This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/LaSn13NSh6NS4LWNTjDb8ulVa7Q.roa File: LaSn13NSh6NS4LWNTjDb8ulVa7Q.roa (raw, json) Hash identifier: Zm4W4gJ8EBO++zLWZ04W2om7uJszxQZ9jB+pIkvzqjM= Subject key identifier: 2D:A4:A7:D7:73:52:87:A3:52:E0:B5:8D:4E:30:DB:F2:E9:55:6B:B4 Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Certificate serial: 019B78A3092CEBD3A2832CEFBACA10F68948 Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/LaSn13NSh6NS4LWNTjDb8ulVa7Q.roa Signing time: Thu 01 Jan 2026 08:18:29 +0000 ROA not before: Thu 01 Jan 2026 08:18:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 54881 IP address blocks: 178.215.224.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 02:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:09:2c:eb:d3:a2:83:2c:ef:ba:ca:10:f6:89:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Validity Not Before: Jan 1 08:18:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2da4a7d7735287a352e0b58d4e30dbf2e9556bb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:eb:d5:73:45:f6:e7:bc:2b:f0:cb:4f:b4:48: ab:02:03:f5:e6:72:fc:d8:25:e0:f2:9d:2a:99:0f: ee:17:96:06:8f:d8:e3:3f:b0:b5:62:82:50:4b:c9: 02:bc:ad:28:72:75:90:4a:90:4e:8e:de:d1:df:78: 21:09:ec:04:f4:4c:7e:5b:dd:1a:6b:ba:df:1e:39: 7b:54:97:e3:29:c7:de:2c:00:c1:33:33:be:80:55: 10:4b:03:fa:b4:9d:b4:f9:1c:bb:3e:9d:e6:01:3f: 53:bb:cf:78:c7:8e:c9:88:24:9f:ac:f1:65:14:15: c4:23:26:2b:2a:74:0b:55:8c:0b:a3:d6:01:36:43: 2e:bb:17:08:ce:de:50:a0:52:51:f2:c2:d4:49:59: c3:58:76:ca:b0:a8:cd:22:7e:00:60:94:f0:25:8c: 29:47:fc:42:17:93:a9:f3:13:bb:f2:19:e2:9d:76: 44:1d:ce:f4:00:ad:be:9a:6a:d6:c9:74:25:e6:32: f3:67:f3:ae:1e:84:6b:e3:c8:95:7e:9b:59:7a:8d: d6:41:2b:52:70:0c:6e:79:02:f5:f4:c8:8d:a7:b7: 0b:08:77:93:b4:7f:95:32:25:15:a8:44:8d:14:3d: 46:9f:96:0c:18:33:2a:03:73:af:0b:2e:e5:8c:4c: 96:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:A4:A7:D7:73:52:87:A3:52:E0:B5:8D:4E:30:DB:F2:E9:55:6B:B4 X509v3 Authority Key Identifier: keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/LaSn13NSh6NS4LWNTjDb8ulVa7Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.215.224.0/24 Signature Algorithm: sha256WithRSAEncryption 3f:cc:65:7f:24:9f:94:07:b6:64:ef:6d:6e:73:e8:a9:e5:65: db:19:78:f5:69:5f:57:57:89:be:e6:d6:2d:22:fa:ea:52:16: d1:9f:ba:0c:5a:1e:fd:f0:a6:19:59:8a:07:da:b7:2e:6e:5e: 13:ee:bf:92:1a:25:2e:d2:fb:56:08:d6:f9:23:ee:4b:5d:9c: bb:41:6a:ee:5d:7e:06:a5:a5:27:f7:d1:a0:26:bd:b7:8a:60: 30:fe:47:97:d9:7f:1b:66:4f:b0:b0:20:47:a9:96:fd:36:45: 71:79:73:29:5b:14:fd:84:a0:4e:b7:c6:95:ab:b7:5b:c1:12: 6c:af:3e:48:8a:4f:6e:77:70:c9:13:69:c8:4d:8a:90:f6:01: dc:71:04:56:be:43:1b:cd:5b:f3:19:73:8a:c1:b6:a9:52:19: 87:1a:8d:e5:af:31:fa:3f:57:07:5b:6e:55:95:0f:95:b9:14: 84:a3:da:2a:f7:41:d5:56:a3:65:a6:ae:93:7a:76:70:a7:b1: 4c:d4:39:60:ed:5b:8f:22:b3:08:95:cc:65:8d:10:73:a0:3b: 2e:48:c1:5c:c3:c2:a8:c2:62:16:28:11:48:1f:f4:ea:70:1c: c0:57:b3:19:00:3e:da:15:b6:14:ca:4e:35:38:57:a5:d5:63: 06:7b:eb:9c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4owks69OigyzvusoQ9olIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3 NzVlOWQwHhcNMjYwMTAxMDgxODI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZGE0YTdkNzczNTI4N2EzNTJlMGI1OGQ0ZTMwZGJmMmU5NTU2YmI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjOvVc0X257wr8MtPtEirAgP15nL8 2CXg8p0qmQ/uF5YGj9jjP7C1YoJQS8kCvK0ocnWQSpBOjt7R33ghCewE9Ex+W90a a7rfHjl7VJfjKcfeLADBMzO+gFUQSwP6tJ20+Ry7Pp3mAT9Tu894x47JiCSfrPFl FBXEIyYrKnQLVYwLo9YBNkMuuxcIzt5QoFJR8sLUSVnDWHbKsKjNIn4AYJTwJYwp R/xCF5Op8xO78hninXZEHc70AK2+mmrWyXQl5jLzZ/OuHoRr48iVfptZeo3WQStS cAxueQL19MiNp7cLCHeTtH+VMiUVqESNFD1Gn5YMGDMqA3OvCy7ljEyWCwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFC2kp9dzUoejUuC1jU4w2/LpVWu0MB8GA1UdIwQY MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct Y2QzY2E1OTc1NzEyLzEvTGFTbjEzTlNoNk5TNExXTlRqRGI4dWxWYTdRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAstfgMA0G CSqGSIb3DQEBCwUAA4IBAQA/zGV/JJ+UB7Zk721uc+ip5WXbGXj1aV9XV4m+5tYt IvrqUhbRn7oMWh798KYZWYoH2rcubl4T7r+SGiUu0vtWCNb5I+5LXZy7QWruXX4G paUn99GgJr23imAw/keX2X8bZk+wsCBHqZb9NkVxeXMpWxT9hKBOt8aVq7dbwRJs rz5Iik9ud3DJE2nITYqQ9gHccQRWvkMbzVvzGXOKwbapUhmHGo3lrzH6P1cHW25V lQ+VuRSEo9oq90HVVqNlpq6TenZwp7FM1Dlg7VuPIrMIlcxljRBzoDsuSMFcw8Ko wmIWKBFIH/TqcBzAV7MZAD7aFbYUyk41OFel1WMGe+uc -----END CERTIFICATE-----Generated at Fri Jan 2 12:06:13 2026 by rpki-client