNZDgdD1bxMB8GA1UdIwQY MBaAFOnSch8uK9ARuKaGCtJXLEBcC1QPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNmRKeUh5NHIwQkc0cG9ZSzBsY3NRRndMVkE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC8zNjhkZjAtNWM0MS00OWQzLWE5YTkt YzQ1OTAzYzNiMzI5LzEvTHBPMGhzT0VjTUhjZFNQWHN3MWtPQjBQVnZFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZC8zNjhkZjAtNWM0MS00OWQzLWE5YTktYzQ1OTAzYzNiMzI5 LzEvNmRKeUh5NHIwQkc0cG9ZSzBsY3NRRndMVkE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuSvAMA0G CSqGSIb3DQEBCwUAA4IBAQCgS2LqWU31O/rFnSW0butZZvt7Y3AyyjncEF+yr0IS cOYQLrxA2S+cBkYzGlXF/VASNKRB9vU3LI4mP9jVKkluK/A9cNPEPV7PWE5GTSf6 7Y/3uIlfEgojoKob7yEHA7Blkt5QRr1PX+XK/eorn9/rzic5f/1nhhcWdiIWKvAv QzHyY2Z37fWFBH0CMua6AQ5sXc2v/AzL10RMa31lq+vndd/BkipEpl3EP5R6/0CN py0UvWcKAZU0YBPXT//KNr3KyXrMUh/NzbzapiU6WTZhIgzW7XOJ29xhvVctNyhp zfuKw6tassAFfOnpclflGZ129IwE+r2R1BBCm6g0fwZc -----END CERTIFICATE-----Generated at Sat Jan 17 08:27:55 2026 by rpki-client