This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/lRowyNHHC0spwb4wZV_jOGKjJyI.roa File: lRowyNHHC0spwb4wZV_jOGKjJyI.roa (raw, json) Hash identifier: 4zyf/JLA85ljI8Bs90IGyGjWTpl0J44l8dkGlxsa+Eg= Subject key identifier: 95:1A:30:C8:D1:C7:0B:4B:29:C1:BE:30:65:5F:E3:38:62:A3:27:22 Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c Certificate serial: 019B7F146708200A880F0508E5C1E75B29B5 Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/lRowyNHHC0spwb4wZV_jOGKjJyI.roa Signing time: Fri 02 Jan 2026 14:20:02 +0000 ROA not before: Fri 02 Jan 2026 14:20:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211849 IP address blocks: 147.45.124.0/24 maxlen: 24 147.45.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.mft rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:67:08:20:0a:88:0f:05:08:e5:c1:e7:5b:29:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c Validity Not Before: Jan 2 14:20:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=951a30c8d1c70b4b29c1be30655fe33862a32722 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:0d:3c:d2:aa:85:13:5c:c3:05:3f:91:83:72: a9:f4:5c:9b:f0:b9:4c:ec:7a:76:5b:48:13:23:b9: 01:40:31:33:eb:32:22:3f:d4:67:a5:0b:57:5a:f9: ab:06:7b:c2:5e:72:9e:ef:be:1e:1d:bf:5b:28:81: 00:9a:d5:1f:ca:b8:55:d6:5c:69:88:cc:bf:cf:90: ee:28:88:5e:95:62:23:41:f9:6d:d0:30:a4:af:1a: cc:89:4c:03:51:54:be:a7:5b:89:12:ed:2c:b6:bb: 85:66:2f:f0:c9:e6:5f:43:83:da:e0:3b:f1:05:82: 4c:ce:9e:42:00:d5:0d:1d:b1:19:93:22:cf:25:9f: 83:4a:6c:16:7f:16:65:32:96:22:16:87:53:0d:a9: bd:a7:d1:37:3e:c2:f6:06:0e:8d:e5:d4:09:8f:8c: d5:54:d6:58:56:dd:36:6d:df:b6:86:62:e2:8b:8e: 85:f3:7a:0b:d1:40:92:28:03:33:00:63:ae:d7:3c: 3c:29:9d:94:2a:c8:cd:02:1e:b1:f5:f2:c2:c1:47: 39:97:2c:5d:4b:fe:a1:e4:1f:07:e2:e3:08:f9:fb: c6:12:41:13:3a:ca:03:4c:e2:53:36:64:3b:ef:76: 6e:7f:2f:a5:bc:20:ed:47:ea:a5:ae:eb:a0:ba:27: 21:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:1A:30:C8:D1:C7:0B:4B:29:C1:BE:30:65:5F:E3:38:62:A3:27:22 X509v3 Authority Key Identifier: keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/lRowyNHHC0spwb4wZV_jOGKjJyI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.45.124.0/23 Signature Algorithm: sha256WithRSAEncryption 72:42:d7:86:de:67:52:61:81:f4:c8:52:57:b7:cd:9b:fc:df: b4:c1:1f:63:ae:5c:32:db:f9:e1:4e:03:1e:66:8b:60:f8:11: ff:dd:4a:52:3b:14:5e:f7:3c:b2:3a:80:79:f8:34:01:a5:b5: 11:b7:78:ac:8d:d7:4e:ba:2f:5c:20:77:83:fe:e3:87:ac:8a: 2f:7a:ab:79:79:eb:ff:5a:d0:c6:b4:d3:46:57:7e:3a:7c:06: f1:9a:b2:0e:25:55:67:59:c1:1a:d9:79:f0:92:7c:4e:d0:1a: bd:29:41:6e:e3:52:ea:43:7f:59:20:61:be:a6:53:22:b5:f4: 8a:63:c6:3f:76:5f:87:18:57:17:0b:96:9d:2f:fb:15:bd:eb: 01:5b:af:18:a6:83:17:1f:c8:05:d6:c7:a8:a0:21:ae:84:28: b6:61:3c:be:5e:d6:11:29:b3:3e:33:c5:c3:49:2b:ba:9f:97: ba:e0:4b:f6:50:cb:e0:42:bd:a3:57:e4:4a:f8:4d:1c:c1:bd: 22:ae:99:d6:de:df:e5:6f:b1:87:ff:5e:51:1d:e1:29:7a:7b: 37:25:f8:23:bc:b0:52:c0:72:d3:b0:b9:4b:93:72:47:ac:90: 36:5d:42:a1:3f:aa:7d:01:7c:a9:f0:ad:ef:77:75:b0:c2:4d: 6b:b7:e9:52 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FGcIIAqIDwUI5cHnWym1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2ZDY0OGJkYmE5NjU0NjFiMWU4YzExYjlkZDQzNmM2MTM4 Mjg3M2MwHhcNMjYwMTAyMTQyMDAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NTFhMzBjOGQxYzcwYjRiMjljMWJlMzA2NTVmZTMzODYyYTMyNzIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQ080qqFE1zDBT+Rg3Kp9Fyb8LlM 7Hp2W0gTI7kBQDEz6zIiP9RnpQtXWvmrBnvCXnKe774eHb9bKIEAmtUfyrhV1lxp iMy/z5DuKIhelWIjQflt0DCkrxrMiUwDUVS+p1uJEu0struFZi/wyeZfQ4Pa4Dvx BYJMzp5CANUNHbEZkyLPJZ+DSmwWfxZlMpYiFodTDam9p9E3PsL2Bg6N5dQJj4zV VNZYVt02bd+2hmLii46F83oL0UCSKAMzAGOu1zw8KZ2UKsjNAh6x9fLCwUc5lyxd S/6h5B8H4uMI+fvGEkETOsoDTOJTNmQ773Zufy+lvCDtR+qlruuguichfwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJUaMMjRxwtLKcG+MGVf4zhioyciMB8GA1UdIwQY MBaAFIbWSL26llRhsejBG53UNsYTgoc8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHRaSXZicVdWR0d4Nk1FYm5kUTJ4aE9DaHp3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9hYzU4ZWEtYzQ1OS00OGNhLWI4MmIt NGRlYzRkYWZlZTQ5LzEvbFJvd3lOSEhDMHNwd2I0d1pWX2pPR0tqSnlJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9hYzU4ZWEtYzQ1OS00OGNhLWI4MmItNGRlYzRkYWZlZTQ5 LzEvaHRaSXZicVdWR0d4Nk1FYm5kUTJ4aE9DaHp3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBky18MA0G CSqGSIb3DQEBCwUAA4IBAQByQteG3mdSYYH0yFJXt82b/N+0wR9jrlwy2/nhTgMe Zotg+BH/3UpSOxRe9zyyOoB5+DQBpbURt3isjddOui9cIHeD/uOHrIoveqt5eev/ WtDGtNNGV346fAbxmrIOJVVnWcEa2XnwknxO0Bq9KUFu41LqQ39ZIGG+plMitfSK Y8Y/dl+HGFcXC5adL/sVvesBW68YpoMXH8gF1seooCGuhCi2YTy+XtYRKbM+M8XD SSu6n5e64Ev2UMvgQr2jV+RK+E0cwb0irpnW3t/lb7GH/15RHeEpens3JfgjvLBS wHLTsLlLk3JHrJA2XUKhP6p9AXyp8K3vd3Wwwk1rt+lS -----END CERTIFICATE-----Generated at Tue Jan 20 11:09:49 2026 by rpki-client